kara-mosr/but3-iac
1
0
Fork 0
forked from pierront/but3-iac
Code Pull Requests Activity

ajout des configs terraform

Browse Source
This commit is contained in:
Riad KARA-MOSTEFA
2025-12-03 16:39:42 +01:00
parent 84d78b69e1
commit f41cd5130b
5 changed files with 115 additions and 154 deletions
Download Patch File Download Diff File Expand all files Collapse all files

57
terraform/environments/dev/main.tf
View File

@@ -1,8 +1,13 @@
# À vous de :
# 1. Configurer le provider google
# 2. Appeler les trois modules avec les bonnes variables
# 3. Créer le fichier de configuration Ansible (template)
terraform { terraform {
required_providers { required_providers {
google = { google = {
source = "hashicorp/google" source = "hashicorp/google"
version = "~> 5.0" version = "~> 6.12.0"
} }
} }
} }
@@ -12,50 +17,12 @@ provider "google" {
region = var.region region = var.region
} }
module "iam" {
source = "../../modules/iam"
project_id = var.project_id
gcp_user_email = var.gcp_user_email
ssh_public_key = var.ssh_public_key
}
module "network" { module "network" {
source = "../../modules/network" source = "../../modules/network"
project_name = var.project_name
project_id = var.project_id region = var.region
region = var.region frontend_cidr = var.frontend_cidr
frontend_cidr = var.frontend_cidr backend_cidr = var.backend_cidr
backend_cidr = var.backend_cidr database_cidr = var.database_cidr
database_cidr = var.database_cidr
ssh_source_ranges = var.ssh_source_ranges ssh_source_ranges = var.ssh_source_ranges
}
module "compute" {
source = "../../modules/compute"
frontend_subnet_id = module.network.subnets_map.frontend
backend_subnet_id = module.network.subnets_map.backend
database_subnet_id = module.network.subnets_map.database
project_id = var.project_id
instance_type = var.instance_type
zone = var.zone
depends_on = [module.iam]
}
data "template_file" "ansible_cfg_tpl" {
template = file("../../templates/ansible.cfg.tpl")
vars = {
# On utilise les IPs internes pour les deux tiers privés
frontend_public_ip = module.compute.frontend_public_ip
backend_ip = module.compute.internal_ips.backend
database_ip = module.compute.internal_ips.database
}
}
resource "local_file" "ansible_inventory" {
content = data.template_file.ansible_cfg_tpl.rendered
filename = "ansible-inventory.cfg"
} }

51
terraform/environments/dev/variables.tf
View File

@@ -1,56 +1,43 @@
variable "project_id" { # définissez toutes les variables nécessaires avec des valeurs par défaut appropriées.
description = "L'ID du projet GCP."
variable "project_name" {
description = "Nom du projet"
type = string type = string
default = "My First Project"
} }
variable "region" { variable "region" {
description = "Région de déploiement." description = "Region du projet"
type = string type = string
default = "europe-west1" default = "europe-west9"
}
variable "zone" {
description = "Zone de déploiement."
type = string
default = "europe-west1-b"
}
variable "instance_type" {
description = "Type de machine pour les instances."
type = string
default = "e2-small"
} }
variable "frontend_cidr" { variable "frontend_cidr" {
description = "Plage CIDR du frontend." description = "CIDR for frontend subnet"
type = string type = string
default = "10.10.1.0/24" default = "10.0.1.0/24"
} }
variable "backend_cidr" { variable "backend_cidr" {
description = "Plage CIDR du backend." description = "CIDR for backend subnet"
type = string type = string
default = "10.10.2.0/24" default = "10.0.2.0/24"
} }
variable "database_cidr" { variable "database_cidr" {
description = "Plage CIDR de la base de données." description = "CIDR for database subnet"
type = string type = string
default = "10.10.3.0/24" default = "10.0.3.0/24"
} }
variable "ssh_source_ranges" { variable "ssh_source_ranges" {
description = "Plages CIDR autorisées pour l'accès SSH." description = ""
type = list(string) type = string
default = ["0.0.0.0/0"] default = "0.0.0.0/0"
} }
variable "gcp_user_email" { variable "project_id" {
description = "Votre adresse e-mail GCP (pour OS Login)." description = "ID du projet"
type = string
}
variable "ssh_public_key" {
description = "Votre clé publique SSH (contenu du fichier ~/.ssh/id_ed25519.pub)."
type = string type = string
default = "learned-trilogy-478713-j7 "
} }

