Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Pulumi Deployments for provisioner #176

Closed
mvgijssel opened this issue Mar 22, 2023 · 5 comments · Fixed by #178
Closed

Pulumi Deployments for provisioner #176

mvgijssel opened this issue Mar 22, 2023 · 5 comments · Fixed by #178
Assignees
@mvgijssel

Comments

@mvgijssel
Copy link
Member

mvgijssel commented Mar 22, 2023 •
edited
Loading

Currently the provisioner workspace is connected to Terraform Cloud. Because there are going to be a lot of dependent providers (or layers), Unifi / CloudFlare / Vault / Vault config, a lot of workspace orchestration in Terraform is necessary (with Terramate) hashicorp/terraform#2430. Because Pulumi now also offers deployments in the cloud let's try that to make the setup simpler.
@mvgijssel mvgijssel converted this from a draft issue Mar 22, 2023
@mvgijssel mvgijssel changed the title Use Terraform Cloud remote execution for provisioner Terraform Cloud remote execution for provisioner Mar 22, 2023
@mvgijssel
Copy link
Member Author

mvgijssel commented Mar 22, 2023 •
edited
Loading

interesting issue hashicorp/terraform#8367 and potential solution hashicorp/terraform#8367 (comment).

@mvgijssel
Copy link
Member Author

Might be that VPN will be too challenging, as the VPN client needs to be able to control the network stack inside the vm inside Terraform Cloud which is not possible as there is no sudo.

@mvgijssel mvgijssel moved this from Todo to In Progress in Puzzelmond Mar 22, 2023
@mvgijssel mvgijssel self-assigned this Mar 22, 2023
@mvgijssel
Copy link
Member Author

Modifying https://github.com/flaupretre/terraform-ssh-tunnel might work.

@mvgijssel
Copy link
Member Author

mvgijssel commented Mar 23, 2023 •
edited
Loading

Articles for SSH hardening

@mvgijssel mvgijssel mentioned this issue Mar 23, 2023
Closed
@mvgijssel mvgijssel changed the title Terraform Cloud remote execution for provisioner Cloud remote execution for provisioner Mar 29, 2023
@mvgijssel mvgijssel changed the title Cloud remote execution for provisioner Pulumi Deployments for provisioner Mar 29, 2023
@mvgijssel
Copy link
Member Author

Deleted the Terraform Cloud organization "home-production" and removed the Vault Helm deployment in provisioner.

@mvgijssel mvgijssel mentioned this issue Mar 29, 2023
Merged
@mvgijssel mvgijssel moved this from In Progress to Done in Puzzelmond Apr 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mvgijssel mvgijssel

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Migrate Terraform to Pulumi vgijssel/setup
1 participant
@mvgijssel