Master

.gitignore

@@ -0,0 +1,4 @@
+README.md
+terraform.tfstate 
+terraform.tfstate.backup
+/.terraform

cloud formation.tf

@@ -0,0 +1,182 @@
+resource "aws_cloudformation_stack" "network" {
+  name = "networking-stack"
+
+
+  template_body = <<STACK
+{
+
+  "Resources" : {
+    "MyVpc": {
+      "Type" : "AWS::EC2::VPC",
+      "Properties" : {
+        "CidrBlock" : "10.0.0.0/16"
+
+      }
+    },
+     "Subnet1": {
+     "Type" : "AWS::EC2::Subnet",
+     "Properties" : {
+       "VpcId" : {"Ref" : "MyVpc"},
+       "CidrBlock": "10.0.0.0/24",
+       "AvailabilityZone": "ap-northeast-1a"
+     }
+     },
+   "Subnet2": {
+     "Type" : "AWS::EC2::Subnet",
+     "Properties" : {
+      "VpcId" : {"Ref" : "MyVpc"},
+      "CidrBlock" : "10.0.1.0/24",
+      "AvailabilityZone": "ap-northeast-1c"
+     }
+   },
+   "Subnet3": {
+     "Type" : "AWS::EC2::Subnet",
+     "Properties" : {
+      "VpcId" : {"Ref" : "MyVpc"},
+      "CidrBlock" : "10.0.2.0/24",
+      "AvailabilityZone": "ap-northeast-1d"
+     }
+   },
+    "Securitygroup1": {
+     "Type": "AWS::EC2::SecurityGroup",
+      "Properties": {
+       "GroupDescription": "Securitygroup 1",
+       "VpcId" : {"Ref" : "MyVpc"},
+         "SecurityGroupIngress" : [ 
+        { 
+            "IpProtocol" : "tcp", 
+            "FromPort" : 22, 
+            "ToPort" : 22, 
+            "CidrIp" : "10.0.0.0/24" 
+        },
+        { 
+            "IpProtocol" : "icmp", 
+            "FromPort" : 8, 
+            "ToPort" : -1, 
+            "CidrIp" : "10.0.0.0/24" 
+        }]
+
+      }
+    },
+    "Securitygroup2": {
+     "Type": "AWS::EC2::SecurityGroup",
+      "Properties": {
+       "GroupDescription": "Securitygroup 2",
+       "VpcId" : {"Ref" : "MyVpc"},
+         "SecurityGroupIngress" : [ 
+        { 
+            "IpProtocol" : "tcp", 
+            "FromPort" : 22, 
+            "ToPort" : 22, 
+            "CidrIp" : "10.0.0.0/24" 
+        },
+        { 
+            "IpProtocol" : "icmp", 
+            "FromPort" : 8, 
+            "ToPort" : -1, 
+            "CidrIp" : "10.0.0.0/24" 
+        }]
+
+      }
+    },
+    "Securitygroup3": {
+     "Type": "AWS::EC2::SecurityGroup",
+      "Properties": {
+       "GroupDescription": "Securitygroup 2",
+       "VpcId" : {"Ref" : "MyVpc"},
+         "SecurityGroupIngress" : [ 
+        { 
+            "IpProtocol" : "tcp", 
+            "FromPort" : 22, 
+            "ToPort" : 22, 
+            "CidrIp" : "10.0.0.0/24" 
+        },
+        { 
+            "IpProtocol" : "icmp", 
+            "FromPort" : 8, 
+            "ToPort" : -1, 
+            "CidrIp" : "10.0.0.0/24" 
+        }]
+
+      }
+    }
+  },
+  "Outputs" : {
+     "MyVpc" :{
+       "Value" : {"Ref" : "MyVpc"},
+       "Export": {
+         "Name": "Vpc"
+        } 
+      },
+
+     "Subnet1" :{
+       "Value" : {"Ref" : "Subnet1"},
+       "Export": {
+         "Name": "Subnet1"
+        } 
+      },
+
+      "Subnet2" :{
+       "Value" : {"Ref" : "Subnet2"},
+       "Export": {
+         "Name": "Subnet2"
+        } 
+      },
+
+
+      "Subnet3" :{
+       "Value" : {"Ref" : "Subnet3"},
+       "Export": {
+         "Name": "Subnet3"
+        } 
+      },
+      "Securitygroup1" :{
+        "Value" : {"Ref" : "Securitygroup1"},
+        "Export": {
+          "Name": "Securitygroup1"
+        }
+      },
+       "Securitygroup2" :{
+        "Value" : {"Ref" : "Securitygroup2"},
+        "Export": {
+          "Name": "Securitygroup2"
+        }
+      },
+       "Securitygroup3" :{
+        "Value" : {"Ref" : "Securitygroup3"},
+        "Export": {
+          "Name": "Securitygroup3"
+        }
+      }
+
+
+
+  }
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+}
+STACK
+}

