terraform-azure-k8s

Terraform Azure AKS

Terraform Cloud

Fork this repo to your account and configure Terraform Cloud.

Add the following vars to Terraform Cloud Workspace:

• client_id
• client_secret

Configure kubectl

To merge the configuration for the new k8s cluster execute:

az aks get-credentials --resource-group <resource_group_name> --name <cluster_name>

Execute with tfstate on Azure

• Create Blob Storage on Azure (for tfstate file);
• Create a Container on that Blob Storage (name=tfstate);
• Get your storage account name and access key;
• Edit the file main.tf and add the backend:

provider "azurerm" {
  # The "feature" block is required for AzureRM provider 2.x. 
  # If you are using version 1.x, the "features" block is not allowed.
  version = "~>2.0"
  features {}
}

terraform {
  backend "azurerm" {}
}

initialize terraform and the backend with the following command:

terraform init -backend-config="storage_account_name=<YourAzureStorageAccountName>" -backend-config="container_name=tfstate" -backend-config="access_key=<YourStorageAccountAccessKey>" -backend-config="key=codelab.microsoft.tfstate"

export TF_VAR_client_id=<service-principal-appid>
export TF_VAR_client_secret=<service-principal-password>

terraform plan -out out.plan

terraform apply out.plan

Test the Kubernetes cluster

echo "$(terraform output kube_config)" > ./azurek8s
export KUBECONFIG=./azurek8s
kubectl get nodes

Install Helm

install helm with rbac

# initialize helm
helm init --history-max 200

# Create the Tiller service account 
kubectl create serviceaccount tiller --namespace kube-system

# Bind the Tiller service account to the cluster-admin role
cat <<EOF | kubectl apply -f -
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: tiller-clusterrolebinding
subjects:
- kind: ServiceAccount
  name: tiller
  namespace: kube-system
roleRef:
  kind: ClusterRole
  name: cluster-admin
  apiGroup: ""
EOF

# Update the existing Tiller deployment
helm init --service-account tiller --upgrade

# Test the new Helm RBAC rules
helm ls

References

• https://docs.microsoft.com/en-us/azure/terraform/terraform-create-k8s-cluster-with-tf-and-aks
• https://www.terraform.io/docs/backends/types/azurerm.html
• https://www.hashicorp.com/blog/kubernetes-cluster-with-aks-and-terraform/
• https://www.terraform.io/docs/providers/azurerm/r/kubernetes_cluster.html
• https://docs.microsoft.com/en-us/azure/dev-spaces/how-to/install-dev-spaces
• https://www.terraform.io/docs/providers/azurerm/r/devspace_controller.html