terraform-2

README.md

@@ -69,3 +69,24 @@ testapp_port = 9292
 
 **Создан балансировщик lb.tf
 **Созданы инстансы через Count
+
+#Домашнее задание №7
+1.Удалены из папки terraform файлы main.tf, outputs.tf,
+terraform.tfvars, variables.tf, так как они теперь перенесены
+в stage и prod
+2.Параметризирована конфигурация модулей
+нужным
+3.Отформатированы конфигурационные файлы, используя команду
+terraform fmt
+
+*
+1.Настроено храниение стрейт файла в удаленном бекенде для stage и prod, использован Yandex Object Stprage в качестве бекенда.
+Описание бекенда вынесено в файл beckend.tf
+2.Terraform видит текущее состояние, если перенести конфигурационные файлы.
+3.Проверена работа блокировок при одновременном запуске.
+4.Добавлено описание.
+
+**
+1.Добавлены необходимые provisioner в модули для деплоя и работы приложения. Файлы находятся в директории модуля.
+2.Отключение provisioner не реализовано.
+3.Добавлено описание.

packer/app.json

@@ -0,0 +1,23 @@
+{
+    "builders": [
+        {
+            "type": "yandex",
+            "service_account_key_file": "{{user `service_account_key_file`}}",
+            "folder_id": "{{user `folder_id`}}",
+            "source_image_family": "{{user `source_image`}}",
+            "image_name": "reddit-app-base-{{timestamp}}",
+            "image_family": "reddit-app-base",
+            "ssh_username": "{{user `ssh_username`}}",
+            "platform_id": "{{user `platform_id`}}",
+            "image_description" : "{user `image_description`}}",
+            "use_ipv4_nat": true
+        }
+               ],
+    "provisioners": [
+        {
+            "type": "shell",
+            "script": "scripts/install_ruby.sh",
+            "execute_command": "sudo {{.Path}}"
+        }
+    ]
+}

packer/db.json

@@ -0,0 +1,23 @@
+{
+    "builders": [
+        {
+            "type": "yandex",
+            "service_account_key_file": "{{user `service_account_key_file`}}",
+            "folder_id": "{{user `folder_id`}}",
+            "source_image_family": "{{user `source_image`}}",
+            "image_name": "reddit-db-base-{{timestamp}}",
+            "image_family": "reddit-db-base",
+            "ssh_username": "{{user `ssh_username`}}",
+            "platform_id": "{{user `platform_id`}}",
+            "image_description" : "{user `image_description`}}",
+            "use_ipv4_nat": true
+        }
+               ],
+    "provisioners": [
+        {
+            "type": "shell",
+            "script": "scripts/install_mongodb.sh",
+            "execute_command": "sudo {{.Path}}"
+        }
+    ]
+}

terraform/bucket.tf

@@ -0,0 +1,52 @@
+#Создание бакета в Яндекс
+terraform {
+  required_version = ">= 0.13.0"
+  required_providers {
+    yandex = {
+      source  = "yandex-cloud/yandex"
+      version = ">= 0.35.0"
+    }
+  }
+  backend "s3" {
+    endpoint = "storage.yandexcloud.net"
+    bucket   = "otus-bucket77"
+    region   = "ru-central1"
+    key      = "terraform.tfstate"
+
+    skip_region_validation      = true
+    skip_credentials_validation = true
+  }
+}
+
+provider "yandex" {
+  token     = var.token
+  cloud_id  = var.cloud_id
+  folder_id = var.folder_id
+  zone      = var.zone
+}
+#Создание сервисного аккаунта для бакета
+#resource "yandex_iam_service_account" "sa" {
+#  name = "bucket-usr"
+#}
+
+# Назначение роли сервисному аккаунту
+#resource "yandex_resourcemanager_folder_iam_member" "sa-editor" {
+#  folder_id = var.folder_id
+#  role      = "storage.editor"
+#  member    = "serviceAccount:${yandex_iam_service_account.sa.id}"
+#}
+
+# Создание статического ключа доступа
+#resource "yandex_iam_service_account_static_access_key" "sa-static-key" {
+#  service_account_id = "ajemb8vlrh354jgttdj7"
+#  description        = "static access key for object storage"
+#}
+
+#Создание бакета с использованием ключа
+#resource "yandex_storage_bucket" "otus-bucket77" {
+#  access_key = "YCAJEuzaiGtOQqhmCFtn9qvJ_"
+#  secret_key = "YCOk7MScJuPR8m8St2uErvVWxNsWlzmmR3RvnKL4"
+#  bucket     = "otus-bucket77"
+#  key        = "terraform.tfstate"
+#  source     = "/home/alex/otus/AlexUnderGo_infra/terraform/"
+#}

