resilien
/
terraform
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fmt all the config files 

Signed-off-by: Valentin Pichard <valentin.pichard@corp.ovh.com>
This commit is contained in:
Valentin Pichard 2016-09-22 11:49:09 +00:00
parent 196955c93c
commit c6beaa7ce8
43 changed files with 582 additions and 533 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

64
examples/aws-asg/main.tf
View File

@ -8,77 +8,79 @@ resource "aws_elb" "web-elb" {
# The same availability zone as our instances
availability_zones = ["${split(",", var.availability_zones)}"]
listener {
instance_port = 80
instance_port = 80
instance_protocol = "http"
lb_port = 80
lb_protocol = "http"
lb_port = 80
lb_protocol = "http"
}
health_check {
healthy_threshold = 2
healthy_threshold = 2
unhealthy_threshold = 2
timeout = 3
target = "HTTP:80/"
interval = 30
timeout = 3
target = "HTTP:80/"
interval = 30
}
}
resource "aws_autoscaling_group" "web-asg" {
availability_zones = ["${split(",", var.availability_zones)}"]
name = "terraform-example-asg"
max_size = "${var.asg_max}"
min_size = "${var.asg_min}"
desired_capacity = "${var.asg_desired}"
force_delete = true
availability_zones = ["${split(",", var.availability_zones)}"]
name = "terraform-example-asg"
max_size = "${var.asg_max}"
min_size = "${var.asg_min}"
desired_capacity = "${var.asg_desired}"
force_delete = true
launch_configuration = "${aws_launch_configuration.web-lc.name}"
load_balancers = ["${aws_elb.web-elb.name}"]
load_balancers = ["${aws_elb.web-elb.name}"]
#vpc_zone_identifier = ["${split(",", var.availability_zones)}"]
tag {
key = "Name"
value = "web-asg"
key = "Name"
value = "web-asg"
propagate_at_launch = "true"
}
}
resource "aws_launch_configuration" "web-lc" {
name = "terraform-example-lc"
image_id = "${lookup(var.aws_amis, var.aws_region)}"
name = "terraform-example-lc"
image_id = "${lookup(var.aws_amis, var.aws_region)}"
instance_type = "${var.instance_type}"
# Security group
security_groups = ["${aws_security_group.default.id}"]
user_data = "${file("userdata.sh")}"
key_name = "${var.key_name}"
user_data = "${file("userdata.sh")}"
key_name = "${var.key_name}"
}
# Our default security group to access
# the instances over SSH and HTTP
resource "aws_security_group" "default" {
name = "terraform_example_sg"
name = "terraform_example_sg"
description = "Used in the terraform"
# SSH access from anywhere
ingress {
from_port = 22
to_port = 22
protocol = "tcp"
from_port = 22
to_port = 22
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
# HTTP access from anywhere
ingress {
from_port = 80
to_port = 80
protocol = "tcp"
from_port = 80
to_port = 80
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
# outbound internet access
egress {
from_port = 0
to_port = 0
protocol = "-1"
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
}

3
examples/aws-asg/outputs.tf
View File

@ -1,12 +1,15 @@
output "security_group" {
value = "${aws_security_group.default.id}"
}
output "launch_configuration" {
value = "${aws_launch_configuration.web-lc.id}"
}
output "asg_name" {
value = "${aws_autoscaling_group.web-asg.id}"
}
output "elb_name" {
value = "${aws_elb.web-elb.dns_name}"
}

13
examples/aws-asg/variables.tf
View File

@ -1,6 +1,6 @@
variable "aws_region" {
description = "The AWS region to create things in."
default = "us-east-1"
default = "us-east-1"
}
# ubuntu-trusty-14.04 (x64)
@ -12,7 +12,7 @@ variable "aws_amis" {
}
variable "availability_zones" {
default = "us-east-1b,us-east-1c,us-east-1d,us-east-1e"
default = "us-east-1b,us-east-1c,us-east-1d,us-east-1e"
description = "List of availability zones, use AWS CLI to find your "
}
@ -21,22 +21,21 @@ variable "key_name" {
}
variable "instance_type" {
default = "t2.micro"
default = "t2.micro"
description = "AWS instance type"
}
variable "asg_min" {
description = "Min numbers of servers in ASG"
default = "1"
default = "1"
}
variable "asg_max" {
description = "Max numbers of servers in ASG"
default = "2"
default = "2"
}
variable "asg_desired" {
description = "Desired numbers of servers in ASG"
default = "1"
default = "1"
}

16
examples/aws-cloudwatch-events/kinesis/main.tf
View File

@ -4,6 +4,7 @@ provider "aws" {
resource "aws_cloudwatch_event_rule" "foo" {
name = "${var.rule_name}"
event_pattern = <<PATTERN
{
"detail-type": [
@ -16,12 +17,14 @@ resource "aws_cloudwatch_event_rule" "foo" {
}
}
PATTERN
role_arn = "${aws_iam_role.role.arn}"
}
resource "aws_iam_role" "role" {
name = "${var.iam_role_name}"
assume_role_policy = <<POLICY
name = "${var.iam_role_name}"
assume_role_policy = <<POLICY
{
"Version": "2012-10-17",
"Statement": [
@ -41,6 +44,7 @@ POLICY
resource "aws_iam_role_policy" "policy" {
name = "tf-example-policy"
role = "${aws_iam_role.role.id}"
policy = <<POLICY
{
"Version": "2012-10-17",
@ -61,12 +65,12 @@ POLICY
}
resource "aws_cloudwatch_event_target" "foobar" {
rule = "${aws_cloudwatch_event_rule.foo.name}"
target_id = "${var.target_name}"
arn = "${aws_kinesis_stream.foo.arn}"
rule = "${aws_cloudwatch_event_rule.foo.name}"
target_id = "${var.target_name}"
arn = "${aws_kinesis_stream.foo.arn}"
}
resource "aws_kinesis_stream" "foo" {
name = "${var.stream_name}"
name = "${var.stream_name}"
shard_count = 1
}

10
examples/aws-cloudwatch-events/kinesis/variables.tf
View File

@ -1,24 +1,24 @@
variable "aws_region" {
description = "The AWS region to create resources in."
default = "us-east-1"
default = "us-east-1"
}
variable "rule_name" {
description = "The name of the CloudWatch Event Rule"
default = "tf-example-cloudwatch-event-rule-for-kinesis"
default = "tf-example-cloudwatch-event-rule-for-kinesis"
}
variable "iam_role_name" {
description = "The name of the IAM Role"
default = "tf-example-iam-role-for-kinesis"
default = "tf-example-iam-role-for-kinesis"
}
variable "target_name" {
description = "The name of the CloudWatch Event Target"
default = "tf-example-cloudwatch-event-target-for-kinesis"
default = "tf-example-cloudwatch-event-target-for-kinesis"
}
variable "stream_name" {
description = "The name of the Kinesis Stream to send events to"
default = "tf-example-kinesis-stream"
default = "tf-example-kinesis-stream"
}

5
examples/aws-cloudwatch-events/sns/main.tf
View File

@ -4,6 +4,7 @@ provider "aws" {
resource "aws_cloudwatch_event_rule" "foo" {
name = "${var.rule_name}"
event_pattern = <<PATTERN
{
"detail-type": [
@ -19,9 +20,9 @@ PATTERN
}
resource "aws_cloudwatch_event_target" "bar" {
rule = "${aws_cloudwatch_event_rule.foo.name}"
rule = "${aws_cloudwatch_event_rule.foo.name}"
target_id = "${var.target_name}"
arn = "${aws_sns_topic.foo.arn}"
arn = "${aws_sns_topic.foo.arn}"
}
resource "aws_sns_topic" "foo" {

