#########################

Terraform (IAAC s/w)

#########################

-> Terraform is an open source s/w created by HashiCorp and written in Go

programming language

-> Terraform is an infrastructure as code (IaaC) software tool,

-> Infrastructure as code is the process of managing infrastructure in a file or

files rather than manually configuring resources using user interface (UI)

-> Terraform code is written in the HashiCorp Configuration langauge (HCL) in files
with the extension .tf

-> Terraform allows users to use HashiCorp Configuration Language (HCL) to create
the files containing definitions of the their desired resources.

-> Terraform Supports all most all cloud providers (AWS, AZURE, GCP, Openstack
etc..).

-> To automate infrastructure creation in cloud platforms we will use Terraform.

===============================
Terraform vs Cloud Formation
==============================

-> Terraform developed by HashiCorp

-> CloudFormation developed by AWS

-> Terraform supports many cloud providers

-> Cloud Formation willl support only in AWS

-> Terraform uses HashiCorp configuration language (HCL) which built by HashiCorp.
It is fully compatible with JSON.

-> AWS Cloud Formation utilizes either JSON or YAML. Cloud formation has a limit of
51,000 bytes for the template body itself.

==========================
Terraform Vs Ansible
==========================

-> Terraform developed by HashiCorp

-> Ansible is also an open source software

-> Terraform is an infrastructure as a Code, which means they are designed to

provision the servers themselves.
-> Ansible is a configuration management tool. Which means ansibled designed o
install and manage software on existing servers.

-> Terraform is ideal for creating, managing and improving infrastructure.

-> Ansible is ideal for software provisioning, application deployment and
configuration management.

====================================
Terraform Setup - Pre-Requisites
====================================
1) Cloud Platform Account (AWS, Azure, GCP, Openstack etc..)
2) IAM User account (Secret Key and Access Key)
3) IAM User should have resources Access

###############################
Terraform Installation
#############################

1) Create EC2 instance ( Amazon Linux )

2) Connect to EC2 VM using Mobaxterm and execute below commands

$ sudo yum install -y yum-utils shadow-utils

$ sudo yum-config-manager --add-repo

https://rpm.releases.hashicorp.com/AmazonLinux/hashicorp.repo

$ sudo yum -y install terraform

$ terraform -v

###########################################
Working with EC2 Instance using Terraform
###########################################

1) Create IAM user with Programmatic Access (IAM user should have EC2FullAccess)

2) Download Secret Key and Access Key

3) Write First Terraform Script

$ mkdir terraformscript
$ cd terraformscripts
$ vi FirstTFScript.tf

provider "aws" {
region = "ap-south-1"
access_key = "AKIAW4SOJK"
secret_key = "CWSCbZqpIQMkLb1WRB2Xrdufy6/Lp"
}

resource "aws_instance" "AWSServer" {

ami = "ami-057752b3f1d6c4d6c"
instance_type = "t2.micro"
key_name = "ashokitnewkey"
security_groups = ["default"]
tags = {
Name = "MyEC2-VM"
}
}

10) Initialize Terraform using init command

$ terraform init

11) Format your script (indent spaces)

$ terraform fmt

12) Validate Your Script

$ terraform validate

13) Create Execution Plan For Your Script

$ terraform plan

14) Create Infrastructure

$ terraform apply -auto-approve

Note: When the script got executed it will store that state in a file. If we
execute script again it will not create. If you delete that state file and execute
script again then it will create it.

