Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-09-21 21:44:39 -04:00
Code Issues Projects Releases Packages Wiki Activity

terraform-provider: add usage example for AWS

Browse source
This commit is contained in:
Moritz Sanft 2023-12-13 10:31:58 +01:00
parent aefcd31142
commit 2307c070f4
No known key found for this signature in database
GPG key ID: 335D28368B1DA615
1 changed files with 106 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

106
terraform-provider-constellation/examples/full/aws_cluster.tf Normal file
View file

@ -0,0 +1,106 @@
terraform {
required_providers {
constellation = {
source = "edgelesssys/constellation"
version = "X.Y.Z"
}
random = {
source = "hashicorp/random"
version = "3.6.0"
}
}
}
locals {
name = "constell"
version = "vX.Y.Z"
csp = "aws"
attestation_variant = "aws-sev-snp"
region = "us-east-2"
zone = "us-east-2c"
master_secret = random_bytes.master_secret.hex
master_secret_salt = random_bytes.master_secret_salt.hex
measurement_salt = random_bytes.measurement_salt.hex
}
resource "random_bytes" "master_secret" {
length = 32
}
resource "random_bytes" "master_secret_salt" {
length = 32
}
resource "random_bytes" "measurement_salt" {
length = 32
}
module "aws_iam" {
source = "./infrastructure/iam/aws"
name_prefix = "constell"
region = local.region
}
module "aws_infrastructure" {
source = "./infrastructure/aws"
name = "constell"
node_groups = {
control_plane_default = {
role = "control-plane"
instance_type = "m6a.xlarge"
disk_size = 30
disk_type = "gp3"
initial_count = 2
zone = local.zone
},
worker_default = {
role = "worker"
instance_type = "m6a.xlarge"
disk_size = 30
disk_type = "gp3"
initial_count = 2
zone = local.zone
}
}
iam_instance_profile_worker_nodes = module.aws_iam.worker_nodes_instance_profile
iam_instance_profile_control_plane = module.aws_iam.control_plane_instance_profile
ami = data.constellation_image.bar.reference
region = local.region
zone = local.zone
debug = false
enable_snp = true
custom_endpoint = ""
}
data "constellation_attestation" "foo" {
csp = local.csp
attestation_variant = local.attestation_variant
image_version = local.version
}
data "constellation_image" "bar" {
csp = local.csp
attestation_variant = local.attestation_variant
image_version = local.version
}
resource "constellation_cluster" "aws_example" {
csp = local.csp
constellation_microservice_version = local.version
name = module.aws_infrastructure.name
uid = module.aws_infrastructure.uid
image_version = local.version
image_reference = data.constellation_image.bar.reference
attestation = data.constellation_attestation.foo.attestation
init_secret = module.aws_infrastructure.init_secret
master_secret = local.master_secret
master_secret_salt = local.master_secret_salt
measurement_salt = local.measurement_salt
out_of_cluster_endpoint = module.aws_infrastructure.out_of_cluster_endpoint
in_cluster_endpoint = module.aws_infrastructure.in_cluster_endpoint
network_config = {
ip_cidr_node = module.aws_infrastructure.ip_cidr_node
ip_cidr_service = "10.96.0.0/12"
}
}