Skip to content

Commit

Permalink
Merge pull request #20 from vpramod03/main
Browse files Browse the repository at this point in the history 
Azure talos V1
  • Loading branch information
@jebinjeb
jebinjeb authored Aug 27, 2023
2 parents 2e56d50 + 749900f commit 065d5a7
Show file tree
Hide file tree
Showing 10 changed files with 322 additions and 64 deletions.
220 changes: 169 additions & 51 deletions azure/talos/main.tf
View file
Original file line number Diff line number Diff line change
Expand Up @@ -19,16 +19,17 @@ resource "azurerm_resource_group" "storagerg" {

resource "azurerm_storage_account" "talosimagesa" {
name = "talosimagesa"
resource_group_name = "${azurerm_resource_group.testrg.name}"
resource_group_name = "${azurerm_resource_group.storagerg.name}"
location = var.region
account_tier = "Standard"
account_replication_type = "GRS"

tags {
tags = {
environment = "talosaz"
}
}


resource "azurerm_storage_container" "talosimagecont" {
name = "talosimagecont"
storage_account_name = azurerm_storage_account.talosimagesa.name
Expand All @@ -45,6 +46,27 @@ resource "null_resource" "talosimagecreate" {
]
}

#resource "azurerm_storage_blob" "talosimageblob" {
# name = "talosimageblob"
# storage_account_name = azurerm_storage_account.talosimagesa.name
# storage_container_name = azurerm_storage_container.talosimagecont.name
# source = "manifests/image/talos/azure-amd64.vhd"
# type = "Block"

#}

resource "azurerm_image" "talosimage" {
name = "talos-azure"
location = var.region
resource_group_name = azurerm_resource_group.storagerg.name

os_disk {
os_type = "Linux"
os_state = "Generalized"
blob_uri = "https://${azurerm_storage_account.talosimagesa.name}.blob.core.windows.net/${azurerm_storage_container.talosimagecont.name}/talos-azure.vhd"
}
}

resource "azurerm_resource_group" "talosrg" {
name = "talosrg"
location = var.region
Expand All @@ -62,75 +84,109 @@ resource "azurerm_subnet" "talossubnet" {
name = "talossubnet"
resource_group_name = azurerm_resource_group.talosrg.name
virtual_network_name = azurerm_virtual_network.talosnet.name
address_prefixes = "10.0.1.0/24"
address_prefixes = [ "10.0.1.0/24" ]

}

resource "azurerm_network_security_group" "talossg" {
name = "talossg"
resource_group_name = azurerm_resource_group.talosrg.name

location = var.region
}

resource "azurerm_network_security_rule" "apid" {
name = "apid"
network_security_group_name = azurerm_network_security_group.talossg.name
priority = "1001"
source_port_range = "*"
destination_port_ranges = [ "50000" ]
direction = "inbound"
source_address_prefix = "*"
destination_address_prefix = "*"
direction = "Inbound"
access = "Allow"
resource_group_name = azurerm_resource_group.talosrg.name
protocol = "Tcp"

}

resource "azurerm_network_security_rule" "trustd" {
name = "trustd"
network_security_group_name = azurerm_network_security_group.talossg.name
priority = "1002"
source_port_range = "*"
destination_port_ranges = [ "50001" ]
direction = "inbound"
source_address_prefix = "*"
destination_address_prefix = "*"
direction = "Inbound"
access = "Allow"
resource_group_name = azurerm_resource_group.talosrg.name
protocol = "Tcp"

}

resource "azurerm_network_security_rule" "etcd" {
name = "etcd"
network_security_group_name = azurerm_network_security_group.talossg.name
priority = "1003"
source_port_range = "*"
destination_port_ranges = [ "2379-2380" ]
direction = "inbound"
source_address_prefix = "*"
destination_address_prefix = "*"
direction = "Inbound"
access = "Allow"
resource_group_name = azurerm_resource_group.talosrg.name
protocol = "Tcp"

}

resource "azurerm_network_security_rule" "kube" {
name = "kube"
network_security_group_name = azurerm_network_security_group.talossg.name
priority = "1004"
source_port_range = "*"
destination_port_ranges = [ "6443" ]
direction = "inbound"
source_address_prefix = "*"
destination_address_prefix = "*"
direction = "Inbound"
access = "Allow"
resource_group_name = azurerm_resource_group.talosrg.name
protocol = "Tcp"

