icurfer/terraform-demo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

route53 add

Browse Source
This commit is contained in:
Seong-dong
2023-01-11 20:21:43 +09:00
parent c96cac92b9
commit e9c35f55b5
11 changed files with 143 additions and 227 deletions
Download Patch File Download Diff File Expand all files Collapse all files

74
prod-hq-network/main.tf
View File

@ -15,11 +15,13 @@ locals {
owner = "icurfer"
}
cidr = {
vpc = "10.3.0.0/16"
zone_a = "10.3.1.0/24"
zone_c = "10.3.3.0/24"
vpc = "10.3.0.0/16"
zone_a = "10.3.1.0/24"
zone_c = "10.3.3.0/24"
zone_a_private = "10.3.2.0/24"
zone_c_private = "10.3.4.0/24"
zone_a_tgw = "10.3.5.0/24"
zone_c_tgw = "10.3.6.0/24"
}
tcp_port = {
any_port = 0
@ -114,7 +116,7 @@ module "vpc_igw" {
module "subnet_public" {
source = "../modules/vpc-subnet"
vpc_id = module.vpc_hq.vpc_hq_id
vpc_id = module.vpc_hq.vpc_hq_id
subnet-az-list = {
"zone-a" = {
name = "${local.region}a"
@ -125,16 +127,16 @@ module "subnet_public" {
cidr = local.cidr.zone_c
}
}
public_ip_on = true
public_ip_on = true
# vpc_name = "${local.common_tags.project}-public"
#alb-ingress 생성을 위해 지정
k8s_ingress = true
k8s_ingress = true
# vpc_name = local.eks_ingress_type.public
vpc_name = local.eks_ingress_type.private
}
// private외부통신을 위한 nat
module "nat_gw" {
source = "../modules/nat-gateway"
source = "../modules/nat-gateway"
subnet_id = module.subnet_public.subnet.zone-a.id
depends_on = [
@ -151,10 +153,10 @@ module "route_public" {
}
module "route_add" {
source = "../modules/route-add"
source = "../modules/route-add"
route_id = module.route_public.route_id
igw_id = module.vpc_igw.igw_id
gw_type = "igw"
igw_id = module.vpc_igw.igw_id
gw_type = "igw"
}
module "route_association" {
@ -170,7 +172,7 @@ module "route_association" {
module "subnet_private" {
source = "../modules/vpc-subnet"
vpc_id = module.vpc_hq.vpc_hq_id
vpc_id = module.vpc_hq.vpc_hq_id
subnet-az-list = {
"zone-a" = {
name = "${local.region}a"
@ -181,11 +183,11 @@ module "subnet_private" {
cidr = local.cidr.zone_c_private
}
}
public_ip_on = false
public_ip_on = false
# vpc_name = "${local.common_tags.project}-public"
#alb-ingress 생성을 위해 지정
k8s_ingress = false
vpc_name = "null"
k8s_ingress = false
vpc_name = "null"
}
// private route
@ -196,10 +198,10 @@ module "route_private" {
}
module "route_add_nat" {
source = "../modules/route-add"
source = "../modules/route-add"
route_id = module.route_private.route_id
nat_id = module.nat_gw.nat_id
gw_type = "nat"
nat_id = module.nat_gw.nat_id
gw_type = "nat"
}
module "route_association_nat" {
source = "../modules/route-association"
@ -208,3 +210,41 @@ module "route_association_nat" {
association_count = 2
subnet_ids = [module.subnet_private.subnet.zone-a.id, module.subnet_private.subnet.zone-c.id]
}
#----------------------------------------------------------------------------------------------------#
######################################################################################################
#----------------------------------------------------------------------------------------------------#
//tgw-subnet
module "subnet_private_tgw" {
source = "../modules/vpc-subnet"
vpc_id = module.vpc_hq.vpc_hq_id
subnet-az-list = {
"zone-a" = {
name = "${local.region}a"
cidr = local.cidr.zone_a_tgw
}
"zone-c" = {
name = "${local.region}c"
cidr = local.cidr.zone_c_tgw
}
}
public_ip_on = false
# vpc_name = "${local.common_tags.project}-public"
#alb-ingress 생성을 위해 지정
k8s_ingress = false
vpc_name = "null"
}
// private route
module "route_private_tgw" {
source = "../modules/route-table"
tag_name = "${local.common_tags.project}-private_tbl_tgw"
vpc_id = module.vpc_hq.vpc_hq_id
}
module "route_association_tgw" {
source = "../modules/route-association"
route_table_id = module.route_private_tgw.route_id
association_count = 2
subnet_ids = [module.subnet_private_tgw.subnet.zone-a.id, module.subnet_private_tgw.subnet.zone-c.id]
}