kops/tests/integration/update_cluster/existing_sg/kubernetes.tf

locals = {
  cluster_name                 = "existingsg.example.com"
  master_autoscaling_group_ids = ["${aws_autoscaling_group.master-us-test-1a-masters-existingsg-example-com.id}", "${aws_autoscaling_group.master-us-test-1b-masters-existingsg-example-com.id}", "${aws_autoscaling_group.master-us-test-1c-masters-existingsg-example-com.id}"]
  master_security_group_ids    = ["sg-1234dcba"]
  masters_role_arn             = "${aws_iam_role.masters-existingsg-example-com.arn}"
  masters_role_name            = "${aws_iam_role.masters-existingsg-example-com.name}"
  node_autoscaling_group_ids   = ["${aws_autoscaling_group.nodes-existingsg-example-com.id}"]
  node_security_group_ids      = ["sg-1234abcd"]
  node_subnet_ids              = ["${aws_subnet.us-test-1a-existingsg-example-com.id}"]
  nodes_role_arn               = "${aws_iam_role.nodes-existingsg-example-com.arn}"
  nodes_role_name              = "${aws_iam_role.nodes-existingsg-example-com.name}"
  region                       = "us-test-1"
  route_table_public_id        = "${aws_route_table.existingsg-example-com.id}"
  subnet_us-test-1a_id         = "${aws_subnet.us-test-1a-existingsg-example-com.id}"
  subnet_us-test-1b_id         = "${aws_subnet.us-test-1b-existingsg-example-com.id}"
  subnet_us-test-1c_id         = "${aws_subnet.us-test-1c-existingsg-example-com.id}"
  vpc_cidr_block               = "${aws_vpc.existingsg-example-com.cidr_block}"
  vpc_id                       = "${aws_vpc.existingsg-example-com.id}"
}

output "cluster_name" {
  value = "existingsg.example.com"
}

output "master_autoscaling_group_ids" {
  value = ["${aws_autoscaling_group.master-us-test-1a-masters-existingsg-example-com.id}", "${aws_autoscaling_group.master-us-test-1b-masters-existingsg-example-com.id}", "${aws_autoscaling_group.master-us-test-1c-masters-existingsg-example-com.id}"]
}

output "master_security_group_ids" {
  value = ["sg-1234dcba"]
}

output "masters_role_arn" {
  value = "${aws_iam_role.masters-existingsg-example-com.arn}"
}

output "masters_role_name" {
  value = "${aws_iam_role.masters-existingsg-example-com.name}"
}

output "node_autoscaling_group_ids" {
  value = ["${aws_autoscaling_group.nodes-existingsg-example-com.id}"]
}

output "node_security_group_ids" {
  value = ["sg-1234abcd"]
}

output "node_subnet_ids" {
  value = ["${aws_subnet.us-test-1a-existingsg-example-com.id}"]
}

output "nodes_role_arn" {
  value = "${aws_iam_role.nodes-existingsg-example-com.arn}"
}

output "nodes_role_name" {
  value = "${aws_iam_role.nodes-existingsg-example-com.name}"
}

output "region" {
  value = "us-test-1"
}

output "route_table_public_id" {
  value = "${aws_route_table.existingsg-example-com.id}"
}

output "subnet_us-test-1a_id" {
  value = "${aws_subnet.us-test-1a-existingsg-example-com.id}"
}

output "subnet_us-test-1b_id" {
  value = "${aws_subnet.us-test-1b-existingsg-example-com.id}"
}

output "subnet_us-test-1c_id" {
  value = "${aws_subnet.us-test-1c-existingsg-example-com.id}"
}

output "vpc_cidr_block" {
  value = "${aws_vpc.existingsg-example-com.cidr_block}"
}

output "vpc_id" {
  value = "${aws_vpc.existingsg-example-com.id}"
}

provider "aws" {
  region = "us-test-1"
}

resource "aws_autoscaling_attachment" "master-us-test-1a-masters-existingsg-example-com" {
  elb                    = "${aws_elb.api-existingsg-example-com.id}"
  autoscaling_group_name = "${aws_autoscaling_group.master-us-test-1a-masters-existingsg-example-com.id}"
}

