정리

01-start/.terraform.lock.hcl

@@ -1,24 +0,0 @@
-# This file is maintained automatically by "terraform init".
-# Manual edits may be lost in future updates.
-
-provider "registry.terraform.io/hashicorp/aws" {
-  version = "4.48.0"
-  hashes = [
-    "h1:8xLCA04IhQUzGI8/t3ySKNFMyjgGCWiXRUWhWEsYvew=",
-    "zh:08f5e3c5256a4fbd5c988863d10e5279172b2470fec6d4fb13c372663e7f7cac",
-    "zh:2a04376b7fa84681bd2938973c7d0822c8c0f0656a4e7661a2f50ac4d852d4a3",
-    "zh:30d6cdf321aaba874934cbde505333d89d172d8d5ffcf40b6e66626c57bc6ab2",
-    "zh:364639ee19cf4cfaa65de84a2a71d32725d5b728b71dd88d01ccb639c006c1cf",
-    "zh:4e02252cd88b6f59f556f49c5ce46a358046c98f069230358ac15f4030ae1e76",
-    "zh:611717320f20b3512ceb90abddd5198a85e1093965ce59e3ef8183188c84f8c3",
-    "zh:630be3b9ba5b3a95ecb2ce2f3523714ab37cd8bcd7479c879a769e6a446ab5ed",
-    "zh:6701f9d3ae1ffadb3ebefbe75c9d82668cc5495b8f826e498adb8530e202b652",
-    "zh:6dc6fdfa7469c9de7b405c68b2f6a09a3438db1ef09d348e49c7ceff4300b01a",
-    "zh:84c8140d8af6965fa9cd80e52eb2ee3d273e3ab7762719a8d1af665c08fab748",
-    "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425",
-    "zh:9b6b4f7d4cea37ba7a42a47d506115498858bcd6440ad97dfb214c13a688ba90",
-    "zh:a7f876af20f5c5dae8e333ec0dfc901e26aa801137e7df65fb365565637bbfe2",
-    "zh:ad107b8e11dd0609b856584ce70ae6621aa4f1f946da51f7c792f1259e3f9c27",
-    "zh:d5dc1683693a5fe2652952f50dbbeccd02716799c26c6d1a1378b226cf845e9b",
-  ]
-}

01-start/main.tf

@@ -1,30 +0,0 @@
-provider "aws" {
-  region = "ap-northeast-2"
-}
-
-
-
-resource "aws_iam_role" "iam-role" {
-  name = "eks-cluster-test"
-
-  # Terraform's "jsonencode" function converts a
-  # Terraform expression result to valid JSON syntax.
-  assume_role_policy = jsonencode({
-    "Version" : "2012-10-17",
-    "Statement" : [
-      {
-        "Effect" : "Allow",
-        "Principal" : {
-          "Service" : [
-            "eks.amazonaws.com"
-          ]
-        },
-        "Action" : "sts:AssumeRole"
-      }
-    ]
-  })
-
-  tags = {
-    tag-key = "eks-cluster-rule"
-  }
-}

modules/cgw/main.tf

@@ -0,0 +1,9 @@
+resource "aws_customer_gateway" "main" {
+  bgp_asn    = 65000
+  ip_address = var.cgw_ip
+  type       = "ipsec.1"
+
+  tags = {
+    Name = "cgw"
+  }
+}

modules/cgw/outputs.tf

@@ -0,0 +1,3 @@
+output "cgw_id" {
+  value = aws_customer_gateway.main.id
+}

modules/cgw/variables.tf

@@ -0,0 +1,3 @@
+variable "cgw_ip" {
+  type = string
+}

modules/cloud9-ec2-env/main.tf

@@ -0,0 +1,5 @@
+resource "aws_cloud9_environment_membership" "cloud9-env" {
+  environment_id = var.cloud9_id
+  permissions    = var.permissions
+  user_arn       = var.user_arn
+}

modules/cloud9-ec2-env/variables.tf

@@ -0,0 +1,10 @@
+variable "cloud9_id" {
+    description = "cloud9-ec2"
+    type = string
+}
+variable "permissions" {
+    type = string
+}
+variable "user_arn" {
+    type = string
+}

modules/cloud9-ec2/main.tf

@@ -0,0 +1,4 @@
+resource "aws_cloud9_environment_ec2" "cloud9-dev" {
+  instance_type = var.instance_type
+  name          = var.name
+}

modules/cloud9-ec2/outputs.tf

@@ -0,0 +1,3 @@
+output "cloud9_id" {
+  value = aws_cloud9_environment_ec2.cloud9-dev.id
+}

modules/cloud9-ec2/variables.tf

@@ -0,0 +1,6 @@
+variable "instance_type" {
+  type = string
+}
+variable "name" {
+  type = string
+}

modules/ec2/eks-host.sh

@@ -0,0 +1,11 @@
+curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
+unzip awscliv2.zip
+sudo ./aws/install
+export PATH=/usr/local/bin:$PATH
+source ~/.bash_profile
+curl -o /usr/local/bin/kubectl https://s3.us-west-2.amazonaws.com/amazon-eks/1.23.13/2022-10-31/bin/linux/amd64/kubectl
+chmod +x /usr/local/bin/kubectl
+yum install -y jq
+yum install -y bash-completion
+curl --silent --location "https://github.com/weaveworks/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz" | tar xz -C /tmp
+mv -v /tmp/eksctl /usr/local/bin

modules/ec2/main.tf

@@ -1,8 +1,32 @@
-resource "aws_instance" "ubuntu" {
-  ami           = "ami-0ab04b3ccbadfae1f"
-  instance_type = "t2.micro"
+resource "aws_network_interface" "eni" {
+  subnet_id = var.public_ip_associate ? var.public_subnet : var.private_subnet
+  # private_ips = ["172.16.10.100"]
+  security_groups = var.sg_list
+  tags = {
+    Name = "primary_network_interface"
+  }
+}
+
+resource "aws_instance" "ec2" {
+  ami = var.ami_name
+  # "ami-0ab04b3ccbadfae1f"
+  instance_type = var.instance_type
+  # "t2.micro"
+  
+  # user_data = var.user_data
 
   tags = {
-    Name = "tf-ubuntu"
+    Name = "${var.tag_name}"
   }
-}
+
+  network_interface {
+    network_interface_id = aws_network_interface.eni.id
+    device_index         = 0
+    # delete_on_termination = true
+    
+    # security_groups = var.sg_list
+    
+  }
+  
+  key_name = var.key_name
+}

modules/ec2/mariadb.sh

@@ -0,0 +1,9 @@
+cat <<EOF>> /etc/yum.repos.d/MariaDB.repo
+[mariadb]
+name = MariaDB
+baseurl = http://yum.mariadb.org/10.3/centos7-amd64
+gpgkey = https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
+gpgcheck = 1
+EOF
+yum install mariadb-server -y
+systemctl enable --now mariadb

modules/ec2/nginx.sh

@@ -0,0 +1,3 @@
+yum update -y
+amazon-linux-extras install -y nginx1
+systemctl enable --now nginx

modules/ec2/outputs.tf

@@ -0,0 +1,13 @@
+output "ec2_id" {
+    value = aws_instance.ec2.id
+  
+}
+
+output "public_ip_associate" {
+    value = aws_instance.ec2.associate_public_ip_address
+  
+}
+
+output "sg_id" {
+    value = aws_network_interface.eni.security_groups
+}

modules/ec2/vailables.tf

@@ -0,0 +1,37 @@
+variable "ami_name" {
+  description = "ami name"
+  type        = string
+}
+
+variable "instance_type" {
+  type = string
+}
+
+variable "tag_name" {
+  type = string
+}
+
+variable "public_ip_associate" {
+  type = bool
+}
+variable "key_name" {
+  type = string
+}
+# variable "subnet_id" {
+#   type = string
+# }
+
+variable "public_subnet" {
+  type = string
+}
+
+variable "private_subnet" {
+  type = string
+}
+
+variable "sg_list" {
+  description = "sg list"
+  type = list(string)
+  
+}
+