8
examples/aws-cloudwatch-events/sns/variables.tf
View File

@ -1,19 +1,19 @@
variable "aws_region" {
description = "The AWS region to create resources in."
default = "us-east-1"
default = "us-east-1"
}
variable "rule_name" {
description = "The name of the CloudWatch Event Rule"
default = "tf-example-cloudwatch-event-rule-for-sns"
default = "tf-example-cloudwatch-event-rule-for-sns"
}
variable "target_name" {
description = "The name of the CloudWatch Event Target"
default = "tf-example-cloudwatch-event-target-for-sns"
default = "tf-example-cloudwatch-event-target-for-sns"
}
variable "sns_topic_name" {
description = "The name of the SNS Topic to send events to"
default = "tf-example-sns-topic"
default = "tf-example-sns-topic"
}

9
examples/aws-count/main.tf
View File

@ -10,20 +10,19 @@ resource "aws_elb" "web" {
availability_zones = ["${aws_instance.web.*.availability_zone}"]
listener {
instance_port = 80
instance_port = 80
instance_protocol = "http"
lb_port = 80
lb_protocol = "http"
lb_port = 80
lb_protocol = "http"
}
# The instances are registered automatically
instances = ["${aws_instance.web.*.id}"]
}
resource "aws_instance" "web" {
instance_type = "m1.small"
ami = "${lookup(var.aws_amis, var.aws_region)}"
ami = "${lookup(var.aws_amis, var.aws_region)}"
# This will create 4 instances
count = 4

2
examples/aws-count/variables.tf
View File

@ -1,6 +1,6 @@
variable "aws_region" {
description = "The AWS region to create things in."
default = "us-west-2"
default = "us-west-2"
}
# Ubuntu Precise 12.04 LTS (x64)

148
examples/aws-ecs-alb/main.tf
View File

@ -14,10 +14,10 @@ resource "aws_vpc" "main" {
}
resource "aws_subnet" "main" {
count = "${var.az_count}"
cidr_block = "${cidrsubnet(aws_vpc.main.cidr_block, 8, count.index)}"
count = "${var.az_count}"
cidr_block = "${cidrsubnet(aws_vpc.main.cidr_block, 8, count.index)}"
availability_zone = "${data.aws_availability_zones.available.names[count.index]}"
vpc_id = "${aws_vpc.main.id}"
vpc_id = "${aws_vpc.main.id}"
}
resource "aws_internet_gateway" "gw" {
@ -26,67 +26,75 @@ resource "aws_internet_gateway" "gw" {
resource "aws_route_table" "r" {
vpc_id = "${aws_vpc.main.id}"
route {
cidr_block = "0.0.0.0/0"
gateway_id = "${aws_internet_gateway.gw.id}"
cidr_block = "0.0.0.0/0"
gateway_id = "${aws_internet_gateway.gw.id}"
}
}
resource "aws_route_table_association" "a" {
count = "${var.az_count}"
subnet_id = "${element(aws_subnet.main.*.id, count.index)}"
count = "${var.az_count}"
subnet_id = "${element(aws_subnet.main.*.id, count.index)}"
route_table_id = "${aws_route_table.r.id}"
}
### Compute
resource "aws_autoscaling_group" "app" {
name = "tf-test-asg"
vpc_zone_identifier = ["${aws_subnet.main.*.id}"]
min_size = "${var.asg_min}"
max_size = "${var.asg_max}"
desired_capacity = "${var.asg_desired}"
name = "tf-test-asg"
vpc_zone_identifier = ["${aws_subnet.main.*.id}"]
min_size = "${var.asg_min}"
max_size = "${var.asg_max}"
desired_capacity = "${var.asg_desired}"
launch_configuration = "${aws_launch_configuration.app.name}"
}
data "template_file" "cloud_config" {
template = "${file("${path.module}/cloud-config.yml")}"
vars {
aws_region = "${var.aws_region}"
ecs_cluster_name = "${aws_ecs_cluster.main.name}"
ecs_log_level = "info"
ecs_agent_version = "latest"
aws_region = "${var.aws_region}"
ecs_cluster_name = "${aws_ecs_cluster.main.name}"
ecs_log_level = "info"
ecs_agent_version = "latest"
ecs_log_group_name = "${aws_cloudwatch_log_group.ecs.name}"
}
}
data "aws_ami" "stable_coreos" {
most_recent = true
filter {
name = "description"
name = "description"
values = ["CoreOS stable *"]
}
filter {
name = "architecture"
name = "architecture"
values = ["x86_64"]
}
filter {
name = "virtualization-type"
name = "virtualization-type"
values = ["hvm"]
}
owners = ["595879546273"] # CoreOS
}
resource "aws_launch_configuration" "app" {
security_groups = [
"${aws_security_group.instance_sg.id}"
"${aws_security_group.instance_sg.id}",
]
key_name = "${var.key_name}"
image_id = "${data.aws_ami.stable_coreos.id}"
instance_type = "${var.instance_type}"
iam_instance_profile = "${aws_iam_instance_profile.app.name}"
user_data = "${data.template_file.cloud_config.rendered}"
key_name = "${var.key_name}"
image_id = "${data.aws_ami.stable_coreos.id}"
instance_type = "${var.instance_type}"
iam_instance_profile = "${aws_iam_instance_profile.app.name}"
user_data = "${data.template_file.cloud_config.rendered}"
associate_public_ip_address = true
lifecycle {
create_before_destroy = true
}
@ -98,55 +106,59 @@ resource "aws_security_group" "lb_sg" {
description = "controls access to the application ELB"
vpc_id = "${aws_vpc.main.id}"
name = "tf-ecs-lbsg"
name = "tf-ecs-lbsg"
ingress {
protocol = "tcp"
from_port = 80
to_port = 80
protocol = "tcp"
from_port = 80
to_port = 80
cidr_blocks = ["0.0.0.0/0"]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
to_port = 0
protocol = "-1"
cidr_blocks = [
"0.0.0.0/0"
"0.0.0.0/0",
]
}
}
resource "aws_security_group" "instance_sg" {
description = "controls direct access to application instances"
vpc_id = "${aws_vpc.main.id}"
name = "tf-ecs-instsg"
vpc_id = "${aws_vpc.main.id}"
name = "tf-ecs-instsg"
ingress {
protocol = "tcp"
protocol = "tcp"
from_port = 22
to_port = 22
to_port = 22
cidr_blocks = [
"${var.admin_cidr_ingress}"
"${var.admin_cidr_ingress}",
]
}
ingress {
protocol = "tcp"
protocol = "tcp"
from_port = 8080
to_port = 8080
to_port = 8080
security_groups = [
"${aws_security_group.lb_sg.id}"
"${aws_security_group.lb_sg.id}",
]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
}
## ECS
resource "aws_ecs_cluster" "main" {
@ -155,43 +167,44 @@ resource "aws_ecs_cluster" "main" {
data "template_file" "task_definition" {
template = "${file("${path.module}/task-definition.json")}"
vars {
image_url = "ghost:latest"
container_name = "ghost"
image_url = "ghost:latest"
container_name = "ghost"
log_group_region = "${var.aws_region}"
log_group_name = "${aws_cloudwatch_log_group.app.name}"
log_group_name = "${aws_cloudwatch_log_group.app.name}"
}
}
resource "aws_ecs_task_definition" "ghost" {
family = "tf_example_ghost_td"
family = "tf_example_ghost_td"
container_definitions = "${data.template_file.task_definition.rendered}"
}
resource "aws_ecs_service" "test" {
name = "tf-example-ecs-ghost"
cluster = "${aws_ecs_cluster.main.id}"
name = "tf-example-ecs-ghost"
cluster = "${aws_ecs_cluster.main.id}"
task_definition = "${aws_ecs_task_definition.ghost.arn}"
desired_count = 1
iam_role = "${aws_iam_role.ecs_service.name}"
desired_count = 1
iam_role = "${aws_iam_role.ecs_service.name}"
load_balancer {
target_group_arn = "${aws_alb_target_group.test.id}"
container_name = "ghost"
container_port = "2368"
container_name = "ghost"
container_port = "2368"
}
depends_on = [
"aws_iam_role_policy.ecs_service",
"aws_alb_listener.front_end"
"aws_alb_listener.front_end",
]
}
## IAM
resource "aws_iam_role" "ecs_service" {
name = "tf_example_ecs_role"
assume_role_policy = <<EOF
{
"Version": "2008-10-17",
@ -212,6 +225,7 @@ EOF
resource "aws_iam_role_policy" "ecs_service" {
name = "tf_example_ecs_policy"
role = "${aws_iam_role.ecs_service.name}"
policy = <<EOF
{
"Version": "2012-10-17",
@ -234,12 +248,13 @@ EOF
}
resource "aws_iam_instance_profile" "app" {
name = "tf-ecs-instprofile"
name = "tf-ecs-instprofile"
roles = ["${aws_iam_role.app_instance.name}"]
}
resource "aws_iam_role" "app_instance" {
name = "tf-ecs-example-instance-role"
assume_role_policy = <<EOF
{
"Version": "2012-10-17",
@ -259,6 +274,7 @@ EOF
data "template_file" "instance_profile" {
template = "${file("${path.module}/instance-profile-policy.json")}"
vars {
app_log_group_arn = "${aws_cloudwatch_log_group.app.arn}"
ecs_log_group_arn = "${aws_cloudwatch_log_group.ecs.arn}"
@ -266,18 +282,18 @@ data "template_file" "instance_profile" {
}
resource "aws_iam_role_policy" "instance" {
name = "TfEcsExampleInstanceRole"
role = "${aws_iam_role.app_instance.name}"
policy = "${data.template_file.instance_profile.rendered}"
name = "TfEcsExampleInstanceRole"
role = "${aws_iam_role.app_instance.name}"
policy = "${data.template_file.instance_profile.rendered}"
}
## ALB
resource "aws_alb_target_group" "test" {
name = "tf-example-ecs-ghost"
port = 80
name = "tf-example-ecs-ghost"
port = 80
protocol = "HTTP"
vpc_id = "${aws_vpc.main.id}"
vpc_id = "${aws_vpc.main.id}"
}
resource "aws_alb" "main" {
@ -288,12 +304,12 @@ resource "aws_alb" "main" {
resource "aws_alb_listener" "front_end" {
load_balancer_arn = "${aws_alb.main.id}"
port = "80"
protocol = "HTTP"
port = "80"
protocol = "HTTP"
default_action {
target_group_arn = "${aws_alb_target_group.test.id}"
type = "forward"
type = "forward"
}
}