resource "aws_autoscaling_attachment" "master-us-test-1b-masters-existingsg-example-com" {
  elb                    = "${aws_elb.api-existingsg-example-com.id}"
  autoscaling_group_name = "${aws_autoscaling_group.master-us-test-1b-masters-existingsg-example-com.id}"
}

resource "aws_autoscaling_attachment" "master-us-test-1c-masters-existingsg-example-com" {
  elb                    = "${aws_elb.api-existingsg-example-com.id}"
  autoscaling_group_name = "${aws_autoscaling_group.master-us-test-1c-masters-existingsg-example-com.id}"
}

resource "aws_autoscaling_group" "master-us-test-1a-masters-existingsg-example-com" {
  name                 = "master-us-test-1a.masters.existingsg.example.com"
  launch_configuration = "${aws_launch_configuration.master-us-test-1a-masters-existingsg-example-com.id}"
  max_size             = 1
  min_size             = 1
  vpc_zone_identifier  = ["${aws_subnet.us-test-1a-existingsg-example-com.id}"]

  tag = {
    key                 = "KubernetesCluster"
    value               = "existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "Name"
    value               = "master-us-test-1a.masters.existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "k8s.io/role/master"
    value               = "1"
    propagate_at_launch = true
  }

  metrics_granularity = "1Minute"
  enabled_metrics     = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"]
}

resource "aws_autoscaling_group" "master-us-test-1b-masters-existingsg-example-com" {
  name                 = "master-us-test-1b.masters.existingsg.example.com"
  launch_configuration = "${aws_launch_configuration.master-us-test-1b-masters-existingsg-example-com.id}"
  max_size             = 1
  min_size             = 1
  vpc_zone_identifier  = ["${aws_subnet.us-test-1b-existingsg-example-com.id}"]

  tag = {
    key                 = "KubernetesCluster"
    value               = "existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "Name"
    value               = "master-us-test-1b.masters.existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "k8s.io/role/master"
    value               = "1"
    propagate_at_launch = true
  }

  metrics_granularity = "1Minute"
  enabled_metrics     = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"]
}

resource "aws_autoscaling_group" "master-us-test-1c-masters-existingsg-example-com" {
  name                 = "master-us-test-1c.masters.existingsg.example.com"
  launch_configuration = "${aws_launch_configuration.master-us-test-1c-masters-existingsg-example-com.id}"
  max_size             = 1
  min_size             = 1
  vpc_zone_identifier  = ["${aws_subnet.us-test-1c-existingsg-example-com.id}"]

  tag = {
    key                 = "KubernetesCluster"
    value               = "existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "Name"
    value               = "master-us-test-1c.masters.existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "k8s.io/role/master"
    value               = "1"
    propagate_at_launch = true
  }

  metrics_granularity = "1Minute"
  enabled_metrics     = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"]
}

resource "aws_autoscaling_group" "nodes-existingsg-example-com" {
  name                 = "nodes.existingsg.example.com"
  launch_configuration = "${aws_launch_configuration.nodes-existingsg-example-com.id}"
  max_size             = 2
  min_size             = 2
  vpc_zone_identifier  = ["${aws_subnet.us-test-1a-existingsg-example-com.id}"]

  tag = {
    key                 = "KubernetesCluster"
    value               = "existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "Name"
    value               = "nodes.existingsg.example.com"
    propagate_at_launch = true
  }

  tag = {
    key                 = "k8s.io/role/node"
    value               = "1"
    propagate_at_launch = true
  }

  metrics_granularity = "1Minute"
  enabled_metrics     = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"]
}

resource "aws_ebs_volume" "a-etcd-events-existingsg-example-com" {
  availability_zone = "us-test-1a"
  size              = 20
  type              = "gp2"
  encrypted         = false

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "a.etcd-events.existingsg.example.com"
    "k8s.io/etcd/events"                           = "a/a,b,c"
    "k8s.io/role/master"                           = "1"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_ebs_volume" "a-etcd-main-existingsg-example-com" {
  availability_zone = "us-test-1a"
  size              = 20
  type              = "gp2"
  encrypted         = false