}

resource "azurerm_public_ip" "talos-public-ip" {
name = "talos-public-ip"
resource_group_name = azurerm_network_security_group.talossg.name
allocation_method = "static"
count = length(var.publicipname)
name = "publicip-${count.index}"
resource_group_name = azurerm_resource_group.talosrg.name
allocation_method = "Static"
location = var.region

}

resource "azurerm_public_ip" "talos-public-ip-lb" {
name = "talos-public-ip-lb"
resource_group_name = azurerm_resource_group.talosrg.name
allocation_method = "Static"
location = var.region

}

resource "azurerm_lb" "taloslb" {
name = "taloslb"
resource_group_name = azurerm_network_security_group.talossg.name
resource_group_name = azurerm_resource_group.talosrg.name
location = var.region

frontend_ip_configuration {
name = "talosfe"
public_ip_address_id = azurerm_public_ip.talos-public-ip.id
public_ip_address_id = azurerm_public_ip.talos-public-ip-lb.id
}

}

data "azurerm_lb_backend_address_pool" "talosbe" {
name = "talosbe"
loadbalancer_id = azurerm_lb.taloslb.id
}
#data "azurerm_lb_backend_address_pool" "talosbe" {
# name = "talosbe"
# loadbalancer_id = azurerm_lb.taloslb.id
#}

resource "azurerm_lb_probe" "talos-lb-health" {
loadbalancer_id = azurerm_lb.taloslb.id
Expand All @@ -146,41 +202,57 @@ resource "azurerm_lb_rule" "talos-6443" {
frontend_port = 6443
backend_port = 6443
frontend_ip_configuration_name = "talosfe"
backend_address_pool_ids = [ azurerm_lb_backend_address_pool.talosbe.ID ]
# backend_address_pool_ids = [ data.azurerm_lb_backend_address_pool.talosbe.id ]

probe_id = azurerm_lb_probe.talos-lb-health.id
resource_group_name = azurerm_resource_group.talosrg.name

}

resource "azurerm_network_interface" "nics" {
count = length(var.nics)
name = "nic-${count.index}"
location = azurerm_resource_group.group.location
resource_group_name = azurerm_resource_group.group.name
network_security_group_name = azurerm_network_security_group.talossg.name
loadbalancer_id = azurerm_lb.taloslb.ID
virtual_network_name = azurerm_virtual_network.talosnet.name
location = var.region
resource_group_name = azurerm_resource_group.talosrg.name


ip_configuration {
private_ip_address_allocation = "Dynamic"
name = "config-${count.index}"
subnet_id = element(azurerm_subnet.subnets[*].id, count.index % 4)
subnet_id = azurerm_subnet.talossubnet.id
private_ip_address = element(var.nics, count.index)
public_ip_address_id = element(azurerm_public_ip.talos-public-ip[*].id, count.index % 4)

}
}

resource "azurerm_network_interface" "workernics" {
count = length(var.workernics)
name = "workernic-${count.index}"
location = var.region
resource_group_name = azurerm_resource_group.talosrg.name


ip_configuration {
private_ip_address_allocation = "Dynamic"
name = "config-${count.index}"
subnet_id = azurerm_subnet.talossubnet.id
private_ip_address = element(var.nics, count.index)

}
}

resource "azurerm_availability_set" "talosas" {
name = "talosas"
location = azurerm_resource_group.talosrg.location
resource_group_name = azurerm_resource_group.talosrg.name
managed = true


}

resource "null_resource" "createtalosconfig" {
provisioner "local-exec" {

command = "/bin/bash talosctl gen config talos-k8s-azure-tutorial https://${azurerm_lb.taloslb.public_ip}:6443 "
command = "/bin/bash scripts/talosconfiggen.sh -h ${azurerm_public_ip.talos-public-ip-lb.ip_address} -p 443"

