mommeja/but3-iac
1
0
Fork 0
forked from pierront/but3-iac
Code Pull Requests Activity

Network

Browse Source
This commit is contained in:
Tom MOMMEJA
2025-12-03 17:15:51 +01:00
parent 132d24b930
commit d367c92d14
5 changed files with 118 additions and 62 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
tp-cloud/terraform/environments/dev/main.tf
View File

@@ -0,0 +1,23 @@
terraform {
required_providers {
google = {
source = "hashicorp/google"
version = "~> 6.12.0"
}
}
}
provider "google" {
project = var.project_id
region = var.region
}
module "network" {
source = "../../modules/network"
project_name = var.project_name
region = var.region
frontend_cidr = var.frontend_cidr
backend_cidr = var.backend_cidr
database_cidr = var.database_cidr
ssh_source_ranges = var.ssh_source_ranges
}

43
tp-cloud/terraform/environments/dev/variables.tf
View File

@@ -0,0 +1,43 @@
# définissez toutes les variables nécessaires avec des valeurs par défaut appropriées.
variable "project_name" {
description = "Nom du projet"
type = string
default = "Projet1"
}
variable "region" {
description = "Region du projet"
type = string
default = "europe-west2"
}
variable "frontend_cidr" {
description = "CIDR for frontend subnet"
type = string
default = "10.0.1.0/24"
}
variable "backend_cidr" {
description = "CIDR for backend subnet"
type = string
default = "10.0.2.0/24"
}
variable "database_cidr" {
description = "CIDR for database subnet"
type = string
default = "10.0.3.0/24"
}
variable "ssh_source_ranges" {
description = ""
type = string
default = "0.0.0.0/0"
}
variable "project_id" {
description = "ID du projet"
type = string
default = "projet1-478713"
}

72
tp-cloud/terraform/modules/network/main.tf
View File

@@ -1,33 +1,33 @@
resource "google_compute_network" "vpc" {
name = "${var.project_name}-vpc"
resource "google_compute_network" "vpc_terraform" {
name = "vpc-terraform"
auto_create_subnetworks = false
}
resource "google_compute_subnetwork" "frontend" {
name = "${var.project_name}-frontend"
resource "google_compute_subnetwork" "subnet_frontend" {
name = "frontend"
network = google_compute_network.vpc_terraform.id
ip_cidr_range = var.frontend_cidr
region = var.region
network = google_compute_network.vpc.id
}
resource "google_compute_subnetwork" "backend" {
name = "${var.project_name}-backend"
resource "google_compute_subnetwork" "subnet_backend" {
name = "backend"
network = google_compute_network.vpc_terraform.id
ip_cidr_range = var.backend_cidr
region = var.region
network = google_compute_network.vpc.id
}
resource "google_compute_subnetwork" "database" {
name = "${var.project_name}-database"
resource "google_compute_subnetwork" "subnet_database" {
name = "database"
network = google_compute_network.vpc_terraform.id
ip_cidr_range = var.database_cidr
region = var.region
network = google_compute_network.vpc.id
}
# HTTP/HTTPS vers frontend
resource "google_compute_firewall" "frontend_http" {
name = "${var.project_name}-fw-frontend-http"
network = google_compute_network.vpc.id
resource "google_compute_firewall" "allow_user_frontend" {
name = "allow-user-frontend"
network = google_compute_network.vpc_terraform.id
allow {
protocol = "tcp"
@@ -38,24 +38,9 @@ resource "google_compute_firewall" "frontend_http" {
target_tags = ["frontend"]
}
# SSH
resource "google_compute_firewall" "ssh" {
name = "${var.project_name}-fw-ssh"
network = google_compute_network.vpc.id
allow {
protocol = "tcp"
ports = ["22"]
}
source_ranges = var.ssh_source_ranges
target_tags = ["ssh"]
}
# Frontend → Backend (8000)
resource "google_compute_firewall" "frontend_backend" {
name = "${var.project_name}-fw-frontend-backend"
network = google_compute_network.vpc.id
resource "google_compute_firewall" "allow_frontend_backend" {
name = "allow-frontend-backend"
network = google_compute_network.vpc_terraform.id
allow {
protocol = "tcp"
@@ -66,10 +51,22 @@ resource "google_compute_firewall" "frontend_backend" {
target_tags = ["backend"]
}
# Backend → Database (3306)
resource "google_compute_firewall" "backend_database" {
name = "${var.project_name}-fw-backend-database"
network = google_compute_network.vpc.id
resource "google_compute_firewall" "allow_ssh_all" {
name = "allow-ssh-all"
network = google_compute_network.vpc_terraform.id
allow {
protocol = "tcp"
ports = ["22"]
}
source_ranges = ["0.0.0.0/0"]
target_tags = ["ssh"]
}
resource "google_compute_firewall" "allow_backend_database" {
name = "allow-backend-database"
network = google_compute_network.vpc_terraform.id
allow {
protocol = "tcp"
@@ -79,4 +76,3 @@ resource "google_compute_firewall" "backend_database" {
source_tags = ["backend"]
target_tags = ["database"]
}

13
tp-cloud/terraform/modules/network/outputs.tf
View File

@@ -1,12 +1,11 @@
output "vpc_id" {
value = google_compute_network.vpc.id
output "vpc_terraform_output" {
value = google_compute_network.vpc_terraform.id
}
output "subnets" {
output "list_id" {
value = {
frontend = google_compute_subnetwork.frontend.id
backend = google_compute_subnetwork.backend.id
database = google_compute_subnetwork.database.id
frontend = google_compute_subnetwork.subnet_frontend.id
backend = google_compute_subnetwork.subnet_backend.id
database = google_compute_subnetwork.subnet_database.id
}
}

15
tp-cloud/terraform/modules/network/variables.tf
View File

@@ -1,34 +1,29 @@
variable "projet1-478713" {
variable "project_name" {
description = "Nom du projet"
type = string
description = "projet1-478713"
}
variable "region" {
description = "Region du projet"
type = string
description = "Région GCP"
default = "europe-west1"
}
variable "frontend_cidr" {
description = "CIDR for frontend subnet"
type = string
default = "10.0.1.0/24"
}
variable "backend_cidr" {
description = "CIDR for backend subnet"
type = string
default = "10.0.2.0/24"
}
variable "database_cidr" {
description = "CIDR for database subnet"
type = string
default = "10.0.3.0/24"
}
variable "ssh_source_ranges" {
type = list(string)
default = ["0.0.0.0/0"]
description = ""
type = string
}