modules/efs-fs/main.tf

@@ -0,0 +1,24 @@
+# EFS 파일 시스템 생성
+resource "aws_efs_file_system" "efs" {
+  # 원존 클래스를 이용할 경우
+  # availability_zone_name = "ap-northeast-2a"
+
+  # 유휴 시 데이터 암호화
+  encrypted        = true
+  # KMS에서 관리형 키를 이용하려면 kms_key_id 속성을 붙여줍니다.
+
+  # 버스팅 처리량 모드
+  throughput_mode  = "bursting"
+
+  # 성능 모드: generalPurpose(범용 모드), maxIO(최대 IO 모드)
+  performance_mode = "generalPurpose"
+
+  # 프로비저닝 처리량 모드
+  # throughput_mode = "provisioned"
+  # provisioned_throughput_in_mibps = 100
+
+  # 수명 주기 관리
+  lifecycle_policy {
+    transition_to_ia = "AFTER_30_DAYS"
+  }
+}

modules/efs-fs/outputs.tf

@@ -0,0 +1,4 @@
+output "efs_fs_id" {
+    description = "efs fs id"
+    value = aws_efs_file_system.efs.id
+}

modules/efs-fs/variables.tf

@@ -0,0 +1,10 @@
+# variable "sg_list" {
+#   description = "security group list"
+#   type        = list(string)
+
+# }
+# variable "subnet_id" {
+#   description = "security group list"
+#   type        = string
+
+# }

modules/efs-mnt-tg/main.tf

@@ -0,0 +1,6 @@
+resource "aws_efs_mount_target" "mount" {
+  file_system_id  = var.fs_id
+  subnet_id       = var.subnet_id
+
+  security_groups = var.sg_list
+}

modules/efs-mnt-tg/variables.tf

@@ -0,0 +1,14 @@
+variable "fs_id" {
+  description = "fs_id"
+  type        = string
+}
+variable "sg_list" {
+    description = "security group list"
+    type = list(string)
+  
+}
+variable "subnet_id" {
+    description = "security group list"
+    type = string
+  
+}

modules/eip/main.tf

@@ -0,0 +1,4 @@
+resource "aws_eip" "lb" {
+  instance = aws_instance.web.id
+  vpc      = true
+}

modules/eks-cluster/main.tf

@@ -1,15 +1,30 @@
 resource "aws_eks_cluster" "eks-cluster" {
-  name     = "${var.name}-eks-cluster"
+  name     = "${var.name}"
   role_arn = var.iam_role_arn
 
-  #enabled_cluster_log_types = ["api", "audit", "authenticator", "controllerManager", "scheduler"]
+  # enabled_cluster_log_types = ["api", "audit", "authenticator", "controllerManager", "scheduler"]
 
   vpc_config {
     security_group_ids = var.sg_list
-    subnet_ids = var.subnet_list
+    subnet_ids         = var.subnet_list
 
     #노드그룹 통신을 위한 설정
     endpoint_private_access = true
     endpoint_public_access  = true
   }
 }
+
+# //신뢰할수있는 사용자 등록
+# resource "aws_eks_identity_provider_config" "eks-cluster-oidc-provider" {
+#   cluster_name = aws_eks_cluster.eks-cluster.name
+
+#   oidc {
+#     client_id                     = var.client_id
+#     identity_provider_config_name = "eks-example"
+#     issuer_url                    = "${aws_eks_cluster.eks-cluster.identity[0].oidc[0].issuer}"
+#   }
+
+#   depends_on = [
+#     aws_eks_cluster.eks-cluster
+#   ]
+# }

modules/eks-cluster/outputs.tf

@@ -4,4 +4,12 @@ output "endpoint" {
 
 output "kubeconfig-certificate-authority-data" {
   value = "${aws_eks_cluster.eks-cluster.certificate_authority.0.data}"
+}
+
+output "cluster_name" {
+  value = aws_eks_cluster.eks-cluster.name
+}
+
+output "cluster_oidc" {
+  value = "${aws_eks_cluster.eks-cluster.identity[0].oidc[0].issuer}"
 }

modules/eks-cluster/valiables.tf

@@ -12,3 +12,8 @@ variable "subnet_list" {
   type = list(string)
 
 }
+
+variable "client_id" {
+  type = string
+
+}

modules/eks-node-group/main.tf

@@ -0,0 +1,12 @@
+resource "aws_eks_node_group" "eks-ng" {
+  cluster_name    = var.cluster_name
+  node_group_name = var.node_group_name
+  node_role_arn   = var.iam_role_arn
+  subnet_ids      = var.subnet_list
+
+  scaling_config {
+    desired_size = var.desired_size
+    max_size     = var.max_size
+    min_size     = var.min_size
+  }
+}

modules/eks-node-group/outputs.tf

@@ -0,0 +1,5 @@
+output "ng_sg" {
+  description = "Identifier of the remote access EC2 Security Group."
+  value       = aws_eks_node_group.eks-ng.resources
+
+}

modules/eks-node-group/variables.tf

@@ -0,0 +1,21 @@
+variable "node_group_name" {
+  type = string
+}
+variable "cluster_name" {
+  type = string
+}
+variable "iam_role_arn" {
+  type = string
+}
+variable "subnet_list" {
+  type = list(string)
+}
+variable "desired_size" {
+  type = number
+}
+variable "max_size" {
+  type = number
+}
+variable "min_size" {
+  type = number
+}

modules/iam/eks-cluster.json.tftpl

@@ -1,14 +0,0 @@
-{
-    "Version" : "2012-10-17",
-    "Statement" : [
-      {
-        "Effect" : "Allow",
-        "Principal" : {
-          "Service" : [
-            "eks.amazonaws.com"
-          ]
-        },
-        "Action" : "sts:AssumeRole"
-      }
-    ]
-  }

modules/nat-gateway/main.tf

@@ -0,0 +1,24 @@
+resource "aws_eip" "nat-eip" {
+  vpc = true
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_nat_gateway" "example" {
+  allocation_id = aws_eip.nat-eip.id
+  subnet_id     = var.subnet_id
+
+  tags = {
+    Name = "gw NAT"
+  }
+
+  # To ensure proper ordering, it is recommended to add an explicit dependency
+  # on the Internet Gateway for the VPC.
+  # depends_on = [aws_internet_gateway.example]
+}
+# resource "aws_nat_gateway" "example" {
+#   connectivity_type = "private"
+#   subnet_id         = aws_subnet.example.id
+# }

modules/nat-gateway/outputs.tf

@@ -0,0 +1,4 @@
+output "nat_id" {
+    value = aws_nat_gateway.example.id
+  
+}

modules/nat-gateway/variables.tf

@@ -0,0 +1,5 @@
+variable "subnet_id" {
+  description = "subnet id"
+  type        = string
+
+}

modules/route-add/main.tf

@@ -1,7 +1,26 @@
-resource "aws_route" "route-add" {
-  route_table_id            = var.route_public_id
-  destination_cidr_block    = "0.0.0.0/0"
+resource "aws_route" "route-igw-add" {
+  count = format("%.1s", var.gw_type) == "i" ? 1 : 0
+  route_table_id            = var.route_id
+  destination_cidr_block    = var.destination_cidr
   gateway_id = var.igw_id
-  depends_on                = [var.route_public_id]
+  depends_on                = [var.route_id]
 #   depends_on                = [aws_route_table.testing]
+}
+resource "aws_route" "route-nat-add" {
+  count = format("%.1s", var.gw_type) == "n" ? 1 : 0
+  route_table_id            = var.route_id
+  destination_cidr_block    = var.destination_cidr
+  nat_gateway_id = var.nat_id
+  depends_on                = [var.route_id]
+#   depends_on                = [aws_route_table.testing]
+}
+
+# transit_gateway_id -
+resource "aws_route" "route-tgw-add" {
+  count = format("%.1s", var.gw_type) == "t" ? 1 : 0
+  route_table_id            = var.route_id
+  destination_cidr_block    = var.destination_cidr
+  # "10.0.0.0/8"
+  transit_gateway_id = var.tgw_id
+  depends_on                = [var.route_id]
 }

modules/route-add/variables.tf

@@ -1,9 +1,30 @@
-variable "route_public_id" {
+variable "destination_cidr" {
+    description = "destination cidr"
+    type = string
+  
+}
+variable "route_id" {
     description = "value"
     type = string
 }
 
