blob: c99d839bd2fe83ccdae685d242099f079027bc3e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
|
data "vault_aws_access_credentials" "creds" {
backend = "${var.vault-name}-path"
role = "${var.vault-name}-role"
}
locals {
ansible_python_executable = "/usr/bin/python3"
availability_zone = "eu-central-1a"
name = "csit-vpc"
environment = "csit-vpc-environment"
key_pair_key_name = "${var.resource_prefix}-${var.testbed_name}-pk"
placement_group_name = "${var.resource_prefix}-${var.testbed_name}-pg"
security_group_name = "${var.resource_prefix}-${var.testbed_name}-sg"
testbed_name = "testbed1"
topology_name = "1n-aws-c5n"
tg_name = "${var.resource_prefix}-${var.testbed_name}-tg"
sut1_name = "${var.resource_prefix}-${var.testbed_name}-sut1"
}
# Create VPC
module "vpc" {
source = "../terraform-aws-vpc"
security_group_name = local.security_group_name
subnet_availability_zone = local.availability_zone
tags_name = local.name
tags_environment = local.environment
}
# Create Subnet
module "subnet_b" {
source = "../terraform-aws-subnet"
subnet_cidr_block = "192.168.10.0/24"
subnet_ipv6_cidr_block = cidrsubnet(module.vpc.vpc_ipv6_cidr_block, 8, 2)
subnet_availability_zone = local.availability_zone
tags_name = local.name
tags_environment = local.environment
subnet_vpc_id = module.vpc.vpc_id
}
# Create Private Key
resource "tls_private_key" "private_key" {
algorithm = var.private_key_algorithm
ecdsa_curve = var.private_key_ecdsa_curve
rsa_bits = var.private_key_rsa_bits
}
# Create Key Pair
resource "aws_key_pair" "key_pair" {
depends_on = [
tls_private_key.private_key
]
key_name = local.key_pair_key_name
public_key = tls_private_key.private_key.public_key_openssh
}
# Create Placement Group
resource "aws_placement_group" "placement_group" {
name = local.placement_group_name
strategy = var.placement_group_strategy
}
# Create Instance
resource "aws_instance" "tg" {
depends_on = [
module.vpc,
aws_placement_group.placement_group
]
ami = var.tg_ami
availability_zone = local.availability_zone
associate_public_ip_address = var.tg_associate_public_ip_address
instance_initiated_shutdown_behavior = var.tg_instance_initiated_shutdown_behavior
instance_type = var.tg_instance_type
key_name = aws_key_pair.key_pair.key_name
placement_group = aws_placement_group.placement_group.id
private_ip = var.tg_private_ip
source_dest_check = var.tg_source_dest_check
subnet_id = module.vpc.vpc_subnet_id
vpc_security_group_ids = [module.vpc.vpc_security_group_id]
# host_id = "1"
root_block_device {
delete_on_termination = true
volume_size = 50
}
tags = {
"Name" = local.tg_name
"Environment" = local.environment
}
}
resource "aws_network_interface" "tg_if1" {
depends_on = [
module.subnet_b,
aws_instance.tg
]
private_ips = [var.tg_if1_private_ip]
security_groups = [module.vpc.vpc_security_group_id]
source_dest_check = var.tg_source_dest_check
subnet_id = module.subnet_b.subnet_id
attachment {
instance = aws_instance.tg.id
device_index = 1
}
tags = {
"Name" = local.tg_name
"Environment" = local.environment
}
}
resource "aws_network_interface" "tg_if2" {
depends_on = [
module.subnet_b,
aws_instance.tg
]
private_ips = [var.tg_if2_private_ip]
security_groups = [module.vpc.vpc_security_group_id]
source_dest_check = var.tg_source_dest_check
subnet_id = module.subnet_b.subnet_id
attachment {
instance = aws_instance.tg.id
device_index = 2
}
tags = {
"Name" = local.tg_name
"Environment" = local.environment
}
}
data "aws_network_interface" "tg_if1" {
id = aws_network_interface.tg_if1.id
}
data "aws_network_interface" "tg_if2" {
id = aws_network_interface.tg_if2.id
}
resource "aws_route" "route_tg_if1" {
depends_on = [
aws_instance.tg
]
destination_cidr_block = var.destination_cidr_block_tg_if1
network_interface_id = aws_instance.tg.primary_network_interface_id
route_table_id = module.vpc.vpc_main_route_table_id
}
resource "aws_route" "route_tg_if2" {
depends_on = [
aws_instance.tg
]
destination_cidr_block = var.destination_cidr_block_tg_if2
network_interface_id = aws_instance.tg.primary_network_interface_id
route_table_id = module.vpc.vpc_main_route_table_id
}
resource "null_resource" "deploy_tg" {
depends_on = [
aws_instance.tg,
aws_network_interface.tg_if1,
aws_network_interface.tg_if2
]
connection {
user = "ubuntu"
host = aws_instance.tg.public_ip
private_key = tls_private_key.private_key.private_key_pem
}
provisioner "remote-exec" {
inline = var.first_run_commands
}
}
resource "null_resource" "deploy_topology" {
depends_on = [
aws_instance.tg
]
provisioner "ansible" {
plays {
playbook {
file_path = var.ansible_topology_path
}
hosts = ["local"]
extra_vars = {
ansible_python_interpreter = local.ansible_python_executable
testbed_name = local.testbed_name
cloud_topology = local.topology_name
tg_if1_mac = data.aws_network_interface.tg_if1.mac_address
tg_if2_mac = data.aws_network_interface.tg_if2.mac_address
tg_public_ip = aws_instance.tg.public_ip
public_ip_list = "${aws_instance.tg.public_ip}"
}
}
}
}
|
