terraform
| -- /.kube → our cluster Kubeconfig files
| -- /templates
| -- | -- apply.yml →  job that apply plans
| -- | -- delete-state.yml → contains delete-state job (currently not used)
| -- | -- destroy.yml → contains destroy job (currently not used)
| -- | -- fmt.yml → jop to check formation
| -- | -- plan.yml → job, that make planes
| -- | -- test.yml → job for tests (currently in pipe, does nothing)
| -- | -- validate.yml → job to validate all *.tf-files
| -- /modules → our templates
| -- | -- /gitrepo → template modul
| -- | -- | -- gitrepo.tf → template
| -- | -- | -- variables → variables
| -- | -- /namespace → template modul
| -- | -- | -- namespace.tf → template
| -- | -- | -- values → variables
| -- | -- /project → template modul
| -- | -- | -- project.tf → template
| -- | -- | -- values → variables
| -- | -- /roles-and_bindings
| -- | -- | -- | -- /global_role_binding → template modul
| -- | -- | -- | -- | -- global_role_binding.tf → template
| -- | -- | -- | -- | -- variables → variables
| -- | -- | -- | -- /project_role_binding → template modul
| -- | -- | -- | -- | -- project_role_binding.tf → template
| -- | -- | -- | -- | -- variables → variables
| -- | -- /templates → template for a new player
| -- | -- | -- player.CHANGEME.tf
| -- | -- /user → template modul for rancher2
| -- | -- | -- user.tf → template
| -- | -- | -- variables → variables
| -- repos_infrastructure.tf → contains module for the Fleet-System GitRepo Ressource
| -- repos_core_services.tf → contains module for the core-services
| -- main.tf → empty file, not needed
| -- providers.tf → contians terraform providers like kubernetes, and rancher2
| -- users-and-roles.tf → contains modules for user and roles

# User: player_CHANGEME / Rolle: user
module "user_player_CHANGEME" {
  source   = "./modules/user"
  name     = "player-CHANGEME"
  username = "player-CHANGEME"
  enabled  = true
}

module "global_role_binding_player_CHANGEME" {
  source         = "./modules/roles_and_bindings/global_role_binding"
  name           = "player-CHANGEME"
  global_role_id = "user-base"
  user_id        = module.user_player_CHANGEME.user_id
}

module "project_player_CHANGEME" {
  source      = "./modules/project"
  name        = "player-CHANGEME"
  description = "Project of user player_CHANGEME"
}

module "namespace_player_CHANGEME" {
  source     = "./modules/namespace"
  name       = "player-CHANGEME"
  project_id = module.project_player_CHANGEME.projectid
}

module "player_CHANGEME_user_project_binding" {
  source     = "./modules/roles_and_bindings/project_role_template_binding"
  name       = "player-CHANGEME-user-binding"
  project_id = module.project_player_CHANGEME.projectid
  user_id    = module.user_player_CHANGEME.user_id
}

# Repo for player_CHANGEME on Prod Cluster msd
module "msd_player_CHANGEME" {
  source                = "./modules/gitrepo"
  repo_name             = "msd-player-CHANGEME"
  repo_source_link      = "CHANGEME"
  repo_paths            = ["./helm-chart"]
  repo_clientSecretName = "basic-auth-secret"
  repo_targets = [
    {
      clusterName = "msd"
    }
  ]
}

terraform {
  required_providers {
    rancher2 = {
      source  = "rancher/rancher2"
      version = "4.1.0"
    }
    kubernetes = {
      source  = "hashicorp/kubernetes"
      version = "2.27.0"
    }
    helm = {
      source  = "hashicorp/helm"
      version = "2.12.1"
    }
    gitlab = {
      source  = "gitlabhq/gitlab"
      version = "16.11.0"
    }

  }

  backend "http" {}
}

# Configure the Rancher2 provider to admin

provider "rancher2" {}

provider "kubernetes" {
  config_path    = ".kube/local.yaml"
  config_context = "local"
  insecure       = true
}

provider "helm" {
  kubernetes {
    config_path = ".kube/runner.yaml"
    insecure    = true
  }
}

provider "gitlab" {}

# User: foo / Rolle: Administrator
module "user_foo" {
  source   = "./modules/user"
  name     = "foo"
  username = "foo"
  enabled  = true
}

module "global_role_binding_foo" {
  source         = "./modules/roles/global_role_binding"
  name           = "foo"
  global_role_id = "admin"
  user_id        = module.user_foo.user_id
}


