74 lines
2.5 KiB
HCL
74 lines
2.5 KiB
HCL
provider "aws" {
|
|
default_tags {
|
|
tags = {
|
|
Id = local.identifier
|
|
Owner = local.email
|
|
}
|
|
}
|
|
}
|
|
|
|
locals {
|
|
identifier = var.identifier # this is a random unique string that can be used to identify resources in the cloud provider
|
|
category = "basic"
|
|
example = "directsshsubnet"
|
|
email = "terraform-ci@suse.com"
|
|
project_name = "tf-${substr(md5(join("-", [local.category, local.example, md5(local.identifier)])), 0, 5)}-${local.identifier}"
|
|
username = lower(substr("tf-${local.identifier}", 0, 32))
|
|
image = "sles-15"
|
|
ip = chomp(data.http.myip.response_body)
|
|
ssh_key = var.key
|
|
}
|
|
|
|
data "http" "myip" {
|
|
url = "https://ipinfo.io/ip"
|
|
}
|
|
|
|
resource "random_pet" "server" {
|
|
keepers = {
|
|
# regenerate the pet name when the identifier changes
|
|
identifier = local.identifier
|
|
}
|
|
length = 1
|
|
}
|
|
|
|
module "access" {
|
|
source = "rancher/access/aws"
|
|
version = "v3.0.2"
|
|
vpc_name = "${local.project_name}-vpc"
|
|
vpc_public = true
|
|
security_group_name = "${local.project_name}-sg"
|
|
security_group_type = "project"
|
|
load_balancer_use_strategy = "skip"
|
|
}
|
|
|
|
module "this" {
|
|
depends_on = [
|
|
module.access,
|
|
]
|
|
source = "../../../" # change this to "rancher/server/aws" per https://registry.terraform.io/modules/rancher/server/aws/latest
|
|
# version = "v1.1.1" # when using this example you will need to set the version
|
|
image_type = local.image
|
|
server_name = "${local.project_name}-${random_pet.server.id}"
|
|
server_type = "small"
|
|
subnet_name = keys(module.access.subnets)[0]
|
|
security_group_name = module.access.security_group.tags_all.Name
|
|
direct_access_use_strategy = "ssh" # either the subnet needs to be public or you must add an eip
|
|
cloudinit_use_strategy = "default" # use the default cloudinit config
|
|
server_access_addresses = { # you must include ssh access here to enable setup
|
|
"runner" = {
|
|
port = 22
|
|
protocol = "tcp"
|
|
ip_family = "ipv4"
|
|
cidrs = ["${local.ip}/32"]
|
|
}
|
|
}
|
|
server_user = {
|
|
user = local.username
|
|
aws_keypair_use_strategy = "skip" # add the keypair to the server directly using cloud-init
|
|
ssh_key_name = "" # this attribute is not necessary, but required
|
|
public_ssh_key = local.ssh_key
|
|
user_workfolder = "/home/${local.username}"
|
|
timeout = 5
|
|
}
|
|
}
|