-
Notifications
You must be signed in to change notification settings - Fork 17
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add terraform example for Azure pipeline (close #65)
- Loading branch information
Showing
21 changed files
with
997 additions
and
223 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,43 @@ | ||
| ## Requirements | ||
|
|
||
| | Name | Version | | ||
| |------|---------| | ||
| | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0.0 | | ||
| | <a name="requirement_azurerm"></a> [azurerm](#requirement\_azurerm) | >= 3.58.0 | | ||
|
|
||
| ## Providers | ||
|
|
||
| | Name | Version | | ||
| |------|---------| | ||
| | <a name="provider_azurerm"></a> [azurerm](#provider\_azurerm) | >= 3.58.0 | | ||
|
|
||
| ## Modules | ||
|
|
||
| | Name | Source | Version | | ||
| |------|--------|---------| | ||
| | <a name="module_vnet"></a> [vnet](#module\_vnet) | snowplow-devops/vnet/azurerm | 0.1.2 | | ||
|
|
||
| ## Resources | ||
|
|
||
| | Name | Type | | ||
| |------|------| | ||
| | [azurerm_resource_group.rg](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/resource_group) | resource | | ||
|
|
||
| ## Inputs | ||
|
|
||
| | Name | Description | Type | Default | Required | | ||
| |------|-------------|------|---------|:--------:| | ||
| | <a name="input_location"></a> [location](#input\_location) | The location in which all resources will be created (e.g. australiaeast) | `string` | n/a | yes | | ||
| | <a name="input_prefix"></a> [prefix](#input\_prefix) | Will be prefixed to all resource names. Use to easily identify the resources created | `string` | n/a | yes | | ||
| | <a name="input_tags"></a> [tags](#input\_tags) | The tags to append to the resources in this module | `map(string)` | `{}` | no | | ||
|
|
||
| ## Outputs | ||
|
|
||
| | Name | Description | | ||
| |------|-------------| | ||
| | <a name="output_resource_group_location"></a> [resource\_group\_location](#output\_resource\_group\_location) | The location of the resource group | | ||
| | <a name="output_resource_group_name"></a> [resource\_group\_name](#output\_resource\_group\_name) | The name of the resource group | | ||
| | <a name="output_vnet_id"></a> [vnet\_id](#output\_vnet\_id) | The ID of the vNet | | ||
| | <a name="output_vnet_name"></a> [vnet\_name](#output\_vnet\_name) | The name of the vNet | | ||
| | <a name="output_vnet_subnets"></a> [vnet\_subnets](#output\_vnet\_subnets) | The IDs of subnets created inside the vNet | | ||
| | <a name="output_vnet_subnets_name_id"></a> [vnet\_subnets\_name\_id](#output\_vnet\_subnets\_name\_id) | Can be queried subnet ID by subnet name by using lookup(module.vnet.vnet\_subnets\_name\_id, subnet1) | |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| resource "azurerm_resource_group" "rg" { | ||
| name = "${var.prefix}-rg" | ||
| location = var.location | ||
|
|
||
| tags = var.tags | ||
| } | ||
|
|
||
| module "vnet" { | ||
| source = "snowplow-devops/vnet/azurerm" | ||
| version = "0.1.2" | ||
|
|
||
| name = "${var.prefix}-vnet" | ||
| resource_group_name = azurerm_resource_group.rg.name | ||
|
|
||
| tags = var.tags | ||
|
|
||
| depends_on = [azurerm_resource_group.rg] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,29 @@ | ||
| output "resource_group_name" { | ||
| description = "The name of the resource group" | ||
| value = azurerm_resource_group.rg.name | ||
| } | ||
|
|
||
| output "resource_group_location" { | ||
| description = "The location of the resource group" | ||