+variable "gw_type" {
+    description = "gateway type. nat or igw"
+    type = string
+}
 variable "igw_id" {
     description = "value"
     type = string
+    default = "null"
+}
+variable "nat_id" {
+    description = "value"
+    type = string
+    default = "null"
+}
+
+variable "tgw_id" {
+    description = "value"
+    type = string
+    default = "null"
 }

modules/route-table/main.tf

@@ -4,10 +4,10 @@
 */
 
 //public
-resource "aws_route_table" "public-table" {
+resource "aws_route_table" "rt-tbl" {
   vpc_id = var.vpc_id
   tags = {
-    Name = "${var.tag_name}-route-public"
+    Name = "${var.tag_name}"
   }
 
 #   route {

modules/route-table/outputs.tf

@@ -1,5 +1,5 @@
-output "route_public_id" {
+output "route_id" {
     description = "get route_public_id"
-    value = aws_route_table.public-table.id
+    value = aws_route_table.rt-tbl.id
 
 }

modules/route53-record/main.tf

@@ -0,0 +1,20 @@
+resource "aws_route53_record" "default" {
+  count   = var.type_alias ? 0 : 1
+  zone_id = var.zone_id
+  name    = var.prefix
+  type    = var.type
+  ttl     = var.ttl
+  records = var.record_list
+}
+
+resource "aws_route53_record" "alias" {
+  count   = var.type_alias ? 1 : 0
+  zone_id = var.zone_id
+  name    = var.name
+
+  type    = var.type
+
+  ttl     = var.ttl
+  
+  records = var.record_list
+}

modules/route53-record/variables.tf

@@ -0,0 +1,20 @@
+variable "zone_id" {
+    description = "set host-zone id"
+    type = string
+}
+variable "prefix" {
+    description = "set host-zone id"
+    type = string
+}
+variable "type" {
+    description = "set host-zone id"
+    type = string
+}
+variable "ttl" {
+    description = "set host-zone id"
+    type = string
+}
+variable "record_list" {
+    description = "set host-zone id"
+    type = list(string)
+}

modules/route53/main.tf

@@ -0,0 +1,5 @@
+resource "aws_route53_zone" "primary" {
+  name = var.name
+  comment = "hq-dns-server"
+}
+

modules/route53/outputs.tf

@@ -0,0 +1,4 @@
+output "zone_id" {
+    value = aws_route53_zone.primary.zone_id
+  
+}

modules/route53/variables.tf

@@ -0,0 +1,4 @@
+variable "name" {
+    description = "route53 name"
+    type = string
+}

modules/templates/main.tf

@@ -1,24 +0,0 @@
-resource "aws_iam_role" "eks-cluster" {
-  name = "iam role eks-cluster"
-
-  # Terraform's "jsonencode" function converts a
-  # Terraform expression result to valid JSON syntax.
-  assume_role_policy = jsonencode({
-    "Version" : "2012-10-17",
-    "Statement" : [
-      {
-        "Effect" : "Allow",
-        "Principal" : {
-          "Service" : [
-            "eks.amazonaws.com"
-          ]
-        },
-        "Action" : "sts:AssumeRole"
-      }
-    ]
-  })
-
-  tags = {
-    tag-key = "eks-cluster-rule"
-  }
-}

modules/transit-gateway-route-add/main.tf

@@ -0,0 +1,5 @@
+resource "aws_ec2_transit_gateway_route" "example" {
+  destination_cidr_block         = var.cidr
+  transit_gateway_attachment_id  = var.attatch_id
+  transit_gateway_route_table_id = var.route_table_id
+}

modules/transit-gateway-route-add/variables.tf

@@ -0,0 +1,13 @@
+variable "cidr" {
+  description = "cidr"
+  type        = string
+
+}
+variable "route_table_id" {
+  description = "route_table_id"
+  type        = string
+
+}
+variable "attatch_id" {
+  type = string
+}

modules/transit-gateway/main.tf

@@ -0,0 +1,6 @@
+resource "aws_ec2_transit_gateway" "tgw" {
+  description = "tgw"
+  tags = {
+    Name = "${var.tag_name}"
+  }
+}

modules/transit-gateway/outputs.tf

@@ -0,0 +1,6 @@
+output "tgw_id" {
+  value = aws_ec2_transit_gateway.tgw.id
+}
+output "tgw_route-table_id" {
+  value = aws_ec2_transit_gateway.tgw.association_default_route_table_id
+}

modules/transit-gateway/variables.tf

@@ -0,0 +1,5 @@
+variable "tag_name" {
+  description = "tag_name"
+  type        = string
+
+}

modules/transit-gw-vpc-attatch/main.tf

@@ -0,0 +1,5 @@
+resource "aws_ec2_transit_gateway_vpc_attachment" "tgw-vpc-attatch" {
+  subnet_ids         = var.subnet_id_list
+  transit_gateway_id = var.tgw_id
+  vpc_id             = var.vpc_id
+}

modules/transit-gw-vpc-attatch/outputs.tf

@@ -0,0 +1,4 @@
+output "attach_id" {
+    value = aws_ec2_transit_gateway_vpc_attachment.tgw-vpc-attatch.id
+  
+}

modules/transit-gw-vpc-attatch/variables.tf

@@ -0,0 +1,14 @@
+variable "subnet_id_list" {
+  description = "subnet_id_list"
+  type        = list(string)
+}
+
+variable "tgw_id" {
+  description = "tgw_id"
+  type        = string
+}
+
+variable "vpc_id" {
+  description = "vpc_id"
+  type        = string
+}

modules/vpc-subnet/main.tf

@@ -9,7 +9,8 @@ resource "aws_subnet" "subnets" {
     map_public_ip_on_launch = var.public_ip_on ? true : false
     
     tags = {
-    Name = var.vpc_name
-    # Name = module.vpc_hq.vpcHq.id
+    Name = "${var.public_ip_on ? "22shop-eks-public" : "22shop-eks-private"}"
+    "kubernetes.io/role/elb" = "${var.k8s_ingress ? 1 : 0}"
+    "kubernetes.io/role/internal-elb" = "${var.k8s_ingress ? 0 : 1}"
     }
 }

modules/vpc-subnet/valiables.tf

@@ -7,7 +7,6 @@ variable "vpc_name" {
     description = "set vpc name"
     type = string
 }
-
 // reference | https://github.com/davidcsi/terraform/blob/master/healthchecks/main.tf
 variable "subnet-az-list" {
     description = "Subnet available zone & cidr"
@@ -32,6 +31,11 @@ variable "subnet-az-list" {
     # }
 }
 
+
 variable "public_ip_on" {
   type = bool
+}
+
+variable "k8s_ingress" {
+  type = bool
 }

modules/vpn_conn/main.tf

@@ -0,0 +1,17 @@
+resource "aws_vpn_connection" "example" {
+  customer_gateway_id = var.cgw_id
+  
+  transit_gateway_id = var.tgw_id
+  
+  type = "ipsec.1"
+
+  tunnel1_preshared_key = var.preshared_key
+  tunnel2_preshared_key = var.preshared_key
+
+  static_routes_only = true
+  tags = {
+    Name = "terraform_ipsec_vpn_example"
+  }
+}
+#   outside_ip_address_type                 = "PrivateIpv4"
+#   transport_transit_gateway_attachment_id = data.aws_ec2_transit_gateway_dx_gateway_attachment.example.id

modules/vpn_conn/outputs.tf

@@ -0,0 +1,10 @@
+output "vpn_conn_tunnel-1_ip" {
+  value = aws_vpn_connection.example.tunnel1_address
+}
+output "vpn_conn_tunnel-2_ip" {
+  value = aws_vpn_connection.example.tunnel2_address
+}
+output "attach_id" {
+  value = aws_vpn_connection.example.transit_gateway_attachment_id
+  
+}

modules/vpn_conn/variables.tf

@@ -0,0 +1,13 @@
+variable "cgw_id" {
+    type = string
+  
+}
+
+variable "tgw_id" {
+    type = string
+  
+}
+variable "preshared_key" {
+    type = string
+  
+}

pord_hq-ecr/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "4.49.0"
+  constraints = "~> 4.0"
+  hashes = [
+    "h1:HxPUxrHpAJey832OwVk3J2T7lHpRzMavqjXDzaFyM6I=",
+  ]
+}

pord_hq-ecr/main.tf

@@ -0,0 +1,19 @@
+// prod - dev
+provider "aws" {
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #4.x버전의 AWS공급자 허용
+  version = "~> 4.0"
+
+}
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+
+module "ecr" {
+  source = "../modules/ecr"
+
+  names_list = ["app", "shop"]
+  //names_list = ["web", "nginx", "mariadb"]
+}

