Requirements

The following requirements are needed by this module:

• terraform (~> 1.0)

• aws (~> 3.69.0)

Run

To try any example, clone this repository, set the following parameters into input.tfvars:

• management_access_key = ""
• management_secret_key = ""
• operational_access_key = ""
• operational_secret_key = ""
• priv_key = ""
• pub_key = ""
• hosted_zone_cert = ""
• hosted_zone_key = ""

Or run the following commands for generate input.tfvars file:

$ ./setup.sh filename-for-key operational-access-key operational-secret-key management-access-key management-secret-key

And run the following command from within the example's directory:

Deploy

$ terraform init; terraform apply -auto-approve -var-file="input.tfvars"

Destroy

$ terraform destroy -auto-approve -var-file="input.tfvars"

Providers

The following providers are used by this module:

• aws (3.69.0)

• aws.management (3.69.0)

Modules

The following Modules are called:

jumphost

Source: ./modules/jumphost

Version:

vpc

Source: ./modules/vpc

Version:

webserver

Source: ./modules/webserver

Version:

Resources

The following resources are used by this module:

• aws_route.management (resource)
• aws_route.management_pub (resource)
• aws_route.operational (resource)
• aws_vpc_peering_connection.management (resource)
• aws_vpc_peering_connection_accepter.operational (resource)
• aws_caller_identity.management (data source)
• aws_caller_identity.operational (data source)
• aws_route53_zone.hosted_zone_id (data source)

Required Inputs

The following input variables are required:

hosted_zone_cert

Description: Cert for hostedzone

Type: string

hosted_zone_key

Description: Key of hostedzone certificate

Type: string

management_access_key

Description: Access Key of management AWS Account

Type: string

management_secret_key

Description: Secret Key of management AWS Account

Type: string

operational_access_key

Description: Access Key of operational AWS Account

Type: string

operational_secret_key

Description: Secret Key of operational AWS Account

Type: string

priv_key

Description: SSH Private Key for EC2 Instances

Type: string

pub_key

Description: SSH Public Key for EC2 Instances

Type: string

ami_id

Description: n/a

Type: string

Default: "ami-04dd4500af104442f"

asg_desired

Description: Actual number of instances to be used by the ASG.

Type: number

Default: 2

asg_max

Description: Maximum number of instances to be used by the ASG.

Type: number

Default: 10

asg_min

Description: Minimum number of instances to be used by the ASG.

Type: number

Default: 2

availability_zones

Description: A list of availability zones in which to create subnets

Type: list(string)

Default:

[
  "eu-west-1a",
  "eu-west-1b",
  "eu-west-1c"
]

cidrs

Description: n/a

Type: map(any)

Default:

{
  "management": "100.80.0.0/16",
  "operational": "120.80.0.0/16"
}

hosted_zone

Description: n/a

Type: string

Default: "256490151058.sygris.net"

jumphost_type

Description: Jump host instance type

Type: string

Default: "t3.micro"

management_priv_sub_cidrs

Description: n/a

Type: list(string)

Default:

[
  "100.80.3.0/24",
  "100.80.4.0/24",
  "100.80.5.0/24"
]

management_pub_sub_cidrs

Description: n/a

Type: list(string)

Default:

[
  "100.80.0.0/24",
  "100.80.1.0/24",
  "100.80.2.0/24"
]

operational_priv_sub_cidrs

Description: n/a

Type: list(string)

Default:

[
  "120.80.3.0/24",
  "120.80.4.0/24",
  "120.80.5.0/24"
]

operational_pub_sub_cidrs

Description: n/a

Type: list(string)

Default:

[
  "120.80.0.0/24",
  "120.80.1.0/24",
  "120.80.2.0/24"
]

project

Description: n/a

Type: string

Default: "Sygris"

region

Description: n/a

Type: string

Default: "eu-west-1"

ssh_user

Description: Default EC2 SSH User

Type: string

Default: "ec2-user"

webserver_type

Description: Web server instance type

Type: string

Default: "t3.micro"

Outputs

No outputs.