| value = azurerm_resource_group.rg.location | ||
| } | ||
|
|
||
| output "vnet_id" { | ||
| description = "The ID of the vNet" | ||
| value = module.vnet.vnet_id | ||
| } | ||
|
|
||
| output "vnet_name" { | ||
| description = "The name of the vNet" | ||
| value = module.vnet.vnet_name | ||
| } | ||
|
|
||
| output "vnet_subnets" { | ||
| description = "The IDs of subnets created inside the vNet" | ||
| value = module.vnet.vnet_subnets | ||
| } | ||
|
|
||
| output "vnet_subnets_name_id" { | ||
| description = "Can be queried subnet ID by subnet name by using lookup(module.vnet.vnet_subnets_name_id, subnet1)" | ||
| value = module.vnet.vnet_subnets_name_id | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| # Will be prefixed to all resource names | ||
| # Use this to easily identify the resources created and provide entropy for subsequent environments | ||
| prefix = "snowplow" | ||
|
|
||
| # The location to create resources in: https://azure.microsoft.com/en-au/explore/global-infrastructure/geographies/#overview | ||
| location = "<ADD_ME>" | ||
|
|
||
| # Extra Tags to append to created resources (optional) | ||
| tags = {} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| variable "prefix" { | ||
| description = "Will be prefixed to all resource names. Use to easily identify the resources created" | ||
| type = string | ||
| } | ||
|
|
||
| variable "location" { | ||
| description = "The location in which all resources will be created (e.g. australiaeast)" | ||
| type = string | ||
| } | ||
|
|
||
| variable "tags" { | ||
| description = "The tags to append to the resources in this module" | ||
| default = {} | ||
| type = map(string) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| terraform { | ||
| required_version = ">= 1.0.0" | ||
|
|
||
| required_providers { | ||
| azurerm = { | ||
| source = "hashicorp/azurerm" | ||
| version = ">= 3.58.0" | ||
| } | ||
| } | ||
| } | ||
|
|
||
| provider "azurerm" { | ||
| features {} | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| ## Requirements | ||
|
|
||
| | Name | Version | | ||
| |------|---------| | ||
| | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 1.0.0 | | ||
| | <a name="requirement_azurerm"></a> [azurerm](#requirement\_azurerm) | >= 3.58.0 | | ||
|
|
||
| ## Providers | ||
|
|
||
| No providers. | ||
|
|
||
| ## Modules | ||
|
|
||
| | Name | Source | Version | | ||
| |------|--------|---------| | ||
| | <a name="module_iglu_db"></a> [iglu\_db](#module\_iglu\_db) | snowplow-devops/postgresql-server/azurerm | 0.1.1 | | ||
| | <a name="module_iglu_lb"></a> [iglu\_lb](#module\_iglu\_lb) | snowplow-devops/lb/azurerm | 0.1.1 | | ||
| | <a name="module_iglu_server"></a> [iglu\_server](#module\_iglu\_server) | snowplow-devops/iglu-server-vmss/azurerm | 0.1.1 | | ||
|
|
||
| ## Resources | ||
|
|
||
| No resources. | ||
|
|
||
| ## Inputs | ||
|
|
||
| | Name | Description | Type | Default | Required | | ||
| |------|-------------|------|---------|:--------:| | ||
| | <a name="input_iglu_db_name"></a> [iglu\_db\_name](#input\_iglu\_db\_name) | The name of the database to create | `string` | n/a | yes | | ||
| | <a name="input_iglu_db_password"></a> [iglu\_db\_password](#input\_iglu\_db\_password) | The password to use to connect to the database | `string` | n/a | yes | | ||
| | <a name="input_iglu_db_username"></a> [iglu\_db\_username](#input\_iglu\_db\_username) | The username to use to connect to the database | `string` | n/a | yes | | ||
