main.tf

/**
 * DC/OS on AWS
 * ============
 * Creates a DC/OS Cluster on AWS
 *
 * [Quick Start Guide](https://github.com/dcos-terraform/terraform-aws-dcos/blob/master/docs/published/README.md)
 *
 * You can find more detailed documentation about this module here: [README.md](./docs/README.md)
 *
 * EXAMPLE
 * -------
 *
 *```hcl
 * module "dcos" {
 *   source  = "dcos-terraform/dcos/aws"
 *   version = "~> 0.2.0"
 *
 *   providers = {
 *     aws = "aws"
 *   }
 *
 *   cluster_name = "mydcoscluster"
 *   ssh_public_key_file = "~/.ssh/id_rsa.pub"
 *   admin_ips = ["198.51.100.0/24"]
 *
 *   num_masters = "3"
 *   num_private_agents = "2"
 *   num_public_agents = "1"
 *
 *   # availability_zones = ["<your_selected_region>a"]
 *
 *   dcos_cluster_docker_credentials_enabled =  "true"
 *   dcos_cluster_docker_credentials_write_to_etc = "true"
 *   dcos_cluster_docker_credentials_dcos_owned = "false"
 *   dcos_cluster_docker_registry_url = "https://index.docker.io"
 *   dcos_use_proxy = "yes"
 *   dcos_http_proxy = "example.com"
 *   dcos_https_proxy = "example.com"
 *   dcos_no_proxy = <<EOF
 * # YAML
 * - "internal.net"
 * - "169.254.169.254"
 *   EOF
 *   dcos_overlay_network = <<EOF
 * # YAML
 * vtep_subnet: 44.128.0.0/20
 * vtep_mac_oui: 70:B3:D5:00:00:00
 * overlays:
 *   - name: dcos
 *     subnet: 12.0.0.0/8
 *     prefix: 26
 * EOF
 *   dcos_rexray_config = <<EOF
 * # YAML
 * rexray:
 *   loglevel: warn
 *   modules:
 *     default-admin:
 *       host: tcp://127.0.0.1:61003
 *   storageDrivers:
 *   - ec2
 *   volume:
 *     unmount:
 *       ignoreusedcount: true
 * EOF
 *   dcos_cluster_docker_credentials = <<EOF
 * # YAML
 * auths:
 *   'https://index.docker.io/v1/':
 *     auth: Ze9ja2VyY3licmljSmVFOEJrcTY2eTV1WHhnSkVuVndjVEE=
 * EOF
 *
 *   # dcos_variant              = "ee"
 *   # dcos_license_key_contents = "${file("./license.txt")}"
 *   dcos_variant = "open"
 * }
 *```
 */

provider "aws" {}

data "aws_region" "current" {}

resource "random_id" "id" {
  byte_length = 2
  prefix      = "${var.cluster_name}"
}

locals {
  cluster_name                   = "${var.cluster_name_random_string ? random_id.id.hex : var.cluster_name}"
  dcos_s3_prefix                 = "${var.with_replaceable_masters ? "exhibitor" : ""}"
  dcos_exhibitor_explicit_keys   = "${var.with_replaceable_masters ? " false" : ""}"
  dcos_aws_region                = "${var.with_replaceable_masters ? data.aws_region.current.name : ""}"
  dcos_master_discovery          = "${var.with_replaceable_masters ? "master_http_loadbalancer" : var.dcos_master_discovery}"
  dcos_exhibitor_address         = "${var.with_replaceable_masters ? module.dcos-infrastructure.lb.masters_internal_dns_name : ""}"
  dcos_num_masters               = "${var.with_replaceable_masters ? var.num_masters : ""}"
  dcos_exhibitor_storage_backend = "${var.with_replaceable_masters ? "aws_s3" : var.dcos_exhibitor_storage_backend}"
}

module "dcos-infrastructure" {
  source  = "dcos-terraform/infrastructure/aws"
  version = "~> 0.2.4"

