Merge pull request 'switching terraform backend to azure storage' (#147) from 146-switch-terraform-backend into main

Reviewed-on: #147

.gitea/workflows/build_and_test.yaml

@@ -15,12 +15,22 @@ jobs:
     environment: ${{ inputs.environment_name }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v6
+        uses: actions/checkout@v4
         with:
           sparse-checkout: |
             api
             client
 
+      - name: Get Secrets from Infisical
+        uses: Infisical/secrets-action@v1.0.16
+        with:
+          domain: ${{ secrets.INFISICAL_DOMAIN }}
+          client-id: ${{ secrets.INFISICAL_CLIENT_ID }}
+          client-secret: ${{ secrets.INFISICAL_CLIENT_SECRET }}
+          project-slug: ${{ secrets.INFISICAL_PROJECT_SLUG }}
+          env-slug: ${{ inputs.environment_name }}
+          secret-path: /flying
+
       - name: Install Nest CLI
         run: |
           npm install -g @nestjs/cli
@@ -28,7 +38,7 @@ jobs:
       - name: 'Setup Node'
         uses: actions/setup-node@v4
         with:
-          node-version: ${{ vars.NODE_VERSION }}
+          node-version: ${{ env.NODE_VERSION }}
 
       - name: Install dependencies
         run: |
@@ -44,21 +54,20 @@ jobs:
 
       - name: Build Client
         env:
-          VITE_API_URL: ${{ vars.VITE_API_URL }}
-          VITE_BASE_URL: ${{ case(inputs.environment_name === 'test', vars.VITE_BASE_URL_TEST, vars.VITE_BASE_URL_PROD) }}
-          VITE_CLIENT_ID: ${{ case(inputs.environment_name === 'test', vars.VITE_CLIENT_ID_TEST, vars.VITE_CLIENT_ID_PROD) }}
-          VITE_ISSUER_URI: ${{ vars.VITE_ISSUER_URI }}
-          VITE_TENANT_ID: ${{ vars.VITE_TENANT_ID }}
+          VITE_API_URL: ${{ env.VITE_API_URL }}
+          VITE_BASE_URL: ${{ env.VITE_BASE_URL }}
+          VITE_CLIENT_ID: ${{ env.VITE_CLIENT_ID }}
+          VITE_ISSUER_URI: ${{ env.VITE_ISSUER_URI }}
+          VITE_TENANT_ID: ${{ env.VITE_TENANT_ID }}
         run: |
-          printenv
           npm run build -w client
 
       - name: Log into Docker Hub
         if: ${{ github.event_name != 'pull_request' }}
         uses: docker/login-action@v3
         with:
-          username: ${{ vars.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          username: ${{ env.DOCKERHUB_USERNAME }}
+          password: ${{ env.DOCKERHUB_TOKEN }}
 
       - name: Setup Docker Buildx
         if: ${{ github.event_name != 'pull_request' }}

.gitea/workflows/changes.yaml

@@ -34,3 +34,5 @@ jobs:
               - 'api/**'
             client:
               - 'client/**'
+            infrastructure:
+              - 'infrastructure/**'

.gitea/workflows/deploy.yaml

@@ -15,19 +15,30 @@ on:
 permissions:
   id-token: write
   contents: read
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
     environment: ${{ inputs.environment_name }}
     steps:
-      - name: Log in to Azure
-        uses: azure/login@v3
+      - name: Get Secrets from Infisical
+        uses: Infisical/secrets-action@v1.0.16
         with:
-          creds: '{"clientId":"${{ vars.AZURE_CLIENT_ID }}","clientSecret":"${{ secrets.AZURE_CLIENT_SECRET }}","subscriptionId":"${{ secrets.AZURE_SUBSCRIPTION_ID }}","tenantId":"${{ vars.AZURE_TENANT_ID }}"}'
+          domain: ${{ secrets.INFISICAL_DOMAIN }}
+          client-id: ${{ secrets.INFISICAL_CLIENT_ID }}
+          client-secret: ${{ secrets.INFISICAL_CLIENT_SECRET }}
+          project-slug: ${{ secrets.INFISICAL_PROJECT_SLUG }}
+          env-slug: ${{ inputs.environment_name }}
+          secret-path: /flying
 
-      - name: Azure CLI script
-        uses: azure/cli@v2
-        with:
-          azcliversion: latest
-          inlineScript: |
-            az containerapp update --name ${{ inputs.app_name }}-${{ inputs.environment_name }} --container-name ${{ inputs.app_name }} --resource-group noahspan --image docker.io/noahspan/${{ inputs.app_name }}:${{ inputs.version_number }}
+      - name: Install Azure CLI
+        run: |
+          curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
+
+      - name: Log in to Azure
+        run: |
+          az login --service-principal --username ${{ env.AZURE_CLIENT_ID }} --password ${{ env.AZURE_CLIENT_SECRET }} --tenant ${{ env.AZURE_TENANT_ID }}
+
+      - name: Update Container App
+        run: |
+          az containerapp update --name ${{ inputs.app_name }}-${{ inputs.environment_name }} --container-name ${{ inputs.app_name }} --resource-group ${{ env.RESOURCE_GROUP }} --image docker.io/noahspan/${{ inputs.app_name }}:${{ inputs.version_number }}

.gitea/workflows/main.yaml

@@ -8,9 +8,9 @@ jobs:
   changes:
     uses: ./.gitea/workflows/changes.yaml
 
-  build:
+  build-and-test:
     if: ${{ needs.changes.outputs.api == 'true' || needs.changes.outputs.client == 'true' }}
-    name: build
+    name: build-and-test
     needs:
       - changes
     uses: ./.gitea/workflows/build_and_test.yaml
@@ -23,7 +23,7 @@ jobs:
     name: deploy
     needs: 
       - changes
-      - build
+      - build-and-test
     uses: ./.gitea/workflows/deploy.yaml
     with:
       app_name: flying