| | <a name="input_iglu_super_api_key"></a> [iglu\_super\_api\_key](#input\_iglu\_super\_api\_key) | A UUIDv4 string to use as the master API key for Iglu Server management | `string` | n/a | yes | | ||
| | <a name="input_prefix"></a> [prefix](#input\_prefix) | Will be prefixed to all resource names. Use to easily identify the resources created | `string` | n/a | yes | | ||
| | <a name="input_resource_group_name"></a> [resource\_group\_name](#input\_resource\_group\_name) | The name of the resource group to deploy resources within | `string` | n/a | yes | | ||
| | <a name="input_ssh_ip_allowlist"></a> [ssh\_ip\_allowlist](#input\_ssh\_ip\_allowlist) | The list of CIDR ranges to allow SSH traffic from | `list(any)` | n/a | yes | | ||
| | <a name="input_ssh_public_key"></a> [ssh\_public\_key](#input\_ssh\_public\_key) | The SSH public key to use for the deployment | `string` | n/a | yes | | ||
| | <a name="input_subnet_id_lb"></a> [subnet\_id\_lb](#input\_subnet\_id\_lb) | The ID of the subnet to deploy the load balancer into (e.g. iglu-agw1) | `string` | n/a | yes | | ||
| | <a name="input_subnet_id_servers"></a> [subnet\_id\_servers](#input\_subnet\_id\_servers) | The ID of the subnet to deploy the servers into (e.g. iglu1) | `string` | n/a | yes | | ||
| | <a name="input_iglu_db_ip_allowlist"></a> [iglu\_db\_ip\_allowlist](#input\_iglu\_db\_ip\_allowlist) | An optional list of CIDR ranges to allow traffic from | `list(any)` | `[]` | no | | ||
| | <a name="input_ssl_information"></a> [ssl\_information](#input\_ssl\_information) | SSL certificate information to optionally bind to the load balancer | <pre>object({<br> enabled = bool<br> data = string<br> password = string<br> })</pre> | <pre>{<br> "data": "",<br> "enabled": false,<br> "password": ""<br>}</pre> | no | | ||
| | <a name="input_tags"></a> [tags](#input\_tags) | The tags to append to the resources in this module | `map(string)` | `{}` | no | | ||
| | <a name="input_telemetry_enabled"></a> [telemetry\_enabled](#input\_telemetry\_enabled) | Whether or not to send telemetry information back to Snowplow Analytics Ltd | `bool` | `true` | no | | ||
| | <a name="input_user_provided_id"></a> [user\_provided\_id](#input\_user\_provided\_id) | An optional unique identifier to identify the telemetry events emitted by this stack | `string` | `""` | no | | ||
|
|
||
| ## Outputs | ||
|
|
||
| | Name | Description | | ||
| |------|-------------| | ||
| | <a name="output_iglu_server_lb_fqdn"></a> [iglu\_server\_lb\_fqdn](#output\_iglu\_server\_lb\_fqdn) | The load balancers fully-qualified-domain-name for the Iglu Server | | ||
| | <a name="output_iglu_server_lb_ip_address"></a> [iglu\_server\_lb\_ip\_address](#output\_iglu\_server\_lb\_ip\_address) | The load balancers IP address for the Iglu Server | |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,63 @@ | ||
| module "iglu_db" { | ||
| source = "snowplow-devops/postgresql-server/azurerm" | ||
| version = "0.1.1" | ||
|
|
||
| name = "${var.prefix}-iglu-db" | ||
| resource_group_name = var.resource_group_name | ||
|
|
||
| subnet_id = var.subnet_id_servers | ||
|
|
||
| additional_ip_allowlist = var.iglu_db_ip_allowlist | ||
|
|
||
| db_name = var.iglu_db_name | ||
| db_username = var.iglu_db_username | ||
| db_password = var.iglu_db_password | ||
|
|
||
| tags = var.tags | ||
| } | ||
|
|
||
| module "iglu_lb" { | ||
| source = "snowplow-devops/lb/azurerm" | ||
| version = "0.1.1" | ||
|
|
||
| name = "${var.prefix}-iglu-lb" | ||
| resource_group_name = var.resource_group_name | ||