  admin_ips                                  = "${var.admin_ips}"
  availability_zones                         = "${var.availability_zones}"
  aws_ami                                    = "${var.aws_ami}"
  aws_key_name                               = "${var.aws_key_name}"
  bootstrap_associate_public_ip_address      = "${var.bootstrap_associate_public_ip_address}"
  bootstrap_aws_ami                          = "${var.bootstrap_aws_ami}"
  bootstrap_hostname_format                  = "${var.bootstrap_hostname_format}"
  bootstrap_iam_instance_profile             = "${var.bootstrap_iam_instance_profile}"
  bootstrap_instance_type                    = "${var.bootstrap_instance_type}"
  bootstrap_os                               = "${var.bootstrap_os}"
  bootstrap_root_volume_size                 = "${var.bootstrap_root_volume_size}"
  bootstrap_root_volume_type                 = "${var.bootstrap_root_volume_type}"
  cluster_name                               = "${local.cluster_name}"
  dcos_instance_os                           = "${var.dcos_instance_os}"
  accepted_internal_networks                 = ["${var.accepted_internal_networks}"]
  masters_acm_cert_arn                       = "${var.masters_acm_cert_arn}"
  masters_associate_public_ip_address        = "${var.masters_associate_public_ip_address}"
  masters_aws_ami                            = "${var.masters_aws_ami}"
  masters_hostname_format                    = "${var.masters_hostname_format}"
  masters_instance_type                      = "${var.masters_instance_type}"
  masters_internal_acm_cert_arn              = "${var.masters_internal_acm_cert_arn}"
  masters_iam_instance_profile               = "${var.masters_iam_instance_profile}"
  masters_os                                 = "${var.masters_os}"
  masters_root_volume_size                   = "${var.masters_root_volume_size}"
  masters_user_data                          = "${var.masters_user_data}"
  num_masters                                = "${var.num_masters}"
  num_private_agents                         = "${var.num_private_agents}"
  num_public_agents                          = "${var.num_public_agents}"
  private_agents_associate_public_ip_address = "${var.private_agents_associate_public_ip_address}"
  private_agents_aws_ami                     = "${var.private_agents_aws_ami}"
  private_agents_hostname_format             = "${var.private_agents_hostname_format}"
  private_agents_instance_type               = "${var.private_agents_instance_type}"
  private_agents_iam_instance_profile        = "${var.private_agents_iam_instance_profile}"
  private_agents_os                          = "${var.private_agents_os}"
  private_agents_root_volume_size            = "${var.private_agents_root_volume_size}"
  private_agents_root_volume_type            = "${var.private_agents_root_volume_type}"
  private_agents_extra_volumes               = ["${var.private_agents_extra_volumes}"]
  private_agents_user_data                   = "${var.private_agents_user_data}"
  public_agents_acm_cert_arn                 = "${var.public_agents_acm_cert_arn}"
  public_agents_associate_public_ip_address  = "${var.public_agents_associate_public_ip_address}"
  public_agents_aws_ami                      = "${var.public_agents_aws_ami}"
  public_agents_hostname_format              = "${var.public_agents_hostname_format}"
  public_agents_iam_instance_profile         = "${var.public_agents_iam_instance_profile}"
  public_agents_instance_type                = "${var.public_agents_instance_type}"
  public_agents_os                           = "${var.public_agents_os}"
  public_agents_root_volume_size             = "${var.public_agents_root_volume_size}"
  public_agents_root_volume_type             = "${var.public_agents_root_volume_type}"
  public_agents_extra_volumes                = ["${var.public_agents_extra_volumes}"]
  public_agents_access_ips                   = ["${var.public_agents_access_ips}"]
  public_agents_additional_ports             = ["${var.public_agents_additional_ports}"]
  public_agents_user_data                    = "${var.public_agents_user_data}"
  ssh_public_key                             = "${var.ssh_public_key}"
  ssh_public_key_file                        = "${var.ssh_public_key_file}"
  subnet_range                               = "${var.subnet_range}"
  tags                                       = "${var.tags}"

  aws_create_s3_bucket = "${var.with_replaceable_masters}"

  providers = {
    aws = "aws"
  }
}

module "dcos-install" {
  source  = "dcos-terraform/dcos-install-remote-exec/null"
  version = "~> 0.2.3"