pord_hq-ecr/terraform.tf

@@ -4,7 +4,7 @@ terraform {
     organization = "22shop"
 
     workspaces {
-      name = "tf-cloud-backend"
+      name = "hq-ecr"
     }
   }
 }

pord_hq-ecr/variables.tf

@@ -0,0 +1,45 @@
+# variable "cidr_block" {
+#     type = string
+#     default = "10.3.0.0/16"
+
+# }
+
+variable "prod_name" {
+  description = "value"
+  type        = string
+  default     = "22shop"
+}
+
+# variable "igw_id" {
+#     description = "value"
+#     type = string
+# }
+
+variable "subnet-az-public" {
+  description = "Subnet available zone & cidr"
+  type        = map(map(string))
+  default = {
+    "zone-a" = {
+      name = "ap-northeast-2a"
+      cidr = "10.10.1.0/24"
+    }
+    "zone-c" = {
+      name = "ap-northeast-2c"
+      cidr = "10.10.3.0/24"
+    }
+  }
+}
+variable "subnet-az-private" {
+  description = "Subnet available zone & cidr"
+  type        = map(map(string))
+  default = {
+    "zone-b" = {
+      name = "ap-northeast-2b"
+      cidr = "10.10.2.0/24"
+    }
+    "zone-d" = {
+      name = "ap-northeast-2d"
+      cidr = "10.10.4.0/24"
+    }
+  }
+}

prod-hq-bak/.terraform.lock.hcl

@@ -1,20 +0,0 @@
-# This file is maintained automatically by "terraform init".
-# Manual edits may be lost in future updates.
-
-provider "registry.terraform.io/hashicorp/aws" {
-  version     = "2.70.1"
-  constraints = "~> 2.0"
-  hashes = [
-    "h1:SQR8egOmFbwBHOSMzUYg/Mt4e0LsQe91ma9I2Ug3lmY=",
-    "zh:04137cdf128cf21dcd190bbba4d4bba43c7868c52ad646b0eaa54a8b8b8160a7",
-    "zh:30c9f956133a102b4a426d76dd3ef1a42332d9875261a06aa877409aa6b2b556",
-    "zh:3107a43647454a3d6d847fba6aa593650af0f6a353272c04450408af5f4d353a",
-    "zh:3f17285478313af822447b453fa4e37f30ef221f0b0e8f2e4655f1ac9f9de1a2",
-    "zh:5a626f7a3c4a9fea3bdfde63aedbf6eea73760f3b228f776f1132b61d00c7ff2",
-    "zh:6aafc9dd79b511b9e3d0ec49f7df1d1fd697c3c873d1d70a2be1a12475b50206",
-    "zh:6fb29b48ccc85f7e9dfde3867ce99d6d65fb76bea68c97d404fae431758a8f03",
-    "zh:c47be92e1edf2e8675c932030863536c1a79decf85b2baa4232e5936c5f7088f",
-    "zh:cd0a4b28c5e4b5092043803d17fd1d495ecb926c2688603c4cdab4c20f3a91f4",
-    "zh:fb0ff763cb5d7a696989e58e0e4b88b1faed2a62b9fb83f4f7c2400ad6fabb84",
-  ]
-}

prod-hq-bastion/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "4.49.0"
+  constraints = "~> 4.0"
+  hashes = [
+    "h1:HxPUxrHpAJey832OwVk3J2T7lHpRzMavqjXDzaFyM6I=",
+  ]
+}

prod-hq-bastion/main.tf

@@ -0,0 +1,100 @@
+// prod - dev
+provider "aws" {
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #4.x버전의 AWS공급자 허용
+  version = "~> 4.0"
+
+}
+
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+// 테라폼클라우드
+data "terraform_remote_state" "hq_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "hq-network"
+    }
+  }
+}
+locals {
+  account_id = data.aws_caller_identity.this.account_id
+  vpc_id        = data.terraform_remote_state.hq_vpc_id.outputs.vpc_id
+  subnet = data.terraform_remote_state.hq_vpc_id.outputs.private_subnet
+  common_tags = {
+    project = "22shop"
+    owner   = "icurfer"
+
+  }
+  tcp_port = {
+    # any_port    = 0
+    http_port   = 80
+    https_port  = 443
+    ssh_port    = 22
+    # dns_port    = 53
+    # django_port = 8000
+    mysql_port  = 3306
+  }
+  udp_port = {
+    dns_port = 53
+  }
+  any_protocol  = "-1"
+  tcp_protocol  = "tcp"
+  icmp_protocol = "icmp"
+  all_ips       = ["0.0.0.0/0"]
+
+  node_group_scaling_config = {
+    desired_size = 2
+    max_size     = 4
+    min_size     = 1
+  }
+}
+module "ec2_bastion" {
+  source = "../modules/ec2"
+  # ami_name = "ami-035233c9da2fabf52" //amazon linux
+  ami_name = "ami-0ee5d9d505bab04d3" //custom
+  instance_type = "t2.micro"
+  tag_name = "bastion"
+  public_ip_associate = true
+  key_name = "default-shop"
+  private_subnet = data.terraform_remote_state.hq_vpc_id.outputs.private_subnet.zone-a.id
+  public_subnet = data.terraform_remote_state.hq_vpc_id.outputs.public_subnet.zone-a.id
+  sg_list = [module.ec2_sg.sg_id]
+}
+
+module "ec2_sg" {
+  source  = "../modules/sg"
+  sg_name = "${local.common_tags.project}-bastion-sg"
+  vpc_id = local.vpc_id
+
+}
+module "ec2_sg_ingress_http" {
+  for_each          = local.tcp_port
+  source            = "../modules/sg-rule-add"
+  type              = "ingress"
+  from_port         = each.value
+  to_port           = each.value
+  protocol          = local.tcp_protocol
+  cidr_blocks       = local.all_ips
+  security_group_id = module.ec2_sg.sg_id
+
+  tag_name = each.key
+}
+
+module "ec2_sg_egress_all" {
+  source            = "../modules/sg-rule-add"
+  type              = "egress"
+  from_port         = local.any_protocol
+  to_port           = local.any_protocol
+  protocol          = local.any_protocol
+  cidr_blocks       = local.all_ips
+  security_group_id = module.ec2_sg.sg_id
+
+  tag_name = "egress-all"
+}

prod-hq-bastion/outputs.tf

@@ -0,0 +1,8 @@
+output "public_ip_associate" {
+    value = module.ec2_bastion.public_ip_associate
+  
+}
+output "sg_id" {
+    value = module.ec2_bastion.sg_id
+  
+}

prod-hq-bastion/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  backend "remote"{
+    hostname = "app.terraform.io"
+    organization = "22shop"
+
+    workspaces {
+      name = "hq-bastion"
+    }
+  }
+}

prod-hq-bastion/vailables.tf

@@ -0,0 +1,3 @@
+# variable "subnet_id" {
+#   type = string
+# }

prod-hq-dns/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "4.49.0"
+  constraints = "~> 4.0"
+  hashes = [
+    "h1:HxPUxrHpAJey832OwVk3J2T7lHpRzMavqjXDzaFyM6I=",
+  ]
+}

prod-hq-dns/main.tf

@@ -0,0 +1,76 @@
+// prod - dev
+provider "aws" {
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #4.x버전의 AWS공급자 허용
+  version = "~> 4.0"
+
+}
+
+
+locals {
+  common_tags = {
+    project = "22shop"
+    owner   = "icurfer"
+
+  }
+  tcp_port = {
+    # any_port    = 0
+    http_port   = 80
+    https_port  = 443
+    ssh_port    = 22
+    dns_port    = 53
+    django_port = 8000
+    mysql_port  = 3306
+  }
+  udp_port = {
+    dns_port = 53
+  }
+  any_protocol  = "-1"
+  tcp_protocol  = "tcp"
+  icmp_protocol = "icmp"
+  all_ips       = ["0.0.0.0/0"]
+
+  node_group_scaling_config = {
+    desired_size = 2
+    max_size     = 4
+    min_size     = 1
+  }
+}
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+
+locals {
+  dns_name = "ddochi.ml"
+}
+// 테라폼클라우드
+data "terraform_remote_state" "hq_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "hq-network"
+    }
+  }
+}
+
+module "rote53" {
+  source = "../modules/route53"
+  name   = local.dns_name
+}
+
+resource "aws_route53_record" "www" {
+  zone_id = module.rote53.zone_id
+  name    = "hq.ddochi.ml"
+  type    = "A"
+
+  alias {
+    name                   = "k8s-22shopekscluster-42f56c4a0b-625381113.ap-northeast-2.elb.amazonaws.com"
+    zone_id                = "ZWKZPGTI48KDX" //rt53이아니고 로드밸런서 호스팅영역
+    evaluate_target_health = true
+  }
+}

