380 lines
13 KiB
HCL
380 lines
13 KiB
HCL
# Define required providers
|
|
# terraform {
|
|
# required_version = ">= 0.14.0"
|
|
# required_providers {
|
|
# openstack = {
|
|
# source = "terraform-provider-openstack/openstack"
|
|
# version = "~> 1.53.0"
|
|
# }
|
|
# }
|
|
# }
|
|
#
|
|
# module "common_variables" {
|
|
# source = "../../modules/common_variables"
|
|
# }
|
|
#
|
|
# Server group
|
|
#
|
|
# resource "openstack_compute_servergroup_v2" "orientdb_cluster" {
|
|
# name = "orientdb_cluster"
|
|
# policies = ["soft-anti-affinity"]
|
|
# }
|
|
# #
|
|
# # Network for the cluster traffic
|
|
# #
|
|
# resource "openstack_networking_network_v2" "orientdb_network" {
|
|
# name = var.orientdb_net.network_name
|
|
# admin_state_up = "true"
|
|
# external = "false"
|
|
# description = var.orientdb_net.network_description
|
|
# mtu = module.common_variables.mtu_size_value
|
|
# port_security_enabled = true
|
|
# shared = false
|
|
# region = module.common_variables.main_region_name
|
|
# }
|
|
|
|
# # Subnet
|
|
# resource "openstack_networking_subnet_v2" "orientdb_subnet" {
|
|
# name = "orientdb-subnet"
|
|
# description = "Subnet used by the OrientDB service"
|
|
# network_id = openstack_networking_network_v2.orientdb_network.id
|
|
# cidr = var.orientdb_net.network_cidr
|
|
# dns_nameservers = module.common_variables.resolvers_ip
|
|
# ip_version = 4
|
|
# enable_dhcp = true
|
|
# no_gateway = true
|
|
# allocation_pool {
|
|
# start = var.orientdb_net.allocation_pool_start
|
|
# end = var.orientdb_net.allocation_pool_end
|
|
# }
|
|
# }
|
|
|
|
# #
|
|
# # Security groups
|
|
# #
|
|
# # Between OrientDB nodes
|
|
# resource "openstack_networking_secgroup_v2" "orientdb_internal_traffic" {
|
|
# name = "orientdb_internal_docker_traffic"
|
|
# delete_default_rules = "true"
|
|
# description = "Traffic between the OrientDB nodes"
|
|
# }
|
|
# resource "openstack_networking_secgroup_rule_v2" "everything_udp" {
|
|
# count = var.orientdb_nodes_count
|
|
# security_group_id = openstack_networking_secgroup_v2.orientdb_internal_traffic.id
|
|
# description = "UDP traffic between OrientDB nodes"
|
|
# direction = "ingress"
|
|
# ethertype = "IPv4"
|
|
# protocol = "udp"
|
|
# remote_ip_prefix = var.orientdb_ip.*[count.index]/32
|
|
# }
|
|
# resource "openstack_networking_secgroup_rule_v2" "everything_tcp" {
|
|
# count = var.orientdb_nodes_count
|
|
# security_group_id = openstack_networking_secgroup_v2.orientdb_internal_traffic.id
|
|
# description = "TCP traffic between OrientDB nodes"
|
|
# direction = "ingress"
|
|
# ethertype = "IPv4"
|
|
# protocol = "tcp"
|
|
# remote_ip_prefix = var.orientdb_ip.*[count.index]/32
|
|
# }
|
|
|
|
# resource "openstack_networking_secgroup_v2" "access_to_orientdb" {
|
|
# name = "access_to_orientdb"
|
|
# delete_default_rules = "true"
|
|
# description = "Clients that talk to the OrientDB service"
|
|
# }
|
|
# resource "openstack_networking_secgroup_rule_v2" "access_to_orient_udp" {
|
|
# security_group_id = openstack_networking_secgroup_v2.access_to_orientdb.id
|
|
# description = "UDP traffic"
|
|
# direction = "ingress"
|
|
# ethertype = "IPv4"
|
|
# protocol = "udp"
|
|
# remote_ip_prefix = openstack_networking_subnet_v2.orientdb_subnet.cidr
|
|
# }
|
|