  # ansible related config
  ansible_bundled_container = "${var.ansible_bundled_container}"
  ansible_additional_config = "${var.ansible_additional_config}"

  # bootstrap
  bootstrap_ip         = "${module.dcos-infrastructure.bootstrap.public_ip}"
  bootstrap_private_ip = "${module.dcos-infrastructure.bootstrap.private_ip}"
  bootstrap_os_user    = "${coalesce(var.ansible_user,module.dcos-infrastructure.bootstrap.os_user)}"

  # master
  master_ips         = ["${module.dcos-infrastructure.masters.public_ips}"]
  master_private_ips = ["${module.dcos-infrastructure.masters.private_ips}"]
  masters_os_user    = "${module.dcos-infrastructure.masters.os_user}"
  num_masters        = "${var.num_masters}"

  # private agent
  private_agent_ips         = ["${module.dcos-infrastructure.private_agents.public_ips}"]
  private_agent_private_ips = ["${concat(module.dcos-infrastructure.private_agents.private_ips, var.additional_private_agent_ips)}"]
  private_agents_os_user    = "${module.dcos-infrastructure.private_agents.os_user}"
  num_private_agents        = "${var.num_private_agents}"

  # public agent
  public_agent_ips         = ["${module.dcos-infrastructure.public_agents.public_ips}"]
  public_agent_private_ips = ["${concat(module.dcos-infrastructure.public_agents.private_ips, var.additional_public_agent_ips)}"]
  public_agents_os_user    = "${module.dcos-infrastructure.public_agents.os_user}"
  num_public_agents        = "${var.num_public_agents}"

  # windows private agent
  windows_private_agent_private_ips = ["${var.additional_windows_private_agent_ips}"]
  windows_private_agent_passwords   = ["${var.additional_windows_private_agent_passwords}"]
  windows_private_agent_username    = "${var.additional_windows_private_agent_os_user}"

