Lutz Finsterle
3bf5960302
Some checks failed
Deploy / Update K8s Apps / Detect changed K8s tfvars (push) Failing after 13s
Deploy / Update Apps / Detect changed tfvars files (push) Failing after 13s
Test / Static Analysis (push) Failing after 11s
Test / Unit Tests — Docker Stack (push) Has been skipped
Test / Unit Tests — K8s Stack (push) Has been skipped
Deploy / Update K8s Apps / Deploy ${{ matrix.tfvars }} (push) Has been skipped
Deploy / Update K8s Apps / Destroy ${{ matrix.tfvars }} (push) Has been skipped
Deploy / Update Apps / Deploy ${{ matrix.tfvars }} (push) Has been skipped
Deploy / Update Apps / Destroy ${{ matrix.tfvars }} (push) Has been skipped
Test / Integration Test — K8s (k3d) (push) Has been skipped
86 lines
4.0 KiB
Bash
86 lines
4.0 KiB
Bash
#!/usr/bin/env bash
|
|
# ─────────────────────────────────────────────────────────────────────────────
|
|
# setup-backend.sh — One-time SeaweedFS state backend initialisation
|
|
#
|
|
# Run this once per machine (or CI runner) before using the pipelines.
|
|
# It uncommets the backend block in both stack backend.tf files and runs
|
|
# tofu init with the correct -backend-config flags.
|
|
#
|
|
# Usage:
|
|
# chmod +x scripts/setup-backend.sh
|
|
# ./scripts/setup-backend.sh
|
|
# ─────────────────────────────────────────────────────────────────────────────
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
|
|
# ── Collect config ─────────────────────────────────────────────────────────
|
|
echo ""
|
|
echo "SeaweedFS S3 State Backend Setup"
|
|
echo "═════════════════════════════════"
|
|
echo ""
|
|
|
|
read -rp "SeaweedFS S3 endpoint (e.g. http://seaweedfs.example.com:8333): " ENDPOINT
|
|
read -rp "Access key: " ACCESS_KEY
|
|
read -rsp "Secret key: " SECRET_KEY
|
|
echo ""
|
|
read -rp "State bucket name [tofu-state]: " BUCKET
|
|
BUCKET="${BUCKET:-tofu-state}"
|
|
|
|
export AWS_ACCESS_KEY_ID="$ACCESS_KEY"
|
|
export AWS_SECRET_ACCESS_KEY="$SECRET_KEY"
|
|
|
|
BACKEND_ARGS=(
|
|
"-backend-config=bucket=${BUCKET}"
|
|
"-backend-config=endpoint=${ENDPOINT}"
|
|
"-backend-config=region=us-east-1"
|
|
"-backend-config=force_path_style=true"
|
|
)
|
|
|
|
# ── Helper: enable backend block in a backend.tf ──────────────────────────
|
|
enable_backend() {
|
|
local file="$1"
|
|
if grep -q '# terraform {' "$file"; then
|
|
sed -i \
|
|
-e 's|^# terraform {|terraform {|' \
|
|
-e 's|^# backend "s3" {}| backend "s3" {}|' \
|
|
-e 's|^# }$|}|' \
|
|
"$file"
|
|
echo " Enabled S3 backend block in $file"
|
|
else
|
|
echo " Backend block already enabled in $file"
|
|
fi
|
|
}
|
|
|
|
# ── Docker stack ──────────────────────────────────────────────────────────
|
|
echo ""
|
|
echo "── Docker stack ──────────────────────────────────────────────────"
|
|
enable_backend "$REPO_ROOT/backend.tf"
|
|
|
|
cd "$REPO_ROOT"
|
|
echo " Running: tofu init (Docker stack)"
|
|
tofu init "${BACKEND_ARGS[@]}" "-backend-config=key=apps/PLACEHOLDER.tfstate" -reconfigure
|
|
echo " Docker stack backend initialised."
|
|
|
|
# ── Kubernetes stack ──────────────────────────────────────────────────────
|
|
echo ""
|
|
echo "── Kubernetes stack ──────────────────────────────────────────────"
|
|
enable_backend "$REPO_ROOT/k8s/backend.tf"
|
|
|
|
cd "$REPO_ROOT/k8s"
|
|
echo " Running: tofu init (K8s stack)"
|
|
tofu init "${BACKEND_ARGS[@]}" "-backend-config=key=apps-k8s/PLACEHOLDER.tfstate" -reconfigure
|
|
echo " Kubernetes stack backend initialised."
|
|
|
|
# ── Done ──────────────────────────────────────────────────────────────────
|
|
echo ""
|
|
echo "Done. Both stacks are now configured to use SeaweedFS for state storage."
|
|
echo ""
|
|
echo "Next: commit the updated backend.tf files, then add these as Gitea secrets:"
|
|
echo " SEAWEED_S3_ENDPOINT = ${ENDPOINT}"
|
|
echo " SEAWEED_ACCESS_KEY = ${ACCESS_KEY}"
|
|
echo " SEAWEED_SECRET_KEY = (not shown)"
|
|
echo " SEAWEED_BUCKET = ${BUCKET}"
|
|
echo ""
|
|
echo "Do NOT commit the access/secret keys. They go in Gitea secrets only."
|