forked from rancher/quickstart
-
Notifications
You must be signed in to change notification settings - Fork 0
/
infra.tf
141 lines (114 loc) · 3.82 KB
/
infra.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
# AWS infrastructure resources
resource "tls_private_key" "global_key" {
algorithm = "RSA"
rsa_bits = 2048
}
resource "local_file" "ssh_private_key_pem" {
filename = "${path.module}/id_rsa"
sensitive_content = tls_private_key.global_key.private_key_pem
file_permission = "0600"
}
resource "local_file" "ssh_public_key_openssh" {
filename = "${path.module}/id_rsa.pub"
content = tls_private_key.global_key.public_key_openssh
}
# Temporary key pair used for SSH accesss
resource "aws_key_pair" "quickstart_key_pair" {
key_name_prefix = "${var.prefix}-rancher-"
public_key = tls_private_key.global_key.public_key_openssh
}
# Security group to allow all traffic
resource "aws_security_group" "rancher_sg_allowall" {
name = "${var.prefix}-rancher-allowall"
description = "Rancher quickstart - allow all traffic"
ingress {
from_port = "0"
to_port = "0"
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
egress {
from_port = "0"
to_port = "0"
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
tags = {
Creator = "rancher-quickstart"
}
}
# AWS EC2 instance for creating a single node RKE cluster and installing the Rancher server
resource "aws_instance" "rancher_server" {
ami = data.aws_ami.sles.id
instance_type = var.instance_type
key_name = aws_key_pair.quickstart_key_pair.key_name
security_groups = [aws_security_group.rancher_sg_allowall.name]
root_block_device {
volume_size = 16
}
provisioner "remote-exec" {
inline = [
"echo 'Waiting for cloud-init to complete...'",
"cloud-init status --wait > /dev/null",
"echo 'Completed cloud-init!'",
]
connection {
type = "ssh"
host = self.public_ip
user = local.node_username
private_key = tls_private_key.global_key.private_key_pem
}
}
tags = {
Name = "${var.prefix}-rancher-server"
Creator = "rancher-quickstart"
}
}
# Rancher resources
module "rancher_common" {
source = "../rancher-common"
node_public_ip = aws_instance.rancher_server.public_ip
node_internal_ip = aws_instance.rancher_server.private_ip
node_username = local.node_username
ssh_private_key_pem = tls_private_key.global_key.private_key_pem
rancher_kubernetes_version = var.rancher_kubernetes_version
cert_manager_version = var.cert_manager_version
rancher_version = var.rancher_version
rancher_server_dns = join(".", ["rancher", aws_instance.rancher_server.public_ip, "sslip.io"])
admin_password = var.rancher_server_admin_password
workload_kubernetes_version = var.workload_kubernetes_version
workload_cluster_name = "quickstart-aws-custom"
windows_prefered_cluster = var.add_windows_node
}
# AWS EC2 instance for creating a single node workload cluster
resource "aws_instance" "quickstart_node" {
ami = data.aws_ami.sles.id
instance_type = var.instance_type
key_name = aws_key_pair.quickstart_key_pair.key_name
security_groups = [aws_security_group.rancher_sg_allowall.name]
user_data = templatefile(
join("/", [path.module, "files/userdata_quickstart_node.template"]),
{
docker_version = var.docker_version
username = local.node_username
register_command = module.rancher_common.custom_cluster_command
}
)
provisioner "remote-exec" {
inline = [
"echo 'Waiting for cloud-init to complete...'",
"cloud-init status --wait > /dev/null",
"echo 'Completed cloud-init!'",
]
connection {
type = "ssh"
host = self.public_ip
user = local.node_username
private_key = tls_private_key.global_key.private_key_pem
}
}
tags = {
Name = "${var.prefix}-quickstart-node"
Creator = "rancher-quickstart"
}
}