Giter Club home page Giter Club logo

terraform-aws-subnet's Introduction

Terraform AWS Subnet

Terraform module to create public, private and public-private subnet with network acl, route table, Elastic IP, nat gateway, flow log.

Terraform Licence


We eat, drink, sleep and most importantly love DevOps. We are working towards stratergies for standardizing architecture while ensuring security for the infrastructure. We are strong believer of the philosophy Bigger problems are always solved by breaking them into smaller manageable problems. Resonating with microservices architecture, it is considered best-practice to run database, cluster, storage in smaller connected yet manageable pieces within the infrastructure.

This module is basically combination of Terraform open source and includes automatation tests and examples. It also helps to create and improve your infrastructure with minimalistic code instead of maintaining the whole infrastructure code yourself.

We have fifty plus terraform modules. A few of them are comepleted and are available for open source usage while a few others are in progress.

Prerequisites

This module has a few dependencies:

Examples

IMPORTANT: Since the master branch used in source varies based on new modifications, we suggest that you use the release versions here.

Here are some examples of how you can use this module in your inventory structure:

Private Subnet

  module "subnets" {
    source              = "git::https://github.com/clouddrove/terraform-aws-subnet.git?ref=tags/0.12.1"
    name                = "subnets"
    application         = "clouddrove"
    environment         = "test"
    label_order         = ["application", "environment", "name"]
    availability_zones  = ["eu-west-1a", "eu-west-1b", "eu-west-1c"]
    vpc_id              = "vpc-xxxxxxxxx"
    type                = "private"
    nat_gateway_enabled = true
    cidr_block          = "10.0.0.0/16"
    public_subnet_ids   = ["subnet-XXXXXXXXXXXXX", "subnet-XXXXXXXXXXXXX"]
  }

Public-Private Subnet

  module "subnets" {
    source              = "git::https://github.com/clouddrove/terraform-aws-subnet.git?ref=tags/0.12.1"
    name                = "subnets"
    application         = "clouddrove"
    environment         = "test"
    label_order         = ["application", "environment", "name"]
    availability_zones  = ["eu-west-1a", "eu-west-1b", "eu-west-1c"]
    vpc_id              = "vpc-xxxxxxxxx"
    type                = "public-private"
    igw_id              = "ig-xxxxxxxxx"
    nat_gateway_enabled = true
    cidr_block          = "10.0.0.0/16"
  }

Public Subnet

  module "subnets" {
    source              = "git::https://github.com/clouddrove/terraform-aws-subnet.git?ref=tags/0.12.1"
    name                = "subnets"
    application         = "clouddrove"
    environment         = "test"
    label_order         = ["application", "environment", "name"]
    availability_zones  = ["us-east-1a", "us-east-1b", "us-east-1c"]
    vpc_id              = "vpc-xxxxxxxxx"
    type                = "public"
    igw_id              = "ig-xxxxxxxxx"
    cidr_block          = "10.0.0.0/16"
  }

Inputs

Name Description Type Default Required
application Application (e.g. cd or clouddrove). string `` no
attributes Additional attributes (e.g. 1). list <list> no
availability_zones List of Availability Zones (e.g. ['us-east-1a', 'us-east-1b', 'us-east-1c']). list(string) <list> no
az_ngw_count Count of items in the az_ngw_ids map. Needs to be explicitly provided since Terraform currently can't use dynamic count on computed resources from different modules. hashicorp/terraform#10857. number 0 no
az_ngw_ids Only for private subnets. Map of AZ names to NAT Gateway IDs that are used as default routes when creating private subnets. map(string) <map> no
cidr_block Base CIDR block which is divided into subnet CIDR blocks (e.g. 10.0.0.0/16). string - yes
delimiter Delimiter to be used between organization, environment, name and attributes. string - no
enable_acl Set to false to prevent the module from creating any resources. bool true no
enable_flow_log Enable subnet_flow_log logs. bool false no
enabled Set to false to prevent the module from creating any resources. bool true no
environment Environment (e.g. prod, dev, staging). string `` no
igw_id Internet Gateway ID that is used as a default route when creating public subnets (e.g. igw-9c26a123). string `` no
label_order Label order, e.g. name,application. list <list> no
map_public_ip_on_launch Specify true to indicate that instances launched into the subnet should be assigned a public IP address. bool true no
max_subnets Maximum number of subnets that can be created. The variable is used for CIDR blocks calculation. number 6 no
name Name (e.g. app or cluster). string `` no
nat_gateway_enabled Flag to enable/disable NAT Gateways creation in public subnets. bool false no
private_network_acl_id Network ACL ID that is added to the private subnets. If empty, a new ACL will be created. string `` no
public_network_acl_id Network ACL ID that is added to the public subnets. If empty, a new ACL will be created. string `` no
public_subnet_ids A list of public subnet ids. list(string) <list> no
s3_bucket_arn S3 ARN for vpc logs. string `` no
tags Additional tags (e.g. map(BusinessUnit,XYZ). map <map> no
traffic_type Type of traffic to capture. Valid values: ACCEPT,REJECT, ALL. string ALL no
type Type of subnets to create (private or public). string `` no
vpc_id VPC ID. string - yes

Outputs

Name Description
private_route_tables_id The ID of the routing table.
private_subnet_cidrs CIDR blocks of the created private subnets.
private_subnet_id The ID of the private subnet.
private_tags A mapping of private tags to assign to the resource.
public_route_tables_id The ID of the routing table.
public_subnet_cidrs CIDR blocks of the created public subnets.
public_subnet_id The ID of the subnet.
public_tags A mapping of public tags to assign to the resource.

Testing

In this module testing is performed with terratest and it creates a small piece of infrastructure, matches the output like ARN, ID and Tags name etc and destroy infrastructure in your AWS account. This testing is written in GO, so you need a GO environment in your system.

You need to run the following command in the testing folder:

  go test -run Test

Feedback

If you come accross a bug or have any feedback, please log it in our issue tracker, or feel free to drop us an email at [email protected].

If you have found it worth your time, go ahead and give us a ★ on our GitHub!

About us

At CloudDrove, we offer expert guidance, implementation support and services to help organisations accelerate their journey to the cloud. Our services include docker and container orchestration, cloud migration and adoption, infrastructure automation, application modernisation and remediation, and performance engineering.

We are The Cloud Experts!


We ❤️ Open Source and you can check out our other modules to get help with your new Cloud ideas.

terraform-aws-subnet's People

Watchers

James Cloos avatar Sohan Yadav avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.