eks.tf

@@ -0,0 +1,45 @@
+module "eks" {
+  source  = "terraform-aws-modules/eks/aws"
+  version = "17.24.0"
+
+  cluster_name    = "my-eks"
+  cluster_version = "1.21"
+
+
+  vpc_id     = resource.aws_cloudformation_stack.network.outputs["MyVpc"]
+  subnet_ids = [resource.aws_cloudformation_stack.network.outputs["Subnet1"],
+               resource.aws_cloudformation_stack.network.outputs["Subnet2"]]
+
+
+
+
+  enable_irsa = true
+
+  eks_managed_node_group_defaults = {
+    disk_size = 50
+  }
+}
+resource "aws_iam_role" "workernodes" {
+  name = "eks-node-group-example"
+
+  assume_role_policy = jsonencode({
+   Statement = [{
+    Action = "sts:AssumeRole"
+    Effect = "Allow"
+    Principal = {
+     Service = "ec2.amazonaws.com"
+    }
+   }]
+   Version = "2012-10-17"
+  })
+ }
+
+
+
+
+
+
+
+
+
+

msk.tf

@@ -0,0 +1,26 @@
+resource "aws_msk_cluster" "example" {
+  cluster_name           = "example"
+  kafka_version          = "3.3.1"
+  number_of_broker_nodes = 3
+
+
+
+  broker_node_group_info {
+    instance_type = "kafka.t3.small"
+    client_subnets = [resource.aws_cloudformation_stack.network.outputs["Subnet1"],
+                    resource.aws_cloudformation_stack.network.outputs["Subnet2"],
+                    resource.aws_cloudformation_stack.network.outputs["Subnet3"]]
+    security_groups = [resource.aws_cloudformation_stack.network.outputs["Securitygroup1"],
+                      resource.aws_cloudformation_stack.network.outputs["Securitygroup2"],
+                      resource.aws_cloudformation_stack.network.outputs["Securitygroup1"]]
+
+
+
+
+
+
+  }
+}
+
+
+

output.tf

@@ -0,0 +1,8 @@
+output "zookeeper_connect_string" {
+  value = aws_msk_cluster.example.zookeeper_connect_string
+}
+
+output "bootstrap_brokers_tls" {
+  description = "TLS connection host:port pairs"
+  value       = aws_msk_cluster.example.bootstrap_brokers_tls
+}

provider.tf

@@ -0,0 +1,7 @@
+terraform {
+ required_providers {
+  aws = {
+   source = "hashicorp/aws"
+  }
+ }
+}

resource.tf

@@ -0,0 +1,49 @@
+resource "aws_iam_role" "eks-iam-role" {
+ name = "devopsthehardway-eks-iam-role"
+
+ path = "/"
+
+ assume_role_policy = jsonencode(
+{
+ "Version": "2012-10-17",
+ "Statement": [
+  {
+   "Effect": "Allow",
+   "Principal": {
+    "Service": "eks.amazonaws.com"
+   },
+   "Action": "sts:AssumeRole"
+  }
+ ]
+})
+}
+
+resource "aws_iam_role_policy_attachment" "AmazonEKSClusterPolicy" {
+ policy_arn = "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"
+ role    = aws_iam_role.eks-iam-role.name
+}
+
+resource "aws_iam_role_policy_attachment" "AmazonEC2ContainerRegistryReadOnly-EKS" {
+ policy_arn = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
+ role    = aws_iam_role.eks-iam-role.name
+}
+
+resource "aws_iam_role_policy_attachment" "AmazonEKSWorkerNodePolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
+  role    = aws_iam_role.workernodes.name
+ }
+
+ resource "aws_iam_role_policy_attachment" "AmazonEKS_CNI_Policy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
+  role    = aws_iam_role.workernodes.name
+ }
+
+ resource "aws_iam_role_policy_attachment" "EC2InstanceProfileForImageBuilderECRContainerBuilds" {
+  policy_arn = "arn:aws:iam::aws:policy/EC2InstanceProfileForImageBuilderECRContainerBuilds"
+  role    = aws_iam_role.workernodes.name
+ }
+
+ resource "aws_iam_role_policy_attachment" "AmazonEC2ContainerRegistryReadOnly" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
+  role    = aws_iam_role.workernodes.name
+ }