prod-hq-dns/outputs.tf

@@ -0,0 +1,13 @@
+//main-outputs
+# output "aws_id" {
+#   description = "The AWS Account ID."
+#   value       = data.aws_caller_identity.this.account_id
+# }
+# output "cluster_oidc" {
+#   description = "eks_cluster_identity"
+#   value       = module.eks_cluster.cluster_oidc
+# }
+# output "subnet" {
+#   description = "The name of vpc hq id"
+#   value       = module.subnet_public.subnet
+# }

prod-hq-dns/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  backend "remote"{
+    hostname = "app.terraform.io"
+    organization = "22shop"
+
+    workspaces {
+      name = "hq-dns"
+    }
+  }
+}

prod-hq-efs/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.76.1"
+  constraints = "~> 3.0"
+  hashes = [
+    "h1:UOk/iZppUGLh2zjmKJKKWCD6e79GsQokO2xfzOcKjxo=",
+  ]
+}

prod-hq-efs/main.tf

@@ -0,0 +1,116 @@
+// prod-hq-efs - main
+provider "aws" {
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #3.x버전의 AWS공급자 허용
+  version = "~> 3.0"
+}
+
+locals {
+  // 초기 설정값
+  vpc_id        = data.terraform_remote_state.hq_vpc_id.outputs.vpc_id
+  # subnet = data.terraform_remote_state.hq_vpc_id.outputs.public_subnet
+  subnet = data.terraform_remote_state.hq_vpc_id.outputs.private_subnet
+  common_tags = {
+    project = "22shop-efs"
+    owner   = "icurfer"
+
+  }
+  tcp_port = {
+    http_port   = 80
+    https_port  = 443
+    ssh_port    = 22
+    dns_port    = 53
+    # django_port = 8000
+    # mysql_port  = 3306
+    nfs_port    = 2049
+  }
+#   udp_port = {
+#     dns_port = 53
+#   }
+
+  any_port    = 0
+
+  any_protocol  = "-1"
+  tcp_protocol  = "tcp"
+  icmp_protocol = "icmp"
+  all_ips       = ["0.0.0.0/0"]
+
+}
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+
+// 테라폼클라우드
+data "terraform_remote_state" "hq_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "hq-network"
+    }
+  }
+}
+
+// 보안그룹 생성
+module "efs_sg" {
+  source  = "../modules/sg"
+  sg_name = "${local.common_tags.project}-sg"
+  vpc_id = local.vpc_id
+
+}
+
+module "efs_sg_ingress_http" {
+  for_each          = local.tcp_port
+  source            = "../modules/sg-rule-add"
+  type              = "ingress"
+  from_port         = each.value
+  to_port           = each.value
+  protocol          = local.tcp_protocol
+  cidr_blocks       = local.all_ips
+  security_group_id = module.efs_sg.sg_id
+
+  tag_name = each.key
+}
+
+module "efs_sg_egress_all" {
+  source            = "../modules/sg-rule-add"
+  type              = "egress"
+  from_port         = local.any_protocol
+  to_port           = local.any_protocol
+  protocol          = local.any_protocol
+  cidr_blocks       = local.all_ips
+  security_group_id = module.efs_sg.sg_id
+
+  tag_name = "egress-all"
+}
+
+module "efs_fs" {
+  source            = "../modules/efs-fs"
+  
+}
+
+module "efs-mnt_tg1" {
+  source            = "../modules/efs-mnt-tg"
+  fs_id = module.efs_fs.efs_fs_id
+  subnet_id = "${local.subnet.zone-a.id}"
+  sg_list = [module.efs_sg.sg_id]
+  
+  depends_on = [
+    module.efs_fs
+  ]
+}
+
+module "efs-mnt_tg2" {
+  source            = "../modules/efs-mnt-tg"
+  fs_id = module.efs_fs.efs_fs_id
+  subnet_id = "${local.subnet.zone-c.id}"
+  sg_list = [module.efs_sg.sg_id]
+  
+  depends_on = [
+    module.efs_fs
+  ]
+}

prod-hq-efs/outputs.tf

@@ -0,0 +1,3 @@
+output "efs_fs" {
+ value = module.efs_fs.efs_fs_id
+}

prod-hq-efs/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  backend "remote"{
+    hostname = "app.terraform.io"
+    organization = "22shop"
+
+    workspaces {
+      name = "hq-efs"
+    }
+  }
+}

prod-hq-eks/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.76.1"
+  constraints = "~> 3.0"
+  hashes = [
+    "h1:UOk/iZppUGLh2zjmKJKKWCD6e79GsQokO2xfzOcKjxo=",
+  ]
+}

prod-hq-eks/main.tf

@@ -1,20 +1,25 @@
 // prod - main
 provider "aws" {
-  region = "ap-northeast-2"
-
-  #2.x버전의 AWS공급자 허용
-  version = "~> 2.0"
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #3.x버전의 AWS공급자 허용
+  version = "~> 3.0"
 
 }
 
 locals {
+  account_id = data.aws_caller_identity.this.account_id
+  vpc_id        = data.terraform_remote_state.hq_vpc_id.outputs.vpc_id
+  subnet = data.terraform_remote_state.hq_vpc_id.outputs.private_subnet
+  # subnet = data.terraform_remote_state.hq_vpc_id.outputs.public_subnet
   common_tags = {
     project = "22shop"
     owner   = "icurfer"
 
   }
   tcp_port = {
-    any_port    = 0
+    # any_port    = 0
     http_port   = 80
     https_port  = 443
     ssh_port    = 22
@@ -29,6 +34,12 @@ locals {
   tcp_protocol  = "tcp"
   icmp_protocol = "icmp"
   all_ips       = ["0.0.0.0/0"]
+
+  node_group_scaling_config = {
+    desired_size = 2
+    max_size     = 4
+    min_size     = 1
+  }
 }
 
 // GET 계정정보
@@ -51,61 +62,22 @@ data "aws_iam_policy_document" "eks_node_group_role" {
 
     principals {
       type        = "Service"
-      identifiers = ["eks-nodegroup.amazonaws.com"]
+      identifiers = ["ec2.amazonaws.com"]
     }
   }
 }
 
-# module "vpc_hq" {
-module "vpc_hq" {
-  source = "../modules/vpc"
-  #   source = "github.com/Seong-dong/team_prj/tree/main/modules/vpc"
-  tag_name   = "${local.common_tags.project}-vpc"
-  cidr_block = "10.3.0.0/16"
+// 테라폼클라우드
+data "terraform_remote_state" "hq_vpc_id" {
+  backend = "remote"
 
-}
+  config = {
+    organization = "22shop"
 
-module "vpc_igw" {
-  source = "../modules/igw"
-
-  vpc_id = module.vpc_hq.vpc_hq_id
-
-  tag_name = "${local.common_tags.project}-vpc_igw"
-
-  depends_on = [
-    module.vpc_hq
-  ]
-}
-
-module "subnet_public" {
-  source = "../modules/vpc-subnet"
-
-  vpc_id         = module.vpc_hq.vpc_hq_id
-  subnet-az-list = var.subnet-az-public
-  public_ip_on   = true
-  vpc_name       = "${local.common_tags.project}-public"
-}
-
-// public route
-module "route_public" {
-  source   = "../modules/route-table"
-  tag_name = "${local.common_tags.project}-route_table"
-  vpc_id   = module.vpc_hq.vpc_hq_id
-
-}
-
-module "route_add" {
-  source          = "../modules/route-add"
-  route_public_id = module.route_public.route_public_id
-  igw_id          = module.vpc_igw.igw_id
-}
-
-module "route_association" {
-  source         = "../modules/route-association"
-  route_table_id = module.route_public.route_public_id
-
-  association_count = 2
-  subnet_ids        = [module.subnet_public.subnet.zone-a.id, module.subnet_public.subnet.zone-c.id]
+    workspaces = {
+      name = "hq-network"
+    }
+  }
 }
 
