Configuring CircleCI to Deploy to Kubernetes with HashiCorp Terraform

How do we use HashiCorp Terraform to deploy an application to Kubernetes in a CircleCI pipeline? Watch this replay from the HashiCorp Live stream to learn how. Rosemary Wang (Developer Advocate, HashiCorp) and Angel Rivera (Developer Advocate, CircleCI) teach each other about HashiCorp Terraform, Vault, and CircleCI while attempting to configure an example pipeline to use Vault to retrieve dynamically generated Google Cloud service account keys and deploy an application to a Kubernetes cluster in Google Kubernetes Engine.

Subscribe to the HashiCorp Live Twitch channel to watch future live streams!

Outline

1:00 — Introduction & Recap of Injecting Static Secrets and Injecting Dynamic Secrets.

11:50 — Updating Kubernetes Provider for Terraform

38:30 — Tools for creating local Kubernetes clusters. Includes Kind, k3s, minikube, Docker for Desktop.

1:12:00 — Configuring Terraform Cloud Remote State Storage

1:21:00 — First attempt to deploy an application to Kubernetes

1:38:00 — Second attempt to deploy an application to Kubernetes

2:09:00 — Force unlock state in Terraform Cloud

2:11:00 — Successful attempt to deploy the application on Kubernetes

2:13:50 — Destroy application to Kubernetes

Additional Resources

• Vault on Google Kubernetes Engine

• Terraform Module for Vault on GKE