professional-service-best-practices/terraform-iaas-api-basic-ha-vrrp
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

clean up repo
Some checks failed
CI / Terraform Format & Validate (push) Failing after 43s
Details
CI / TruffleHog Secrets Scan (push) Successful in 1m4s
Details

Browse source
This commit is contained in:
Mauritz Uphoff 2025-06-12 12:26:59 +02:00
parent 557eb6ebd3
commit e4c810dea7
9 changed files with 32 additions and 50 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
.gitignore vendored
View file

@ -36,4 +36,5 @@ terraform.rc
conf.img conf.img
.DS_Store .DS_Store
.idea .idea
keys/*

19
.terraform.lock.hcl
View file

@ -1,25 +1,6 @@
# This file is maintained automatically by "terraform init". # This file is maintained automatically by "terraform init".
# Manual edits may be lost in future updates. # Manual edits may be lost in future updates.
provider "registry.terraform.io/hashicorp/random" {
version = "3.7.2"
hashes = [
"h1:KG4NuIBl1mRWU0KD/BGfCi1YN/j3F7H4YgeeM7iSdNs=",
"zh:14829603a32e4bc4d05062f059e545a91e27ff033756b48afbae6b3c835f508f",
"zh:1527fb07d9fea400d70e9e6eb4a2b918d5060d604749b6f1c361518e7da546dc",
"zh:1e86bcd7ebec85ba336b423ba1db046aeaa3c0e5f921039b3f1a6fc2f978feab",
"zh:24536dec8bde66753f4b4030b8f3ef43c196d69cccbea1c382d01b222478c7a3",
"zh:29f1786486759fad9b0ce4fdfbbfece9343ad47cd50119045075e05afe49d212",
"zh:4d701e978c2dd8604ba1ce962b047607701e65c078cb22e97171513e9e57491f",
"zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3",
"zh:7b8434212eef0f8c83f5a90c6d76feaf850f6502b61b53c329e85b3b281cba34",
"zh:ac8a23c212258b7976e1621275e3af7099e7e4a3d4478cf8d5d2a27f3bc3e967",
"zh:b516ca74431f3df4c6cf90ddcdb4042c626e026317a33c53f0b445a3d93b720d",
"zh:dc76e4326aec2490c1600d6871a95e78f9050f9ce427c71707ea412a2f2f1a62",
"zh:eac7b63e86c749c7d48f527671c7aee5b4e26c10be6ad7232d6860167f99dbb0",
]
}
provider "registry.terraform.io/stackitcloud/stackit" { provider "registry.terraform.io/stackitcloud/stackit" {
version = "0.55.0" version = "0.55.0"
constraints = "0.55.0" constraints = "0.55.0"

5
00-provider.tf
View file

@ -18,8 +18,7 @@ terraform {
} }
} }
# Configure the STACKIT Provider
provider "stackit" { provider "stackit" {
default_region = "eu01" default_region = var.stackit_region
service_account_token = var.STACKIT_SERVICE_ACCOUNT_TOKEN service_account_key_path = var.stackit_service_account_key_path
} }

19
01-config.tf
View file

@ -1,12 +1,17 @@
# STACKIT Service Account Token variable "stackit_project_id" {
variable "STACKIT_SERVICE_ACCOUNT_TOKEN" { type = string
type = string /*default = "XXXXX-XXXX-XXXX-XXXX-XXXXXXX"*/
description = "" default = "d75e6aab-b616-4b42-ae3b-aaf161ad626d"
} }
variable "STACKIT_PROJECT_ID" { variable "stackit_region" {
type = string type = string
description = "" default = "eu01"
}
variable "stackit_service_account_key_path" {
type = string
default = "./keys/stackit-sa.json"
} }
variable "debian_image" { variable "debian_image" {

12
03-network.tf
View file

@ -1,6 +1,6 @@
# Create vNET Network # Create vNET Network
resource "stackit_network" "default" { resource "stackit_network" "default" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
ipv4_prefix = "10.1.2.0/24" ipv4_prefix = "10.1.2.0/24"
name = "default" name = "default"
ipv4_nameservers = ["9.9.9.9", "1.1.1.1"] ipv4_nameservers = ["9.9.9.9", "1.1.1.1"]
@ -8,12 +8,12 @@ resource "stackit_network" "default" {
# Security Group # Security Group
resource "stackit_security_group" "active-passive" { resource "stackit_security_group" "active-passive" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
name = "ha-active-passive" name = "ha-active-passive"
} }
resource "stackit_security_group_rule" "icmp" { resource "stackit_security_group_rule" "icmp" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
security_group_id = stackit_security_group.active-passive.security_group_id security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress" direction = "ingress"
icmp_parameters = { icmp_parameters = {
@ -26,7 +26,7 @@ resource "stackit_security_group_rule" "icmp" {
} }
resource "stackit_security_group_rule" "ssh" { resource "stackit_security_group_rule" "ssh" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
security_group_id = stackit_security_group.active-passive.security_group_id security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress" direction = "ingress"
port_range = { port_range = {
@ -39,7 +39,7 @@ resource "stackit_security_group_rule" "ssh" {
} }
resource "stackit_security_group_rule" "http" { resource "stackit_security_group_rule" "http" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
security_group_id = stackit_security_group.active-passive.security_group_id security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress" direction = "ingress"
port_range = { port_range = {
@ -52,7 +52,7 @@ resource "stackit_security_group_rule" "http" {
} }
resource "stackit_security_group_rule" "vrrp" { resource "stackit_security_group_rule" "vrrp" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
security_group_id = stackit_security_group.active-passive.security_group_id security_group_id = stackit_security_group.active-passive.security_group_id
direction = "ingress" direction = "ingress"
protocol = { protocol = {

