path: root/ops/buildkite/default.nix

{ pkgs }:
let
  terraform = pkgs.terraform.withPlugins (p: [
    p.buildkite
    p.google
  ]);
in
pkgs.stdenv.mkDerivation rec {
  name = "tf-buildkite";
  src = ./.;

  upload = pkgs.writeShellScriptBin "tf-buildkite-upload" ''
    set -ueo pipefail

    cd $(git rev-parse --show-toplevel)/ops/buildkite
    pass gcloud/terraform/fcuny-homelab > /dev/shm/tf-fcuny-homelab

    export BUILDKITE_API_TOKEN=$(pass api/buildkite-terraform-token)
    export GOOGLE_APPLICATION_CREDENTIALS=/dev/shm/tf-fcuny-homelab

    ${terraform}/bin/terraform init
    ${terraform}/bin/terraform plan
    ${terraform}/bin/terraform apply
  '';
}