12
examples/aws-ecs-alb/variables.tf
View File

@ -1,11 +1,11 @@
variable "aws_region" {
description = "The AWS region to create things in."
default = "us-west-2"
default = "us-west-2"
}
variable "az_count" {
description = "Number of AZs to cover in a given AWS region"
default = "2"
default = "2"
}
variable "key_name" {
@ -13,23 +13,23 @@ variable "key_name" {
}
variable "instance_type" {
default = "t2.small"
default = "t2.small"
description = "AWS instance type"
}
variable "asg_min" {
description = "Min numbers of servers in ASG"
default = "1"
default = "1"
}
variable "asg_max" {
description = "Max numbers of servers in ASG"
default = "2"
default = "2"
}
variable "asg_desired" {
description = "Desired numbers of servers in ASG"
default = "1"
default = "1"
}
variable "admin_cidr_ingress" {

24
examples/aws-eip/main.tf
View File

@ -5,41 +5,40 @@ provider "aws" {
resource "aws_eip" "default" {
instance = "${aws_instance.web.id}"
vpc = true
vpc = true
}
# Our default security group to access
# the instances over SSH and HTTP
resource "aws_security_group" "default" {
name = "eip_example"
name = "eip_example"
description = "Used in the terraform"
# SSH access from anywhere
ingress {
from_port = 22
to_port = 22
protocol = "tcp"
from_port = 22
to_port = 22
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
# HTTP access from anywhere
ingress {
from_port = 80
to_port = 80
protocol = "tcp"
from_port = 80
to_port = 80
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
# outbound internet access
egress {
from_port = 0
to_port = 0
protocol = "-1"
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
}
resource "aws_instance" "web" {
instance_type = "t2.micro"
@ -61,6 +60,7 @@ resource "aws_instance" "web" {
# In this case, we just install nginx and start it. By default,
# this should be on port 80
user_data = "${file("userdata.sh")}"
#Instance tags
tags {
Name = "eip-example"

1
examples/aws-eip/outputs.tf
View File

@ -1,6 +1,7 @@
output "address" {
value = "${aws_instance.web.private_ip}"
}
output "elastic ip" {
value = "${aws_eip.default.public_ip}"
}

3
examples/aws-eip/variables.tf
View File

@ -1,6 +1,6 @@
variable "aws_region" {
description = "The AWS region to create things in."
default = "us-east-1"
default = "us-east-1"
}
# ubuntu-trusty-14.04 (x64)
@ -14,4 +14,3 @@ variable "aws_amis" {
variable "key_name" {
description = "Name of the SSH keypair to use in AWS."
}

72
examples/aws-elb/main.tf
View File

@ -6,30 +6,30 @@ provider "aws" {
# Our default security group to access
# the instances over SSH and HTTP
resource "aws_security_group" "default" {
name = "instance_sg"
name = "instance_sg"
description = "Used in the terraform"
# SSH access from anywhere
ingress {
from_port = 22
to_port = 22
protocol = "tcp"
from_port = 22
to_port = 22
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
# HTTP access from anywhere
ingress {
from_port = 80
to_port = 80
protocol = "tcp"
from_port = 80
to_port = 80
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
# outbound internet access
egress {
from_port = 0
to_port = 0
protocol = "-1"
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
}
@ -37,22 +37,22 @@ resource "aws_security_group" "default" {
# Our elb security group to access
# the ELB over HTTP
resource "aws_security_group" "elb" {
name = "elb_sg"
name = "elb_sg"
description = "Used in the terraform"
# HTTP access from anywhere
ingress {
from_port = 80
to_port = 80
protocol = "tcp"
from_port = 80
to_port = 80
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
# outbound internet access
egress {
from_port = 0
to_port = 0
protocol = "-1"
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}
}
@ -62,41 +62,40 @@ resource "aws_elb" "web" {
# The same availability zone as our instance
availability_zones = ["${aws_instance.web.availability_zone}"]
security_groups = ["${aws_security_group.elb.id}"]
security_groups = ["${aws_security_group.elb.id}"]
listener {
instance_port = 80
instance_port = 80
instance_protocol = "http"
lb_port = 80
lb_protocol = "http"
lb_port = 80
lb_protocol = "http"
}
health_check {
healthy_threshold = 2
healthy_threshold = 2
unhealthy_threshold = 2
timeout = 3
target = "HTTP:80/"
interval = 30
}
timeout = 3
target = "HTTP:80/"
interval = 30
}
# The instance is registered automatically
instances = ["${aws_instance.web.id}"]
cross_zone_load_balancing = true
idle_timeout = 400
connection_draining = true
cross_zone_load_balancing = true
idle_timeout = 400
connection_draining = true
connection_draining_timeout = 400
}
resource "aws_lb_cookie_stickiness_policy" "default" {
name = "lbpolicy"
load_balancer = "${aws_elb.web.id}"
lb_port = 80
cookie_expiration_period = 600
name = "lbpolicy"
load_balancer = "${aws_elb.web.id}"
lb_port = 80
cookie_expiration_period = 600
}
resource "aws_instance" "web" {
instance_type = "t2.micro"
# Lookup the correct AMI based on the region
@ -114,8 +113,9 @@ resource "aws_instance" "web" {
security_groups = ["${aws_security_group.default.name}"]
user_data = "${file("userdata.sh")}"
#Instance tags
tags {
Name = "elb-example"
}
}
}

