diff options
Diffstat (limited to 'terraform/infra.tf')
| -rw-r--r-- | terraform/infra.tf | 236 |
1 files changed, 0 insertions, 236 deletions
diff --git a/terraform/infra.tf b/terraform/infra.tf index f53fcaa4..8f30b30a 100644 --- a/terraform/infra.tf +++ b/terraform/infra.tf @@ -1,38 +1,3 @@ -# Define required providers -terraform { -required_version = ">= 0.14.0" - required_providers { - openstack = { - source = "terraform-provider-openstack/openstack" - version = "~> 1.35.0" - } - } -} - -# Configure the OpenStack Provider -provider "openstack" { - auth_url = "https://fra1.citycloud.com:5000" -} - - - -data "openstack_images_image_v2" "ubuntu" { - name = "Ubuntu 20.04 Focal Fossa 20210616" - most_recent = true - - properties = { - key = "value" - } -} - -locals { - username = "cloud" - image_name = "Ubuntu 20.04 Focal Fossa 20210616" - name_prefix = "bazel-poc" - flavor_name_frontend = "1C-2GB-20GB" -} - - data "openstack_compute_flavor_v2" "flavor_frontend" { name = local.flavor_name_frontend } @@ -42,207 +7,6 @@ data "openstack_images_image_v2" "image_id" { most_recent = true } -# Create keypairs -resource "openstack_compute_keypair_v2" "pedro-keypair" { - name = "pedro-alvarez_latty" - public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrfYhQAgqiwtcl37TfBR7N5Fq7ze17Cn4UUbz/Nuby/9qfypUp5Ir2x0P1otbQfozwWBOwmKCFRQMs+fZXFpWsvshNcmaw+rMI8wP1Bx2cqSuPusLPEYbvRbnfGo/E7aj/GvpSKRlBCGF3tORzGAmQsogUUXXcXP7PKIkPB3Jo04K8IeuSoRGd8cGfUWA6dcx9YuZHeJ3o/RzpV8UvU3Ge50mLf05cbrS2LlXgnG2PGbuBX5l87O6u3KUXq5zoafd0AtpSelNcVfAjpwdPokyuR1pXn+3q2w+l7ExmIAjwJV+QJeSSRMRfiHbk/+D3vYUlnqoarB0UrsTb2mY2tAPD" -} - -resource "openstack_networking_network_v2" "baserock_network" { - name = "Baserock Network" - admin_state_up = "true" -} - -resource "openstack_networking_subnet_v2" "baserock_subnet" { - name = "Baserock Subnet" - network_id = "${openstack_networking_network_v2.baserock_network.id}" - cidr = "10.3.0.0/24" - ip_version = 4 -} - -resource "openstack_networking_secgroup_v2" "sg_base" { - name = "base" - description = "Allow all outgoing traffic, and allow incoming ICMP (ping) and SSH connections" - delete_default_rules = "true" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_base_egress_icmp" { - direction = "egress" - ethertype = "IPv4" - protocol = "icmp" - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_base.id}" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_base_egress_any" { - direction = "egress" - ethertype = "IPv4" - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_base.id}" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_base_egress_any_v6" { - direction = "egress" - ethertype = "IPv6" - remote_ip_prefix = "::/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_base.id}" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_base_ingress_icmp" { - direction = "ingress" - ethertype = "IPv4" - protocol = "icmp" - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_base.id}" -} - - -resource "openstack_networking_secgroup_rule_v2" "sg_base_ingress_ssh" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 22 - port_range_max = 22 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_base.id}" -} - - - -resource "openstack_networking_secgroup_v2" "sg_haste_server" { - name = "haste-server" - description = "Allow incoming TCP requests for haste server" - delete_default_rules = "true" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_haste_server_main" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 7777 - port_range_max = 7777 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_haste_server.id}" -} - -resource "openstack_networking_secgroup_v2" "sg_gitlab_bot" { - name = "gitlab-bot" - description = "Allow incoming TCP requests for gitlab-bot" - delete_default_rules = "true" -} - - -resource "openstack_networking_secgroup_rule_v2" "sg_gitlab_bot_main" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 1337 - port_range_max = 1337 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_gitlab_bot.id}" -} - - -resource "openstack_networking_secgroup_v2" "sg_git_server" { - name = "git-server" - description = "Allow inbound SSH, HTTP, HTTPS and Git requests." - delete_default_rules = "true" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_git_server_http" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 80 - port_range_max = 80 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_git_server.id}" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_git_server_https" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 443 - port_range_max = 443 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_git_server.id}" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_git_server_git" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 9418 - port_range_max = 9418 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_git_server.id}" -} - - - -resource "openstack_networking_secgroup_v2" "sg_shared_artifact_cache" { - name = "shared-artifact-cache" - description = "Allow inbound HTTP, HTTPS and ostree-over-SSH (which I've assigned to port 22200)" - delete_default_rules = "true" -} - -resource "openstack_networking_secgroup_rule_v2" "sg_shared_artifact_cache_http" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 80 - port_range_max = 80 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_shared_artifact_cache.id}" -} -resource "openstack_networking_secgroup_rule_v2" "sg_shared_artifact_cache_https" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 443 - port_range_max = 443 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_shared_artifact_cache.id}" -} -resource "openstack_networking_secgroup_rule_v2" "sg_shared_artifact_cache_ssh" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 22200 - port_range_max = 22200 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_shared_artifact_cache.id}" -} - - -resource "openstack_networking_secgroup_v2" "sg_web_server" { - name = "web-server" - description = "Allow inbound HTTP, HTTPS and ostree-over-SSH (which I've assigned to port 22200)" - delete_default_rules = "true" -} - - -resource "openstack_networking_secgroup_rule_v2" "sg_web_server_http" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 80 - port_range_max = 80 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_web_server.id}" -} -resource "openstack_networking_secgroup_rule_v2" "sg_web_server_https" { - direction = "ingress" - ethertype = "IPv4" - protocol = "tcp" - port_range_min = 443 - port_range_max = 443 - remote_ip_prefix = "0.0.0.0/0" - security_group_id = "${openstack_networking_secgroup_v2.sg_web_server.id}" -} - - resource "openstack_networking_port_v2" "frontend_port" { name = "port_1" network_id = "${openstack_networking_network_v2.baserock_network.id}" |