# resource "openstack_networking_secgroup_rule_v2" "access_to_orient_tcp" {
|
|
# security_group_id = openstack_networking_secgroup_v2.access_to_orientdb.id
|
|
# description = "TCP traffic"
|
|
# direction = "ingress"
|
|
# ethertype = "IPv4"
|
|
# protocol = "tcp"
|
|
# remote_ip_prefix = openstack_networking_subnet_v2.orientdb_subnet.cidr
|
|
# }
|
|
|
|
# #
|
|
# # OrientDB
|
|
# #
|
|
# # Instance
|
|
# resource "openstack_compute_instance_v2" "orientdb_servers" {
|
|
# count = local.orientdb_nodes_count
|
|
# name = format("%s-%02d", var.orientdb_data.node_name, count.index+1)
|
|
# availability_zone_hints = module.common_variables.availability_zone_no_gpu_name
|
|
# flavor_name = var.orientdb_data.node_flavor
|
|
# key_pair = module.common_variables.ssh_key_file_config
|
|
# security_groups = [openstack_networking_secgroup_v2.default.name,openstack_networking_secgroup_v2.orientdb_internal_traffic.name]
|
|
# scheduler_hints {
|
|
# group = openstack_compute_servergroup_v2.orientdb_cluster.id
|
|
# }
|
|
# block_device {
|
|
# uuid = module.ubuntu2204.uuid
|
|
# source_type = "image"
|
|
# volume_size = 10
|
|
# boot_index = 0
|
|
# destination_type = "volume"
|
|
# delete_on_termination = false
|
|
# }
|
|
|
|
# block_device {
|
|
# source_type = "blank"
|
|
# volume_size = var.orientdb_data.node_data_disk_size
|
|
# boot_index = -1
|
|
# destination_type = "volume"
|
|
# delete_on_termination = false
|
|
# }
|
|
|
|
# network {
|
|
# name = var.main_private_network.name
|
|
# }
|
|
# network {
|
|
# name = var.orientdb_net.network_name
|
|
# fixed_ip_v4 = var.orientdb_ip.*[count.index]
|
|
# }
|
|
|
|
# user_data = "${file("${module.common_variables.ubuntu2204_datafile}")}"
|
|
# depends_on = [ openstack_networking_subnet_v2.orientdb_subnet ]
|
|
# }
|
|
|
|
# locals {
|
|
# orientdb_nodes_count = 3
|
|
# }
|
|
|
|
#
|
|
# Not using modules here
|
|
#
|
|
resource "openstack_compute_servergroup_v2" "orientdb_cluster" {
|
|
name = "orientdb_cluster"
|
|
policies = ["soft-anti-affinity"]
|
|
}
|
|
#
|
|
# Network for the cluster traffic
|
|
#
|
|
resource "openstack_networking_network_v2" "orientdb_network" {
|
|
name = var.orientdb_net.network_name
|
|
admin_state_up = "true"
|
|
external = "false"
|
|
description = var.orientdb_net.network_description
|
|
mtu = var.mtu_size
|
|
port_security_enabled = true
|
|
shared = false
|
|
region = var.main_region
|
|
}
|
|
|
|
# Subnet
|
|
resource "openstack_networking_subnet_v2" "orientdb_subnet" {
|
|
name = "orientdb-subnet"
|
|
description = "Subnet used by the OrientDB service"
|
|
network_id = openstack_networking_network_v2.orientdb_network.id
|
|
cidr = var.orientdb_net.network_cidr
|
|
dns_nameservers = var.resolvers_ip
|
|
ip_version = 4
|
|
enable_dhcp = true
|
|
no_gateway = true
|
|
allocation_pool {
|
|
start = var.orientdb_net.allocation_pool_start
|
|
end = var.orientdb_net.allocation_pool_end
|
|
}
|
|
}
|
|
|
|
#
|
|
# Network for the OrientDB SE
|
|
#
|
|
resource "openstack_networking_network_v2" "orientdb_se_network" {
|
|
name = var.orientdb_se_net.network_name
|
|
admin_state_up = "true"
|
|
external = "false"
|
|
description = var.orientdb_se_net.network_description
|
|
mtu = var.mtu_size
|
|
port_security_enabled = true
|
|
shared = false
|
|
region = var.main_region