3
examples/aws-elb/variables.tf
View File

@ -4,7 +4,7 @@ variable "key_name" {
variable "aws_region" {
description = "AWS region to launch servers."
default = "us-east-1"
default = "us-east-1"
}
# ubuntu-trusty-14.04 (x64)
@ -14,4 +14,3 @@ variable "aws_amis" {
"us-west-2" = "ami-7f675e4f"
}
}

24
examples/aws-rds/main.tf
View File

@ -1,19 +1,19 @@
resource "aws_db_instance" "default" {
depends_on = ["aws_security_group.default"]
identifier = "${var.identifier}"
allocated_storage = "${var.storage}"
engine = "${var.engine}"
engine_version = "${lookup(var.engine_version, var.engine)}"
instance_class = "${var.instance_class}"
name = "${var.db_name}"
username = "${var.username}"
password = "${var.password}"
depends_on = ["aws_security_group.default"]
identifier = "${var.identifier}"
allocated_storage = "${var.storage}"
engine = "${var.engine}"
engine_version = "${lookup(var.engine_version, var.engine)}"
instance_class = "${var.instance_class}"
name = "${var.db_name}"
username = "${var.username}"
password = "${var.password}"
vpc_security_group_ids = ["${aws_security_group.default.id}"]
db_subnet_group_name = "${aws_db_subnet_group.default.id}"
db_subnet_group_name = "${aws_db_subnet_group.default.id}"
}
resource "aws_db_subnet_group" "default" {
name = "main_subnet_group"
name = "main_subnet_group"
description = "Our main group of subnets"
subnet_ids = ["${aws_subnet.subnet_1.id}", "${aws_subnet.subnet_2.id}"]
subnet_ids = ["${aws_subnet.subnet_1.id}", "${aws_subnet.subnet_2.id}"]
}

3
examples/aws-rds/outputs.tf
View File

@ -1,10 +1,11 @@
output "subnet_group" {
value = "${aws_db_subnet_group.default.name}"
}
output "db_instance_id" {
value = "${aws_db_instance.default.id}"
}
output "db_instance_address" {
value = "${aws_db_instance.default.address}"
}

5
examples/aws-rds/sg-variables.tf
View File

@ -1,10 +1,9 @@
variable "cidr_blocks" {
default = "0.0.0.0/0"
default = "0.0.0.0/0"
description = "CIDR for sg"
}
variable "sg_name" {
default = "rds_sg"
default = "rds_sg"
description = "Tag Name for sg"
}

16
examples/aws-rds/sg.tf
View File

@ -1,19 +1,19 @@
resource "aws_security_group" "default" {
name = "main_rds_sg"
name = "main_rds_sg"
description = "Allow all inbound traffic"
vpc_id = "${var.vpc_id}"
vpc_id = "${var.vpc_id}"
ingress {
from_port = 0
to_port = 65535
protocol = "TCP"
from_port = 0
to_port = 65535
protocol = "TCP"
cidr_blocks = ["${var.cidr_blocks}"]
}
egress {
from_port = 0
to_port = 0
protocol = "-1"
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}

9
examples/aws-rds/subnet-variables.tf
View File

@ -1,24 +1,23 @@
variable "subnet_1_cidr" {
default = "10.0.1.0/24"
default = "10.0.1.0/24"
description = "Your AZ"
}
variable "subnet_2_cidr" {
default = "10.0.2.0/24"
default = "10.0.2.0/24"
description = "Your AZ"
}
variable "az_1" {
default = "us-east-1b"
default = "us-east-1b"
description = "Your Az1, use AWS CLI to find your account specific"
}
variable "az_2" {
default = "us-east-1c"
default = "us-east-1c"
description = "Your Az2, use AWS CLI to find your account specific"
}
variable "vpc_id" {
description = "Your VPC ID"
}

8
examples/aws-rds/subnets.tf
View File

@ -1,6 +1,6 @@
resource "aws_subnet" "subnet_1" {
vpc_id = "${var.vpc_id}"
cidr_block = "${var.subnet_1_cidr}"
vpc_id = "${var.vpc_id}"
cidr_block = "${var.subnet_1_cidr}"
availability_zone = "${var.az_1}"
tags {
@ -9,8 +9,8 @@ resource "aws_subnet" "subnet_1" {
}
resource "aws_subnet" "subnet_2" {
vpc_id = "${var.vpc_id}"
cidr_block = "${var.subnet_2_cidr}"
vpc_id = "${var.vpc_id}"
cidr_block = "${var.subnet_2_cidr}"
availability_zone = "${var.az_2}"
tags {

15
examples/aws-rds/variables.tf
View File

@ -1,38 +1,39 @@
variable "identifier" {
default = "mydb-rds"
default = "mydb-rds"
description = "Identifier for your DB"
}
variable "storage" {
default = "10"
default = "10"
description = "Storage size in GB"
}
variable "engine" {
default = "postgres"
default = "postgres"
description = "Engine type, example values mysql, postgres"
}
variable "engine_version" {
description = "Engine version"
default = {
mysql = "5.6.22"
mysql = "5.6.22"
postgres = "9.4.1"
}
}
variable "instance_class" {
default = "db.t2.micro"
default = "db.t2.micro"
description = "Instance class"
}
variable "db_name" {
default = "mydb"
default = "mydb"
description = "db name"
}
variable "username" {
default = "myuser"
default = "myuser"
description = "User name"
}

11
examples/aws-s3-cross-account-access/main.tf
View File

@ -1,7 +1,7 @@
provider "aws" {
alias = "prod"
region = "us-east-1"
region = "us-east-1"
access_key = "${var.prod_access_key}"
secret_key = "${var.prod_secret_key}"
}
@ -10,7 +10,8 @@ resource "aws_s3_bucket" "prod" {
provider = "aws.prod"
bucket = "${var.bucket_name}"
acl = "private"
acl = "private"
policy = <<POLICY
{
"Version": "2012-10-17",
@ -33,14 +34,14 @@ resource "aws_s3_bucket_object" "prod" {
provider = "aws.prod"
bucket = "${aws_s3_bucket.prod.id}"
key = "object-uploaded-via-prod-creds"
key = "object-uploaded-via-prod-creds"
source = "${path.module}/prod.txt"
}
provider "aws" {
alias = "test"
region = "us-east-1"
region = "us-east-1"
access_key = "${var.test_access_key}"
secret_key = "${var.test_secret_key}"
}
@ -49,6 +50,6 @@ resource "aws_s3_bucket_object" "test" {
provider = "aws.test"
bucket = "${aws_s3_bucket.prod.id}"
key = "object-uploaded-via-test-creds"
key = "object-uploaded-via-test-creds"
source = "${path.module}/test.txt"
}

3
examples/aws-s3-cross-account-access/variables.tf
View File

@ -1,8 +1,11 @@
variable "prod_access_key" {}
variable "prod_secret_key" {}
variable "test_account_id" {}
variable "test_access_key" {}
variable "test_secret_key" {}
variable "bucket_name" {}