110
terraform/modules/network/main.tf
View File

@@ -1,86 +1,88 @@
resource "google_compute_network" "vpc_network" { # À vous de créer :
project = var.project_id # 1. Un VPC personnalisé avec auto_create_subnetworks = false
name = "three-tier-vpc" # 2. Trois sous-réseaux (frontend, backend, database)
# 3. Règles de firewall :
# - HTTP/HTTPS vers frontend
# - SSH vers toutes les instances
# - Port 8000 de frontend vers backend
# - Port 3306 de backend vers database
# VPC
resource "google_compute_network" "vpc_terraform" {
name = "vpc-terraform"
auto_create_subnetworks = false auto_create_subnetworks = false
routing_mode = "REGIONAL"
} }
resource "google_compute_subnetwork" "frontend_subnet" { # Sous-réseau
project = var.project_id resource "google_compute_subnetwork" "subnet_frontend" {
name = "frontend-subnet" name = "frontend"
network = google_compute_network.vpc_terraform.id
ip_cidr_range = var.frontend_cidr ip_cidr_range = var.frontend_cidr
region = var.region region = var.region
network = google_compute_network.vpc_network.id
} }
resource "google_compute_subnetwork" "backend_subnet" { resource "google_compute_subnetwork" "subnet_backend" {
project = var.project_id name = "backend"
name = "backend-subnet" network = google_compute_network.vpc_terraform.id
ip_cidr_range = var.backend_cidr ip_cidr_range = var.backend_cidr
region = var.region region = var.region
network = google_compute_network.vpc_network.id
} }
resource "google_compute_subnetwork" "database_subnet" { resource "google_compute_subnetwork" "subnet_database" {
project = var.project_id name = "database"
name = "database-subnet" network = google_compute_network.vpc_terraform.id
ip_cidr_range = var.database_cidr ip_cidr_range = var.database_cidr
region = var.region region = var.region
network = google_compute_network.vpc_network.id
} }
resource "google_compute_firewall" "allow_web" { resource "google_compute_firewall" "allow_user_frontend" {
project = var.project_id name = "allow-user-frontend"
name = "allow-http-https-frontend" network = google_compute_network.vpc_terraform.id
network = google_compute_network.vpc_network.name
direction = "INGRESS"
source_ranges = ["0.0.0.0/0"]
target_tags = ["frontend"]
allow { allow {
protocol = "tcp" protocol = "tcp"
ports = ["80", "443"] ports = ["80", "443"]
} }
source_ranges = ["0.0.0.0/0"]
target_tags = ["frontend"]
} }
resource "google_compute_firewall" "allow_ssh" { resource "google_compute_firewall" "allow_frontend_backend" {
project = var.project_id name = "allow-frontend-backend"
name = "allow-ssh-all" network = google_compute_network.vpc_terraform.id
network = google_compute_network.vpc_network.name
direction = "INGRESS"
source_ranges = var.ssh_source_ranges
target_tags = ["ssh"]
allow {
protocol = "tcp"
ports = ["22"]
}
}
resource "google_compute_firewall" "allow_frontend_to_backend" {
project = var.project_id
name = "allow-frontend-to-backend-8000"
network = google_compute_network.vpc_network.name
direction = "INGRESS"
source_tags = ["frontend"]
target_tags = ["backend"]
allow { allow {
protocol = "tcp" protocol = "tcp"
ports = ["8000"] ports = ["8000"]
} }
source_tags = ["frontend"]
target_tags = ["backend"]
} }
resource "google_compute_firewall" "allow_backend_to_database" { resource "google_compute_firewall" "allow_ssh_all" {
project = var.project_id name = "allow-ssh-all"
name = "allow-backend-to-database-3306" network = google_compute_network.vpc_terraform.id
network = google_compute_network.vpc_network.name
direction = "INGRESS" allow {
source_tags = ["backend"] protocol = "tcp"
target_tags = ["database"] ports = ["22"]
}
source_ranges = ["0.0.0.0/0"]
target_tags = ["ssh"]
}
resource "google_compute_firewall" "allow_backend_database" {
name = "allow-backend-database"
network = google_compute_network.vpc_terraform.id
allow { allow {
protocol = "tcp" protocol = "tcp"
ports = ["3306"] ports = ["3306"]
} }
source_tags = ["backend"]
target_tags = ["database"]
} }

27
terraform/modules/network/outputs.tf
View File

@@ -1,18 +1,15 @@
output "vpc_id" { # À vous d'exposer :
description = "L'ID du VPC créé." # 1. L'ID du VPC
value = google_compute_network.vpc_network.id # 2. Les IDs des sous-réseaux sous forme de map
output "vpc_terraform_output" {
value = google_compute_network.vpc_terraform.id
} }
output "subnets_map" { output "list_id" {
description = "Map des IDs des sous-réseaux." value = {
value = { frontend = google_compute_subnetwork.subnet_frontend.id
frontend = google_compute_subnetwork.frontend_subnet.id backend = google_compute_subnetwork.subnet_backend.id
backend = google_compute_subnetwork.backend_subnet.id database = google_compute_subnetwork.subnet_database.id
database = google_compute_subnetwork.database_subnet.id }
}
}
output "network_name" {
description = "Le nom du VPC créé."
value = google_compute_network.vpc_network.name
} }

24
terraform/modules/network/variables.tf
View File

@@ -1,29 +1,37 @@
variable "project_id" { # À vous de définir les variables pour :
description = "L'ID du projet GCP." # - project_name (string)
# - region (string)
# - frontend_cidr (string)
# - backend_cidr (string)
# - database_cidr (string)
# - ssh_source_ranges (string)
variable "project_name" {
description = "Nom du projet"
type = string type = string
} }
variable "region" { variable "region" {
description = "La région GCP pour les sous-réseaux." description = "Region du projet"
type = string type = string
} }
variable "frontend_cidr" { variable "frontend_cidr" {
description = "Plage CIDR pour le sous-réseau frontend (public)." description = "CIDR for frontend subnet"
type = string type = string
} }
variable "backend_cidr" { variable "backend_cidr" {
description = "Plage CIDR pour le sous-réseau backend (privé)." description = "CIDR for backend subnet"
type = string type = string
} }
variable "database_cidr" { variable "database_cidr" {
description = "Plage CIDR pour le sous-réseau base de données (privé)." description = "CIDR for database subnet"
type = string type = string
} }
variable "ssh_source_ranges" { variable "ssh_source_ranges" {
description = "Plages CIDR autorisées pour l'accès SSH (par exemple, ['0.0.0.0/0'])." description = ""
type = list(string) type = string
} }