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "a.etcd-main.existingsg.example.com"
    "k8s.io/etcd/main"                             = "a/a,b,c"
    "k8s.io/role/master"                           = "1"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_ebs_volume" "b-etcd-events-existingsg-example-com" {
  availability_zone = "us-test-1b"
  size              = 20
  type              = "gp2"
  encrypted         = false

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "b.etcd-events.existingsg.example.com"
    "k8s.io/etcd/events"                           = "b/a,b,c"
    "k8s.io/role/master"                           = "1"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_ebs_volume" "b-etcd-main-existingsg-example-com" {
  availability_zone = "us-test-1b"
  size              = 20
  type              = "gp2"
  encrypted         = false

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "b.etcd-main.existingsg.example.com"
    "k8s.io/etcd/main"                             = "b/a,b,c"
    "k8s.io/role/master"                           = "1"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_ebs_volume" "c-etcd-events-existingsg-example-com" {
  availability_zone = "us-test-1c"
  size              = 20
  type              = "gp2"
  encrypted         = false

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "c.etcd-events.existingsg.example.com"
    "k8s.io/etcd/events"                           = "c/a,b,c"
    "k8s.io/role/master"                           = "1"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_ebs_volume" "c-etcd-main-existingsg-example-com" {
  availability_zone = "us-test-1c"
  size              = 20
  type              = "gp2"
  encrypted         = false

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "c.etcd-main.existingsg.example.com"
    "k8s.io/etcd/main"                             = "c/a,b,c"
    "k8s.io/role/master"                           = "1"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_elb" "api-existingsg-example-com" {
  name = "api-existingsg-example-co-ikb7m9"

  listener = {
    instance_port     = 443
    instance_protocol = "TCP"
    lb_port           = 443
    lb_protocol       = "TCP"
  }

  security_groups = ["sg-abcd1234"]
  subnets         = ["${aws_subnet.us-test-1a-existingsg-example-com.id}", "${aws_subnet.us-test-1b-existingsg-example-com.id}", "${aws_subnet.us-test-1c-existingsg-example-com.id}"]

  health_check = {
    target              = "SSL:443"
    healthy_threshold   = 2
    unhealthy_threshold = 2
    interval            = 10
    timeout             = 5
  }

  idle_timeout = 300

  tags = {
    KubernetesCluster = "existingsg.example.com"
    Name              = "api.existingsg.example.com"
  }
}

resource "aws_iam_instance_profile" "masters-existingsg-example-com" {
  name = "masters.existingsg.example.com"
  role = "${aws_iam_role.masters-existingsg-example-com.name}"
}

resource "aws_iam_instance_profile" "nodes-existingsg-example-com" {
  name = "nodes.existingsg.example.com"
  role = "${aws_iam_role.nodes-existingsg-example-com.name}"
}

resource "aws_iam_role" "masters-existingsg-example-com" {
  name               = "masters.existingsg.example.com"
  assume_role_policy = "${file("${path.module}/data/aws_iam_role_masters.existingsg.example.com_policy")}"
}

resource "aws_iam_role" "nodes-existingsg-example-com" {
  name               = "nodes.existingsg.example.com"
  assume_role_policy = "${file("${path.module}/data/aws_iam_role_nodes.existingsg.example.com_policy")}"
}

resource "aws_iam_role_policy" "masters-existingsg-example-com" {
  name   = "masters.existingsg.example.com"
  role   = "${aws_iam_role.masters-existingsg-example-com.name}"
  policy = "${file("${path.module}/data/aws_iam_role_policy_masters.existingsg.example.com_policy")}"
}

resource "aws_iam_role_policy" "nodes-existingsg-example-com" {
  name   = "nodes.existingsg.example.com"
  role   = "${aws_iam_role.nodes-existingsg-example-com.name}"
  policy = "${file("${path.module}/data/aws_iam_role_policy_nodes.existingsg.example.com_policy")}"
}

resource "aws_internet_gateway" "existingsg-example-com" {
  vpc_id = "${aws_vpc.existingsg-example-com.id}"

