use k8s as a default backend (#13)

Co-authored-by: ibraheem Al Saady <ibraheemalsaady@ibraheems-MacBook-Pro-2.local>

api/v1alpha1/terraform_types.go

@@ -265,6 +265,17 @@ func (t *Terraform) GetOwnerReference() metav1.OwnerReference {
 	}
 }
 
+// setBackendCfgIfNotExist sets the default backend to Kunernetes if not provided
+func setBackendCfgIfNotExist(run *Terraform) {
+	if run.Spec.Backend == "" {
+		run.Spec.Backend = fmt.Sprintf(`backend "kubernetes" {
+  secret_suffix     = "%s"
+  in_cluster_config = true
+}
+`, run.ObjectMeta.Name)
+	}
+}
+
 // runnerRBACName is the RBAC name that will be used in the role and service account creation
 // if they're not found
 const runnerRBACName string = "terraform-runner"
@@ -275,6 +286,8 @@ const runnerRBACName string = "terraform-runner"
 // Secret to store the outputs if any, will be empty if no outputs are defined,
 // Job to execute the workflow/run)
 func (t *Terraform) CreateTerraformRun(namespacedName types.NamespacedName) (*batchv1.Job, error) {
+	setBackendCfgIfNotExist(t)
+
 	if err := createRbacConfigIfNotExist(runnerRBACName, namespacedName.Namespace); err != nil {
 		return nil, err
 	}

config/samples/role-terraform-runner.yaml

@@ -12,7 +12,10 @@ metadata:
 rules:
 - apiGroups: [""]
   resources: ["secrets"]
-  verbs: ["get", "update"]
+  verbs: ["create", "get", "update", "list"]
+- apiGroups: ["coordination.k8s.io"]
+  resources: ["leases"]
+  verbs: ["create", "update", "watch", "get"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

config/samples/terraform-basic.yaml

@@ -0,0 +1,14 @@
+apiVersion: run.terraform-operator.io/v1alpha1
+kind: Terraform
+metadata:
+  name: basic-module
+spec:
+  terraformVersion: 1.1.7
+
+  module:
+    source: IbraheemAlSaady/test/module
+    version: 0.0.3
+
+  variables:
+    - key: length
+      value: "4"