terraform/environments/dev/main.tf

terraform {
  required_providers {
    google = {
      source  = "hashicorp/google"
      version = "~> 6.0"
    }
  }
}

provider "google" {
  project = var.project_id
  region  = var.region
}

module "network" {
  source = "../../modules/network"
  project_name = var.project_id
  region      = var.region
  frontend_cidr = var.frontend_cidr
  backend_cidr = var.backend_cidr
  database_cidr = var.database_cidr
  ssh_source_ranges = var.ssh_source_ranges
}

module "compute" {
  source = "../../modules/compute"
  instance_type = var.instance_type
  zone = var.zone
  frontend_subnet_id = var.frontend_subnet_id
  backend_subnet_id = var.backend_subnet_id
  database_subnet_id  = var.database_subnet_id
}

module "iam" {
  source     = "../../modules/iam"
  project_id = var.project_id
}

data "google_client_openid_userinfo" "me" {
}

resource "local_file" "ansible_config" {
  content = templatefile("${path.module}/../../templates/ansible.cfg.tpl",
    {
      remote_user = data.google_client_openid_userinfo.me.email
    }
  )
  filename = "../../../ansible/ansible.cfg"
}

resource "local_file" "service_account" {
  content  = base64decode(module.iam.service_account_key)
  filename = "../../../ansible/service_account.json"
}