rsp2k
/
Pauls-AWS-Dev-Pod
forked from pastryer/Pauls-AWS-Dev-Pod
1
0
Fork 0
Code Pull Requests Activity

Compare commits

base: rsp2k:main
Branches Tags
rsp2k:main
pastryer:main
..
compare: pastryer:main
Branches Tags
pastryer:main
rsp2k:main

No commits in common. "main" and "main" have entirely different histories.
main ... main

3 changed files with 100 additions and 181 deletions
Show Stats Expand all files Collapse all files

191
main.tf
View File

@ -1,103 +1,90 @@
resource "aws_vpc" "sgtm_vpc" {
cidr_block = "10.123.0.0/16"
resource "aws_vpc" "sgtm_vpc" { enable_dns_hostnames = true
cidr_block = var.vpc_cidr enable_dns_support = true
enable_dns_hostnames = true
enable_dns_support = true tags = {
name = "dev"
tags = { }
name = "dev" }
}
} resource "aws_subnet" "sptm_public_subnet" {
vpc_id = aws_vpc.sgtm_vpc.id
resource "aws_subnet" "sptm_public_subnet" { cidr_block = "10.123.1.0/24"
vpc_id = aws_vpc.sgtm_vpc.id map_public_ip_on_launch = true
cidr_block = var.public_cidr availability_zone = "us-east-1a"
map_public_ip_on_launch = true
availability_zone = "us-east-1a" tags = {
name = "dev-public"
tags = { }
name = "dev-public" }
}
} resource "aws_internet_gateway" "sgtm_internet_gateway" {
vpc_id = aws_vpc.sgtm_vpc.id
resource "aws_internet_gateway" "sgtm_internet_gateway" {
vpc_id = aws_vpc.sgtm_vpc.id tags = {
name = "dev-igw"
tags = { }
name = "dev-igw" }
}
} resource "aws_route_table" "sgtm_public_rt" {
vpc_id = aws_vpc.sgtm_vpc.id
resource "aws_route_table" "sgtm_public_rt" {
vpc_id = aws_vpc.sgtm_vpc.id tags = {
name = "dev_public_rt"
tags = { }
name = "dev_public_rt" }
}
} resource "aws_route" "default_route" {
route_table_id = aws_route_table.sgtm_public_rt.id
resource "aws_route" "default_route" { destination_cidr_block = "0.0.0.0/0"
route_table_id = aws_route_table.sgtm_public_rt.id gateway_id = aws_internet_gateway.sgtm_internet_gateway.id
destination_cidr_block = "0.0.0.0/0" }
gateway_id = aws_internet_gateway.sgtm_internet_gateway.id
} resource "aws_route_table_association" "sgtm_public_assoc" {
subnet_id = aws_subnet.sptm_public_subnet.id
resource "aws_route_table_association" "sgtm_public_assoc" { route_table_id = aws_route_table.sgtm_public_rt.id
subnet_id = aws_subnet.sptm_public_subnet.id }
route_table_id = aws_route_table.sgtm_public_rt.id
} resource "aws_security_group" "sgtm_sg" {
name = "dev-sg"
resource "aws_security_group" "sgtm_sg" { description = "dev security group"
name = "dev-sg" vpc_id = aws_vpc.sgtm_vpc.id
description = "dev security group"
vpc_id = aws_vpc.sgtm_vpc.id ingress {
from_port = 0
ingress { to_port = 0
from_port = 0 protocol = "-1"
to_port = 0 cidr_blocks = ["172.59.221.135/32"]
protocol = "-1" }
cidr_blocks = [var.allowed_ingress_cidr]
} egress {
from_port = 0
egress { to_port = 0
from_port = 0 protocol = "-1"
to_port = 0 cidr_blocks = ["0.0.0.0/0"]
protocol = "-1" }
cidr_blocks = ["0.0.0.0/0"] }
}
} resource "aws_key_pair" "sgtm_auth" {
key_name = "sgtmkey"
resource "tls_private_key" "key" { public_key = file("~/.ssh/sgtmkey.pub")
algorithm = var.tls_key_algorithm }
}
resource "aws_instance" "dev_node" {
resource "aws_key_pair" "sgtm_auth" { instance_type = "t2.micro"
key_name = "${var.name_prefix}-key-${var.name_suffix}" ami = data.aws_ami.server_ami.id
public_key = tls_private_key.key.public_key_openssh key_name = aws_key_pair.sgtm_auth.id
vpc_security_group_ids = [aws_security_group.sgtm_sg.id]
provisioner "local-exec" { subnet_id = aws_subnet.sptm_public_subnet.id
command = <<EOF user_data = file ("userdata.tpl")
echo "${tls_private_key.key.private_key_pem}" > key.pem
chmod 0600 key.pem root_block_device {
EOF volume_size = 10
} }
}
tags = {
resource "aws_instance" "dev_node" { name = "dev-node"
instance_type = var.instance_type }
ami = data.aws_ami.server_ami.id
key_name = aws_key_pair.sgtm_auth.id
vpc_security_group_ids = [aws_security_group.sgtm_sg.id]
subnet_id = aws_subnet.sptm_public_subnet.id
user_data = file ("userdata.tpl")
root_block_device {
volume_size = var.volume_size
}
tags = {
name = "dev-node"
}
} }

23
providers.tf
View File

@ -1,13 +1,12 @@
terraform { terraform {
required_providers { required_providers {
aws = { aws = {
source = "hashicorp/aws" source = "hashicorp/aws"
} }
} }
} }
# Configure the AWS Provider provider "aws" {
provider "aws" { region = "us-east-1"
region = var.aws_region shared_credentials_files = ["~/.aws/credentials"]
access_key = var.aws_access_key profile = "vscode"
secret_key = var.aws_secret_key
} }

67
variables.tf
View File

@ -1,67 +0,0 @@
# AWS variables
variable "aws_region" {
default = "us-east-2"
description = "The AWS Region"
}
variable "name_prefix" {
description = "The prefix for all your resources"
default = "testing"
type = string
}
variable "name_suffix" {
description = "The suffix for all your resources"
type = string
}
variable "aws_access_key" {
description = "AWS Access Key"
type = string
}
variable "aws_secret_key" {
description = "AWS Secret Key"
type = string
}
variable "tls_key_algorithm" {
default = "RSA"
type = string
}
variable "vpc_cidr" {
description = "VPC CIDR"
default = "10.123.0.0/16"
}
variable "public_cidr" {
description = "Public CIDR"
default = "10.123.1.0/24"
}
variable "ingress_cidr" {
description = "CIDR that is allowed ingress access"
default = "172.59.221.135/32"
}
variable "instance_type" {
description = "Instance Type"
default = "t2.micro"
validation {
condition = (
var.instance_type == "t2.micro" ||
var.instance_type == "t3.medium" ||
var.instance_type == "m5.large" ||
var.instance_type == "c5.large" ||
var.instance_type == "c5a.large" ||
var.instance_type == "m5.2xlarge" ||
var.instance_type == "c5.2xlarge" ||
var.instance_type == "m5.4xlarge" ||
var.instance_type == "c5.4xlarge"
)
error_message = "Instance_type must be set to a valid vm instance type."
}
}
variable "volume_size" {
description = "Instance volume size in Gigabytes"
default = 10
type = number
}