| subnet_id = var.subnet_id_lb | ||
|
|
||
| probe_path = "/api/meta/health" | ||
|
|
||
| ssl_certificate_enabled = var.ssl_information.enabled | ||
| ssl_certificate_data = var.ssl_information.data | ||
| ssl_certificate_password = var.ssl_information.password | ||
|
|
||
| tags = var.tags | ||
| } | ||
|
|
||
| module "iglu_server" { | ||
| source = "snowplow-devops/iglu-server-vmss/azurerm" | ||
| version = "0.1.1" | ||
|
|
||
| name = "${var.prefix}-iglu-server" | ||
| resource_group_name = var.resource_group_name | ||
| subnet_id = var.subnet_id_servers | ||
|
|
||
| application_gateway_backend_address_pool_ids = [module.iglu_lb.agw_backend_address_pool_id] | ||
|
|
||
| ingress_port = module.iglu_lb.agw_backend_egress_port | ||
|
|
||
| ssh_public_key = var.ssh_public_key | ||
| ssh_ip_allowlist = var.ssh_ip_allowlist | ||
|
|
||
| db_name = module.iglu_db.db_name | ||
| db_host = module.iglu_db.db_host | ||
| db_port = module.iglu_db.db_port | ||
| db_username = module.iglu_db.db_username | ||
| db_password = module.iglu_db.db_password | ||
|
|
||
| super_api_key = var.iglu_super_api_key | ||
|
|
||
| telemetry_enabled = var.telemetry_enabled | ||
| user_provided_id = var.user_provided_id | ||
|
|
||
| tags = var.tags | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| output "iglu_server_lb_ip_address" { | ||
| description = "The load balancers IP address for the Iglu Server" | ||
| value = module.iglu_lb.ip_address | ||
| } | ||
|
|
||
| output "iglu_server_lb_fqdn" { | ||
| description = "The load balancers fully-qualified-domain-name for the Iglu Server" | ||
| value = module.iglu_lb.ip_address_fqdn | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,45 @@ | ||
| # Will be prefixed to all resource names | ||
| # Use this to easily identify the resources created and provide entropy for subsequent environments | ||
| prefix = "snowplow" | ||
|
|
||
| # The name of the resource group to deploy Iglu into | ||
| resource_group_name = "<ADD_ME>" | ||
|
|
||
| # ID of the dedicated subnet to deploy the load balancer into | ||
| subnet_id_lb = "<SET_ME>" | ||
|
|
||
| # ID of the subnet to deploy the actual Iglu Server application into | ||
| subnet_id_servers = "<SET_ME>" | ||
|
|
||
| # Update this to _your_ IP Address | ||
| ssh_ip_allowlist = ["999.999.999.999/32"] | ||
| # Generate a new SSH key locally with `ssh-keygen` | ||
| # ssh-keygen -t rsa -b 4096 | ||
| ssh_public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQA0jSi9//bRsHW4M6czodTs6smCXsxZ0gijzth0aBmycE= [email protected]" | ||
|
|
||
| # Iglu Server settings | ||
| iglu_db_name = "iglu" | ||
| iglu_db_username = "iglu" | ||
| # Change and keep this secret! | ||
| iglu_db_password = "<PASSWORD>" | ||
|
|
||
| # Used for API actions on the Iglu Server | ||
| # Change this to a new UUID and keep it secret! | ||
| iglu_super_api_key = "00000000-0000-0000-0000-000000000000" | ||
|
|
||
| # NOTE: To push schemas to your Iglu Server, you can use igluctl | ||
| # See the docs: https://docs.snowplow.io/docs/understanding-tracking-design/managing-your-data-structures/iglu/ | ||
|
|
||
| # Telemetry principles: https://docs.snowplow.io/docs/getting-started-on-snowplow-open-source/telemetry/ | ||
| user_provided_id = "" | ||
| telemetry_enabled = true | ||
|
|
||
| # SSL Configuration (optional) | ||
| ssl_information = { | ||
| password = "" | ||
| data = "" | ||
| enabled = false | ||
| } | ||
|
|
||
| # Extra Tags to append to created resources (optional) | ||
| tags = {} |
Oops, something went wrong.