Managing GitHub with Terraform

In this talk, I look at how HashiCorp Terraform 0.10 can be used to manage GitHub Organizations, Teams, and Repositories.

This version of the presentation was given at an internal meetup at Royal Schiphol Group in February 2018.

Transcript

1. Managing GitHub with Terraform
2. Terraform
3. • built to codify infrastructure resources • wide support for different providers • flow based on HashiCorp Configura<on Language
4. HashiCorp Configura/on Language
5. service { key = "value" }
6. service { acl = "private" ... env = "development" }
7. Terraform flow
8. • terraform init • terraform get • terraform plan • terraform apply • terraform destroy • terraform graph
9. Code
10. # _providers.tf provider "github" { organization = "my-organization" token = "${var.github_token}" version = "~> 0.1" }
11. # terraform.tfvars github_token = "6a2...2f7"
12. # github_teams.tf resource "github_team" "frontend" { name = "frontend" description = "Team: frontend" privacy = "closed" }
13. # github_memberships.tf resource "github_membership" "jane" { username = "jane" role = "member" }
14. # github_team_memberships.tf resource "github_team_membership" "jane" { team_id = "${github_team.frontend.id}" username = "jane" role = "member" }
15. # github_repositories.tf module "infra" { source = "github.com/my-organization/terraform-github-repository-my-organization" name = "infra" description = "Infrastructure" req_status_checks_context = ["continuous-integration/travis-ci"] auto_init = false gitignore_template = "" team_repository_team = "${github_team.operations.id}" enable_branch_protection = 0 req_pr_reviews_dismissal_teams = ["${github_team.operations.id}"] restrictions_teams = ["${github_team.operations.id}"] }
16. # github_repositories.tf module "infra" { source = "github.com/my-organization/terraform-github-repository-my-organization" name = "infra" description = "Infrastructure" req_status_checks_context = ["continuous-integration/travis-ci"] auto_init = false gitignore_template = "" team_repository_team = "${github_team.operations.id}" enable_branch_protection = 1 req_pr_reviews_dismissal_teams = ["${github_team.operations.id}"] restrictions_teams = ["${github_team.operations.id}"] }
17. # github_repositories.tf module "infra" { source = "github.com/my-organization/terraform-github-repository-my-organization" name = "infra" description = "Infrastructure" req_status_checks_context = ["continuous-integration/travis-ci"] auto_init = false gitignore_template = "" team_repository_team = "${github_team.operations.id}" enable_branch_protection = 1 req_pr_reviews_dismissal_teams = ["${github_team.operations.id}"] restrictions_teams = ["${github_team.operations.id}"] }
18. # github_repositories.tf module "infra" { source = "github.com/my-organization/terraform-github-repository-my-organization" name = "infra" description = "Infrastructure" req_status_checks_context = ["continuous-integration/travis-ci"] auto_init = false gitignore_template = "" team_repository_team = "${github_team.operations.id}" enable_branch_protection = 1 req_pr_reviews_dismissal_teams = ["${github_team.operations.id}"] restrictions_teams = ["${github_team.operations.id}"] }
21. Fin