Feature/basic terraform

.gitignore

@@ -0,0 +1,4 @@
+**/.terraform
+.vscode
+ssh_keys
+*.tfstate*

Dockerfile

@@ -0,0 +1,23 @@
+FROM hashicorp/terraform:1.1.3
+
+RUN apk update && apk upgrade
+RUN apk add bash groff openssh git vim jq make curl
+
+RUN apk -v --update add \
+        python3 \
+        py3-pip \
+        groff \
+        less \
+        mailcap \
+        && \
+    pip3 install --upgrade awscli s3cmd python-magic && \
+    apk -v --purge del && \
+    rm /var/cache/apk/*
+
+RUN mkdir -p /infra
+WORKDIR /infra
+
+RUN echo 'alias t=terraform' > ~/.bashrc && \
+    terraform -install-autocomplete
+
+ENTRYPOINT "bash"

docker-compose.yml

@@ -0,0 +1,19 @@
+version: "3.7"
+
+x-aws-vault-environment: &aws-vault-environment
+  - AWS_VAULT
+  - AWS_DEFAULT_REGION
+  - AWS_REGION
+  - AWS_ACCESS_KEY_ID
+  - AWS_SECRET_ACCESS_KEY
+  - AWS_SESSION_TOKEN
+  - AWS_SECURITY_TOKEN
+  - AWS_SESSION_EXPIRATION
+
+services:
+  infra:
+    build: .
+    volumes:
+      - .:/infra
+      - ~/.ssh:/root/.ssh
+    environment: *aws-vault-environment

main.tf

@@ -0,0 +1,22 @@
+module "application" {
+  source = "./modules/application"
+  host   = "ssh://${var.instance_user}@${module.instance.public_ip}:22"
+  image  = var.image
+}
+
+module "instance" {
+  source       = "./modules/instance"
+  instance_ami = var.instance_ami
+  user         = var.instance_user
+  ssh_key      = module.ssh.public_key_openssh
+  ec2_sg_id    = module.networking.ec2_sg_id
+}
+
+module "networking" {
+  source = "./modules/networking"
+}
+
+module "ssh" {
+  source = "./modules/ssh"
+  env    = var.env
+}

modules/application/main.tf

@@ -0,0 +1,16 @@
+resource "docker_image" "app" {
+  name = var.image
+}
+
+resource "docker_container" "app" {
+  image = docker_image.app.latest
+  name  = "app"
+  restart = "unless-stopped"
+  env   = [
+    "PORT=4000",
+  ]
+  ports {
+    internal = "4000"
+    external = "80"
+  }
+}

modules/application/variables.tf

@@ -0,0 +1,9 @@
+variable "host" {
+  description = "instance host"
+  type        = string
+}
+
+variable "image" {
+  description = "dockerhub image"
+  type        = string
+}

modules/application/versions.tf

@@ -0,0 +1,16 @@
+terraform {
+     required_version = ">= 0.15.3"
+
+  required_providers {
+    docker = {
+      source  = "kreuzwerker/docker"
+      version = "2.11.0"
+    }   
+  }
+}
+
+provider "docker" {
+  host = var.host
+
+
+}

modules/instance/config.tpl

@@ -0,0 +1,9 @@
+variant: fcos
+version: 1.2.0
+passwd:
+  users:
+    - name: ${user}
+      ssh_authorized_keys:
+        - ${key}
+      groups:
+        - docker

modules/instance/main.tf

@@ -0,0 +1,41 @@
+# IP
+resource "aws_eip" "eip" {
+  vpc = true
+}
+
+resource "aws_eip_association" "eip_assoc" {
+  instance_id   = aws_instance.app_server.id
+  allocation_id = aws_eip.eip.id
+}
+
+# User Data
+data "ct_config" "config" {
+  content = templatefile("${path.module}/config.tpl", {
+    user = var.user
+    key  = var.ssh_key
+  })
+  strict = true
+}
+
+# Instance
+resource "aws_instance" "app_server" {
+  ami           = var.instance_ami
+  instance_type = "t2.micro"
+  user_data     = data.ct_config.config.rendered
+
+  tags = {
+    Name = "Study AppServer"
+  }
+
+  vpc_security_group_ids = [ var.ec2_sg_id
+  ]
+}
+
+
+
+
+
+
+
+
+

modules/instance/outputs.tf

@@ -0,0 +1,3 @@
+output "public_ip" {
+  value = aws_eip.eip.public_ip
+}

modules/instance/variables.tf

@@ -0,0 +1,20 @@
+variable "user" {
+  description = "instance user"
+  type        = string
+}
+
+
+variable "ssh_key" {
+  description = "public key"
+  type        = string
+}
+
+variable "instance_ami" {
+  description = "AWS AMI"
+  type        = string
+}
+
+variable "ec2_sg_id" {
+  description = "EC2 security group id"
+  type        = string
+}

modules/instance/versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = ">= 0.15.3"
+
+  required_providers {
+  ct = {
+      source  = "poseidon/ct"
+      version = "0.8.0"
+    }
+  }
+}

modules/networking/main.tf

@@ -0,0 +1,15 @@
+data "aws_vpc" "default" {
+  default = true
+}
+
+module "ec2_sg" {
+  source = "terraform-aws-modules/security-group/aws"
+
+  name        = "ec2_sg"
+  description = "Security group for ec2_sg"
+  vpc_id      = data.aws_vpc.default.id
+
+  ingress_cidr_blocks = ["0.0.0.0/0"]
+  ingress_rules       = ["http-80-tcp", "https-443-tcp", "all-icmp", "ssh-tcp"]
+  egress_rules        = ["all-all"]
+}

modules/networking/outputs.tf

@@ -0,0 +1,3 @@
+output "ec2_sg_id" {
+  value = module.ec2_sg.security_group_id
+}

modules/ssh/main.tf

@@ -0,0 +1,9 @@
+resource "tls_private_key" "test" {
+  algorithm   = "RSA"
+}
+
+resource "local_file" "private_key" {
+  content  = tls_private_key.test.private_key_pem
+  filename = "ssh_keys/${var.env}.pem"
+  file_permission = "0600"
+}

modules/ssh/outputs.tf

@@ -0,0 +1,11 @@
+output "private_key_pem" {
+  value = tls_private_key.test.private_key_pem
+}
+
+output "public_key_pem" {
+  value = tls_private_key.test.public_key_pem
+}
+
+output "public_key_openssh" {
+  value = tls_private_key.test.public_key_openssh
+}

modules/ssh/variables.tf

@@ -0,0 +1,4 @@
+variable "env" {
+  description = "ssh env"
+  type        = string
+}

outputs.tf

@@ -0,0 +1,3 @@
+output "public_ip" {
+  value = module.instance.public_ip
+}

terraform.tfvars

@@ -0,0 +1,5 @@
+region        = "us-east-1"
+instance_ami  = "ami-09e2e5104f310ffb5"
+instance_user = "core"
+image         = "kaitoendo/ping-pong:latest"
+env           = "staging"

variables.tf

@@ -0,0 +1,24 @@
+variable "region" {
+  description = "aws region"
+  type        = string
+}
+
+variable "instance_ami" {
+  description = "AWS AMI"
+  type        = string
+}
+
+variable "instance_user" {
+  description = "instance user"
+  type        = string
+}
+
+variable "image" {
+  description = "container image you will run on the instance"
+  type        = string
+}
+
+variable "env" {
+  description = "environment"
+  type        = string
+}