8
04-master.tf
View file

@ -1,6 +1,6 @@
# Create virtual Server # Create virtual Server
resource "stackit_server" "example01" { resource "stackit_server" "example01" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
name = "example01" name = "example01"
boot_volume = { boot_volume = {
size = 64 size = 64
@ -16,20 +16,20 @@ resource "stackit_server" "example01" {
} }
resource "stackit_network_interface" "example01" { resource "stackit_network_interface" "example01" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
network_id = stackit_network.default.network_id network_id = stackit_network.default.network_id
allowed_addresses = [format("%s/%s", stackit_network_interface.vip01.ipv4, "32")] allowed_addresses = [format("%s/%s", stackit_network_interface.vip01.ipv4, "32")]
security_group_ids = [stackit_security_group.active-passive.security_group_id] security_group_ids = [stackit_security_group.active-passive.security_group_id]
} }
resource "stackit_server_network_interface_attach" "example01-nic-attachment" { resource "stackit_server_network_interface_attach" "example01-nic-attachment" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
server_id = stackit_server.example01.server_id server_id = stackit_server.example01.server_id
network_interface_id = stackit_network_interface.example01.network_interface_id network_interface_id = stackit_network_interface.example01.network_interface_id
} }
resource "stackit_public_ip" "example01-wan" { resource "stackit_public_ip" "example01-wan" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
network_interface_id = stackit_network_interface.example01.network_interface_id network_interface_id = stackit_network_interface.example01.network_interface_id
depends_on = [stackit_server_network_interface_attach.example01-nic-attachment] depends_on = [stackit_server_network_interface_attach.example01-nic-attachment]
} }

8
05-backup.tf
View file

@ -1,6 +1,6 @@
# Create virtual Server # Create virtual Server
resource "stackit_server" "example02" { resource "stackit_server" "example02" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
name = "example02" name = "example02"
boot_volume = { boot_volume = {
size = 64 size = 64
@ -16,20 +16,20 @@ resource "stackit_server" "example02" {
} }
resource "stackit_network_interface" "example02" { resource "stackit_network_interface" "example02" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
network_id = stackit_network.default.network_id network_id = stackit_network.default.network_id
allowed_addresses = [format("%s/%s", stackit_network_interface.vip01.ipv4, "32")] allowed_addresses = [format("%s/%s", stackit_network_interface.vip01.ipv4, "32")]
security_group_ids = [stackit_security_group.active-passive.security_group_id] security_group_ids = [stackit_security_group.active-passive.security_group_id]
} }
resource "stackit_server_network_interface_attach" "example02-nic-attachment" { resource "stackit_server_network_interface_attach" "example02-nic-attachment" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
server_id = stackit_server.example02.server_id server_id = stackit_server.example02.server_id
network_interface_id = stackit_network_interface.example02.network_interface_id network_interface_id = stackit_network_interface.example02.network_interface_id
} }
resource "stackit_public_ip" "example02-wan" { resource "stackit_public_ip" "example02-wan" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
network_interface_id = stackit_network_interface.example02.network_interface_id network_interface_id = stackit_network_interface.example02.network_interface_id
depends_on = [stackit_server_network_interface_attach.example02-nic-attachment] depends_on = [stackit_server_network_interface_attach.example02-nic-attachment]
} }

4
06-ha.tf
View file

@ -1,10 +1,10 @@
resource "stackit_network_interface" "vip01" { resource "stackit_network_interface" "vip01" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
network_id = stackit_network.default.network_id network_id = stackit_network.default.network_id
security = false security = false
} }
resource "stackit_public_ip" "vip01-wan" { resource "stackit_public_ip" "vip01-wan" {
project_id = var.STACKIT_PROJECT_ID project_id = var.stackit_project_id
network_interface_id = stackit_network_interface.vip01.network_interface_id network_interface_id = stackit_network_interface.vip01.network_interface_id
} }

4
example.env
View file

@ -1,4 +0,0 @@
# STACKIT Service Account Token
export TF_VAR_STACKIT_SERVICE_ACCOUNT_TOKEN=
# STACKIT ProjectID
export TF_VAR_STACKIT_PROJECT_ID=