 // eks 클러스터 역할 생성
@@ -138,6 +110,9 @@ module "eks_cluster_iam_att2" {
   ]
 }
 
+//ec2 Bastion Host
+
+
 // eks 노드그룹 역할 생성 및 추가
 module "eks_nodegroup_iam" {
   source   = "../modules/iam"
@@ -176,15 +151,13 @@ module "eks_nodegroup_iam_att_3" {
   ]
 }
 
-// 보안그룹 생성
+// 보안그룹 생성(추가 보안그룹)
 module "eks_sg" {
   source  = "../modules/sg"
   sg_name = "${local.common_tags.project}-sg"
-  vpc_id  = module.vpc_hq.vpc_hq_id
+  # vpc_id  = module.vpc_hq.vpc_hq_id
+  vpc_id = local.vpc_id
 
-  depends_on = [
-    module.vpc_hq
-  ]
 }
 
 module "eks_sg_ingress_http" {
@@ -213,38 +186,55 @@ module "eks_sg_egress_all" {
 }
 
 module "eks_cluster" {
-  source            = "../modules/eks-cluster"
-  name = local.common_tags.project
+  source       = "../modules/eks-cluster"
+  name         = local.common_tags.project
   iam_role_arn = module.eks_cluster_iam.iam_arn
-  sg_list = [module.eks_sg.sg_id]
-  subnet_list = [module.subnet_public.subnet.zone-a.id, module.subnet_public.subnet.zone-c.id] #변경해야될수있음.
+  sg_list      = [module.eks_sg.sg_id]
+  # subnet_list  = [module.subnet_public.subnet.zone-a.id, module.subnet_public.subnet.zone-c.id] #변경해야될수있음.
+  subnet_list = [local.subnet.zone-a.id, local.subnet.zone-c.id]
 
   depends_on = [
     module.eks_cluster_iam,
     module.eks_sg,
-    module.vpc_hq
+  ]
+
+  client_id = data.aws_caller_identity.this.id
+
+}
+
+module "eks_node_group" {
+  source          = "../modules/eks-node-group"
+  node_group_name = "${local.common_tags.project}-ng"
+  cluster_name    = module.eks_cluster.cluster_name
+  # iam_role_arn    = module.eks_nodegroup_iam.iam_arn
+  iam_role_arn = "arn:aws:iam::${local.account_id}:role/eks-nodegroup-test"
+  # subnet_list  = [module.subnet_public.subnet.zone-a.id, module.subnet_public.subnet.zone-c.id] #변경해야될수있음.
+  subnet_list = [local.subnet.zone-a.id, local.subnet.zone-c.id]
+
+  desired_size = local.node_group_scaling_config.desired_size
+  max_size     = local.node_group_scaling_config.max_size
+  min_size     = local.node_group_scaling_config.min_size
+
+
+  depends_on = [
+    module.eks_nodegroup_iam,
+    module.eks_cluster,
   ]
 }
-# EKS테스트 할때 활성
-# module "ecr" {
-#     source = "../modules/ecr"
 
-#     names_list = ["web", "nginx", "mariadb"]
+# module "ng_sg_ingress_http" {
+#   # for_each          = local.tcp_port
+#   source            = "../modules/sg-rule-add"
+#   type              = "ingress"
+#   from_port         = "2049"
+#   to_port           = "2049"
+#   protocol          = local.tcp_protocol
+#   cidr_blocks       = local.all_ips
+#   security_group_id = module.eks_node_group.ng_sg
+
+#   tag_name = "ng_sg_sub"
+
+#   depends_on = [
+#     module.eks_node_group
+#   ]
 # }
-
-/* 
-terraform_remote_state reference method
-terraform cloud
-*/
-# data "terraform_remote_state" "foo" {
-#   backend = "remote"
-
-#   config = {
-#     organization = "company"
-
-#     workspaces = {
-#       name = "workspace"
-#     }
-#   }
-# }
-

prod-hq-eks/outputs.tf

@@ -0,0 +1,18 @@
+//main-outputs
+output "aws_id" {
+  description = "The AWS Account ID."
+  value       = data.aws_caller_identity.this.account_id
+}
+output "ng_sg" {
+  description = "Identifier of the remote access EC2 Security Group."
+  value = module.eks_node_group.ng_sg
+  
+}
+# output "cluster_oidc" {
+#   description = "eks_cluster_identity"
+#   value       = module.eks_cluster.cluster_oidc
+# }
+# output "subnet" {
+#   description = "The name of vpc hq id"
+#   value       = module.subnet_public.subnet
+# }

prod-hq-eks/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  backend "remote"{
+    hostname = "app.terraform.io"
+    organization = "22shop"
+
+    workspaces {
+      name = "hq-eks"
+    }
+  }
+}

prod-hq-eks/valiables.tf

@@ -0,0 +1,45 @@
+# variable "cidr_block" {
+#     type = string
+#     default = "10.3.0.0/16"
+
+# }
+
+variable "prod_name" {
+  description = "value"
+  type        = string
+  default     = "22shop"
+}
+
+# variable "igw_id" {
+#     description = "value"
+#     type = string
+# }
+
+variable "subnet-az-public" {
+  description = "Subnet available zone & cidr"
+  type        = map(map(string))
+  default = {
+    "zone-a" = {
+      name = "ap-northeast-2a"
+      cidr = "10.3.1.0/24"
+    }
+    "zone-c" = {
+      name = "ap-northeast-2c"
+      cidr = "10.3.3.0/24"
+    }
+  }
+}
+variable "subnet-az-private" {
+  description = "Subnet available zone & cidr"
+  type        = map(map(string))
+  default = {
+    "zone-b" = {
+      name = "ap-northeast-2b"
+      cidr = "10.3.2.0/24"
+    }
+    "zone-d" = {
+      name = "ap-northeast-2d"
+      cidr = "10.3.4.0/24"
+    }
+  }
+}

prod-hq-network-tg/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.76.1"
+  constraints = "~> 3.0"
+  hashes = [
+    "h1:UOk/iZppUGLh2zjmKJKKWCD6e79GsQokO2xfzOcKjxo=",
+  ]
+}