  # Ability to change version service url
  dcos_versions_service_url = "${var.dcos_versions_service_url}"

  # DC/OS options
  dcos_cluster_name                            = "${coalesce(var.dcos_cluster_name, local.cluster_name)}"
  custom_dcos_download_path                    = "${var.custom_dcos_download_path}"
  dcos_download_url_checksum                   = "${var.dcos_download_url_checksum}"
  dcos_adminrouter_tls_1_0_enabled             = "${var.dcos_adminrouter_tls_1_0_enabled}"
  dcos_adminrouter_tls_1_1_enabled             = "${var.dcos_adminrouter_tls_1_1_enabled}"
  dcos_adminrouter_tls_1_2_enabled             = "${var.dcos_adminrouter_tls_1_2_enabled}"
  dcos_adminrouter_tls_cipher_suite            = "${var.dcos_adminrouter_tls_cipher_suite}"
  dcos_agent_list                              = "${var.dcos_agent_list}"
  dcos_audit_logging                           = "${var.dcos_audit_logging}"
  dcos_auth_cookie_secure_flag                 = "${var.dcos_auth_cookie_secure_flag}"
  dcos_aws_access_key_id                       = "${var.dcos_aws_access_key_id}"
  dcos_aws_region                              = "${coalesce(var.dcos_aws_region, local.dcos_aws_region)}"
  dcos_aws_secret_access_key                   = "${var.dcos_aws_secret_access_key}"
  dcos_aws_template_storage_access_key_id      = "${var.dcos_aws_template_storage_access_key_id}"
  dcos_aws_template_storage_bucket             = "${var.dcos_aws_template_storage_bucket}"
  dcos_aws_template_storage_bucket_path        = "${var.dcos_aws_template_storage_bucket_path}"
  dcos_aws_template_storage_region_name        = "${var.dcos_aws_template_storage_region_name}"
  dcos_aws_template_storage_secret_access_key  = "${var.dcos_aws_template_storage_secret_access_key}"
  dcos_aws_template_upload                     = "${var.dcos_aws_template_upload}"
  dcos_bootstrap_port                          = "${var.dcos_bootstrap_port}"
  dcos_bouncer_expiration_auth_token_days      = "${var.dcos_bouncer_expiration_auth_token_days}"
  dcos_ca_certificate_chain_path               = "${var.dcos_ca_certificate_chain_path}"
  dcos_ca_certificate_key_path                 = "${var.dcos_ca_certificate_key_path}"
  dcos_ca_certificate_path                     = "${var.dcos_ca_certificate_path}"
  dcos_check_time                              = "${var.dcos_check_time}"
  dcos_cluster_docker_credentials              = "${var.dcos_cluster_docker_credentials}"
  dcos_cluster_docker_credentials_dcos_owned   = "${var.dcos_cluster_docker_credentials_dcos_owned}"
  dcos_cluster_docker_credentials_enabled      = "${var.dcos_cluster_docker_credentials_enabled}"
  dcos_cluster_docker_credentials_write_to_etc = "${var.dcos_cluster_docker_credentials_write_to_etc}"
  dcos_cluster_docker_registry_enabled         = "${var.dcos_cluster_docker_registry_enabled}"
  dcos_cluster_docker_registry_url             = "${var.dcos_cluster_docker_registry_url}"
  dcos_config                                  = "${var.dcos_config}"
  dcos_custom_checks                           = "${var.dcos_custom_checks}"
  dcos_customer_key                            = "${var.dcos_customer_key}"
  dcos_dns_bind_ip_blacklist                   = "${var.dcos_dns_bind_ip_blacklist}"
  dcos_dns_forward_zones                       = "${var.dcos_dns_forward_zones}"
  dcos_dns_search                              = "${var.dcos_dns_search}"
  dcos_docker_remove_delay                     = "${var.dcos_docker_remove_delay}"
  dcos_enable_docker_gc                        = "${var.dcos_enable_docker_gc}"
  dcos_enable_gpu_isolation                    = "${var.dcos_enable_gpu_isolation}"
  dcos_exhibitor_address                       = "${coalesce(var.dcos_exhibitor_address, local.dcos_exhibitor_address)}"
  dcos_exhibitor_azure_account_key             = "${var.dcos_exhibitor_azure_account_key}"
  dcos_exhibitor_azure_account_name            = "${var.dcos_exhibitor_azure_account_name}"
  dcos_exhibitor_azure_prefix                  = "${var.dcos_exhibitor_azure_prefix}"
  dcos_exhibitor_explicit_keys                 = "${coalesce(var.dcos_exhibitor_explicit_keys, local.dcos_exhibitor_explicit_keys)}"
  dcos_exhibitor_storage_backend               = "${local.dcos_exhibitor_storage_backend}"
  dcos_exhibitor_zk_hosts                      = "${var.dcos_exhibitor_zk_hosts}"
  dcos_exhibitor_zk_path                       = "${var.dcos_exhibitor_zk_path}"
  dcos_fault_domain_detect_contents            = "${coalesce(var.dcos_fault_domain_detect_contents, file("${path.module}/scripts/fault-domain-detect.sh"))}"
