terraform-demo/prod-hq-network-tg/main.tf

// prod - main
provider "aws" {
  region                  = "ap-northeast-2"
  profile                 = "22shop"
  shared_credentials_file = "C:/Users/aa/.aws/credentials"
  #3.x버전의 AWS공급자 허용
  version = "~> 3.0"

}

locals {
  region = "ap-northeast-2"
  common_tags = {
    project = "22shop-hq-idc"
    owner   = "icurfer"
  }
  cidr = {
    vpc    = "10.3.0.0/16"
    zone_a = "10.3.1.0/24"
    zone_c = "10.3.3.0/24"
    zone_b = "10.3.2.0/24"
    zone_d = "10.3.4.0/24"
  }
  tcp_port = {
    any_port    = 0
    http_port   = 80
    https_port  = 443
    ssh_port    = 22
    dns_port    = 53
    django_port = 8000
    mysql_port  = 3306
    nfs_port    = 2049
  }
  udp_port = {
    dns_port = 53
  }
  any_protocol  = "-1"
  tcp_protocol  = "tcp"
  icmp_protocol = "icmp"
  all_ips       = ["0.0.0.0/0"]
}

// GET 계정정보
data "aws_caller_identity" "this" {}

// 테라폼클라우드
// web-network
data "terraform_remote_state" "hq_vpc_id" {
  backend = "remote"

  config = {
    organization = "22shop"

    workspaces = {
      name = "web-network-sdjo"
    }
  }
}
// hq-network
data "terraform_remote_state" "web_vpc_id" {
  backend = "remote"

  config = {
    organization = "22shop"

    workspaces = {
      name = "hq-network"
    }
  }
}
// hidc-network
data "terraform_remote_state" "hidc_vpc_id" {
  backend = "remote"

  config = {
    organization = "22shop"

    workspaces = {
      name = "hidc-network-bkkim"
    }
  }
}
// widc-ec2
data "terraform_remote_state" "widc_ec2" {
  backend = "remote"

  config = {
    organization = "22shop"

    workspaces = {
      name = "widc-ec2-bkkim"
    }
  }
}

locals {
  account_id = data.aws_caller_identity.this.account_id

  hq_vpc_id   = data.terraform_remote_state.hq_vpc_id.outputs.vpc_id
  web_vpc_id  = data.terraform_remote_state.web_vpc_id.outputs.vpc_id
  hidc_vpc_id = data.terraform_remote_state.hidc_vpc_id.outputs.vpc_id

  hq_subnet   = data.terraform_remote_state.hq_vpc_id.outputs.private_subnet_tgw
  web_subnet  = data.terraform_remote_state.web_vpc_id.outputs.private_subnet_tgw
  hidc_subnet = data.terraform_remote_state.hidc_vpc_id.outputs.private_subnet

  cgw_ip = data.terraform_remote_state.widc_ec2.outputs.eip
}

// tg 생성
module "tgw" {
  source   = "../modules/transit-gateway"
  tag_name = "22shop-tgw"
}
// tg 연결
module "tgw-hq_vpc-attatch" {
  source         = "../modules/transit-gw-vpc-attatch"
  tgw_id         = module.tgw.tgw_id
  vpc_id         = local.hq_vpc_id
  subnet_id_list = [local.hq_subnet.zone-a.id, local.hq_subnet.zone-c.id]

  depends_on = [
    module.tgw
  ]
}
module "tgw-web_vpc-attatch" {
  source         = "../modules/transit-gw-vpc-attatch"
  tgw_id         = module.tgw.tgw_id
  vpc_id         = local.web_vpc_id
  subnet_id_list = [local.web_subnet.zone-a.id, local.web_subnet.zone-c.id]

  depends_on = [
    module.tgw
  ]
}
module "tgw-hidc_vpc-attatch" {
  source         = "../modules/transit-gw-vpc-attatch"
  tgw_id         = module.tgw.tgw_id
  vpc_id         = local.hidc_vpc_id
  subnet_id_list = [local.hidc_subnet.zone-a.id, local.hidc_subnet.zone-c.id]

  depends_on = [
    module.tgw
  ]
}
// route table에 경로 추가.
module "route_add_hq_public" {
  source           = "../modules/route-add"
  route_id         = data.terraform_remote_state.hq_vpc_id.outputs.route_public_id
  tgw_id           = module.tgw.tgw_id
  gw_type          = "tgw"
  destination_cidr = "10.0.0.0/8"

  depends_on = [
    module.tgw
  ]
}

module "route_add_hq_private" {
  source           = "../modules/route-add"
  route_id         = data.terraform_remote_state.hq_vpc_id.outputs.route_private_id
  tgw_id           = module.tgw.tgw_id
  gw_type          = "tgw"
  destination_cidr = "10.0.0.0/8"

  depends_on = [
    module.tgw
  ]
}

module "route_add_web_public" {
  source           = "../modules/route-add"
  route_id         = data.terraform_remote_state.web_vpc_id.outputs.route_public_id
  tgw_id           = module.tgw.tgw_id
  gw_type          = "tgw"
  destination_cidr = "10.0.0.0/8"

  depends_on = [
    module.tgw
  ]
}

module "route_add_web_private" {
  source           = "../modules/route-add"
  route_id         = data.terraform_remote_state.web_vpc_id.outputs.route_private_id
  tgw_id           = module.tgw.tgw_id
  gw_type          = "tgw"
  destination_cidr = "10.0.0.0/8"

  depends_on = [
    module.tgw
  ]
}


module "route_add_hidc_public" {
  source           = "../modules/route-add"
  route_id         = data.terraform_remote_state.hidc_vpc_id.outputs.route_public_id
  tgw_id           = module.tgw.tgw_id
  gw_type          = "tgw"
  destination_cidr = "10.0.0.0/8"

  depends_on = [
    module.tgw
  ]
}

module "route_add_hidc_private" {
  source           = "../modules/route-add"
  route_id         = data.terraform_remote_state.hidc_vpc_id.outputs.route_private_id
  tgw_id           = module.tgw.tgw_id
  gw_type          = "tgw"
  destination_cidr = "10.0.0.0/8"

  depends_on = [
    module.tgw
  ]
}

module "cgw" {
  source = "../modules/cgw"
  cgw_ip = local.cgw_ip
}

module "vpn_conn" {
  source = "../modules/vpn_conn"
  cgw_id = module.cgw.cgw_id
  tgw_id = module.tgw.tgw_id
  preshared_key = "cloudneta"
  depends_on = [
    module.tgw,
    module.cgw
  ]
}

module "transit-gateway-route-add" {
  source         = "../modules/transit-gateway-route-add"
  cidr           = "10.2.0.0/16"
  route_table_id = module.tgw.tgw_route-table_id
  attatch_id     = module.vpn_conn.attach_id

  depends_on = [
    module.tgw,
    module.cgw
  ]
}