prod-hq-network-tg/main.tf

@@ -0,0 +1,246 @@
+// prod - main
+provider "aws" {
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #3.x버전의 AWS공급자 허용
+  version = "~> 3.0"
+
+}
+
+locals {
+  region = "ap-northeast-2"
+  common_tags = {
+    project = "22shop-hq-idc"
+    owner   = "icurfer"
+  }
+  cidr = {
+    vpc    = "10.3.0.0/16"
+    zone_a = "10.3.1.0/24"
+    zone_c = "10.3.3.0/24"
+    zone_b = "10.3.2.0/24"
+    zone_d = "10.3.4.0/24"
+  }
+  tcp_port = {
+    any_port    = 0
+    http_port   = 80
+    https_port  = 443
+    ssh_port    = 22
+    dns_port    = 53
+    django_port = 8000
+    mysql_port  = 3306
+    nfs_port    = 2049
+  }
+  udp_port = {
+    dns_port = 53
+  }
+  any_protocol  = "-1"
+  tcp_protocol  = "tcp"
+  icmp_protocol = "icmp"
+  all_ips       = ["0.0.0.0/0"]
+}
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+
+// 테라폼클라우드
+// web-network
+data "terraform_remote_state" "hq_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "web-network-sdjo"
+    }
+  }
+}
+// hq-network
+data "terraform_remote_state" "web_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "hq-network"
+    }
+  }
+}
+// hidc-network
+data "terraform_remote_state" "hidc_vpc_id" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "hidc-network-bkkim"
+    }
+  }
+}
+// widc-ec2
+data "terraform_remote_state" "widc_ec2" {
+  backend = "remote"
+
+  config = {
+    organization = "22shop"
+
+    workspaces = {
+      name = "widc-ec2-bkkim"
+    }
+  }
+}
+
+locals {
+  account_id = data.aws_caller_identity.this.account_id
+
+  hq_vpc_id   = data.terraform_remote_state.hq_vpc_id.outputs.vpc_id
+  web_vpc_id  = data.terraform_remote_state.web_vpc_id.outputs.vpc_id
+  hidc_vpc_id = data.terraform_remote_state.hidc_vpc_id.outputs.vpc_id
+
+  hq_subnet   = data.terraform_remote_state.hq_vpc_id.outputs.private_subnet_tgw
+  web_subnet  = data.terraform_remote_state.web_vpc_id.outputs.private_subnet_tgw
+  hidc_subnet = data.terraform_remote_state.hidc_vpc_id.outputs.private_subnet
+
+  cgw_ip = data.terraform_remote_state.widc_ec2.outputs.eip
+}
+
+// tg 생성
+module "tgw" {
+  source   = "../modules/transit-gateway"
+  tag_name = "22shop-tgw"
+}
+// tg 연결
+module "tgw-hq_vpc-attatch" {
+  source         = "../modules/transit-gw-vpc-attatch"
+  tgw_id         = module.tgw.tgw_id
+  vpc_id         = local.hq_vpc_id
+  subnet_id_list = [local.hq_subnet.zone-a.id, local.hq_subnet.zone-c.id]
+
+  depends_on = [
+    module.tgw
+  ]
+}
+module "tgw-web_vpc-attatch" {
+  source         = "../modules/transit-gw-vpc-attatch"
+  tgw_id         = module.tgw.tgw_id
+  vpc_id         = local.web_vpc_id
+  subnet_id_list = [local.web_subnet.zone-a.id, local.web_subnet.zone-c.id]
+
+  depends_on = [
+    module.tgw
+  ]
+}
+module "tgw-hidc_vpc-attatch" {
+  source         = "../modules/transit-gw-vpc-attatch"
+  tgw_id         = module.tgw.tgw_id
+  vpc_id         = local.hidc_vpc_id
+  subnet_id_list = [local.hidc_subnet.zone-a.id, local.hidc_subnet.zone-c.id]
+
+  depends_on = [
+    module.tgw
+  ]
+}
+// route table에 경로 추가.
+module "route_add_hq_public" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.hq_vpc_id.outputs.route_public_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "route_add_hq_private" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.hq_vpc_id.outputs.route_private_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "route_add_web_public" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.web_vpc_id.outputs.route_public_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "route_add_web_private" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.web_vpc_id.outputs.route_private_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+
+module "route_add_hidc_public" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.hidc_vpc_id.outputs.route_public_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "route_add_hidc_private" {
+  source           = "../modules/route-add"
+  route_id         = data.terraform_remote_state.hidc_vpc_id.outputs.route_private_id
+  tgw_id           = module.tgw.tgw_id
+  gw_type          = "tgw"
+  destination_cidr = "10.0.0.0/8"
+
+  depends_on = [
+    module.tgw
+  ]
+}
+
+module "cgw" {
+  source = "../modules/cgw"
+  cgw_ip = local.cgw_ip
+}
+
+module "vpn_conn" {
+  source = "../modules/vpn_conn"
+  cgw_id = module.cgw.cgw_id
+  tgw_id = module.tgw.tgw_id
+  preshared_key = "cloudneta"
+  depends_on = [
+    module.tgw,
+    module.cgw
+  ]
+}
+
+module "transit-gateway-route-add" {
+  source         = "../modules/transit-gateway-route-add"
+  cidr           = "10.2.0.0/16"
+  route_table_id = module.tgw.tgw_route-table_id
+  attatch_id     = module.vpn_conn.attach_id
+
+  depends_on = [
+    module.tgw,
+    module.cgw
+  ]
+}

prod-hq-network-tg/outputs.tf

@@ -0,0 +1,6 @@
+output "vpn_conn_tunnel-1_ip" {
+  value = module.vpn_conn.vpn_conn_tunnel-1_ip
+}
+output "vpn_conn_tunnel-2_ip" {
+  value = module.vpn_conn.vpn_conn_tunnel-2_ip
+}

prod-hq-network-tg/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  backend "remote"{
+    hostname = "app.terraform.io"
+    organization = "22shop"
+
+    workspaces {
+      name = "common-tgw-sdjo"
+    }
+  }
+}

prod-hq-network/.terraform.lock.hcl

@@ -0,0 +1,10 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.76.1"
+  constraints = "~> 3.0"
+  hashes = [
+    "h1:UOk/iZppUGLh2zjmKJKKWCD6e79GsQokO2xfzOcKjxo=",
+  ]
+}

prod-hq-network/main.tf

@@ -0,0 +1,252 @@
+// prod - main
+provider "aws" {
+  region                  = "ap-northeast-2"
+  profile                 = "22shop"
+  shared_credentials_file = "C:/Users/aa/.aws/credentials"
+  #2.x버전의 AWS공급자 허용
+  version = "~> 3.0"
+
+}
+
+locals {
+  region = "ap-northeast-2"
+  common_tags = {
+    project = "22shop-eks"
+    owner   = "icurfer"
+  }
+  cidr = {
+    vpc            = "10.3.0.0/16"
+    zone_a         = "10.3.1.0/24"
+    zone_c         = "10.3.3.0/24"
+    zone_a_private = "10.3.2.0/24"
+    zone_c_private = "10.3.4.0/24"
+    zone_a_tgw     = "10.3.5.0/24"
+    zone_c_tgw     = "10.3.6.0/24"
+  }
+  tcp_port = {
+    any_port    = 0
+    http_port   = 80
+    https_port  = 443
+    ssh_port    = 22
+    dns_port    = 53
+    django_port = 8000
+    mysql_port  = 3306
+  }
+  udp_port = {
+    dns_port = 53
+  }
+  any_protocol  = "-1"
+  tcp_protocol  = "tcp"
+  icmp_protocol = "icmp"
+  all_ips       = ["0.0.0.0/0"]
+
+  node_group_scaling_config = {
+    desired_size = 2
+    max_size     = 4
+    min_size     = 1
+  }
+
+  eks_ingress_type = {
+    public  = "kubernetes.io/role/elb"
+    private = "kubernetes.io/role/internal-elb=1"
+  }
+}
+
+// GET 계정정보
+data "aws_caller_identity" "this" {}
+
+// 테라폼클라우드
+# data "terraform_remote_state" "hq_vpc_id" {
+#   backend = "remote"
+
+#   config = {
+#     organization = "22shop"
+
+#     workspaces = {
+#       name = "hq-network"
+#     }
+#   }
+# }
+
+// eks를 위한 iam역할 생성 데이터 조회
+data "aws_iam_policy_document" "eks-assume-role-policy" {
+  statement {
+    actions = ["sts:AssumeRole"]
+
+    principals {
+      type        = "Service"
+      identifiers = ["eks.amazonaws.com"]
+    }
+  }
+}
+data "aws_iam_policy_document" "eks_node_group_role" {
+  statement {
+    actions = ["sts:AssumeRole"]
+
+    principals {
+      type        = "Service"
+      identifiers = ["ec2.amazonaws.com"]
+    }
+  }
+}
+
+//vpc 생성
+module "vpc_hq" {
+  source = "../modules/vpc"
+  #   source = "github.com/Seong-dong/team_prj/tree/main/modules/vpc"
+  tag_name   = "${local.common_tags.project}-vpc"
+  cidr_block = "10.3.0.0/16"
+
+}
+
+//외부통신 gateway
+module "vpc_igw" {
+  source = "../modules/igw"
+
+  vpc_id = module.vpc_hq.vpc_hq_id
+
+  tag_name = "${local.common_tags.project}-vpc_igw"
+
+  depends_on = [
+    module.vpc_hq
+  ]
+}
+
+// public 서브넷 생성
+module "subnet_public" {
+  source = "../modules/vpc-subnet"
+
+  vpc_id = module.vpc_hq.vpc_hq_id
+  subnet-az-list = {
+    "zone-a" = {
+      name = "${local.region}a"
+      cidr = local.cidr.zone_a
+    }
+    "zone-c" = {
+      name = "${local.region}c"
+      cidr = local.cidr.zone_c
+    }
+  }
+  public_ip_on = true
+  # vpc_name       = "${local.common_tags.project}-public"
+  #alb-ingress 생성을 위해 지정
+  k8s_ingress = true
+  # vpc_name = local.eks_ingress_type.public
+  vpc_name = local.eks_ingress_type.private
+}
+// private외부통신을 위한 nat
+module "nat_gw" {
+  source    = "../modules/nat-gateway"
+  subnet_id = module.subnet_public.subnet.zone-a.id
+
+  depends_on = [
+    module.vpc_igw
+  ]
+}
+
+// public route
+module "route_public" {
+  source   = "../modules/route-table"
+  tag_name = "${local.common_tags.project}-public_tbl-sdjo"
+  vpc_id   = module.vpc_hq.vpc_hq_id
+
+}
+
+module "route_add" {
+  source   = "../modules/route-add"
+  route_id = module.route_public.route_id
+  igw_id   = module.vpc_igw.igw_id
+  gw_type  = "igw"
+  destination_cidr = "0.0.0.0/0"
+}
+
+module "route_association" {
+  source         = "../modules/route-association"
+  route_table_id = module.route_public.route_id
+
+  association_count = 2
+  subnet_ids        = [module.subnet_public.subnet.zone-a.id, module.subnet_public.subnet.zone-c.id]
+}
+#----------------------------------------------------------------------------------------------------#
+######################################################################################################
+#----------------------------------------------------------------------------------------------------#
+module "subnet_private" {
+  source = "../modules/vpc-subnet"
+
+  vpc_id = module.vpc_hq.vpc_hq_id
+  subnet-az-list = {
+    "zone-a" = {
+      name = "${local.region}a"
+      cidr = local.cidr.zone_a_private
+    }
+    "zone-c" = {
+      name = "${local.region}c"
+      cidr = local.cidr.zone_c_private
+    }
+  }
+  public_ip_on = false
+  # vpc_name       = "${local.common_tags.project}-public"
+  #alb-ingress 생성을 위해 지정
+  k8s_ingress = false
+  vpc_name    = "null"
+}
+
+// private route
+module "route_private" {
+  source   = "../modules/route-table"
+  tag_name = "${local.common_tags.project}-private_tbl-sdjo"
+  vpc_id   = module.vpc_hq.vpc_hq_id
+
+}
+module "route_add_nat" {
+  source   = "../modules/route-add"
+  route_id = module.route_private.route_id
+  nat_id   = module.nat_gw.nat_id
+  gw_type  = "nat"
+  destination_cidr = "0.0.0.0/0"
+}
+module "route_association_nat" {
+  source         = "../modules/route-association"
+  route_table_id = module.route_private.route_id
+
+  association_count = 2
+  subnet_ids        = [module.subnet_private.subnet.zone-a.id, module.subnet_private.subnet.zone-c.id]
+}
+#----------------------------------------------------------------------------------------------------#
+######################################################################################################
+#----------------------------------------------------------------------------------------------------#
+//tgw-subnet
+module "subnet_private_tgw" {
+  source = "../modules/vpc-subnet"
+
+  vpc_id = module.vpc_hq.vpc_hq_id
+  subnet-az-list = {
+    "zone-a" = {
+      name = "${local.region}a"
+      cidr = local.cidr.zone_a_tgw
+    }
+    "zone-c" = {
+      name = "${local.region}c"
+      cidr = local.cidr.zone_c_tgw
+    }
+  }
+  public_ip_on = false
+  # vpc_name       = "${local.common_tags.project}-public"
+  #alb-ingress 생성을 위해 지정
+  k8s_ingress = false
+  vpc_name    = "null"
+}
+// private route
+module "route_private_tgw" {
+  source   = "../modules/route-table"
+  tag_name = "${local.common_tags.project}-private_tbl_tgw-sdjo"
+  vpc_id   = module.vpc_hq.vpc_hq_id
+
+}
+module "route_association_tgw" {
+  source         = "../modules/route-association"
+  route_table_id = module.route_private_tgw.route_id
+
+  association_count = 2
+  subnet_ids        = [module.subnet_private_tgw.subnet.zone-a.id, module.subnet_private_tgw.subnet.zone-c.id]
+}

