route table 추가 환경변경

prod-hq-network-tg/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.76.1"
+  constraints = "~> 3.0"
+  hashes = [
+    "h1:UOk/iZppUGLh2zjmKJKKWCD6e79GsQokO2xfzOcKjxo=",
+  ]
+}

prod-hq-network-tg/main.tf

@@ -0,0 +1,179 @@
+// prod - main
+provider "aws" {
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #3.x버전의 AWS공급자 허용
+  version = "~> 3.0"
+
+}
+
+locals {
+  region = "ap-northeast-2"
+  common_tags = {
+    project = "22shop-hq-idc"
+    owner   = "icurfer"
+  }
+  cidr = {
+    vpc    = "10.3.0.0/16"
+    zone_a = "10.3.1.0/24"
+    zone_c = "10.3.3.0/24"
+    zone_b = "10.3.2.0/24"
+    zone_d = "10.3.4.0/24"
+  }
+  tcp_port = {
+    any_port    = 0
+    http_port   = 80
+    https_port  = 443
+    ssh_port    = 22
+    dns_port    = 53
+    django_port = 8000
+    mysql_port  = 3306
+    nfs_port    = 2049
+  }
+  udp_port = {
+    dns_port = 53
+  }
+  any_protocol  = "-1"
+  tcp_protocol  = "tcp"
+  icmp_protocol = "icmp"
+  all_ips       = ["0.0.0.0/0"]
+}
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+
+// 테라폼클라우드
+// web-network
+data "terraform_remote_state" "hq_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "web-network-sdjo"
+    }
+  }
+}
+// hq-network
+data "terraform_remote_state" "web_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "hq-network"
+    }
+  }
+}
+// hidc-network
+data "terraform_remote_state" "hidc_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "hidc-network-bkkim"
+    }
+  }
+}
+locals {
+  account_id = data.aws_caller_identity.this.account_id
+
+  hq_vpc_id   = data.terraform_remote_state.hq_vpc_id.outputs.vpc_id
+  web_vpc_id  = data.terraform_remote_state.web_vpc_id.outputs.vpc_id
+  hidc_vpc_id = data.terraform_remote_state.hidc_vpc_id.outputs.vpc_id
+
+  hq_subnet   = data.terraform_remote_state.hq_vpc_id.outputs.private_subnet_tgw
+  web_subnet  = data.terraform_remote_state.web_vpc_id.outputs.private_subnet_tgw
+  hidc_subnet = data.terraform_remote_state.hidc_vpc_id.outputs.private_subnet
+
+}
+
+// tg 생성
+module "tgw" {
+  source   = "../modules/transit-gateway"
+  tag_name = "22shop-tgw"
+}
+// tg 연결
+module "tgw-hq_vpc-attatch" {
+  source         = "../modules/transit-gw-vpc-attatch"
+  tgw_id         = module.tgw.tgw_id
+  vpc_id         = local.hq_vpc_id
+  subnet_id_list = [local.hq_subnet.zone-a.id, local.hq_subnet.zone-c.id]
+
+  depends_on = [
+    module.tgw
+  ]
+}
+module "tgw-web_vpc-attatch" {
+  source         = "../modules/transit-gw-vpc-attatch"
+  tgw_id         = module.tgw.tgw_id
+  vpc_id         = local.web_vpc_id
+  subnet_id_list = [local.web_subnet.zone-a.id, local.web_subnet.zone-c.id]
+
+  depends_on = [
+    module.tgw
+  ]
+}
+module "tgw-hidc_vpc-attatch" {
+  source         = "../modules/transit-gw-vpc-attatch"
+  tgw_id         = module.tgw.tgw_id
+  vpc_id         = local.hidc_vpc_id
+  subnet_id_list = [local.hidc_subnet.zone-a.id, local.hidc_subnet.zone-c.id]
+
+  depends_on = [
+    module.tgw
+  ]
+}
+// route table에 경로 추가.
+module "route_add_hq_public" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.hq_vpc_id.outputs.route_public_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "route_add_hq_private" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.hq_vpc_id.outputs.route_private_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "route_add_web_public" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.web_vpc_id.outputs.route_public_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "route_add_web_private" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.web_vpc_id.outputs.route_private_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}

prod-hq-network-tg/outputs.tf

@@ -0,0 +1 @@
+//main-outputs

prod-hq-network-tg/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  backend "remote"{
+    hostname = "app.terraform.io"
+    organization = "22shop"
+
+    workspaces {
+      name = "common-tgw-sdjo"
+    }
+  }
+}