aws_jumpbox.tf

# Terraform definition for the lab jumpbox
#

data "template_file" "jumpbox_userdata" {
  template = "${file("${path.module}/userdata/jumpbox.userdata")}"

  vars {
    hostname       = "${var.id}-jump"
    base_ip        = "${var.base_ip}"
    server_count   = "${var.student_count}"

    vpc_id   = "${aws_vpc.lab_vpc.id}"
    region   = "${var.aws_region}"
    az       = "${lookup(var.aws_az, var.aws_region)}"
    mgmt_net = "${aws_subnet.mgmtnet.tags.Name}"
    pkey     = "${var.pkey}"
  }
}

resource "aws_instance" "jump" {
  ami                         = "${lookup(var.ami_centos, var.aws_region)}"
  availability_zone           = "${lookup(var.aws_az, var.aws_region)}"
  instance_type               = "${var.flavour_centos}"
  key_name                    = "${var.key}"
  vpc_security_group_ids      = ["${element(aws_security_group.jumpsg.*.id, count.index)}"]
  subnet_id                   = "${aws_subnet.pubnet.id}"
  associate_public_ip_address = true
  iam_instance_profile        = "${aws_iam_instance_profile.lab_profile.name}"
  source_dest_check           = false
  user_data                   = "${data.template_file.jumpbox_userdata.rendered}"
  depends_on                  = ["aws_internet_gateway.igw"]

  tags {
    Name  = "${var.id}-jumpbox"
    Owner = "${var.owner}"
    Lab_Group = "jumpbox"
    Lab_Name = "jumpbox.lab"
    Lab_vpc_id = "${aws_vpc.lab_vpc.id}"
    Lab_avi_default_password = "${var.avi_default_password}"
    Lab_avi_admin_password = "${var.avi_admin_password}"
    Lab_avi_backup_admin_username = "${var.avi_backup_admin_username}"
    Lab_avi_backup_admin_password = "${var.avi_backup_admin_password}"
    Lab_avi_management_network = "${var.id}_management_network"
    Lab_avi_vip_network = "${var.id}_VIP_network"
  }

  root_block_device {
    volume_type           = "standard"
    volume_size           = "${var.vol_size_centos}"
    delete_on_termination = "true"
  }

  connection {
    type     = "ssh"
    agent = false
    private_key = "${file("${path.module}/keys/internal-root")}"
  }

  provisioner "file" {
    source = "provisioning/bootstrap"
    destination = "/opt/bootstrap"
  }

  provisioner "file" {
    source = "provisioning/handle_bootstrap.py"
    destination = "/usr/local/bin/handle_bootstrap.py"
  }

  provisioner "file" {
    source = "provisioning/handle_bootstrap.service"
    destination = "/etc/systemd/system/handle_bootstrap.service"
  }

  provisioner "file" {
    source = "provisioning/handle_register.py"
    destination = "/usr/local/bin/handle_register.py"
  }

  provisioner "file" {
    source = "provisioning/handle_register.service"
    destination = "/etc/systemd/system/handle_register.service"
  }

  provisioner "file" {
    source = "provisioning/create_backup_user.yml"
    destination = "/root/create_backup_user.yml"
  }

  provisioner "file" {
    source = "provisioning/ansible_inventory.py"
    destination = "/etc/ansible/hosts"
  }

  provisioner "file" {
    source = "provisioning/cleanup_controllers.py"
    destination = "/usr/local/bin/cleanup_controllers.py"
  }

  provisioner "remote-exec" {
    scripts = [
      "provisioning/provision_jumpbox.sh"
    ]
  }
}