-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathpeeredwrkld.tf
77 lines (61 loc) · 2.17 KB
/
peeredwrkld.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
resource "google_compute_network" "wrkld" {
count = sum([ for k,v in var.wrkld_cidrs : length(v) ]) > 0 ? 1 : 0
name = "${var.prefix}-wrklds"
auto_create_subnetworks = false
delete_default_routes_on_create = true
}
resource "google_compute_firewall" "wrkld_allowall" {
count = sum([ for k,v in var.wrkld_cidrs : length(v) ]) > 0 ? 1 : 0
name = "${var.prefix}-fw-wrklds-allowall"
network = google_compute_network.wrkld[0].self_link
allow {
protocol = "all"
}
source_ranges = ["0.0.0.0/0"]
}
resource "google_compute_network_peering" "right_wrkld" {
count = sum([ for k,v in var.wrkld_cidrs : length(v) ]) > 0 ? 1 : 0
name = "${var.prefix}-peer-right-wrkld"
network = google_compute_network.right.self_link
peer_network = google_compute_network.wrkld[0].self_link
export_custom_routes = true
}
resource "google_compute_network_peering" "wrkld_right" {
count = sum([ for k,v in var.wrkld_cidrs : length(v) ]) > 0 ? 1 : 0
name = "${var.prefix}-peer-wrkld-right"
network = google_compute_network.wrkld[0].self_link
peer_network = google_compute_network.right.self_link
import_custom_routes = true
}
resource "google_compute_subnetwork" "wrklds0" {
for_each = toset(var.wrkld_cidrs[keys(var.wrkld_cidrs)[0]])
name = "${var.prefix}-wrkld-${replace(split("/", each.value)[0], ".", "-" )}"
ip_cidr_range = each.value
region = keys(var.wrkld_cidrs)[0]
network = google_compute_network.wrkld[0].id
}
resource "google_compute_subnetwork" "wrklds1" {
for_each = toset(var.wrkld_cidrs[keys(var.wrkld_cidrs)[1]])
name = "${var.prefix}-wrkld-${replace(split("/", each.value)[0], ".", "-" )}"
ip_cidr_range = each.value
region = keys(var.wrkld_cidrs)[1]
network = google_compute_network.wrkld[0].id
}
#######################
resource "google_compute_instance" "srv0" {
name = "${var.prefix}-srv0"
zone = "${values(google_compute_subnetwork.wrklds0)[0].region}-b"
machine_type = "e2-medium"
boot_disk {
initialize_params {
image = "ubuntu-os-cloud/ubuntu-2204-lts"
}
}
network_interface {
subnetwork = values(google_compute_subnetwork.wrklds0)[0].id
}
metadata_startup_script =<<EOT
apt update
apt install nginx -y
EOT
}