Terraform Blueprint to deploy the Humanitec resources based on 5 different Terraform Modules:

• Google Cloud
  • GKE(s) Terraform Module
  • App(s) Terraform Module
• Humanitec
  • Org level Terraform Module
  • Cluster(s) level Terraform Module
  • App(s) level Terraform Module

TOC:

• Assumptions
• Deploy the Terraform Blueprint
• Test connectivity
• Update Developers's CD pipelines
• Terraform Blueprint documentation
• Available resource types for the Developers in their Score files

Assumptions

• GKE cluster provisioned in GCP as an input for the cluster Terraform Module.
• "Project" == "Humanitec App"
• 1 GKE cluster per Env Type
• 1 Humanitec Service User/Token per {App, Env Type}
• People as:
  • Member at the Org level
  • Viewer at the App Level
• Service User:
  • Artefact Contributor for Development and Member for other Environments at the Org level
  • Developer at the App Level
  • Deployer at the Env Type

Deploy the Terraform Blueprint

export HUMANITEC_ORG=FIXME
export HUMANITEC_TOKEN=FIXME

terraform workspace select -or-create=true ${HUMANITEC_ORG}

terraform init -upgrade

terraform plan \
    -var org_id=${HUMANITEC_ORG} \
    -var token=${HUMANITEC_TOKEN} \
    -var 'clusters=[{name="mabenoit-demo", region="northamerica-northeast1", project_id="mabenoit-demo-458522"}]' \
    -var humanitec_crds_already_installed=true \
    -out out.tfplan

terraform apply out.tfplan

Disable not used default resource definitions

Here are the default (Humanitec managed) resource definition not used anymore that we can explicitly disable now:

humctl api PUT /orgs/${HUMANITEC_ORG}/resources/defs/default-humanitec-base-env/criteria --data '[]'
humctl api PUT /orgs/${HUMANITEC_ORG}/resources/defs/default-humanitec-namespace/criteria --data '[]'
humctl api PUT /orgs/${HUMANITEC_ORG}/resources/defs/default-humanitec-workload-res/criteria --data '[]'
humctl api PUT /orgs/${HUMANITEC_ORG}/resources/defs/default-humanitec-dns/criteria --data '[]'
humctl api PUT /orgs/${HUMANITEC_ORG}/resources/defs/default-humanitec-ingress/criteria --data '[]'
humctl api PUT /orgs/${HUMANITEC_ORG}/resources/defs/default-humanitec-tls-cert/criteria --data '[]'

Test connectivity

humctl get resource-account

ACCOUNT_ID=FIXME

humctl resources check-account ${ACCOUNT_ID}

APP_ID=sail-sharp
ENV_ID=development
ENV_TYPE=development

humctl resources check-connectivity \
    --app ${APP_ID} \
    --env ${ENV_ID} \
    --env-type ${ENV_TYPE}

Update Developers's CD pipelines

Update Developer's CD pipelines based on outputs:

terraform output service_users_tokens

You can also use this token locally (HUMANITEC_TOKEN) and run humctl score deploy --app --env

Tech Radar

To get the available resource types for the Developers in their Score files

humctl score available-resource-types

Name                                    Type                    Category        Class
Environment                             environment             score           default
Service                                 service                 score           default
Persistent Volume                       volume                  datastore       default
Redis                                   redis                   datastore       default
Route                                   route                   ingress         default
Google Cloud Storage Bucket             gcs                     datastore       default
Google Cloud Pub/Sub Topic              gcp-pubsub-topic        messaging       default
Postgres                                postgres                datastore       default
Google Cloud Pub/Sub Subscription       gcp-pubsub-subscription messaging       default
DNS                                     dns                     dns             default
Google Cloud Vertex AI                  gcp-vertex-ai                           default

Main Terraform Blueprint documentation

Requirements

Name	Version
terraform	>= 1.3.0
google	~> 5.1
humanitec	~> 1.0

Modules

Name	Source	Version
apps	./modules/htc-app	n/a
gcp_app	./modules/gcp-app	n/a
gcp_cluster	./modules/gcp-cluster	n/a
htc_cluster	./modules/htc-cluster	n/a
org	./modules/htc-org	n/a

Inputs

Name	Description	Type	Default	Required
apps	n/a	list(object({ id = string name = string cost_center = string gcp_project_id = string viewer_users = list(object({ email = string })) resource_quota = object({ limits-cpu = string limits-memory = string }) }))	n/a	yes
clusters	n/a	list(object({ project_id = string name = string region = string }))	n/a	yes
org_id	ID of the Humanitec Organization	string	n/a	yes
token	Token to provision objects in Humanitec Organization	string	n/a	yes
env_types	n/a	list(object({ id = string description = string }))	[ { "description": "Development", "id": "development" }, { "description": "Staging", "id": "staging" }, { "description": "Production", "id": "production" } ]	no
humanitec_crds_already_installed	Custom resource definitions must be applied before custom resources.	bool	false	no

Outputs

Name	Description
service_users_tokens	n/a