}

Expand All @@ -189,67 +261,113 @@ resource "null_resource" "createtalosconfig" {
}

data "local_file" "controllerfile" {
filename = "./controlplane.yaml"
filename = "scripts/controlplane.yaml"
depends_on = [ null_resource.createtalosconfig ]
}

data "local_file" "workerfile" {
filename = "./worker.yaml"
filename = "scripts/worker.yaml"
depends_on = [ null_resource.createtalosconfig ]
}

resource "azurerm_virtual_machine" "talosmaster" {
count = var.mastercount
name = "talosmaster"
image = "talos"
count = length(var.mastercount)
name = "talosmaster-${count.index}"
resource_group_name = azurerm_resource_group.talosrg.name
boot_diagnostics {
storage_uri = azurerm_storage_account.talosimagesa.primary_web_endpoint
}
location = var.region
vm_size = var.instancetype
# boot_diagnostics {
# enabled = true
# storage_uri = azurerm_storage_account.talosimagesa.primary_web_endpoint
# }

os_profile {
computer_name = "talos"
admin_username = "talos"
custom_data = data.local_file.controllerfile
admin_password = "Talos@1234"
custom_data = data.local_file.controllerfile.content
}

storage_data_disk {
disk_size_gb = "20"
# storage_data_disk {
# name = "talosstoragedata"
# disk_size_gb = "20"
# lun = "1"
# create_option = "Empty"
# }

storage_image_reference {
id = "/subscriptions/7bccafd3-c548-4b45-837d-fb7dc81167b6/resourceGroups/StorageRG/providers/Microsoft.Compute/images/talos-azure"
}
storage_os_disk {
name = "talosmaster-${count.index}"
caching = "ReadWrite"
create_option = "FromImage"
managed_disk_type = "Standard_LRS"
disk_size_gb = "20"
}

os_profile_linux_config {
disable_password_authentication = false
}

network_interface_ids = [ element( azurerm_network_interface.nics[*].ID, count.index ) ]
network_interface_ids = [ element( azurerm_network_interface.nics[*].id, count.index ) ]
availability_set_id = azurerm_availability_set.talosas.id

depends_on = [ azurerm_availability_set.talosas ]



}

resource "azurerm_virtual_machine" "talosworker" {
count = var.workercount
name = "talosworker"
image = "talos"
count = length(var.workercount)
name = "talosworker-${count.index}"
resource_group_name = azurerm_resource_group.talosrg.name
boot_diagnostics {
storage_uri = azurerm_storage_account.talosimagesa.primary_web_endpoint
}

location = var.region
vm_size = var.instancetype
# boot_diagnostics {
# enabled = true
# storage_uri = azurerm_storage_account.talosimagesa.primary_web_endpoint
# }

os_profile {
computer_name = "talos"
admin_username = "talos"
custom_data = data.local_file.workerfile
admin_password = "Talos@1234"
custom_data = data.local_file.workerfile.content
}

storage_data_disk {
disk_size_gb = "20"
# storage_data_disk {
# name = "talosstoragedata"
# disk_size_gb = "20"
# lun = "1"
# create_option = "Empty"
# }
storage_image_reference {
id = "/subscriptions/7bccafd3-c548-4b45-837d-fb7dc81167b6/resourceGroups/StorageRG/providers/Microsoft.Compute/images/talos-azure"
}

storage_os_disk {
name = "talosworker-${count.index}"
caching = "ReadWrite"
create_option = "FromImage"
managed_disk_type = "Standard_LRS"
disk_size_gb = "20"
}
availability_set_id = azurerm_availability_set.talosas.id

network_interface_ids = [ element(azurerm_network_interface.workernics[*].id, count.index ) ]

os_profile_linux_config {
disable_password_authentication = false
}

depends_on = [ azurerm_availability_set.talosas ]

}

resource "null_resource" "bootstrap_etcd" {
provisioner "local-exec" {
command = "/bin/bash scripts/bootstrapetcd.sh ${azurerm_virtual_machine.talosmaster.0.public_ip}"
command = "/bin/bash scripts/bootstrapetcd.sh ${azurerm_lb.taloslb.frontend_ip_configuration[0].public_ip_address_id}"

}
depends_on = [ azurerm_virtual_machine.talosmaster ]
Expand Down
Binary file added azure/talos/manifests/.DS_Store
View file
Binary file not shown.
Loading

0 comments on commit 065d5a7

Please sign in to comment.