add terraform to provision packet machine

.gitignore

@@ -1 +1,18 @@
 .idea
+
+# Test binary, build with `go test -c`
+*.test
+
+# Output of the go coverage tool, specifically when used with LiteIDE
+*.out
+
+### Terraform ###
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Terraform plan file
+*.tfplan.*

Makefile

@@ -52,6 +52,12 @@ test: # Run unit test
 integration: deps-cgo ## Run integration test
 	go test -v sigs.k8s.io/cluster-api-provider-libvirt/test/integration
 
+.PHONY: e2e
+e2e: deps-cgo ## Run end-to-end test
+	hack/packet-provision.sh install
+	#TODO run tests
+	hack/packet-provision.sh destroy
+
 .PHONY: lint
 lint: ## Go lint your code
 	hack/go-lint.sh $(go list -f '{{ .ImportPath }}' ./...)

hack/packet-provision.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set +e
+
+# Your Packet user account
+if [ "$PACKET_AUTH_TOKEN" == "" ]; then
+    echo "You need to set PACKET_AUTH_TOKEN variable first."
+    echo "Make sure that your SSH key is also set in packet.net"
+    exit 1
+fi
+
+export TF_VAR_environment_id=${ENVIRONMENT_ID:-$(uuidgen | cut -c1-8)}
+
+cd ./prebuild
+case ${1} in
+  "install")
+    ssh_path="$TF_VAR_ssh_key_path"
+    if [ "$TF_VAR_ssh_key_path" == "" ]; then
+        echo -e "\e[33mCreating temporary SSH file\e[0m"
+        ssh-keygen -t rsa -b 4096 -C "temporary packet.net key" -P "" -f "/tmp/packet_id_rsa" -q
+        ssh_path="/tmp/packet_id_rsa.pub"
+    fi
+    terraform init -input=false
+    terraform plan -input=false -out=tfplan.out && terraform apply -input=false -auto-approve tfplan.out
+    echo -e "\e[32m"
+    echo -e "*** Your packet.net host is called ${TF_VAR_environment_id}"
+    echo -e "*** You can also access it via SSH with key located in ${ssh_path}"
+    echo -e "\e[0m"
+    ;;
+  "destroy")
+    terraform destroy -input=false -auto-approve
+    rm /tmp/packet_id_rsa* || :
+    ;;
+  *)
+    echo "Use '$0 install' or '$0 destroy'."
+    ;;
+esac

hack/prebuild/init.sh

@@ -0,0 +1,19 @@
+#/bin/bash
+
+yum install -y -d1 libvirt libvirt-daemon-kvm
+usermod -aG libvirt root
+
+cat <<EOF > /etc/libvirt/libvirtd.conf
+unix_sock_group = "libvirt"
+unix_sock_rw_perms = "0770"
+listen_tls = 0
+listen_tcp = 1
+auth_tcp="none"
+tcp_port = "16509"
+EOF
+
+echo 'LIBVIRTD_ARGS="--listen"' >> /etc/sysconfig/libvirtd
+
+iptables -I INPUT -p tcp --dport 16509 -j ACCEPT -m comment --comment "Allow insecure libvirt clients"
+
+systemctl start libvirtd

hack/prebuild/main.tf

@@ -0,0 +1,32 @@
+resource "packet_project" "libvirt_actuator" {
+  name = "libvirt-actuator tests"
+}
+
+resource "packet_ssh_key" "key" {
+  name       = "unlikely_tf_ssh_key_name"
+  public_key = "${file("${var.ssh_key_path}")}"
+}
+
+resource "packet_device" "libvirt" {
+  hostname         = "${var.environment_id}"
+  plan             = "baremetal_0"
+  facility         = "ewr1"
+  operating_system = "centos_7"
+  billing_cycle    = "hourly"
+  project_id       = "${packet_project.libvirt_actuator.id}"
+  user_data        = "#!/bin/bash\nsed -i 's/PasswordAuthentication.*$/PasswordAuthentication yes/g' /etc/ssh/sshd_config && systemctl restart sshd"
+  provisioner "remote-exec" {
+    script = "init.sh"
+    connection = {
+      type = "ssh"
+      user = "root"
+      password = "${self.root_password}"
+      agent = false
+    }
+  }
+}
+
+output "ip" {
+  value = "${packet_device.libvirt.access_public_ipv4}"
+}
+

hack/prebuild/variables.tf

@@ -0,0 +1,9 @@
+variable "ssh_key_path" {
+  type    = "string"
+  default = "/tmp/packet_id_rsa.pub"
+}
+
+variable "environment_id" {
+  type    = "string"
+  default = "testHypervisor"
+}