forked from public/stack
66 lines
1.5 KiB
Makefile
66 lines
1.5 KiB
Makefile
include $(PWD)/src/toolchain/Makefile
|
|
|
|
BACKEND_TF := $(wildcard infra/backend/*.tf)
|
|
ENVIRONMENT := production
|
|
REGION := sfo3
|
|
ROOT_DIR := $(shell pwd)
|
|
TERRAFORM := $(ROOT_DIR)/out/terraform
|
|
|
|
.PHONY:
|
|
clean:
|
|
rm -rf $(CACHE_DIR)
|
|
|
|
.PHONY:
|
|
credentials: \
|
|
$(CACHE_DIR)/secrets/credentials.tfvars
|
|
|
|
infra/backend/.terraform: \
|
|
$(OUT_DIR)/terraform \
|
|
$(BACKEND_TF)
|
|
env -C infra/backend $(TERRAFORM) init
|
|
|
|
infra/backend/$(ENVIRONMENT).tfstate: \
|
|
$(CACHE_DIR)/secrets/credentials.tfvars \
|
|
$(OUT_DIR)/terraform \
|
|
infra/backend/.terraform
|
|
env -C infra/backend $(TERRAFORM) apply \
|
|
-var environment=$(ENVIRONMENT) \
|
|
-var namespace=$(ENVIRONMENT) \
|
|
-var region=$(REGION) \
|
|
-state ../../$@ \
|
|
-var-file ../../$<
|
|
|
|
config/$(ENVIRONMENT).tfbackend: \
|
|
infra/backend/$(ENVIRONMENT).tfstate \
|
|
$(OUT_DIR)/terraform
|
|
env -C infra/backend $(TERRAFORM) output -state ../../$< > $@
|
|
|
|
.PHONY:
|
|
plan: \
|
|
$(CACHE_DIR)/secrets/credentials.tfvars \
|
|
config/$(ENVIRONMENT).tfbackend \
|
|
$(OUT_DIR)/terraform
|
|
env -C infra/main $(TERRAFORM) plan -var-file $<
|
|
|
|
$(CACHE_DIR)/secrets:
|
|
mkdir -p $@
|
|
|
|
$(CACHE_DIR)/secrets/%.tfvars: secrets/%.tfvars.gpg $(CACHE_DIR)/secrets
|
|
gpg --decrypt $< > $@
|
|
|
|
$(FETCH_DIR)/terraform:
|
|
$(call git_clone,$@,$(TERRAFORM_REPO),$(TERRAFORM_REF))
|
|
|
|
$(OUT_DIR)/terraform: $(FETCH_DIR)/terraform
|
|
$(call toolchain,$(USER)," \
|
|
cd $(FETCH_DIR)/terraform && \
|
|
export SSL_CERT_DIR=/etc/ssl/certs && \
|
|
export CGO_ENABLED=0 && \
|
|
export GOCACHE=$(CACHE_DIR) && \
|
|
go build \
|
|
-v \
|
|
-trimpath \
|
|
-ldflags='-w -extldflags=-static' \
|
|
-o /home/build/$@ \
|
|
")
|