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "existingsg.example.com"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_key_pair" "kubernetes-existingsg-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157" {
  key_name   = "kubernetes.existingsg.example.com-c4:a6:ed:9a:a8:89:b9:e2:c3:9c:d6:63:eb:9c:71:57"
  public_key = "${file("${path.module}/data/aws_key_pair_kubernetes.existingsg.example.com-c4a6ed9aa889b9e2c39cd663eb9c7157_public_key")}"
}

resource "aws_launch_configuration" "master-us-test-1a-masters-existingsg-example-com" {
  name_prefix                 = "master-us-test-1a.masters.existingsg.example.com-"
  image_id                    = "ami-12345678"
  instance_type               = "m3.medium"
  key_name                    = "${aws_key_pair.kubernetes-existingsg-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id}"
  iam_instance_profile        = "${aws_iam_instance_profile.masters-existingsg-example-com.id}"
  security_groups             = ["sg-1234dcba"]
  associate_public_ip_address = true
  user_data                   = "${file("${path.module}/data/aws_launch_configuration_master-us-test-1a.masters.existingsg.example.com_user_data")}"

  root_block_device = {
    volume_type           = "gp2"
    volume_size           = 64
    delete_on_termination = true
  }

  ephemeral_block_device = {
    device_name  = "/dev/sdc"
    virtual_name = "ephemeral0"
  }

  lifecycle = {
    create_before_destroy = true
  }

  enable_monitoring = false
}

resource "aws_launch_configuration" "master-us-test-1b-masters-existingsg-example-com" {
  name_prefix                 = "master-us-test-1b.masters.existingsg.example.com-"
  image_id                    = "ami-12345678"
  instance_type               = "m3.medium"
  key_name                    = "${aws_key_pair.kubernetes-existingsg-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id}"
  iam_instance_profile        = "${aws_iam_instance_profile.masters-existingsg-example-com.id}"
  security_groups             = ["sg-1234dcba"]
  associate_public_ip_address = true
  user_data                   = "${file("${path.module}/data/aws_launch_configuration_master-us-test-1b.masters.existingsg.example.com_user_data")}"

  root_block_device = {
    volume_type           = "gp2"
    volume_size           = 64
    delete_on_termination = true
  }

  ephemeral_block_device = {
    device_name  = "/dev/sdc"
    virtual_name = "ephemeral0"
  }

  lifecycle = {
    create_before_destroy = true
  }

  enable_monitoring = false
}

resource "aws_launch_configuration" "master-us-test-1c-masters-existingsg-example-com" {
  name_prefix                 = "master-us-test-1c.masters.existingsg.example.com-"
  image_id                    = "ami-12345678"
  instance_type               = "m3.medium"
  key_name                    = "${aws_key_pair.kubernetes-existingsg-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id}"
  iam_instance_profile        = "${aws_iam_instance_profile.masters-existingsg-example-com.id}"
  security_groups             = ["sg-1234dcba"]
  associate_public_ip_address = true
  user_data                   = "${file("${path.module}/data/aws_launch_configuration_master-us-test-1c.masters.existingsg.example.com_user_data")}"

  root_block_device = {
    volume_type           = "gp2"
    volume_size           = 64
    delete_on_termination = true
  }

  ephemeral_block_device = {
    device_name  = "/dev/sdc"
    virtual_name = "ephemeral0"
  }

  lifecycle = {
    create_before_destroy = true
  }

  enable_monitoring = false
}

resource "aws_launch_configuration" "nodes-existingsg-example-com" {
  name_prefix                 = "nodes.existingsg.example.com-"
  image_id                    = "ami-12345678"
  instance_type               = "t2.medium"
  key_name                    = "${aws_key_pair.kubernetes-existingsg-example-com-c4a6ed9aa889b9e2c39cd663eb9c7157.id}"
  iam_instance_profile        = "${aws_iam_instance_profile.nodes-existingsg-example-com.id}"
  security_groups             = ["sg-1234abcd"]
  associate_public_ip_address = true
  user_data                   = "${file("${path.module}/data/aws_launch_configuration_nodes.existingsg.example.com_user_data")}"

