Yamini-crypto

# Add new variable to variables.tf file
variable "ignore_tags" {
  description = "Determines whether the `tags` value is ignored after initial apply. See README note for more details"
  type        = bool
  default     = true
}

Yamini-crypto

lifecycle {
    create_before_destroy = true
    ignore_changes = [tag]
  }
}

Yamini-crypto

mkdir terraform-gitops-example
cd terraform-gitops-example
terraform init
Create Terraform Configuration File (main.tf):


provider "aws" {
  region = "us-west-1"
}

Yamini-crypto

data "aws_autoscaling_groups" "app" {
  filter {
    name   = "tag:id"
    values = ["app-asg"]
  }
}

module "asg-app" {

  source = "../modules/asg/"

Yamini-crypto

## Codedeploy main.tf
resource "aws_iam_role" "codedeploy_service_role" {
  name = "codedeploy_service_role"
  assume_role_policy = jsonencode({
    Version = "2012-10-17",
    Statement = [
      {
        Action = "sts:AssumeRole",
        Effect = "Allow",
        Principal = {

Yamini-crypto

terraform refresh
# setting variables for auto scaling groups and policies location in state file
asg_location=module.asg.aws_autoscaling_group.id[0]

# checking the status of asgs in terraform state if there are changes then the new asg will be imported in place of that
# importing the updates in asg
terraform state show $asg_location | grep $(terraform output -raw asg_name) > /dev/null 2>&1
if [ $? != 0 ]
then
    terraform state rm $asg_location

Yamini-crypto

terraform state show $asg_location | grep $(terraform output -raw asg_name) > /dev/null 2>&1

Yamini-crypto

apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::234543234:role/secret-iam-role
  name: external-secrets-sa
  namespace: external-secrets

Yamini-crypto

# Install external secrets
helm repo add external-secrets https://charts.external-secrets.io
helm install external-secrets \
   external-secrets/external-secrets \
   -n external-secrets \
   --create-namespace \
   --set installCRDs=true \
   --set webhook.port=9443

Yamini-crypto

#Install reloader
helm repo add stakater https://stakater.github.io/stakater-charts
helm repo update
helm install reloader stakater/reloader -n kube-system