(terraform): add bastion module and example provisioning

README.md

@@ -13,7 +13,8 @@ Packer step generates an Azure VHD with
 * Downloads Kubernetes v1.9.6 component Docker images for faster `kubeadm init`
 
 ### Terraform
-Not implemented yet
+- basic modules implemented
+- example of provisioning in module/bastion
 
 ## Prep
 

terraform/main.tf

@@ -38,3 +38,15 @@ module "master" {
   # modules
   private-subnet-id = "${ module.vnet.private-subnet-id }"
 }
+
+module "bastion" {
+  source     = "./modules/bastion"
+  depends-id = "${ module.vnet.depends-id }"
+
+  # variables
+  name       = "${ var.name }"
+  location   = "${ var.location }"
+
+  # modules
+  private-subnet-id = "${ module.vnet.private-subnet-id }"
+}

terraform/modules/bastion/bastion.tf

@@ -0,0 +1,107 @@
+data "azurerm_resource_group" "image" {
+  name = "ACStackImages"
+}
+
+data "azurerm_image" "image" {
+  name                = "acstack-ubuntu-17.10-1521986033"
+  resource_group_name = "${data.azurerm_resource_group.image.name}"
+}
+
+resource "azurerm_public_ip" "bastion" {
+  name                         = "bastion"
+  location                     = "${ var.location }"
+  resource_group_name          = "${ var.name }"
+  public_ip_address_allocation = "Dynamic"
+  domain_name_label            = "sometestdn"
+
+  tags {
+    environment = "test"
+  }
+}
+
+resource "azurerm_network_interface" "bastion" {
+  name                = "bastion"
+  location            = "${ var.location }"
+  resource_group_name = "${ var.name }"
+
+  ip_configuration {
+    name                          = "private"
+    subnet_id                     = "${ var.private-subnet-id }"
+    private_ip_address_allocation = "dynamic"
+    public_ip_address_id          = "${azurerm_public_ip.bastion.id}"
+  }
+}
+
+resource "azurerm_virtual_machine" "bastion" {
+  name                  = "bastion"
+  location              = "${ var.location }"
+  resource_group_name   = "${ var.name }"
+  network_interface_ids = ["${azurerm_network_interface.bastion.id}"]
+  vm_size               = "Standard_DS1_v2"
+
+  # Uncomment this line to delete the OS disk automatically when deleting the VM
+  delete_os_disk_on_termination = true
+
+  # Uncomment this line to delete the data disks automatically when deleting the VM
+  delete_data_disks_on_termination = true
+
+  storage_image_reference {
+    id = "${data.azurerm_image.image.id}"
+  }
+
+  storage_os_disk {
+    name              = "bastionosdisk"
+    caching           = "ReadWrite"
+    create_option     = "FromImage"
+    managed_disk_type = "Standard_LRS"
+  }
+
+  os_profile {
+    computer_name  = "bastion"
+    admin_username = "ubuntu"
+    admin_password = "Kangaroo-jeremiah-thereon1!"
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = false
+
+    ssh_keys = [{
+      path     = "/home/ubuntu/.ssh/authorized_keys"
+      key_data = "${ data.template_file.ssh-pub-key.rendered }"
+    }]
+  }
+
+  connection {
+    # host        = "${azurerm_public_ip.bastion.ip_address}"
+    host        = "sometestdn.westus2.cloudapp.azure.com"
+    user        = "ubuntu"
+    type        = "ssh"
+    private_key = "${ data.template_file.ssh-private-key.rendered }"
+    timeout     = "2m"
+    agent       = true
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo docker run -d -p 8080:80 nginx",
+    ]
+  }
+
+  tags {
+    environment = "staging"
+  }
+}
+
+data "template_file" "ssh-private-key" {
+  template = "${ file( "${ path.module }/id_rsa.tpl" )}"
+}
+
+data "template_file" "ssh-pub-key" {
+  template = "${ file( "${ path.module }/id_rsa.pub.tpl" )}"
+}
+
+resource "null_resource" "dummy_dependency" {
+  depends_on = [
+    "azurerm_virtual_machine.bastion",
+  ]
+}

terraform/modules/bastion/io.tf

@@ -0,0 +1,8 @@
+variable "name" {}
+variable "location" {}
+variable "private-subnet-id" {}
+variable "depends-id" {}
+
+output "depends-id" {
+  value = "${null_resource.dummy_dependency.id}"
+}

terraform/modules/master/master.tf

@@ -58,9 +58,12 @@ resource "azurerm_virtual_machine" "master" {
   }
 
   os_profile {
-    computer_name  = "hostname"
-    admin_username = "testadmin"
-    admin_password = "Password1234!"
+    computer_name  = "k8smaster${ count.index + 1 }"
+    admin_username = "ubuntu"
+    admin_password = "Kangaroo-jeremiah-thereon1!"
+
+    # user_data = "${ data.template_file.cloud-config.rendered }"
+    # custom_data = "${ data.template_file.cloud-config.rendered }"
   }
 
   os_profile_linux_config {