15) Destory Infrastructure

$ terraform destroy -auto-approve

-> In first script we kept provider and resources info in single script file. We
can keep provider and resources information in seperate files

Ex : proder.tf & main.tf

#########################################
Script to create multiple Ec2 instances
#########################################

provider "aws" {
region = "ap-south-1"
access_key = "AKIA4MGQ5UW757KVKECC"
secret_key = "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"
}

resource "aws_instance" "AWSVM_Server" {

count = "2"
ami = "ami-05c8ca4485f8b138a"
instance_type = "t2.micro"
key_name = "linux"
security_groups = ["ashokit_security_group"]
tags = {
Name = "REDHAT-EC2-VM"
}
}

Note: Once it is created, then destory infrastructure using below command

$ terraform destroy -auto-approve

=====================
Variables in TypeScript
=====================
-> Variables are used to store data in key-value format

Ex:

id = 101
name = Raju

-> We can maintain variables in seperate file

$ vi vars.tf

variable "ami"{
description="Amazon Machine Image value"
default = "ami-05c8ca4485f8b138a"
}

variable "instance_type"{
description="Amazon Instance Type"
default = "t2.micro"
}

variable "instances_count"{
description="Total No.of Instances"
default = "2"
}

-> Create main tf file using variables

$ vi main.tf

provider "aws" {
region = "ap-south-1"
access_key = "AKIA4MGQ5UW757KVKECC"
secret_key = "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"
}

resource "aws_instance" "AWSServer" {

count="${var.instances_count}"
ami = "${var.ami}"
instance_type = "${var.instance_type}"
key_name = "linux"
security_groups = ["ashokit_security_group"]
tags = {
Name = "EC2 VM - ${count.index}"
}
}

Note: We can supply variables in runtime also

-> Remove instances_count variable from var.tf file and pass like below

$ terraform apply -var instances_count="2" -auto-aprove

=============================
Comments in Terraform Script
=============================
# - single line comment

// - single line comment (java style)

/* and */ - Multi line comments

================================
Dealing with Secret Key and Access Key
================================

-> We have configured secret_key and access_key in terraform script file. Instead
of that we can configure them as environment variables.

$ export AWS_ACCESS_KEY_ID="AKIAYGAYINU"
$ export AWS_SECRET_ACCESS_KEY="50JVwq5SMmvPZbt+fpNRpvw5Zj+3GK09"

-> To verify environment variables we can use echo command

$ echo $AWS_ACCESS_KEY_ID
$ echo $AWS_SECRET_ACCESS_KEY

-> Now remove credentials from terraform script and execute it.

Note: We are setting provider credentials in terminal so these variables will be

available for current session. If we want to set permanently add them in .bashrc
file

=============================
Working with User Data
=============================

-> It is used to execute script when instance launched for first time.

-> Create Userdata in one file

$ vi installHttpd.sh

#!/bin/bash
sudo su
yum install httpd -y
cd /var/www/html
echo "<html><h1>Welcome to Ashok IT...!!</h1></html>" > index.html
service httpd start

$ chmod u+x installHttpd.sh

-> create main scrit in main.tf file

-> vi main.tf

provider "aws" {
region = "ap-south-1"
}

resource "aws_instance" "AWSServer" {

ami = "ami-05c8ca4485f8b138a"
instance_type = "t2.micro"
key_name = "linux"
security_groups = ["ashokit_security_group"]
user_data = "${file("installHttpd.sh")}"
tags = {
Name = "Web-Server"
}
}

==================================
Creating S3 bucket using Terraform script
==================================

-> Add S3 policy for IAM user

-> Execute below terraform script to create s3 bucket in AWS

provider "aws"{
region = "ap-south-1"
}

resource "aws_s3_bucket" "s3bucketashokit"{

bucket = "s3bucketashokit"
acl="private"

versioning{
enabled = true
}

tags = {
Name = "S3 Bucket By Ashok"
}
}

===================================
Create MySQL DB in AWS using Terraform
===================================

-> Provider RDS access for IAM user

-> Execute below script to create MySQL DB in AWS cloud

provider "aws"{
region = "ap-south-1"
}

resource "aws_db_instance" "default" {

allocated_storage = 100
engine = "mysql"
engine_version = "5.7"
instance_class = "db.t3.micro"
name = "mydb"
username = "foo"
password = "foobarbaz"
parameter_group_name = "default.mysql5.7"
skip_final_snapshot = true
}
=======================================================================