  dcos_fault_domain_enabled                    = "${var.dcos_fault_domain_enabled}"
  dcos_gc_delay                                = "${var.dcos_gc_delay}"
  dcos_gpus_are_scarce                         = "${var.dcos_gpus_are_scarce}"
  dcos_http_proxy                              = "${var.dcos_http_proxy}"
  dcos_https_proxy                             = "${var.dcos_https_proxy}"
  dcos_ip_detect_contents                      = "${coalesce(var.dcos_ip_detect_contents,file("${path.module}/scripts/ip-detect.sh"))}"
  dcos_ip_detect_public_contents               = "${coalesce(var.dcos_ip_detect_public_contents,file("${path.module}/scripts/ip-detect-public.sh"))}"
  dcos_ip_detect_public_filename               = "${var.dcos_ip_detect_public_filename}"
  dcos_l4lb_enable_ipv6                        = "${var.dcos_l4lb_enable_ipv6}"
  dcos_license_key_contents                    = "${var.dcos_license_key_contents}"
  dcos_log_directory                           = "${var.dcos_log_directory}"
  dcos_master_discovery                        = "${local.dcos_master_discovery}"
  dcos_master_dns_bindall                      = "${var.dcos_master_dns_bindall}"
  dcos_master_external_loadbalancer            = "${coalesce(var.dcos_master_external_loadbalancer,module.dcos-infrastructure.lb.masters_dns_name)}"
  dcos_master_list                             = ["${var.dcos_master_list}"]
  dcos_mesos_container_log_sink                = "${var.dcos_mesos_container_log_sink}"
  dcos_mesos_dns_set_truncate_bit              = "${var.dcos_mesos_dns_set_truncate_bit}"
  dcos_mesos_max_completed_tasks_per_framework = "${var.dcos_mesos_max_completed_tasks_per_framework}"
  dcos_no_proxy                                = "${var.dcos_no_proxy}"
  dcos_num_masters                             = "${coalesce(var.dcos_num_masters, local.dcos_num_masters)}"
  dcos_oauth_enabled                           = "${var.dcos_oauth_enabled}"
  dcos_overlay_config_attempts                 = "${var.dcos_overlay_config_attempts}"
  dcos_overlay_enable                          = "${var.dcos_overlay_enable}"
  dcos_overlay_mtu                             = "${var.dcos_overlay_mtu}"
  dcos_overlay_network                         = "${var.dcos_overlay_network}"
  dcos_package_storage_uri                     = "${var.dcos_package_storage_uri}"
  dcos_previous_version                        = "${var.dcos_previous_version}"
  dcos_previous_version_master_index           = "${var.dcos_previous_version_master_index}"
  dcos_process_timeout                         = "${var.dcos_process_timeout}"
  dcos_public_agent_list                       = "${var.dcos_public_agent_list}"
  dcos_resolvers                               = ["${var.dcos_resolvers}"]
  dcos_rexray_config                           = "${var.dcos_rexray_config}"
  dcos_rexray_config_filename                  = "${var.dcos_rexray_config_filename}"
  dcos_rexray_config_method                    = "${var.dcos_rexray_config_method}"
  dcos_s3_bucket                               = "${coalesce(var.dcos_s3_bucket,module.dcos-infrastructure.aws_s3_bucket_name)}"
  dcos_s3_prefix                               = "${coalesce(var.dcos_s3_prefix, local.dcos_s3_prefix)}"
  dcos_security                                = "${var.dcos_security}"
  dcos_skip_checks                             = "${var.dcos_skip_checks}"
  dcos_staged_package_storage_uri              = "${var.dcos_staged_package_storage_uri}"
  dcos_superuser_password_hash                 = "${var.dcos_superuser_password_hash}"
  dcos_superuser_username                      = "${var.dcos_superuser_username}"
  dcos_telemetry_enabled                       = "${var.dcos_telemetry_enabled}"
  dcos_variant                                 = "${var.dcos_variant}"
  dcos_ucr_default_bridge_subnet               = "${var.dcos_ucr_default_bridge_subnet}"
  dcos_use_proxy                               = "${var.dcos_use_proxy}"
  dcos_version                                 = "${var.dcos_version}"
  dcos_image_commit                            = "${var.dcos_image_commit}"
  dcos_zk_agent_credentials                    = "${var.dcos_zk_agent_credentials}"
  dcos_zk_master_credentials                   = "${var.dcos_zk_master_credentials}"
  dcos_zk_super_credentials                    = "${var.dcos_zk_super_credentials}"
  dcos_enable_mesos_input_plugin               = "${var.dcos_enable_mesos_input_plugin}"
}