4
examples/aws-two-tier/main.tf
View File

@ -82,7 +82,6 @@ resource "aws_security_group" "default" {
}
}
resource "aws_elb" "web" {
name = "terraform-example-elb"
@ -96,7 +95,6 @@ resource "aws_elb" "web" {
lb_port = 80
lb_protocol = "http"
}
}
resource "aws_key_pair" "auth" {
@ -138,7 +136,7 @@ resource "aws_instance" "web" {
inline = [
"sudo apt-get -y update",
"sudo apt-get -y install nginx",
"sudo service nginx start"
"sudo service nginx start",
]
}
}

2
examples/aws-two-tier/variables.tf
View File

@ -14,7 +14,7 @@ variable "key_name" {
variable "aws_region" {
description = "AWS region to launch servers."
default = "us-west-2"
default = "us-west-2"
}
# Ubuntu Precise 12.04 LTS (x64)

98
examples/clc/main.tf
View File

@ -3,94 +3,94 @@
provider "clc" {
username = "${var.clc_username}"
password = "${var.clc_password}"
account = "${var.clc_account}"
account = "${var.clc_account}"
}
# --------------------
# Provision/Resolve a server group
resource "clc_group" "frontends" {
location_id = "CA1"
name = "frontends"
parent = "Default Group"
name = "frontends"
parent = "Default Group"
}
# --------------------
# Provision a server
resource "clc_server" "node" {
name_template = "trusty"
name_template = "trusty"
source_server_id = "UBUNTU-14-64-TEMPLATE"
group_id = "${clc_group.frontends.id}"
cpu = 2
memory_mb = 2048
password = "Green123$"
additional_disks
{
path = "/var"
size_gb = 100
type = "partitioned"
}
additional_disks
{
size_gb = 10
type = "raw"
}
group_id = "${clc_group.frontends.id}"
cpu = 2
memory_mb = 2048
password = "Green123$"
additional_disks {
path = "/var"
size_gb = 100
type = "partitioned"
}
additional_disks {
size_gb = 10
type = "raw"
}
}
# --------------------
# Provision a public ip
resource "clc_public_ip" "backdoor" {
server_id = "${clc_server.node.0.id}"
server_id = "${clc_server.node.0.id}"
internal_ip_address = "${clc_server.node.0.private_ip_address}"
ports
{
protocol = "ICMP"
port = -1
}
ports
{
protocol = "TCP"
port = 22
}
source_restrictions
{ cidr = "173.60.0.0/16" }
ports {
protocol = "ICMP"
port = -1
}
ports {
protocol = "TCP"
port = 22
}
source_restrictions {
cidr = "173.60.0.0/16"
}
# ssh in and start a simple http server on :8080
provisioner "remote-exec" {
inline = [
"cd /tmp; python -mSimpleHTTPServer > /dev/null 2>&1 &"
"cd /tmp; python -mSimpleHTTPServer > /dev/null 2>&1 &",
]
connection {
host = "${clc_public_ip.backdoor.id}"
user = "root"
host = "${clc_public_ip.backdoor.id}"
user = "root"
password = "${clc_server.node.password}"
}
}
}
# --------------------
# Provision a load balancer
resource "clc_load_balancer" "frontdoor" {
data_center = "${clc_group.frontends.location_id}"
name = "frontdoor"
name = "frontdoor"
description = "frontdoor"
status = "enabled"
status = "enabled"
}
# --------------------
# Provision a load balancer pool
resource "clc_load_balancer_pool" "pool" {
data_center = "${clc_group.frontends.location_id}"
data_center = "${clc_group.frontends.location_id}"
load_balancer = "${clc_load_balancer.frontdoor.id}"
method = "roundRobin"
persistence = "standard"
port = 80
nodes
{
status = "enabled"
ipAddress = "${clc_server.node.private_ip_address}"
privatePort = 8000
}
method = "roundRobin"
persistence = "standard"
port = 80
nodes {
status = "enabled"
ipAddress = "${clc_server.node.private_ip_address}"
privatePort = 8000
}
}

2
examples/clc/outputs.tf
View File

@ -24,4 +24,4 @@ output "frontdoor" {
output "pool" {
value = "curl -vv ${clc_load_balancer.frontdoor.ip_address}"
}
}

3
examples/clc/variables.tf
View File

@ -1,6 +1,7 @@
variable "clc_username" {
default = "<username>"
}
variable "clc_password" {
default = "<password>"
}
@ -16,4 +17,4 @@ variable "image" {
variable "app_port" {
default = 8080
}
}

21
examples/consul/main.tf
View File

@ -1,6 +1,6 @@
# Setup the Consul provisioner to use the demo cluster
provider "consul" {
address = "demo.consul.io:80"
address = "demo.consul.io:80"
datacenter = "nyc1"
}
@ -12,8 +12,8 @@ provider "aws" {
# Setup a key in Consul to provide inputs
resource "consul_keys" "input" {
key {
name = "size"
path = "tf_test/size"
name = "size"
path = "tf_test/size"
default = "m1.small"
}
}
@ -21,7 +21,7 @@ resource "consul_keys" "input" {
# Setup a new AWS instance using a dynamic ami and
# instance type
resource "aws_instance" "test" {
ami = "${lookup(var.aws_amis, var.aws_region)}"
ami = "${lookup(var.aws_amis, var.aws_region)}"
instance_type = "${consul_keys.input.var.size}"
}
@ -29,15 +29,16 @@ resource "aws_instance" "test" {
# the DNS name of the instance
resource "consul_keys" "test" {
key {
name = "id"
path = "tf_test/id"
value = "${aws_instance.test.id}"
name = "id"
path = "tf_test/id"
value = "${aws_instance.test.id}"
delete = true
}
key {
name = "address"
path = "tf_test/public_dns"
value = "${aws_instance.test.public_dns}"
name = "address"
path = "tf_test/public_dns"
value = "${aws_instance.test.public_dns}"
delete = true
}
}

10
examples/consul/variables.tf
View File

@ -1,14 +1,14 @@
variable "aws_region" {
description = "The AWS region to create resources in."
default = "us-east-1"
default = "us-east-1"
}
# AMI's from http://cloud-images.ubuntu.com/locator/ec2/
variable "aws_amis" {
default = {
eu-west-1 = "ami-b1cf19c6"
us-east-1 = "ami-de7ab6b6"
us-west-1 = "ami-3f75767a"
us-west-2 = "ami-21f78e11"
eu-west-1 = "ami-b1cf19c6"
us-east-1 = "ami-de7ab6b6"
us-west-1 = "ami-3f75767a"
us-west-2 = "ami-21f78e11"
}
}

4
examples/cross-provider/main.tf
View File

@ -14,13 +14,13 @@ resource "dnsimple_record" "web" {
value = "${heroku_app.web.heroku_hostname}"
type = "CNAME"
ttl = 3600
ttl = 3600
}
# The Heroku domain, which will be created and added
# to the heroku application after we have assigned the domain
# in DNSimple
resource "heroku_domain" "foobar" {
app = "${heroku_app.web.name}"
app = "${heroku_app.web.name}"
hostname = "${dnsimple_record.web.hostname}"
}

