brunch

You can make anything
by writing

C.S.Lewis

by Master Seo May 09. 2022

193. 테라폼-GCP-VPC네트워크,VM인스턴스

테라폼으로 VPC 네트워크와 우분트 VM인스턴스 하나 만들어 보자~



<1> 테라폼 파일

<2> 테라폼 실행

<3> VM 네트워크와 인스턴스 확인

<4> 삭제



<1> 테라폼 파일


gcp_compute.tf 

gcp_networking.tf  

gcp_outputs.tf  

gcp_security.tf  

gcp_variables.tf  

gcp_variables-vm.tf 

main.tf


topasseoseo1@cloudshell:~ (secret-zephyr-348001)$ more *.tf

::::::::::::::

gcp_compute.tf

::::::::::::::

data "google_compute_zones" "available" {

  region = var.gcp_region

}

resource "google_compute_address" "gcp-ip" {

  name   = "gcp-vm-ip-${var.gcp_region}"

  region = var.gcp_region

}

resource "google_compute_instance" "gcp-vm" {

  name         = "gcp-vm-${var.gcp_region}"

  machine_type = var.gcp_instance_type

  zone         = data.google_compute_zones.available.names[0]

  boot_disk {

    initialize_params {

      image = var.gcp_disk_image

    }

  }

  network_interface {

    subnetwork = google_compute_subnetwork.gcp-subnet1.name

    network_ip = var.gcp_vm_address

    access_config {

      # Static IP

      nat_ip = google_compute_address.gcp-ip.address

    }

  }

}

::::::::::::::

gcp_networking.tf

::::::::::::::

resource "google_compute_network" "gcp-network" {

  name                    = "bgame-gcp-dev-vpc"

  auto_create_subnetworks = "false"

}

resource "google_compute_subnetwork" "gcp-subnet1" {

  name          = "bgame-gcp-dev-pub-subnet1"

  ip_cidr_range = var.gcp_subnet1_cidr

  network       = google_compute_network.gcp-network.name

  region        = var.gcp_region

}

::::::::::::::

gcp_outputs.tf

::::::::::::::

output "gcp_instance_external_ip" {

  value = <<-EOF

  ${google_compute_instance.gcp-vm.network_interface[0].access_config[0].nat_ip}

EOF

}

output "gcp_instance_internal_ip" {

  value = google_compute_instance.gcp-vm.network_interface[0].network_ip

}

::::::::::::::

gcp_security.tf

::::::::::::::

# Allow PING testing.

resource "google_compute_firewall" "gcp-allow-icmp" {

  name    = "${google_compute_network.gcp-network.name}-gcp-allow-icmp"

  network = google_compute_network.gcp-network.name

  allow {

    protocol = "icmp"

  }

  source_ranges = [

    "0.0.0.0/0",

  ]

}

# Allow SSH for iperf testing.

resource "google_compute_firewall" "gcp-allow-ssh" {

  name    = "${google_compute_network.gcp-network.name}-gcp-allow-ssh"

  network = google_compute_network.gcp-network.name

  allow {

    protocol = "tcp"

    ports    = ["22"]

  }

  source_ranges = [

    "0.0.0.0/0",

  ]

}

# Allow TCP traffic from the Internet.

resource "google_compute_firewall" "gcp-allow-internet" {

  name    = "${google_compute_network.gcp-network.name}-gcp-allow-internet"

  network = google_compute_network.gcp-network.name

  allow {

    protocol = "tcp"

    ports    = ["80"]

  }

  source_ranges = [

    "0.0.0.0/0",

  ]

}

resource "google_compute_firewall" "https" {

  name    = "gcp-network-https"

  network = google_compute_network.gcp-network.name

  allow {

    protocol = "tcp"

    ports    = ["443"]

  }

  direction = "INGRESS"

  source_ranges = ["0.0.0.0/0"]

}

resource "google_compute_firewall" "gcp-allow-all" {

  name    = "gcp-network-allow-all"

  network = google_compute_network.gcp-network.name

  allow {

    protocol = "all"

  }

  direction = "INGRESS"

  source_ranges = ["0.0.0.0/0"]

}

::::::::::::::

gcp_variables.tf

::::::::::::::

variable "gcp_region" {

  description = "Default  region."

  default     = "asia-northeast3"

}

variable "gcp_network_cidr" {

  default = "10.0.8.0/21"

}

variable "gcp_subnet1_cidr" {

  default = "10.0.8.0/24"

}

::::::::::::::

gcp_variables_vm.tf

::::::::::::::

variable "gcp_instance_type" {

  description = "Machine Type. Correlates to an network egress cap."

  default     = "n1-standard-1"

}

variable "gcp_disk_image" {

  description = "Boot disk for gcp_instance_type."

  default     = "projects/ubuntu-os-cloud/global/images/family/ubuntu-1804-lts"

}

variable "gcp_vm_address" {

  description = "Private IP address for GCP VM instance."

  default     = "10.0.8.100"

}

::::::::::::::

main.tf

::::::::::::::

provider "google" {

  region = var.gcp_region

}

topasseoseo1@cloudshell:~ (secret-zephyr-348001)$







<2> 테라폼 실행


terraform init

terraform plan


terraform apply

yes



<3> VM 네트워크와 인스턴스 확인


1

VM 네트워크 확인





2

 VM인스턴스 확인

Compute  Engine > VM  인스턴스 > 




리스트 확인

gcloud compute instances list


삭제는

gcloud compute instances delete gcp-vm-asia-northeast3



3

Firewall 확인





4

웹서비스 올리고 접속 확인


sudo apt-get update

sudo apt-get install apache2 php7.0

Y

sudo service apache2 restart



 ps -ef |grep apache


topasseoseo1@gcp-vm-asia-northeast3:~$ ps -ef |grep apache

root     10293     1  0 08:16 ?        00:00:00 /usr/sbin/apache2 -k start

www-data 10296 10293  0 08:16 ?        00:00:00 /usr/sbin/apache2 -k start

www-data 10297 10293  0 08:16 ?        00:00:00 /usr/sbin/apache2 -k start

topasse+ 10354  2684  0 08:16 pts/0    00:00:00 grep --color=auto apache






<4> 삭제


terraform  destroy

Enter a value: yes




https://brunch.co.kr/@topasvga/2419


감사합니다.

매거진의 이전글 192. 테라폼-GCP-VPC 네트워크 만들기 실습
브런치는 최신 브라우저에 최적화 되어있습니다. IE chrome safari