52 lines
2.0 KiB
HCL
52 lines
2.0 KiB
HCL
provider "aws" {
|
|
default_tags {
|
|
tags = {
|
|
Id = local.identifier
|
|
}
|
|
}
|
|
}
|
|
|
|
locals {
|
|
identifier = var.identifier # this is a random unique string that can be used to identify resources in the cloud provider
|
|
category = "os"
|
|
example = "ubuntu22"
|
|
email = "terraform-ci@suse.com"
|
|
name = "tf-aws-server-test-${local.category}-${local.example}-${local.identifier}"
|
|
username = "tf-ci-${local.identifier}"
|
|
image = "ubuntu-22"
|
|
public_ssh_key = var.key
|
|
key_name = var.key_name
|
|
}
|
|
|
|
module "access" {
|
|
source = "rancher/access/aws"
|
|
version = "v1.1.1"
|
|
owner = local.email
|
|
vpc_name = local.name
|
|
vpc_cidr = "10.0.255.0/24" # gives 256 usable addresses from .1 to .254, but AWS reserves .1 to .4 and .255, leaving .5 to .254
|
|
subnet_name = local.name
|
|
subnet_cidr = "10.0.255.224/28" # gives 14 usable addresses from .225 to .238, but AWS reserves .225 to .227 and .238, leaving .227 to .237
|
|
security_group_name = local.name
|
|
security_group_type = "specific"
|
|
skip_ssh = true
|
|
}
|
|
|
|
# aws_access returns a security group object from the aws api, but the name attribute isn't the same as the Name tag
|
|
# this is an rare example of when the name attribute is different than the Name tag
|
|
module "this" {
|
|
depends_on = [
|
|
module.access,
|
|
]
|
|
source = "../../../" # change this to "rancher/server/aws" per https://registry.terraform.io/modules/rancher/server/aws/latest
|
|
# version = "v0.0.15" # when using this example you will need to set the version
|
|
image = local.image
|
|
owner = local.email
|
|
name = local.name
|
|
type = "small"
|
|
user = local.username
|
|
ssh_key = local.public_ssh_key
|
|
ssh_key_name = local.key_name
|
|
subnet_name = local.name
|
|
security_group_name = local.name # WARNING: security_group.name isn't the same as security_group->tags->Name
|
|
}
|