63
examples/digitalocean/main.tf
View File

@ -1,43 +1,44 @@
provider "digitalocean" {
# You need to set this in your .bashrc
# export DIGITALOCEAN_TOKEN="Your API TOKEN"
#
# You need to set this in your .bashrc
# export DIGITALOCEAN_TOKEN="Your API TOKEN"
#
}
resource "digitalocean_droplet" "mywebserver" {
# Obtain your ssh_key id number via your account. See Document https://developers.digitalocean.com/documentation/v2/#list-all-keys
ssh_keys=[12345678] # Key example
image = "${var.ubuntu}"
region = "${var.do_ams3}"
size = "512mb"
private_networking = true
backups = true
ipv6 = true
name = "mywebserver-ams3"
# Obtain your ssh_key id number via your account. See Document https://developers.digitalocean.com/documentation/v2/#list-all-keys
ssh_keys = [12345678] # Key example
image = "${var.ubuntu}"
region = "${var.do_ams3}"
size = "512mb"
private_networking = true
backups = true
ipv6 = true
name = "mywebserver-ams3"
provisioner "remote-exec" {
inline = [
"export PATH=$PATH:/usr/bin",
"sudo apt-get update",
"sudo apt-get -y install nginx"
]
connection {
type = "ssh"
key_file = "file(${HOME}/.ssh/id_rsa)"
user = "root"
timeout = "2m"
}
}
provisioner "remote-exec" {
inline = [
"export PATH=$PATH:/usr/bin",
"sudo apt-get update",
"sudo apt-get -y install nginx",
]
connection {
type = "ssh"
key_file = "file(${HOME}/.ssh/id_rsa)"
user = "root"
timeout = "2m"
}
}
}
resource "digitalocean_domain" "mywebserver" {
name = "www.mywebserver.com"
ip_address = "${digitalocean_droplet.mywebserver.ipv4_address}"
name = "www.mywebserver.com"
ip_address = "${digitalocean_droplet.mywebserver.ipv4_address}"
}
resource "digitalocean_record" "mywebserver" {
domain = "${digitalocean_domain.mywebserver.name}"
type = "A"
name = "mywebserver"
value = "${digitalocean_droplet.mywebserver.ipv4_address}"
domain = "${digitalocean_domain.mywebserver.name}"
type = "A"
name = "mywebserver"
value = "${digitalocean_droplet.mywebserver.ipv4_address}"
}

4
examples/digitalocean/outputs.tf
View File

@ -1,7 +1,7 @@
output "Public ip" {
value = "${digitalocean_droplet.mywebserver.ipv4_address}"
value = "${digitalocean_droplet.mywebserver.ipv4_address}"
}
output "Name" {
value = "${digitalocean_droplet.mywebserver.name}"
value = "${digitalocean_droplet.mywebserver.name}"
}

55
examples/digitalocean/variable.tf
View File

@ -1,71 +1,74 @@
# ####
# Current Availiable Datacenter Regions
# As of 05-07-2016
#
variable "do_ams2" {
description = "Digital Ocean Amsterdam Data Center 2"
default = "ams2"
description = "Digital Ocean Amsterdam Data Center 2"
default = "ams2"
}
variable "do_ams3" {
description = "Digital Ocean Amsterdam Data Center 3"
default = "ams3"
description = "Digital Ocean Amsterdam Data Center 3"
default = "ams3"
}
variable "do_fra1" {
description = "Digital Ocean Frankfurt Data Center 1"
default = "fra1"
description = "Digital Ocean Frankfurt Data Center 1"
default = "fra1"
}
variable "do_lon1" {
description = "Digital Ocean London Data Center 1"
default = "lon1"
description = "Digital Ocean London Data Center 1"
default = "lon1"
}
variable "do_nyc1" {
description = "Digital Ocean New York Data Center 1"
default = "nyc1"
description = "Digital Ocean New York Data Center 1"
default = "nyc1"
}
variable "do_nyc2" {
description = "Digital Ocean New York Data Center 2"
default = "nyc2"
description = "Digital Ocean New York Data Center 2"
default = "nyc2"
}
variable "do_nyc3" {
description = "Digital Ocean New York Data Center 3"
default = "nyc3"
description = "Digital Ocean New York Data Center 3"
default = "nyc3"
}
variable "do_sfo1" {
description = "Digital Ocean San Francisco Data Center 1"
default = "sfo1"
description = "Digital Ocean San Francisco Data Center 1"
default = "sfo1"
}
variable "do_sgp1" {
description = "Digital Ocean Singapore Data Center 1"
default = "sgp1"
description = "Digital Ocean Singapore Data Center 1"
default = "sgp1"
}
variable "do_tor1" {
description = "Digital Ocean Toronto Datacenter 1"
default = "tor1"
description = "Digital Ocean Toronto Datacenter 1"
default = "tor1"
}
# Default Os
variable "ubuntu" {
description = "Default LTS"
default = "ubuntu-14-04-x64"
description = "Default LTS"
default = "ubuntu-14-04-x64"
}
variable "centos" {
description = "Default Centos"
default = "centos-72-x64"
description = "Default Centos"
default = "centos-72-x64"
}
variable "coreos" {
description = "Defaut Coreos"
default = "coreos-899.17.0"
description = "Defaut Coreos"
default = "coreos-899.17.0"
}

6
examples/gce-vpn/variables.tf
View File

@ -1,11 +1,11 @@
variable "project" {
description = "Your project name"
description = "Your project name"
}
variable "region1" {
description = "The desired region for the first network & VPN and project"
description = "The desired region for the first network & VPN and project"
}
variable "region2" {
description = "The desired region for the second network & VPN"
description = "The desired region for the second network & VPN"
}