|
|
}
|
|
|
|
# Subnet
|
|
resource "openstack_networking_subnet_v2" "orientdb_se_subnet" {
|
|
name = "orientdb-se-subnet"
|
|
description = "Subnet used by the OrientDB for Smart Executor"
|
|
network_id = openstack_networking_network_v2.orientdb_se_network.id
|
|
cidr = var.orientdb_se_net.network_cidr
|
|
dns_nameservers = var.resolvers_ip
|
|
ip_version = 4
|
|
enable_dhcp = true
|
|
no_gateway = true
|
|
allocation_pool {
|
|
start = var.orientdb_se_net.allocation_pool_start
|
|
end = var.orientdb_se_net.allocation_pool_end
|
|
}
|
|
}
|
|
|
|
#
|
|
# Security groups
|
|
#
|
|
# Main OrientDB service
|
|
# Between OrientDB nodes
|
|
resource "openstack_networking_secgroup_v2" "orientdb_internal_traffic" {
|
|
name = "orientdb_internal_docker_traffic"
|
|
delete_default_rules = "true"
|
|
description = "Traffic between the OrientDB nodes"
|
|
}
|
|
resource "openstack_networking_secgroup_rule_v2" "orientdb_ports" {
|
|
count = var.orientdb_nodes_count
|
|
security_group_id = openstack_networking_secgroup_v2.orientdb_internal_traffic.id
|
|
description = "TCP traffic between OrientDB nodes"
|
|
port_range_min = 2424
|
|
port_range_max = 2490
|
|
direction = "ingress"
|
|
ethertype = "IPv4"
|
|
protocol = "tcp"
|
|
# remote_ip_prefix = format("%s-%02d", var.orientdb_ip, count.index+1, "/32")
|
|
remote_ip_prefix = var.orientdb_cidr.*[count.index]
|
|
}
|
|
# Access from the clients
|
|
resource "openstack_networking_secgroup_v2" "access_to_orientdb" {
|
|
name = "access_to_orientdb"
|
|
delete_default_rules = "true"
|
|
description = "Clients that talk to the OrientDB service"
|
|
}
|
|
resource "openstack_networking_secgroup_rule_v2" "access_to_orient_from_clients" {
|
|
for_each = toset([var.basic_services_ip.ssh_jump_cidr, openstack_networking_subnet_v2.orientdb_subnet.cidr])
|
|
security_group_id = openstack_networking_secgroup_v2.access_to_orientdb.id
|
|
description = "TCP traffic from the resource registries and the SSH jump server"
|
|
port_range_min = 2424
|
|
port_range_max = 2490
|
|
direction = "ingress"
|
|
ethertype = "IPv4"
|
|
protocol = "tcp"
|
|
remote_ip_prefix = each.value
|
|
}
|
|
resource "openstack_networking_secgroup_rule_v2" "access_to_orient_from_haproxy" {
|
|
for_each = toset( [var.basic_services_ip.haproxy_l7_1_cidr, var.basic_services_ip.haproxy_l7_2_cidr])
|
|
security_group_id = openstack_networking_secgroup_v2.access_to_orientdb.id
|
|
description = "TCP traffic from the load balancers"
|
|
port_range_min = 2424
|
|
port_range_max = 2424
|
|
direction = "ingress"
|
|
ethertype = "IPv4"
|
|
protocol = "tcp"
|
|
remote_ip_prefix = each.value
|
|
}
|
|
|
|
# OrientDB for the Smart Executor nodes
|
|
# Access from the clients
|
|
resource "openstack_networking_secgroup_v2" "access_to_orientdb_se" {
|
|
name = "access_to_orientdb_se"
|
|
delete_default_rules = "true"
|
|
description = "Clients that talk to the OrientDB service"
|
|
}
|
|
resource "openstack_networking_secgroup_rule_v2" "access_to_orient_se_from_clients" {
|
|
for_each = toset([var.basic_services_ip.ssh_jump_cidr, openstack_networking_subnet_v2.orientdb_se_subnet.cidr])
|
|
security_group_id = openstack_networking_secgroup_v2.access_to_orientdb_se.id
|
|
description = "TCP traffic from the resource registries and the SSH jump server"