prod-hq-network/outputs.tf

@@ -0,0 +1,45 @@
+//main-outputs
+output "aws_id" {
+  description = "The AWS Account ID."
+  value       = data.aws_caller_identity.this.account_id
+}
+
+output "public_subnet" {
+  description = "The name of vpc hq id"
+  value       = module.subnet_public.subnet
+}
+
+output "private_subnet" {
+  description = "The name of vpc hq id"
+  value       = module.subnet_private.subnet
+}
+
+output "private_subnet_tgw" {
+  description = "The name of vpc hq id"
+  value       = module.subnet_private_tgw.subnet
+}
+
+output "vpc_id" {
+  description = "vpc_id"
+  value = module.vpc_hq.vpc_hq_id
+  
+}
+
+output "nat_gw_id" {
+  description = "vpc_id"
+  value = module.nat_gw.nat_id
+  
+}
+
+output "route_public_id" {
+  description = "get private route id"
+  value = module.route_public.route_id
+}
+output "route_private_id" {
+  description = "get private route id"
+  value = module.route_private.route_id
+}
+output "route_private_tgw_id" {
+  description = "get private route id"
+  value = module.route_private_tgw.route_id
+}

prod-hq-network/terraform.tf

@@ -0,0 +1,10 @@
+terraform {
+  backend "remote"{
+    hostname = "app.terraform.io"
+    organization = "22shop"
+
+    workspaces {
+      name = "hq-network"
+    }
+  }
+}

prod-hq-network/valiables.tf

@@ -0,0 +1,51 @@
+# variable "cidr_block" {
+#     type = string
+#     default = "10.3.0.0/16"
+
+# }
+
+variable "prod_name" {
+  description = "value"
+  type        = string
+  default     = "22shop"
+}
+
+# variable "nat_id" {
+#   description = "nat id value"
+#   type = string
+#   default = "insert_id"
+  
+# }
+# variable "igw_id" {
+#     description = "value"
+#     type = string
+# }
+
+# variable "subnet-az-public" {
+#   description = "Subnet available zone & cidr"
+#   type        = map(map(string))
+#   default = {
+#     "zone-a" = {
+#       name = "ap-northeast-2a"
+#       cidr = "10.3.1.0/24"
+#     }
+#     "zone-c" = {
+#       name = "ap-northeast-2c"
+#       cidr = "10.3.3.0/24"
+#     }
+#   }
+# }
+# variable "subnet-az-private" {
+#   description = "Subnet available zone & cidr"
+#   type        = map(map(string))
+#   default = {
+#     "zone-b" = {
+#       name = "ap-northeast-2b"
+#       cidr = "10.3.2.0/24"
+#     }
+#     "zone-d" = {
+#       name = "ap-northeast-2d"
+#       cidr = "10.3.4.0/24"
+#     }
+#   }
+# }

prod-hq/.terraform.lock.hcl

@@ -1,20 +0,0 @@
-# This file is maintained automatically by "terraform init".
-# Manual edits may be lost in future updates.
-
-provider "registry.terraform.io/hashicorp/aws" {
-  version     = "2.70.1"
-  constraints = "~> 2.0"
-  hashes = [
-    "h1:SQR8egOmFbwBHOSMzUYg/Mt4e0LsQe91ma9I2Ug3lmY=",
-    "zh:04137cdf128cf21dcd190bbba4d4bba43c7868c52ad646b0eaa54a8b8b8160a7",
-    "zh:30c9f956133a102b4a426d76dd3ef1a42332d9875261a06aa877409aa6b2b556",
-    "zh:3107a43647454a3d6d847fba6aa593650af0f6a353272c04450408af5f4d353a",
-    "zh:3f17285478313af822447b453fa4e37f30ef221f0b0e8f2e4655f1ac9f9de1a2",
-    "zh:5a626f7a3c4a9fea3bdfde63aedbf6eea73760f3b228f776f1132b61d00c7ff2",
-    "zh:6aafc9dd79b511b9e3d0ec49f7df1d1fd697c3c873d1d70a2be1a12475b50206",
-    "zh:6fb29b48ccc85f7e9dfde3867ce99d6d65fb76bea68c97d404fae431758a8f03",
-    "zh:c47be92e1edf2e8675c932030863536c1a79decf85b2baa4232e5936c5f7088f",
-    "zh:cd0a4b28c5e4b5092043803d17fd1d495ecb926c2688603c4cdab4c20f3a91f4",
-    "zh:fb0ff763cb5d7a696989e58e0e4b88b1faed2a62b9fb83f4f7c2400ad6fabb84",
-  ]
-}

prod-hq/outputs.tf

@@ -1,10 +0,0 @@
-//main-outputs
-output "aws_id" {
-  description = "The AWS Account ID."
-  value       = data.aws_caller_identity.this.account_id
-}
-
-output "subnet" {
-  description = "The name of vpc hq id"
-  value       = module.subnet_public.subnet
-}