#terraform - November 2018

cd /conf/kops

init-terraform
terraform plan
terraform apply

docker
# kops config
ENV KOPS_CLUSTER_NAME="<http://us-west-2.staging.example.net|us-west-2.staging.example.net>"
ENV KOPS_DNS_ZONE=${KOPS_CLUSTER_NAME}
ENV KOPS_STATE_STORE="<s3://jexample-staging-kops-state>"
ENV KOPS_STATE_STORE_REGION="us-west-2"
ENV KOPS_AVAILABILITY_ZONES="us-west-2a,us-west-2b,us-west-2c"
ENV KOPS_BASTION_PUBLIC_NAME="bastion"
ENV BASTION_MACHINE_TYPE="t2.medium"
ENV MASTER_MACHINE_TYPE="t2.medium"
ENV NODE_MACHINE_TYPE="t2.medium"
ENV NODE_MAX_SIZE="2"
ENV NODE_MIN_SIZE="2"

kops export kubecfg
kops replace -f manifest.yaml
kops update cluster
kops update cluster --yes
kops rolling-update cluster
kops rolling-update cluster --yes

# current running version
terraform workspace new kube-1.9.0
terraform apply -var 'kube-version=1.9.0'

# upgraded version
terraform workspace new kube-1.10.0
terraform  apply -var 'kube-version=1.10.0'

# cutover process + testing

# destroy old cluster
terraform workspace select kube-1.9.0
terraform destroy
clean up old state file (kube-1.9.0)

setting {
    namespace = "aws:ec2:vpc"
    name      = "ELBScheme"
    value     = "internal"
 }

setting {
    namespace = "aws:ec2:vpc"
    name      = "ELBScheme"
    value     = "${var.elb_scheme}"
 }

module "some_random_module" {
  source = "../../modules/some-random-module"

  name                 = "${var.name_map[terraform.workspace]}"
}

variable "name_map" {
  type = "map"

  default = {
    "customer_a" = "customer_a_name"
    "customer_b" = "customer_b_name"
  }
}

terraform workspace new customer_a
terraform workspace new customer_b

[ { 
 env: "key1:val,key2:val"
 somethingelse: "hello"
},
{
 env: "key1:val,key2:val,key3:val"
 somethingelse: "hi there"
}]

      for num in var.subnet_numbers:
      cidrsubnet(data.aws_vpc.example.cidr_block, 8, num)

# Main bastion
module "bastion" {
  source              = "<http://github.com/cloudposse/terraform-aws-ec2-bastion-server|github.com/cloudposse/terraform-aws-ec2-bastion-server>"

  name                = "${var.name}"
  ami                 = "${var.ami}"
  instance_type       = "${var.instance_type}"
  # This key needs to be created beforehand
  key_name            = "${var.deploy_key_name}-${terraform.workspace}"
  vpc_id              = "${var.vpc_id}"
  subnets             = "${var.subnets}"
  ssh_user            = "${var.ssh_user}"
  security_groups     = []
  namespace           = "${var.namespace}"
  stage               = "${terraform.workspace == "staging" ? "staging" : "production"}"
}

resource "aws_security_group" "default" {
  name        = "${var.name}"
  vpc_id      = "${var.vpc_id}"

  ingress {
    protocol  = "tcp"
    from_port = 22
    to_port   = 22

    cidr_blocks = ["xxx/32", "yyy/32"]
  }

  egress {
    protocol  = "tcp"
    from_port = 22
    to_port   = 22

    cidr_blocks = ["xxx/32", "yyy/32"]
  }

  depends_on = ["module.overblock_public_bastion"]
}