DevSecOps in Practice

mkdir -p $HOME/RestQR/deploy/terraform

cat < $HOME/RestQR/deploy/terraform/main.tf
terraform {
  required_providers {
    digitalocean = {
      source  = "digitalocean/digitalocean"
      version = "~> 2.0"
    }
  }
}

provider "digitalocean" {
  token = var.do_token
}

resource "digitalocean_kubernetes_cluster" "myclusters" {
  for_each = { for name in var.names : name => name }

  name    = each.value
  region  = var.region
  version = var.k8s_version

  node_pool {
    name       = "default"
    size       = var.node_size
    node_count = var.node_count
    auto_scale = true
    min_nodes  = 1
    max_nodes  = 3
  }
}

output "kubeconfigs" {
  description = "Kubeconfig files for the Kubernetes clusters"
  value = {
    for name, cluster in digitalocean_kubernetes_cluster.myclusters :
    name => cluster.kube_config[0].raw_config
  }
  sensitive = true
}
EOF

# Go to your DigitalOcean account
# and create a new Personal Access Token
# if it's not already created.
export DIGITALOCEAN_TOKEN=""

# The name of the cluster
# Keep it simple and lowercase
export CLUSTER_NAME="restqr"

# The version of Kubernetes
# Versions slugs may change, check the available versions on do-api.dev
export K8S_VERSION="1.30.10-do.0"

# Choose the region where you want to create the cluster
export REGION="fra1"

# The number of nodes in the cluster
export NODE_SIZE="s-2vcpu-4gb"

# The size of the nodes.