  root_block_device = {
    volume_type           = "gp2"
    volume_size           = 128
    delete_on_termination = true
  }

  lifecycle = {
    create_before_destroy = true
  }

  enable_monitoring = false
}

resource "aws_route" "0-0-0-0--0" {
  route_table_id         = "${aws_route_table.existingsg-example-com.id}"
  destination_cidr_block = "0.0.0.0/0"
  gateway_id             = "${aws_internet_gateway.existingsg-example-com.id}"
}

resource "aws_route53_record" "api-existingsg-example-com" {
  name = "api.existingsg.example.com"
  type = "A"

  alias = {
    name                   = "${aws_elb.api-existingsg-example-com.dns_name}"
    zone_id                = "${aws_elb.api-existingsg-example-com.zone_id}"
    evaluate_target_health = false
  }

  zone_id = "/hostedzone/Z1AFAKE1ZON3YO"
}

resource "aws_route_table" "existingsg-example-com" {
  vpc_id = "${aws_vpc.existingsg-example-com.id}"

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "existingsg.example.com"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
    "kubernetes.io/kops/role"                      = "public"
  }
}

resource "aws_route_table_association" "us-test-1a-existingsg-example-com" {
  subnet_id      = "${aws_subnet.us-test-1a-existingsg-example-com.id}"
  route_table_id = "${aws_route_table.existingsg-example-com.id}"
}

resource "aws_route_table_association" "us-test-1b-existingsg-example-com" {
  subnet_id      = "${aws_subnet.us-test-1b-existingsg-example-com.id}"
  route_table_id = "${aws_route_table.existingsg-example-com.id}"
}

resource "aws_route_table_association" "us-test-1c-existingsg-example-com" {
  subnet_id      = "${aws_subnet.us-test-1c-existingsg-example-com.id}"
  route_table_id = "${aws_route_table.existingsg-example-com.id}"
}

resource "aws_subnet" "us-test-1a-existingsg-example-com" {
  vpc_id            = "${aws_vpc.existingsg-example-com.id}"
  cidr_block        = "172.20.32.0/19"
  availability_zone = "us-test-1a"

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "us-test-1a.existingsg.example.com"
    SubnetType                                     = "Public"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
    "kubernetes.io/role/elb"                       = "1"
  }
}

resource "aws_subnet" "us-test-1b-existingsg-example-com" {
  vpc_id            = "${aws_vpc.existingsg-example-com.id}"
  cidr_block        = "172.20.64.0/19"
  availability_zone = "us-test-1b"

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "us-test-1b.existingsg.example.com"
    SubnetType                                     = "Public"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
    "kubernetes.io/role/elb"                       = "1"
  }
}

resource "aws_subnet" "us-test-1c-existingsg-example-com" {
  vpc_id            = "${aws_vpc.existingsg-example-com.id}"
  cidr_block        = "172.20.96.0/19"
  availability_zone = "us-test-1c"

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "us-test-1c.existingsg.example.com"
    SubnetType                                     = "Public"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
    "kubernetes.io/role/elb"                       = "1"
  }
}

resource "aws_vpc" "existingsg-example-com" {
  cidr_block           = "172.20.0.0/16"
  enable_dns_hostnames = true
  enable_dns_support   = true

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "existingsg.example.com"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_vpc_dhcp_options" "existingsg-example-com" {
  domain_name         = "us-test-1.compute.internal"
  domain_name_servers = ["AmazonProvidedDNS"]

  tags = {
    KubernetesCluster                              = "existingsg.example.com"
    Name                                           = "existingsg.example.com"
    "kubernetes.io/cluster/existingsg.example.com" = "owned"
  }
}

resource "aws_vpc_dhcp_options_association" "existingsg-example-com" {
  vpc_id          = "${aws_vpc.existingsg-example-com.id}"
  dhcp_options_id = "${aws_vpc_dhcp_options.existingsg-example-com.id}"
}

terraform = {
  required_version = ">= 0.9.3"
}