Skip to content

Latest commit

 

History

History
138 lines (122 loc) · 12.9 KB

README.md

File metadata and controls

138 lines (122 loc) · 12.9 KB
Raw

Terraform AWS Module for Instellar

This module automatically forms LXD cluster on amazon AWS. This terraform module will do the following:

  • Setup networking
  • Setup multi az public subnet
  • Setup bastion node
  • Setup compute instances
  • Setup Private Key access
  • Automatically form a cluster
  • Destroy a cluster
  • Enable removal of specific nodes gracefully
  • Protect against database-leader deletion

These functionality come together to enable the user to fully manage LXD cluster using IaC (infrastructure as code)

Requirements

Name Version
terraform >= 1.0.0
aws ~> 5.0
tls 4.0.4

Providers

Name Version
aws 5.43.0
cloudinit 2.3.3
ssh 2.7.0
terraform n/a
tls 4.0.4

Modules

Name Source Version
balancer upmaru/instellar/aws//modules/balancer ~> 0.9
global_accelerator upmaru/instellar/aws//modules/global-accelerator ~> 0.9

Resources

Name Type
aws_iam_instance_profile.bastion resource
aws_iam_instance_profile.nodes resource
aws_iam_role.bastion resource
aws_iam_role.nodes resource
aws_iam_role_policy_attachment.bastion_core resource
aws_iam_role_policy_attachment.bastion_patch resource
aws_iam_role_policy_attachment.nodes_core resource
aws_iam_role_policy_attachment.nodes_patch resource
aws_instance.bastion resource
aws_instance.bootstrap_node resource
aws_instance.nodes resource
aws_key_pair.bastion resource
aws_key_pair.terraform_cloud resource
aws_placement_group.nodes resource
aws_security_group.bastion_firewall resource
aws_security_group.nodes_firewall resource
aws_vpc_security_group_egress_rule.allow_bastion_outgoing_v4 resource
aws_vpc_security_group_egress_rule.allow_bastion_outgoing_v6 resource
aws_vpc_security_group_egress_rule.allow_nodes_outgoing_v4 resource
aws_vpc_security_group_egress_rule.allow_nodes_outgoing_v6 resource
aws_vpc_security_group_ingress_rule.allow_ssh resource
aws_vpc_security_group_ingress_rule.cross_nodes resource
aws_vpc_security_group_ingress_rule.nodes_from_bastion resource
aws_vpc_security_group_ingress_rule.nodes_public_http_v4 resource
aws_vpc_security_group_ingress_rule.nodes_public_http_v6 resource
aws_vpc_security_group_ingress_rule.nodes_public_https_v4 resource
aws_vpc_security_group_ingress_rule.nodes_public_https_v6 resource
aws_vpc_security_group_ingress_rule.nodes_public_lxd_v4 resource
aws_vpc_security_group_ingress_rule.nodes_public_lxd_v6 resource
aws_vpc_security_group_ingress_rule.nodes_public_uplink_v4 resource
aws_vpc_security_group_ingress_rule.nodes_public_uplink_v6 resource
ssh_resource.cluster_join_token resource
ssh_resource.node_detail resource
ssh_resource.trust_token resource
terraform_data.bastion_cloudinit resource
terraform_data.reboot resource
terraform_data.removal resource
tls_private_key.bastion_key resource
tls_private_key.terraform_cloud resource
aws_ami.ubuntu data source
aws_iam_policy_document.assume_role data source
aws_key_pair.terminal data source
cloudinit_config.bastion data source
cloudinit_config.node data source

Inputs

Name Description Type Default Required
ami_architecture The architecture of the AMI string "amd64" no
balancer Enable Load Balancer bool false no
balancer_deletion_protection Enable balancer deletion protection bool true no
balancer_ssh Enable SSH port on balancer bool true no
bastion_size Bastion instance type? string "t3a.micro" no
bastion_ssh Enable SSH port bool true no
blueprint Identifier of the blueprint string n/a yes
cluster_topology How many nodes do you want in your cluster? 
list(object({
    id   = number
    name = string
    size = optional(string, "t3.medium")
  }))
 [] no
global_accelerator Enable Global Accelerator bool false no
identifier Name of your cluster string n/a yes
network_dependencies value list [] no
node_detail_revision The revision of the node detail number 1 no
node_monitoring Enable / Disable detailed monitoring bool false no
node_size Which instance type? string "t3a.medium" no
protect_leader Protect the database leader node bool true no
public_subnet_ids Public subnet ids to pass in if block type is compute list(string) n/a yes
publicly_accessible Make the cluster publically accessible? If you use a load balancer this can be false. bool true no
region AWS region string n/a yes
ssh_keys List of ssh key names list(string) [] no
ssm Enable SSM bool false no
storage_size How much storage on your nodes? number 40 no
volume_type Type of EBS Volume to use string "gp3" no
vpc_id vpc id to pass in if block type is compute string n/a yes
vpc_ip_range VPC ip range string n/a yes

Outputs

Name Description
balancer Load balancer details
bastion_access Bastion access output for passing into other modules
bastion_security_group_id Bastion security group id
bootstrap_node Bootstrap node details
cluster_address Bootstrap node public ip
identifier Identifier of the cluster
nodes Compute nodes details
nodes_iam_role IAM Role for nodes and bootstrap node
nodes_security_group_id Nodes security group id
subnet_ids Subnet IDs
trust_token Trust token for the cluster
vpc_id VPC id