# User: bar / Rolle: Cluster User
module "user_bar" {
  source   = "./modules/user"
  name     = "bar"
  username = "bar"
  enabled  = true
}

module "global_role_binding_bar" {
  source         = "./modules/roles/global_role_binding"
  name           = "bar"
  global_role_id = "user-base"
  user_id        = module.global_role_binding_bar.user_id
}

resource "kubernetes_manifest" "fleet_gitrepo" {
  manifest = {
    apiVersion = var.repo_api
    kind       = var.repo_kind
    metadata = {
      name      = var.repo_name
      namespace = var.repo_namespace
    }
    spec = {
      repo                  = var.repo_source_link
      branch                = var.repo_branch
      insecureSkipTLSVerify = var.repo_insecure
      paths                 = var.repo_paths
      targets               = var.repo_targets
      clientSecretName      = var.repo_clientSecretName
    }
  }
}

variable "repo_api" {
  description = "The api version"
  default     = "fleet.cattle.io/v1alpha1"
}

variable "repo_kind" {
  description = "kind of ressource"
  default     = "GitRepo"
}

variable "repo_name" {
  description = "The name of the repo in Rancher"
}

variable "repo_namespace" {
  description = "The namespace for the Git repository"
  default     = "fleet-default"
}

variable "repo_branch" {
  description = "The branch of the Git repository"
  default     = "main"
}

variable "repo_insecure" {
  description = "set insecure"
  default     = true
}

variable "repo_paths" {
  description = "list of the paths of the Git repository"
  type        = list(string)
  default     = [""]
}

variable "repo_targets" {
  description = "cluster targets of Git repository"
  type = list(object({
    clusterName = string
  }))
  default = [
    {
      clusterName = ""
    }
  ]
}

variable "repo_source_link" {
  description = "link of the Git repository"
}

variable "repo_clientSecretName" {
  description = "The name of the repo clientSecretName in Rancher"
  default     = ""
}

resource "rancher2_namespace" "the_ns" {
name       = var.name
project_id = var.project_id
}

variable "name" {
  type = string
}

variable "project_id" {
  type = string
}

resource "rancher2_project" "project" {
  cluster_id                = var.cluster_id
  name                      = var.name
  description               = var.description
  enable_project_monitoring = var.enable_project_monitoring
}

output "projectid" {
  value = rancher2_project.project.id
}

variable "name" {
  type = string
}

variable "cluster_id" {
  type    = string
  default = "c-m-fcvfr6nf"
}

variable "description" {
  type = string
}

variable "enable_project_monitoring" {
  type    = bool
  default = true
}

# Create a new rancher2 User
resource "rancher2_user" "basic_user" {
  name     = var.name
  username = var.username
  password = var.password
  enabled  = var.enabled
}

output "user_id" {
  value = rancher2_user.basic_user.id
}

variable "name" {
  type    = string
  default = "changeme"
}

variable "username" {
  type    = string
  default = "changeme"
}

variable "password" {
  type    = string
  default = "changeme123456"
}

variable "enabled" {
  type    = bool
  default = true
}

# Create a new rancher2 global_role_binding for User
resource "rancher2_global_role_binding" "changeme" {
  name           = var.name
  global_role_id = var.global_role_id
  user_id        = var.user_id
}

variable "name" {
  type = string
}

variable "global_role_id" {
  type    = string
  default = "user-base"
}

variable "user_id" {
  type = string
}

resource "rancher2_project_role_template_binding" "project_role_template_binding" {
  name             = var.name
  project_id       = var.project_id
  user_id          = var.user_id
  role_template_id = var.role_template_id
}

variable "name" {
  type = string
}

variable "role_template_id" {
  type    = string
  default = "project-member"
}

variable "user_id" {
  type = string
}

variable "project_id" {
  type = string
}