Felix Nehrke
7297892e18
Since I don't have multiple terraform steps anymore it simply doesn't make sense to me anymore to split all tasks into separate folders. Instead I try to be as clear as possible in the README to make it easy to follow the structure in the future without too much headache.
169 lines
6.7 KiB
HCL
169 lines
6.7 KiB
HCL
resource "hcloud_ssh_key" "this" {
|
|
for_each = var.ssh_keys
|
|
name = each.key
|
|
public_key = each.value
|
|
}
|
|
|
|
resource "hcloud_primary_ip" "k8s_ipv4" {
|
|
count = var.k8s_server_count < 1 ? 1 : var.k8s_server_count
|
|
|
|
name = "k8s_primary_ipv4_${count.index}"
|
|
datacenter = var.k8s_ip_datacenter
|
|
type = "ipv4"
|
|
assignee_type = "server"
|
|
auto_delete = !var.k8s_test_installation
|
|
}
|
|
|
|
resource "hcloud_primary_ip" "k8s_ipv6" {
|
|
count = var.k8s_server_count < 1 ? 1 : var.k8s_server_count
|
|
|
|
name = "k8s_primary_ipv6_${count.index}"
|
|
datacenter = var.k8s_ip_datacenter
|
|
type = "ipv6"
|
|
assignee_type = "server"
|
|
auto_delete = !var.k8s_test_installation
|
|
}
|
|
|
|
data "external" "my_ip" {
|
|
program = [
|
|
"sh",
|
|
"-c",
|
|
"(dig TXT +short -4 o-o.myaddr.l.google.com @ns1.google.com && dig TXT +short -6 o-o.myaddr.l.google.com @ns1.google.com) | jq '{(.): .}' | jq -s add"
|
|
]
|
|
}
|
|
|
|
module "k8s" {
|
|
source = "./modules/hetzner/kubernetes"
|
|
|
|
name = "cluster1"
|
|
ssh_keys = [for o in hcloud_ssh_key.this : o.id]
|
|
servers = [for n in range(var.k8s_server_count) : {
|
|
ipv4_id = hcloud_primary_ip.k8s_ipv4[n].id
|
|
ipv6_id = hcloud_primary_ip.k8s_ipv6[n].id
|
|
type = var.k8s_server_type
|
|
location = var.k8s_location
|
|
}]
|
|
agents = [{
|
|
type = var.k8s_agent_type
|
|
location = var.k8s_location
|
|
count = var.k8s_agent_count
|
|
}]
|
|
kubernetes_exposed_ips = var.expose_kubernetes_and_ssh_ports ? values(data.external.my_ip.result) : []
|
|
ssh_exposed_ips = var.expose_kubernetes_and_ssh_ports ? values(data.external.my_ip.result) : []
|
|
ssh_port = 1022
|
|
public_tcp_services = {
|
|
git-ssh = ["22"]
|
|
http = ["80", "443"]
|
|
}
|
|
}
|
|
|
|
resource "local_file" "ansible_inventory" {
|
|
filename = "${path.module}/inventory.ini"
|
|
content = templatefile("./inventory.ini.tftpl", {
|
|
server_ips = module.k8s.server_ips_v4,
|
|
agent_ips = module.k8s.agent_ips_v4,
|
|
network_cidr = module.k8s.private_network_cidr,
|
|
private_nat = module.k8s.private_network_nat,
|
|
ssh_port = module.k8s.ssh_port,
|
|
})
|
|
}
|
|
|
|
locals {
|
|
dns_zones = {
|
|
# costs-table (incl. taxes):
|
|
# domain | amount | hetzner (einzel) | tecspace (einzel)
|
|
# --------+--------+------------------+-------------------
|
|
# de | 3 | 35.70€ (11.90€) | 15.85€ (5.95€)
|
|
# info | 1 | 30.94€ (30.94€) | 21.95€ (21.95€)
|
|
# net | 2 | 33.32€ (16.66€) | 35.90€ (17.95€)
|
|
# org | 1 | 17.85€ (17.85€) | 21.95€ (21.95€)
|
|
# --------+--------+------------------+-------------------
|
|
# sum | 7 | 117.21€ | 97.65€
|
|
#
|
|
# Note, that Hetzner usually shows prices w/o taxes!
|
|
#
|
|
# Reference: https://www.hetzner.com/de/whois/
|
|
# Reference: https://www.tecspace.de/domain-preisliste
|
|
"goperte.de" = {
|
|
zone_ttl = 900
|
|
records = [
|
|
{ name = "@", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "*", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "@", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "*", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
]
|
|
},
|
|
"nehrke.info" = {
|
|
zone_ttl = 900
|
|
records = [
|
|
{ name = "@", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "*", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "@", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "*", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "@", ttl = 86400, type = "MX", value = "1 smtp.google.com." },
|
|
{ name = "@", ttl = 86400, type = "TXT", value = "v=spf1 include:_spf.google.com a mx ~all" },
|
|
{ name = "_dmarc", ttl = 86400, type = "TXT", value = "v=DMARC1; p=none;" },
|
|
{ name = "google._domainkey", ttl = 86400, type = "TXT", value = var.nehrke_info_dkim },
|
|
]
|
|
},
|
|
"sozpaedil.net" = {
|
|
zone_ttl = 900
|
|
records = [
|
|
{ name = "@", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "*", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "@", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "*", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "@", ttl = 86400, type = "MX", value = "1 smtp.google.com." },
|
|
{ name = "@", ttl = 86400, type = "TXT", value = "v=spf1 include:_spf.google.com a mx ~all" },
|
|
{ name = "_dmarc", ttl = 86400, type = "TXT", value = "v=DMARC1; p=none;" },
|
|
{ name = "google._domainkey", ttl = 86400, type = "TXT", value = var.sozpaedil_net_dkim },
|
|
]
|
|
},
|
|
"tovot.de" = {
|
|
zone_ttl = 900
|
|
records = [
|
|
{ name = "@", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "*", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "@", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "*", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
]
|
|
},
|
|
"tovot.net" = {
|
|
zone_ttl = 900
|
|
records = [
|
|
{ name = "@", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "*", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "@", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "*", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
]
|
|
},
|
|
"tovot.org" = {
|
|
zone_ttl = 900
|
|
records = [
|
|
{ name = "@", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "*", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "@", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "*", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
]
|
|
},
|
|
"xn--alleingnger-r8a.de" = {
|
|
zone_ttl = 900
|
|
records = [
|
|
{ name = "@", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "*", type = "A", value = hcloud_primary_ip.k8s_ipv4[0].ip_address },
|
|
{ name = "@", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
{ name = "*", type = "AAAA", value = "${hcloud_primary_ip.k8s_ipv6[0].ip_address}1" },
|
|
]
|
|
},
|
|
}
|
|
}
|
|
|
|
module "dns" {
|
|
source = "./modules/hetzner/dns"
|
|
for_each = local.dns_zones
|
|
zone = each.key
|
|
zone_ttl = lookup(each.value, "zone_ttl")
|
|
records = lookup(each.value, "records")
|
|
}
|
|
|