mirror of
https://github.com/outbackdingo/homelab-v.git
synced 2026-08-25 14:53:19 +00:00
KarteekandVegard Hagen
f457ce825f
feat: Add gcloud tofu code to automatically create gcs buckets to use as remote backend. Also setup workload identity federation, and store it to infisical, to use it in github actions. Signed-off-by: Karteek <[email protected]> feat(tofu): modularise gcs-state Create a Google Cloud Storage (GCS) bucket and store the state for doing it in the bucket itself Signed-off-by: Vegard Hagen <[email protected]> feat(wif): enable workload identify federation Signed-off-by: Vegard Hagen <[email protected]>
Google Cloud Storage
Example configuration for creating Google Cloud Storage bucket for storing an encrypted Tofu state in.
Prerequisites
Google Cloud Platform project with an active Billing Account.
Getting started
- Install
gcloud— Instructions: https://cloud.google.com/sdk/docs/install-sdk - Run
gcloud init - Authenticate using
gcloud auth application-default login
Before initialising, disable the GCS backend in providers.tofu (by e.g. commenting it out) since we can't store the
state in something that doesn't exist yet.
After the initial tofy apply to create the bucket, the state can be migrated by adding
backend "gcs" {
bucket = var.bucket_name
prefix = var.state_prefix
}
back in and running
tofu init -migrate-state
to migrate the state to the remote GCS bucket.