212
examples/gce-vpn/vpn.tf
View File

@ -1,172 +1,182 @@
# An example of how to connect two GCE networks with a VPN
provider "google" {
account_file = "${file("~/gce/account.json")}"
project = "${var.project}"
region = "${var.region1}"
account_file = "${file("~/gce/account.json")}"
project = "${var.project}"
region = "${var.region1}"
}
# Create the two networks we want to join. They must have seperate, internal
# ranges.
resource "google_compute_network" "network1" {
name = "network1"
ipv4_range = "10.120.0.0/16"
name = "network1"
ipv4_range = "10.120.0.0/16"
}
resource "google_compute_network" "network2" {
name = "network2"
ipv4_range = "10.121.0.0/16"
name = "network2"
ipv4_range = "10.121.0.0/16"
}
# Attach a VPN gateway to each network.
resource "google_compute_vpn_gateway" "target_gateway1" {
name = "vpn1"
network = "${google_compute_network.network1.self_link}"
region = "${var.region1}"
name = "vpn1"
network = "${google_compute_network.network1.self_link}"
region = "${var.region1}"
}
resource "google_compute_vpn_gateway" "target_gateway2" {
name = "vpn2"
network = "${google_compute_network.network2.self_link}"
region = "${var.region2}"
name = "vpn2"
network = "${google_compute_network.network2.self_link}"
region = "${var.region2}"
}
# Create an outward facing static IP for each VPN that will be used by the
# other VPN to connect.
resource "google_compute_address" "vpn_static_ip1" {
name = "vpn-static-ip1"
region = "${var.region1}"
name = "vpn-static-ip1"
region = "${var.region1}"
}
resource "google_compute_address" "vpn_static_ip2" {
name = "vpn-static-ip2"
region = "${var.region2}"
name = "vpn-static-ip2"
region = "${var.region2}"
}
# Forward IPSec traffic coming into our static IP to our VPN gateway.
resource "google_compute_forwarding_rule" "fr1_esp" {
name = "fr1-esp"
region = "${var.region1}"
ip_protocol = "ESP"
ip_address = "${google_compute_address.vpn_static_ip1.address}"
target = "${google_compute_vpn_gateway.target_gateway1.self_link}"
name = "fr1-esp"
region = "${var.region1}"
ip_protocol = "ESP"
ip_address = "${google_compute_address.vpn_static_ip1.address}"
target = "${google_compute_vpn_gateway.target_gateway1.self_link}"
}
resource "google_compute_forwarding_rule" "fr2_esp" {
name = "fr2-esp"
region = "${var.region2}"
ip_protocol = "ESP"
ip_address = "${google_compute_address.vpn_static_ip2.address}"
target = "${google_compute_vpn_gateway.target_gateway2.self_link}"
name = "fr2-esp"
region = "${var.region2}"
ip_protocol = "ESP"
ip_address = "${google_compute_address.vpn_static_ip2.address}"
target = "${google_compute_vpn_gateway.target_gateway2.self_link}"
}
# The following two sets of forwarding rules are used as a part of the IPSec
# protocol
resource "google_compute_forwarding_rule" "fr1_udp500" {
name = "fr1-udp500"
region = "${var.region1}"
ip_protocol = "UDP"
port_range = "500"
ip_address = "${google_compute_address.vpn_static_ip1.address}"
target = "${google_compute_vpn_gateway.target_gateway1.self_link}"
name = "fr1-udp500"
region = "${var.region1}"
ip_protocol = "UDP"
port_range = "500"
ip_address = "${google_compute_address.vpn_static_ip1.address}"
target = "${google_compute_vpn_gateway.target_gateway1.self_link}"
}
resource "google_compute_forwarding_rule" "fr2_udp500" {
name = "fr2-udp500"
region = "${var.region2}"
ip_protocol = "UDP"
port_range = "500"
ip_address = "${google_compute_address.vpn_static_ip2.address}"
target = "${google_compute_vpn_gateway.target_gateway2.self_link}"
name = "fr2-udp500"
region = "${var.region2}"
ip_protocol = "UDP"
port_range = "500"
ip_address = "${google_compute_address.vpn_static_ip2.address}"
target = "${google_compute_vpn_gateway.target_gateway2.self_link}"
}
resource "google_compute_forwarding_rule" "fr1_udp4500" {
name = "fr1-udp4500"
region = "${var.region1}"
ip_protocol = "UDP"
port_range = "4500"
ip_address = "${google_compute_address.vpn_static_ip1.address}"
target = "${google_compute_vpn_gateway.target_gateway1.self_link}"
name = "fr1-udp4500"
region = "${var.region1}"
ip_protocol = "UDP"
port_range = "4500"
ip_address = "${google_compute_address.vpn_static_ip1.address}"
target = "${google_compute_vpn_gateway.target_gateway1.self_link}"
}
resource "google_compute_forwarding_rule" "fr2_udp4500" {
name = "fr2-udp4500"
region = "${var.region2}"
ip_protocol = "UDP"
port_range = "4500"
ip_address = "${google_compute_address.vpn_static_ip2.address}"
target = "${google_compute_vpn_gateway.target_gateway2.self_link}"
name = "fr2-udp4500"
region = "${var.region2}"
ip_protocol = "UDP"
port_range = "4500"
ip_address = "${google_compute_address.vpn_static_ip2.address}"
target = "${google_compute_vpn_gateway.target_gateway2.self_link}"
}
# Each tunnel is responsible for encrypting and decrypting traffic exiting
# and leaving its associated gateway
resource "google_compute_vpn_tunnel" "tunnel1" {
name = "tunnel1"
region = "${var.region1}"
peer_ip = "${google_compute_address.vpn_static_ip2.address}"
shared_secret = "a secret message"
target_vpn_gateway = "${google_compute_vpn_gateway.target_gateway1.self_link}"
depends_on = ["google_compute_forwarding_rule.fr1_udp500",
"google_compute_forwarding_rule.fr1_udp4500",
"google_compute_forwarding_rule.fr1_esp"]
name = "tunnel1"
region = "${var.region1}"
peer_ip = "${google_compute_address.vpn_static_ip2.address}"
shared_secret = "a secret message"
target_vpn_gateway = "${google_compute_vpn_gateway.target_gateway1.self_link}"
depends_on = ["google_compute_forwarding_rule.fr1_udp500",
"google_compute_forwarding_rule.fr1_udp4500",
"google_compute_forwarding_rule.fr1_esp",
]
}
resource "google_compute_vpn_tunnel" "tunnel2" {
name = "tunnel2"
region = "${var.region2}"
peer_ip = "${google_compute_address.vpn_static_ip1.address}"
shared_secret = "a secret message"
target_vpn_gateway = "${google_compute_vpn_gateway.target_gateway2.self_link}"
depends_on = ["google_compute_forwarding_rule.fr2_udp500",
"google_compute_forwarding_rule.fr2_udp4500",
"google_compute_forwarding_rule.fr2_esp"]
name = "tunnel2"
region = "${var.region2}"
peer_ip = "${google_compute_address.vpn_static_ip1.address}"
shared_secret = "a secret message"
target_vpn_gateway = "${google_compute_vpn_gateway.target_gateway2.self_link}"
depends_on = ["google_compute_forwarding_rule.fr2_udp500",
"google_compute_forwarding_rule.fr2_udp4500",
"google_compute_forwarding_rule.fr2_esp",
]
}
# Each route tells the associated network to send all traffic in the dest_range
# through the VPN tunnel
resource "google_compute_route" "route1" {
name = "route1"
network = "${google_compute_network.network1.name}"
next_hop_vpn_tunnel = "${google_compute_vpn_tunnel.tunnel1.self_link}"
dest_range = "${google_compute_network.network2.ipv4_range}"
priority = 1000
name = "route1"
network = "${google_compute_network.network1.name}"
next_hop_vpn_tunnel = "${google_compute_vpn_tunnel.tunnel1.self_link}"
dest_range = "${google_compute_network.network2.ipv4_range}"
priority = 1000
}
resource "google_compute_route" "route2" {
name = "route2"
network = "${google_compute_network.network2.name}"
next_hop_vpn_tunnel = "${google_compute_vpn_tunnel.tunnel2.self_link}"
dest_range = "${google_compute_network.network1.ipv4_range}"
priority = 1000
name = "route2"
network = "${google_compute_network.network2.name}"
next_hop_vpn_tunnel = "${google_compute_vpn_tunnel.tunnel2.self_link}"
dest_range = "${google_compute_network.network1.ipv4_range}"
priority = 1000
}
# We want to allow the two networks to communicate, so we need to unblock
# them in the firewall
resource "google_compute_firewall" "network1-allow-network1" {
name = "network1-allow-network1"
network = "${google_compute_network.network1.name}"
source_ranges = ["${google_compute_network.network1.ipv4_range}"]
allow {
protocol = "tcp"
}
allow {
protocol = "udp"
}
allow {
protocol = "icmp"
}
name = "network1-allow-network1"
network = "${google_compute_network.network1.name}"
source_ranges = ["${google_compute_network.network1.ipv4_range}"]
allow {
protocol = "tcp"
}
allow {
protocol = "udp"
}
allow {
protocol = "icmp"
}
}
resource "google_compute_firewall" "network1-allow-network2" {
name = "network1-allow-network2"
network = "${google_compute_network.network1.name}"
source_ranges = ["${google_compute_network.network2.ipv4_range}"]
allow {
protocol = "tcp"
}
allow {
protocol = "udp"
}
allow {
protocol = "icmp"
}
name = "network1-allow-network2"
network = "${google_compute_network.network1.name}"
source_ranges = ["${google_compute_network.network2.ipv4_range}"]
allow {
protocol = "tcp"
}
allow {
protocol = "udp"
}
allow {
protocol = "icmp"
}
}