terraform/modules/app/files/deploy.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+sleep 1m
+set -e
+APP_DIR=${1:-$HOME}
+sudo apt-get install -y git
+git clone -b monolith https://github.com/express42/reddit.git $APP_DIR/reddit
+cd $APP_DIR/reddit
+bundle install
+sudo mv /tmp/puma.service /etc/systemd/system/puma.service
+sudo systemctl start puma
+sudo systemctl enable puma

terraform/modules/app/files/puma.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Puma HTTP Server
+After=network.target
+
+[Service]
+Type=simple
+User=ubuntu
+WorkingDirectory=/home/ubuntu/reddit
+ExecStart=/bin/bash -lc 'puma'
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

terraform/modules/app/main.tf

@@ -0,0 +1,54 @@
+resource "yandex_compute_instance" "app" {
+
+  name = "reddit-app"
+
+  labels = {
+    tags = "reddit-app"
+  }
+  resources {
+    cores         = 2
+    memory        = 2
+    core_fraction = 20
+  }
+
+  boot_disk {
+    initialize_params {
+      image_id = var.app_disk_image
+    }
+  }
+
+  network_interface {
+    subnet_id = var.subnet_id
+    nat       = true
+  }
+
+  metadata = {
+    ssh-keys = "ubuntu:${file(var.public_key_path)}"
+  }
+
+  connection {
+    type  = "ssh"
+    host  = self.network_interface[0].nat_ip_address
+    user  = "ubuntu"
+    agent = true
+    # путь до приватного ключа (Не используется. Подключаюсь через agent ssh)
+    #  private_key = var.private_key
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+#     "echo \"export DATABASE_URL=${var.db_url}\" >> /home/ubuntu/.bashrc",
+      "sudo systemctl set-environment DATABASE_URL=${var.db_url}",
+      #     "source /home/ubuntu/.bashrc"
+    ]
+  }
+
+  provisioner "file" {
+    source      = "${path.module}/files/puma.service"
+    destination = "/tmp/puma.service"
+  }
+  provisioner "remote-exec" {
+    script = "${path.module}/files/deploy.sh"
+  }
+
+}

terraform/modules/app/outputs.tf

@@ -0,0 +1,3 @@
+output "external_ip_address_app" {
+  value = yandex_compute_instance.app.network_interface.0.nat_ip_address
+}

terraform/modules/app/variables.tf

@@ -0,0 +1,14 @@
+variable "public_key_path" {
+  description = "Path to the public key used for ssh access"
+}
+variable "app_disk_image" {
+  description = "Disk image for reddit app"
+  default     = "reddit-app-base"
+}
+variable "subnet_id" {
+  description = "Subnets for modules"
+}
+variable "db_url" {
+  description = "Url for DB mongo"
+}
+

terraform/modules/app/versions.tf

@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.13.0"
+  required_providers {
+    yandex = {
+      source  = "yandex-cloud/yandex"
+      version = ">= 0.35.0"
+    }
+  }
+}

terraform/modules/db/main.tf

@@ -0,0 +1,46 @@
+resource "yandex_compute_instance" "db" {
+#  provider = yandex
+
+  name = "reddit-db"
+  labels = {
+    tags = "reddit-db"
+  }
+
+  resources {
+    cores  = 2
+    memory = 2
+    core_fraction = 20
+  }
+
+  boot_disk {
+    initialize_params {
+      image_id = var.db_disk_image
+    }
+  }
+
+  network_interface {
+    subnet_id = var.subnet_id
+    nat = true
+  }
+
+  metadata = {
+  ssh-keys = "ubuntu:${file(var.public_key_path)}"
+  }
+#Connect to VM
+connection {
+     type  = "ssh"
+     host  = self.network_interface[0].nat_ip_address
+     user  = "ubuntu"
+     agent = true
+     # путь до приватного ключа (Не используется. Подключаюсь через agent ssh)
+     #  private_key = var.private_key
+   }
+#Change mongod conf for use external IP
+   provisioner "remote-exec" {
+     inline = [
+       "sudo sed -i 's/bindIp: 127.0.0.1/bindIp: 0.0.0.0/' /etc/mongod.conf",
+       "sudo systemctl restart mongod",
+     ]
+   }
+
+}

terraform/modules/db/outputs.tf

@@ -0,0 +1,3 @@
+output "external_ip_address_db" {
+value = yandex_compute_instance.db.network_interface.0.nat_ip_address
+}

terraform/modules/db/variables.tf

@@ -0,0 +1,10 @@
+variable public_key_path {
+description = "Path to the public key used for ssh access"
+}
+variable db_disk_image {
+description = "Disk image for reddit db"
+default = "reddit-db-base"
+}
+variable subnet_id {
+description = "Subnets for modules"
+}

terraform/modules/db/versions.tf

@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.13.0"
+  required_providers {
+    yandex = {
+      source  = "yandex-cloud/yandex"
+      version = ">= 0.35.0"
+    }
+  }
+}