|
|
port_range_min = 2424
|
|
port_range_max = 2490
|
|
direction = "ingress"
|
|
ethertype = "IPv4"
|
|
protocol = "tcp"
|
|
remote_ip_prefix = each.value
|
|
}
|
|
resource "openstack_networking_secgroup_rule_v2" "access_to_orient_se_from_haproxy" {
|
|
for_each = toset( [var.basic_services_ip.haproxy_l7_1_cidr, var.basic_services_ip.haproxy_l7_2_cidr])
|
|
security_group_id = openstack_networking_secgroup_v2.access_to_orientdb_se.id
|
|
description = "TCP traffic from the load balancers"
|
|
port_range_min = 2424
|
|
port_range_max = 2424
|
|
direction = "ingress"
|
|
ethertype = "IPv4"
|
|
protocol = "tcp"
|
|
remote_ip_prefix = each.value
|
|
}
|
|
|
|
#
|
|
# OrientDB main cluster
|
|
#
|
|
# Instances used by the resource registry
|
|
resource "openstack_compute_instance_v2" "orientdb_servers" {
|
|
count = local.orientdb_nodes_count
|
|
name = format("%s-%02d", var.orientdb_data.node_name, count.index+1)
|
|
availability_zone_hints = var.availability_zones_names.availability_zone_no_gpu
|
|
flavor_name = var.orientdb_node_flavor
|
|
key_pair = var.ssh_key_file.name
|
|
security_groups = [var.default_security_group_name,openstack_networking_secgroup_v2.orientdb_internal_traffic.name,openstack_networking_secgroup_v2.access_to_orientdb.name]
|
|
scheduler_hints {
|
|
group = openstack_compute_servergroup_v2.orientdb_cluster.id
|
|
}
|
|
block_device {
|
|
uuid = var.ubuntu_2204.uuid
|
|
source_type = "image"
|
|
volume_size = 10
|
|
boot_index = 0
|
|
destination_type = "volume"
|
|
delete_on_termination = false
|
|
}
|
|
|
|
block_device {
|
|
source_type = "blank"
|
|
volume_size = var.orientdb_data.node_data_disk_size
|
|
boot_index = -1
|
|
destination_type = "volume"
|
|
delete_on_termination = false
|
|
}
|
|
|
|
network {
|
|
name = var.main_private_network.name
|
|
}
|
|
network {
|
|
name = var.orientdb_net.network_name
|
|
fixed_ip_v4 = var.orientdb_ip.*[count.index]
|
|
}
|
|
|
|
user_data = "${file("${var.ubuntu2204_data_file}")}"
|
|
depends_on = [ openstack_networking_subnet_v2.orientdb_subnet ]
|
|
}
|
|
|
|
# Instance used by the smart executors
|
|
resource "openstack_compute_instance_v2" "orientdb_se_server" {
|
|
name = "orientdb-se"
|
|
availability_zone_hints = var.availability_zones_names.availability_zone_no_gpu
|
|
flavor_name = var.orientdb_se_node_flavor
|
|
key_pair = var.ssh_key_file.name
|
|
security_groups = [var.default_security_group_name,openstack_networking_secgroup_v2.access_to_orientdb_se.name]
|
|
block_device {
|
|
uuid = var.ubuntu_2204.uuid
|
|
source_type = "image"
|
|
volume_size = 10
|
|
boot_index = 0
|
|
destination_type = "volume"
|
|
delete_on_termination = false
|
|
}
|
|
|
|
block_device {
|
|
source_type = "blank"
|
|
volume_size = var.orientdb_data.node_data_disk_size
|
|
boot_index = -1
|
|
destination_type = "volume"
|
|
delete_on_termination = false
|
|
}
|
|
|
|
network {
|
|
name = var.main_private_network.name
|
|
}
|
|
network {
|
|
name = var.orientdb_se_net.network_name
|
|
fixed_ip_v4 = var.orientdb_se_ip
|
|
}
|
|
|
|
user_data = "${file("${var.ubuntu2204_data_file}")}"
|
|
depends_on = [ openstack_networking_subnet_v2.orientdb_se_subnet ]
|
|
}
|
|
|
|
locals {
|
|
orientdb_nodes_count = var.orientdb_nodes_count
|
|
}
|
|
|