init: 아르고cd, vault 기반 인프라 설계

2026-07-24 14:31:09 +09:00
parent 8879d0a3fe
commit d507ac6ee9
137 changed files with 11431 additions and 1 deletions
@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)"
+
+source "${SCRIPT_DIR}/provider-lib.sh"
+source "${SCRIPT_DIR}/workload-auth-lib.sh"
+
+if ! command -v terraform >/dev/null 2>&1; then
+  echo "terraform CLI is required" >&2
+  exit 1
+fi
+
+export VAULT_WORKLOAD_ADDR="${VAULT_WORKLOAD_ADDR:-${VAULT_ADDR:-http://127.0.0.1:8200}}"
+export VAULT_TRANSIT_ADDR="${VAULT_TRANSIT_ADDR:-http://127.0.0.1:18200}"
+export TF_VAR_workload_vault_addr="$VAULT_WORKLOAD_ADDR"
+export TF_VAR_workload_vault_token="$(workload_vault_token)"
+export TF_VAR_transit_vault_addr="$VAULT_TRANSIT_ADDR"
+export TF_VAR_transit_vault_token="$(provider_vault_token)"
+
+mkdir -p "${REPO_ROOT}/.terraform-state"
+
+if [[ -n "${TF_STATE_DIR:-}" ]]; then
+  mkdir -p "${TF_STATE_DIR}"
+  terraform -chdir="${REPO_ROOT}/terraform/vault/dev" init \
+    -input=false \
+    -reconfigure \
+    -backend-config="path=${TF_STATE_DIR}/vault-dev.tfstate"
+else
+  terraform -chdir="${REPO_ROOT}/terraform/vault/dev" init -input=false
+fi
+
+terraform -chdir="${REPO_ROOT}/terraform/vault/dev" apply -input=false -auto-approve