.gitea/workflows/pull_request.yaml

@@ -14,6 +14,6 @@ jobs:
       - changes
     uses: ./.gitea/workflows/build_and_test.yaml
     with:
-      environment_name: pull_request
+      environment_name: test
       version_number: ${{ github.run_id }}
     secrets: inherit

.gitea/workflows/tag.yaml

@@ -5,8 +5,8 @@ on:
       - '**'
 
 jobs:
-  build:
-    name: build
+  build-and-test:
+    name: build-and-test
     uses: ./.gitea/workflows/build_and_test.yaml
     with:
       environment_name: prod
@@ -16,7 +16,7 @@ jobs:
   deploy:
     name: deploy
     needs: 
-      - build
+      - build-and-test
     uses: ./.gitea/workflows/deploy.yaml
     with:
       app_name: flying

.gitea/workflows/terraform.yaml

@@ -0,0 +1,44 @@
+name: 'Terraform'
+on:
+  workflow_dispatch:
+    inputs:
+      environment_name:
+        type: string
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+    environment:
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          sparse-checkout: |
+            infrastructure
+
+      - name: Get Secrets from Infisical
+        uses: Infisical/secrets-action@v1.0.16
+        with:
+          domain: ${{ secrets.INFISICAL_DOMAIN }}
+          client-id: ${{ secrets.INFISICAL_CLIENT_ID }}
+          client-secret: ${{ secrets.INFISICAL_CLIENT_SECRET }}
+          project-slug: ${{ secrets.INFISICAL_PROJECT_SLUG }}
+          env-slug: ${{ inputs.environment_name }}
+          secret-path: /flying/terraform
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v4
+
+      - name: Terraform init
+        run: |
+          terraform -chdir=./infrastructure init -reconfigure -backend-config="./backend/${{ inputs.environment_name }}.backend.tfvars" -input=false
+
+      - name: Terraform plan
+        run: |
+          terraform -chdir=./infrastructure plan -no-color -input=false
+
+      # - name: Terraform apply
+      #   if: ${{ github.event_name != 'pull_request' }}
+      #   run: |
+      #     terraform -chdir=./infrastructure apply -no-color -input=false
+          

README.md

@@ -1,3 +1,23 @@
-# Flying (React and NestJS)
+# Flying
 
-A pilot logbook app
+A web app for tracking pilot flight hours and sharing flight tracks.
+
+## Built With
+
+## Getting Started
+
+### Prerequisites
+
+### Installation
+
+## Usage
+
+## Roadmap
+
+- [ ] Expense tracking for plane rental, instructor fees, and fuel rates
+- [ ] Export logbook to CSV
+- [ ] 
+
+## License
+
+## Contact

api/README.md

@@ -1,3 +1,4 @@
 # Flying API
 
 An API for the Flying app.
+...

api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "api",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "",
   "author": "",
   "private": true,

client/README.md

@@ -0,0 +1 @@
+...

client/package.json

@@ -1,7 +1,7 @@
 {
   "name": "client",
   "private": true,
-  "version": "2.1.4",
+  "version": "2.1.5",
   "type": "module",
   "scripts": {
     "dev": "vite",

client/vite.config.ts

@@ -13,6 +13,7 @@ export default defineConfig({
     strictPort: true
   },
   server: {
+    host: true,
     port: 8080,
     proxy: {
       '/api': {

docker-compose.yaml

@@ -9,9 +9,24 @@ services:
       - '10001:10001'
       - '10002:10002'
     command: 'azurite --blobHost 0.0.0.0 --queueHost 0.0.0.0 --tableHost 0.0.0.0 --loose --skipApiVersionCheck'
+    healthcheck:
+      test: ["CMD", "nc", "-z", "127.0.0.1", "10000"]
     volumes: 
       - ./azurite-data:/data
 
+  seed:
+    image: mcr.microsoft.com/azure-cli
+    depends_on:
+      azurite:
+        condition: service_healthy
+    volumes:
+      - ./seed-data:/data
+    entrypoint: >
+      sh -c "
+      az storage container create --name mycontainer --connection-string 'DefaultEndpointsProtocol=http;AccountName=devstoreaccount1;AccountKey=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==;BlobEndpoint=http://azurite:10000/devstoreaccount1;' &&
+      az storage blob upload-batch --destination mycontainer --source /data --connection-string 'DefaultEndpointsProtocol=http;AccountName=devstoreaccount1;AccountKey=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==;BlobEndpoint=http://azurite:10000/devstoreaccount1;'
+      "
+
   restore:
     container_name: restore
     image: litestream/litestream:0.3.13
@@ -51,6 +66,7 @@ services:
         condition: service_started
 
 volumes:
-  # azurite-data:
+  azurite-data:
   backup:
   data:
+  seed-data:

infrastructure/backend/prod.backend.tfvars

@@ -0,0 +1 @@
+container_name = "tfstate-flying-prod"

infrastructure/backend/test.backend.tfvars

@@ -0,0 +1 @@
+container_name = "tfstate-flying-test"

infrastructure/terraform.tf

@@ -16,12 +16,9 @@ terraform {
     }
   }
 
-  backend "remote" {
-    hostname     = "app.terraform.io"
-    organization = "noahspan"
-
-    workspaces {
-      prefix = "noahspan-"
-    }
+  backend "azurerm" {
+    resource_group_name = "noahspan"
+    storage_account_name = "noahspanterraform"
+    key = "terraform.tfstate"
   }
 }

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noahspan/flying",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "scripts": {
     "start": "node api/dist/main",
     "format": "prettier --write \"**/src/**/*.ts\" \"**/test/**/*.ts\"",