53
examples/google-two-tier/main.tf
View File

@ -1,39 +1,39 @@
# See https://cloud.google.com/compute/docs/load-balancing/network/example
provider "google" {
region = "${var.region}"
project = "${var.project_name}"
region = "${var.region}"
project = "${var.project_name}"
credentials = "${file("${var.credentials_file_path}")}"
}
resource "google_compute_http_health_check" "default" {
name = "tf-www-basic-check"
request_path = "/"
check_interval_sec = 1
healthy_threshold = 1
name = "tf-www-basic-check"
request_path = "/"
check_interval_sec = 1
healthy_threshold = 1
unhealthy_threshold = 10
timeout_sec = 1
timeout_sec = 1
}
resource "google_compute_target_pool" "default" {
name = "tf-www-target-pool"
instances = ["${google_compute_instance.www.*.self_link}"]
name = "tf-www-target-pool"
instances = ["${google_compute_instance.www.*.self_link}"]
health_checks = ["${google_compute_http_health_check.default.name}"]
}
resource "google_compute_forwarding_rule" "default" {
name = "tf-www-forwarding-rule"
target = "${google_compute_target_pool.default.self_link}"
name = "tf-www-forwarding-rule"
target = "${google_compute_target_pool.default.self_link}"
port_range = "80"
}
resource "google_compute_instance" "www" {
count = 3
name = "tf-www-${count.index}"
name = "tf-www-${count.index}"
machine_type = "f1-micro"
zone = "${var.region_zone}"
tags = ["www-node"]
zone = "${var.region_zone}"
tags = ["www-node"]
disk {
image = "ubuntu-os-cloud/ubuntu-1404-trusty-v20160602"
@ -41,6 +41,7 @@ resource "google_compute_instance" "www" {
network_interface {
network = "default"
access_config {
# Ephemeral
}
@ -51,26 +52,28 @@ resource "google_compute_instance" "www" {
}
provisioner "file" {
source = "${var.install_script_src_path}"
source = "${var.install_script_src_path}"
destination = "${var.install_script_dest_path}"
connection {
type = "ssh"
user = "root"
type = "ssh"
user = "root"
private_key = "${file("${var.private_key_path}")}"
agent = false
agent = false
}
}
provisioner "remote-exec" {
connection {
type = "ssh"
user = "root"
type = "ssh"
user = "root"
private_key = "${file("${var.private_key_path}")}"
agent = false
agent = false
}
inline = [
"chmod +x ${var.install_script_dest_path}",
"sudo ${var.install_script_dest_path} ${count.index}"
"sudo ${var.install_script_dest_path} ${count.index}",
]
}
@ -80,14 +83,14 @@ resource "google_compute_instance" "www" {
}
resource "google_compute_firewall" "default" {
name = "tf-www-firewall"
name = "tf-www-firewall"
network = "default"
allow {
protocol = "tcp"
ports = ["80"]
ports = ["80"]
}
source_ranges = ["0.0.0.0/0"]
target_tags = ["www-node"]
target_tags = ["www-node"]
}

10
examples/google-two-tier/variables.tf
View File

@ -12,25 +12,25 @@ variable "project_name" {
variable "credentials_file_path" {
description = "Path to the JSON file used to describe your account credentials"
default = "~/.gcloud/Terraform.json"
default = "~/.gcloud/Terraform.json"
}
variable "public_key_path" {
description = "Path to file containing public key"
default = "~/.ssh/gcloud_id_rsa.pub"
default = "~/.ssh/gcloud_id_rsa.pub"
}
variable "private_key_path" {
description = "Path to file containing private key"
default = "~/.ssh/gcloud_id_rsa"
default = "~/.ssh/gcloud_id_rsa"
}
variable "install_script_src_path" {
description = "Path to install script within this repository"
default = "scripts/install.sh"
default = "scripts/install.sh"
}
variable "install_script_dest_path" {
description = "Path to put the install script on each destination resource"
default = "/tmp/install.sh"
default = "/tmp/install.sh"
}

66
examples/openstack-with-networking/main.tf
View File

@ -1,24 +1,24 @@
resource "openstack_compute_keypair_v2" "terraform" {
name = "terraform"
name = "terraform"
public_key = "${file("${var.ssh_key_file}.pub")}"
}
resource "openstack_networking_network_v2" "terraform" {
name = "terraform"
name = "terraform"
admin_state_up = "true"
}
resource "openstack_networking_subnet_v2" "terraform" {
name = "terraform"
network_id = "${openstack_networking_network_v2.terraform.id}"
cidr = "10.0.0.0/24"
ip_version = 4
dns_nameservers = ["8.8.8.8","8.8.4.4"]
name = "terraform"
network_id = "${openstack_networking_network_v2.terraform.id}"
cidr = "10.0.0.0/24"
ip_version = 4
dns_nameservers = ["8.8.8.8", "8.8.4.4"]
}
resource "openstack_networking_router_v2" "terraform" {
name = "terraform"
admin_state_up = "true"
name = "terraform"
admin_state_up = "true"
external_gateway = "${var.external_gateway}"
}
@ -28,52 +28,58 @@ resource "openstack_networking_router_interface_v2" "terraform" {
}
resource "openstack_compute_secgroup_v2" "terraform" {
name = "terraform"
name = "terraform"
description = "Security group for the Terraform example instances"
rule {
from_port = 22
to_port = 22
from_port = 22
to_port = 22
ip_protocol = "tcp"
cidr = "0.0.0.0/0"
cidr = "0.0.0.0/0"
}
rule {
from_port = 80
to_port = 80
from_port = 80
to_port = 80
ip_protocol = "tcp"
cidr = "0.0.0.0/0"
cidr = "0.0.0.0/0"
}
rule {
from_port = -1
to_port = -1
from_port = -1
to_port = -1
ip_protocol = "icmp"
cidr = "0.0.0.0/0"
cidr = "0.0.0.0/0"
}
}
resource "openstack_compute_floatingip_v2" "terraform" {
pool = "${var.pool}"
pool = "${var.pool}"
depends_on = ["openstack_networking_router_interface_v2.terraform"]
}
resource "openstack_compute_instance_v2" "terraform" {
name = "terraform"
image_name = "${var.image}"
flavor_name = "${var.flavor}"
key_pair = "${openstack_compute_keypair_v2.terraform.name}"
security_groups = [ "${openstack_compute_secgroup_v2.terraform.name}" ]
floating_ip = "${openstack_compute_floatingip_v2.terraform.address}"
name = "terraform"
image_name = "${var.image}"
flavor_name = "${var.flavor}"
key_pair = "${openstack_compute_keypair_v2.terraform.name}"
security_groups = ["${openstack_compute_secgroup_v2.terraform.name}"]
floating_ip = "${openstack_compute_floatingip_v2.terraform.address}"
network {
uuid = "${openstack_networking_network_v2.terraform.id}"
}
provisioner "remote-exec" {
connection {
user = "${var.ssh_user_name}"
user = "${var.ssh_user_name}"
key_file = "${var.ssh_key_file}"
}
inline = [
"sudo apt-get -y update",
"sudo apt-get -y install nginx",
"sudo service nginx start"
"sudo apt-get -y update",
"sudo apt-get -y install nginx",
"sudo service nginx start",
]
}
}

2
examples/openstack-with-networking/outputs.tf
View File

@ -1,3 +1,3 @@
output "address" {
value = "${openstack_compute_floatingip_v2.terraform.address}"
value = "${openstack_compute_floatingip_v2.terraform.address}"
}

13
examples/openstack-with-networking/variables.tf
View File

@ -1,22 +1,21 @@
variable "image" {
default = "Ubuntu 14.04"
default = "Ubuntu 14.04"
}
variable "flavor" {
default = "m1.small"
default = "m1.small"
}
variable "ssh_key_file" {
default = "~/.ssh/id_rsa.terraform"
default = "~/.ssh/id_rsa.terraform"
}
variable "ssh_user_name" {
default = "ubuntu"
default = "ubuntu"
}
variable "external_gateway" {
}
variable "external_gateway" {}
variable "pool" {
default = "public"
default = "public"
}