generate key, use variables

This commit is contained in:
Ryan Malloy 2024-03-28 18:45:55 +00:00
parent ace065d9d2
commit c5de5f6c9f
1 changed files with 102 additions and 89 deletions

191
main.tf
View File

@ -1,90 +1,103 @@
resource "aws_vpc" "sgtm_vpc" {
cidr_block = "10.123.0.0/16"
enable_dns_hostnames = true resource "aws_vpc" "sgtm_vpc" {
enable_dns_support = true cidr_block = "10.123.0.0/16"
enable_dns_hostnames = true
tags = { enable_dns_support = true
name = "dev"
} tags = {
} name = "dev"
}
resource "aws_subnet" "sptm_public_subnet" { }
vpc_id = aws_vpc.sgtm_vpc.id
cidr_block = "10.123.1.0/24" resource "aws_subnet" "sptm_public_subnet" {
map_public_ip_on_launch = true vpc_id = aws_vpc.sgtm_vpc.id
availability_zone = "us-east-1a" cidr_block = "10.123.1.0/24"
map_public_ip_on_launch = true
tags = { availability_zone = "us-east-1a"
name = "dev-public"
} tags = {
} name = "dev-public"
}
resource "aws_internet_gateway" "sgtm_internet_gateway" { }
vpc_id = aws_vpc.sgtm_vpc.id
resource "aws_internet_gateway" "sgtm_internet_gateway" {
tags = { vpc_id = aws_vpc.sgtm_vpc.id
name = "dev-igw"
} tags = {
} name = "dev-igw"
}
resource "aws_route_table" "sgtm_public_rt" { }
vpc_id = aws_vpc.sgtm_vpc.id
resource "aws_route_table" "sgtm_public_rt" {
tags = { vpc_id = aws_vpc.sgtm_vpc.id
name = "dev_public_rt"
} tags = {
} name = "dev_public_rt"
}
resource "aws_route" "default_route" { }
route_table_id = aws_route_table.sgtm_public_rt.id
destination_cidr_block = "0.0.0.0/0" resource "aws_route" "default_route" {
gateway_id = aws_internet_gateway.sgtm_internet_gateway.id route_table_id = aws_route_table.sgtm_public_rt.id
} destination_cidr_block = "0.0.0.0/0"
gateway_id = aws_internet_gateway.sgtm_internet_gateway.id
resource "aws_route_table_association" "sgtm_public_assoc" { }
subnet_id = aws_subnet.sptm_public_subnet.id
route_table_id = aws_route_table.sgtm_public_rt.id resource "aws_route_table_association" "sgtm_public_assoc" {
} subnet_id = aws_subnet.sptm_public_subnet.id
route_table_id = aws_route_table.sgtm_public_rt.id
resource "aws_security_group" "sgtm_sg" { }
name = "dev-sg"
description = "dev security group" resource "aws_security_group" "sgtm_sg" {
vpc_id = aws_vpc.sgtm_vpc.id name = "dev-sg"
description = "dev security group"
ingress { vpc_id = aws_vpc.sgtm_vpc.id
from_port = 0
to_port = 0 ingress {
protocol = "-1" from_port = 0
cidr_blocks = ["172.59.221.135/32"] to_port = 0
} protocol = "-1"
cidr_blocks = ["172.59.221.135/32"]
egress { }
from_port = 0
to_port = 0 egress {
protocol = "-1" from_port = 0
cidr_blocks = ["0.0.0.0/0"] to_port = 0
} protocol = "-1"
} cidr_blocks = ["0.0.0.0/0"]
}
resource "aws_key_pair" "sgtm_auth" { }
key_name = "sgtmkey"
public_key = file("~/.ssh/sgtmkey.pub") resource "tls_private_key" "key" {
} algorithm = var.tls_key_algorithm
}
resource "aws_instance" "dev_node" {
instance_type = "t2.micro" resource "aws_key_pair" "sgtm_auth" {
ami = data.aws_ami.server_ami.id key_name = "${var.name_prefix}-key-${var.name_suffix}"
key_name = aws_key_pair.sgtm_auth.id public_key = tls_private_key.key.public_key_openssh
vpc_security_group_ids = [aws_security_group.sgtm_sg.id]
subnet_id = aws_subnet.sptm_public_subnet.id provisioner "local-exec" {
user_data = file ("userdata.tpl") command = <<EOF
echo "${tls_private_key.key.private_key_pem}" > key.pem
root_block_device { chmod 0600 key.pem
volume_size = 10 EOF
} }
}
tags = {
name = "dev-node" resource "aws_instance" "dev_node" {
} instance_type = "t2.micro"
ami = data.aws_ami.server_ami.id
key_name = aws_key_pair.sgtm_auth.id
vpc_security_group_ids = [aws_security_group.sgtm_sg.id]
subnet_id = aws_subnet.sptm_public_subnet.id
user_data = file ("userdata.tpl")
root_block_device {
volume_size = 10
}
tags = {
name = "dev-node"
}
} }