Skip to content

Latest commit

 

History

History
80 lines (70 loc) · 2.89 KB

README.md

File metadata and controls

80 lines (70 loc) · 2.89 KB
Raw

Terraform

Will create multiple set of scripts for clarity. Version details:

  • OS: Win10 Home
  • Terraform: v0.12.18
  • Packer: 1.5.1
  • AWS: aws-cli/1.16.303 Python/3.6.0 Windows/10 botocore/1.13.39

1-beginner

For details check my blog: http://sv-technical.blogspot.com/2019/12/terraform.html
This folder contains terraform sample scripts that

  • creates roles, users (not using for security reasons)
  • creates instance using ssh
  • creates groups
  • ami
  • ec2 etc

Commands:

  • terraform plan -no-color -refresh=true -out=infra.tfplan
  • terraform apply -refresh=true -auto-approve "infra.tfplan"
  • terraform destroy -auto-approve

2-modules (and packer scripts)

This folder contains terraform sample scripts that

  • terraform files arranged as modules
  • outputs.tf is at root only as terraform 0.12+ does not support modules outputs
  • packer scripts that creates ami after some script changes you want
  • ec2 creates based on newly created by packer ami
  • make ec2 public and connect with public subnet so able to ssh without any inbound rule modification
  • build-infra.bat that has packer and terraform commands to build complete infrastructure

Commands:

  • packer validate FILENAME
  • packer build FILENAME

3-asg

This folder contains terraform sample scripts that

  • creates asg, elb, user-data, custom ssl
  • EC2 attaches to ELB and ELB in-turns attaches to ASG
    • User can access EC2 website via ELB on port 80 (http), port 443 (https), port 8000 (http).
    • SSL is custom generated so you will experience ssl warning on port 443
  • creates launch configuration

4-kms

This folder contains terraform sample scripts that

  • encrypt ami
  • create kms key
  • use default i.e. aws or custom managed kms key
  • create and use custom managed kms key

5-separate-modules

This folder contains terraform sample scripts that

  • has proper steps for SSL
  • create separate modules for admin tasks, iam and infra etc
  • infra module managed so it can be called multiple times with param

6-httpd-logs

This folder contains terraform (packer) sample scripts that

  • ami is changed to have custom httpd conf
  • configuration to disable logging for
    • (internal dummy connection)
    • "ELB-HealthChecker/1.0"
    • 408 (in-progress)

7-S3

This folder contains terraform sample scripts that

  • has configuration to log rotate httpd logs
  • compress logs datewise and restart httpd after that
  • create S3 bucket
  • configure EC2 to connect with S3
  • move logs to S3 bucket
  • packer module updated to have httpd logrotate conf
  • scripts for logrotate and S£
  • user data to configure aws
  • Note: Four properties added to logrotate
    • rotate 5 -> So files after logrotate do not delete
    • maxage 5 -> To keep rotate files for how many dates
    • dateext -> To attach date to gzip files
    • dateformat -%Y%m%d-%s -> format of date