summaryrefslogtreecommitdiff
path: root/terraform/infra.tf
blob: 45cb9402a1a0b55242efd447e0c6bae5d2c00fdc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
data "openstack_images_image_v2" "image_id" {
  name        = local.image_name
  most_recent = true
}

# Frontend
data "openstack_compute_flavor_v2" "flavor_frontend" {
  name = local.flavor_name_frontend
}

resource "openstack_networking_port_v2" "frontend_port" {
  name               = "port_1"
  network_id         = "${openstack_networking_network_v2.baserock_network.id}"
  admin_state_up     = "true"

  fixed_ip {
    subnet_id  = "${openstack_networking_subnet_v2.baserock_subnet.id}"
    ip_address = "10.3.0.10"
  }
}

resource "openstack_networking_floatingip_v2" "floatip_frontend" {
  pool = "ext-net"
}

resource "openstack_networking_floatingip_associate_v2" "floatip_associate_frontend" {
  floating_ip = "${openstack_networking_floatingip_v2.floatip_frontend.address}"
  port_id     = "${openstack_networking_port_v2.frontend_port.id}"
}

resource "openstack_compute_instance_v2" "baserock_frontend" {
  name            = "frontend-haproxy"
  image_id        = data.openstack_images_image_v2.image_id.id
  flavor_id       = data.openstack_compute_flavor_v2.flavor_frontend.id
  key_pair        = "${openstack_compute_keypair_v2.pedro-keypair.name}"

  security_groups = [
    "${openstack_networking_secgroup_v2.sg_base.name}",
    "${openstack_networking_secgroup_v2.sg_gitlab_bot.name}",
    "${openstack_networking_secgroup_v2.sg_web_server.name}",
    "${openstack_networking_secgroup_v2.sg_haste_server.name}",
    "${openstack_networking_secgroup_v2.sg_shared_artifact_cache.name}",
  ]
  network {
    port = "${openstack_networking_port_v2.frontend_port.id}"
  }

  lifecycle {
    ignore_changes = [
      # Ignore changes to base image
      image_id,
      # Ignore changes to key_pairs
      key_pair,
    ]
  }
}


# Webserver
data "openstack_compute_flavor_v2" "flavor_webserver" {
  name = local.flavor_name_webserver
}

resource "openstack_networking_port_v2" "webserver_port" {
  name               = "port_1"
  network_id         = "${openstack_networking_network_v2.baserock_network.id}"
  admin_state_up     = "true"

  fixed_ip {
    subnet_id  = "${openstack_networking_subnet_v2.baserock_subnet.id}"
    ip_address = "10.3.0.13"
  }
}

resource "openstack_compute_instance_v2" "baserock_webserver" {
  name            = "webserver"
  image_id        = data.openstack_images_image_v2.image_id.id
  flavor_id       = data.openstack_compute_flavor_v2.flavor_webserver.id
  key_pair        = "${openstack_compute_keypair_v2.pedro-keypair.name}"

  security_groups = [
    "${openstack_networking_secgroup_v2.sg_base.name}",
    "${openstack_networking_secgroup_v2.sg_gitlab_bot.name}",
    "${openstack_networking_secgroup_v2.sg_web_server.name}",
    "${openstack_networking_secgroup_v2.sg_haste_server.name}",
  ]
  network {
    port = "${openstack_networking_port_v2.webserver_port.id}"
  }

  lifecycle {
    ignore_changes = [
      # Ignore changes to base image
      image_id,
      # Ignore changes to key_pairs
      key_pair,
    ]
  }
}

resource "openstack_blockstorage_volume_v2" "volume_webserver" {
  name = "webserver-volume"
  size = 150
}

resource "openstack_compute_volume_attach_v2" "volume_attach_webserver" {
  instance_id = "${openstack_compute_instance_v2.baserock_webserver.id}"
  volume_id   = "${openstack_blockstorage_volume_v2.volume_webserver.id}"
  device      = "/dev/vdb"
}