cowork

2023-01-11 01:31:56 +09:00
parent f0402956e2
commit c96cac92b9
42 changed files with 746 additions and 265 deletions
--- a/icurfer-hq-network/main.tf
+++ b/icurfer-hq-network/main.tf
@ -0,0 +1,142 @@
+// prod - main
+provider "aws" {
+  region = "ap-northeast-2"
+
+  #2.x버전의 AWS공급자 허용
+  version = "~> 2.0"
+
+}
+
+locals {
+  common_tags = {
+    project = "22shop"
+    owner   = "icurfer"
+
+  }
+  tcp_port = {
+    any_port    = 0
+    http_port   = 80
+    https_port  = 443
+    ssh_port    = 22
+    dns_port    = 53
+    django_port = 8000
+    mysql_port  = 3306
+  }
+  udp_port = {
+    dns_port = 53
+  }
+  any_protocol  = "-1"
+  tcp_protocol  = "tcp"
+  icmp_protocol = "icmp"
+  all_ips       = ["0.0.0.0/0"]
+
+  node_group_scaling_config = {
+    desired_size = 2
+    max_size     = 4
+    min_size     = 1
+  }
+
+  eks_ingress_type = {
+    public  = "kubernetes.io/role/elb"
+    private = "kubernetes.io/role/internal-elb=1"
+  }
+}
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+
+// eks를 위한 iam역할 생성 데이터 조회
+data "aws_iam_policy_document" "eks-assume-role-policy" {
+  statement {
+    actions = ["sts:AssumeRole"]
+
+    principals {
+      type        = "Service"
+      identifiers = ["eks.amazonaws.com"]
+    }
+  }
+}
+data "aws_iam_policy_document" "eks_node_group_role" {
+  statement {
+    actions = ["sts:AssumeRole"]
+
+    principals {
+      type        = "Service"
+      identifiers = ["ec2.amazonaws.com"]
+    }
+  }
+}
+
+# module "vpc_hq" {
+module "vpc_hq" {
+  source = "../modules/vpc"
+  #   source = "github.com/Seong-dong/team_prj/tree/main/modules/vpc"
+  tag_name   = "${local.common_tags.project}-vpc"
+  cidr_block = "10.3.0.0/16"
+
+}
+
+module "vpc_igw" {
+  source = "../modules/igw"
+
+  vpc_id = module.vpc_hq.vpc_hq_id
+
+  tag_name = "${local.common_tags.project}-vpc_igw"
+
+  depends_on = [
+    module.vpc_hq
+  ]
+}
+
+module "subnet_public" {
+  source = "../modules/vpc-subnet"
+
+  vpc_id         = module.vpc_hq.vpc_hq_id
+  subnet-az-list = var.subnet-az-public
+  public_ip_on   = true
+  # vpc_name       = "${local.common_tags.project}-public"
+  #alb-ingress 생성을 위해 지정
+  k8s_ingress        = true
+  vpc_name = local.eks_ingress_type.public
+}
+
+// public route
+module "route_public" {
+  source   = "../modules/route-table"
+  tag_name = "${local.common_tags.project}-route_table"
+  vpc_id   = module.vpc_hq.vpc_hq_id
+
+}
+
+module "route_add" {
+  source          = "../modules/route-add"
+  route_public_id = module.route_public.route_public_id
+  igw_id          = module.vpc_igw.igw_id
+}
+
+module "route_association" {
+  source         = "../modules/route-association"
+  route_table_id = module.route_public.route_public_id
+
+  association_count = 2
+  subnet_ids        = [module.subnet_public.subnet.zone-a.id, module.subnet_public.subnet.zone-c.id]
+}
+
+# // private subnet
+# module "subnet_private" {
+#   source = "../modules/vpc-subnet"
+
+#   vpc_id         = module.vpc_hq.vpc_hq_id
+#   subnet-az-list = var.subnet-az-private
+#   public_ip_on   = false
+#   k8s_ingress        = false
+#   #alb-ingress 생성을 위해 지정
+#   vpc_name = local.eks_ingress_type.public
+# }
+
+# module "route_private" {
+#   source   = "../modules/route-table"
+#   tag_name = "${local.common_tags.project}-private_route_table"
+#   vpc_id   = module.vpc_hq.vpc_hq_id
+
+# }