├── .gitignore ├── Dockerfile ├── Jenkinsfile-CD ├── Jenkinsfile-CI ├── README.md ├── deployment.yaml ├── mvnw ├── mvnw.cmd ├── pom.xml ├── service.yaml ├── src ├── main │ ├── java │ │ └── com │ │ │ └── javatechie │ │ │ └── DevopsIntegrationApplication.java │ └── resources │ │ ├── application.properties │ │ └── application.yml └── test │ └── java │ └── com │ └── javatechie │ └── DevopsIntegrationApplicationTests.java └── terraform_files ├── README.md ├── main.tf ├── node.tf └── provider.tf /.gitignore: -------------------------------------------------------------------------------- 1 | terraform_files 2 | .test 3 | -------------------------------------------------------------------------------- /Dockerfile: -------------------------------------------------------------------------------- 1 | FROM openjdk:8 2 | EXPOSE 8080 3 | ADD target/devops-integration.jar devops-integration.jar 4 | ENTRYPOINT ["java","-jar","/devops-integration.jar"] 5 | -------------------------------------------------------------------------------- /Jenkinsfile-CD: -------------------------------------------------------------------------------- 1 | // JENKINS CD PIPELINE 2 | // Here the image stored in Dockerhub will be deployed using K8s 3 | // IMP NOTE: Store your EC2 instance username & key in Jenkins credentials 4 | 5 | pipeline { 6 | agent any 7 | // DECLARE THE VARIABLES HERE: 8 | environment { 9 | NODE_IP = '' // paste your Node-Server private IP here 10 | EC2_NAME = "ec2-user" // enter your AWS EC2 username 11 | PIPELINE_NAME = "CI-PIPELINE" // enter your pipeline name here 12 | PROJECT_NAME = "DevopsProject1" // enter your Devops project name here 13 | } 14 | 15 | stages { 16 | stage("1. Pull Files") { 17 | // Copy K8s manifest files from Master-Server workspace to Node-server 18 | steps { 19 | sshagent(['my_ec2_creds']) { // install 'ssh agent' plugin & generate 'ssh-agent' pipeline syntax generator 20 | sh "ssh -o StrictHostKeyChecking=no ${EC2_NAME}@${NODE_IP}" // enter your Node Server's private IP here 21 | sh "scp /var/lib/jenkins/workspace/${PIPELINE_NAME}/${PROJECT_NAME}/deployment.yaml ${EC2_NAME}@${NODE_IP}:/home/ec2-user/" 22 | sh "scp /var/lib/jenkins/workspace/${PIPELINE_NAME}/${PROJECT_NAME}/service.yaml ${EC2_NAME}@${NODE_IP}:/home/ec2-user/" 23 | } 24 | } 25 | } 26 | 27 | stage('2. Approval') { 28 | // If 'manual approval' is required, then it is called 'Continuous Delivery' 29 | // If it is totally automated, then it is called 'Continuous Deployment' 30 | steps { 31 | input message: 'Approve deployment?' 32 | } 33 | } 34 | 35 | stage("3. Deployment") { 36 | // K8s Deployment using Ansible 37 | // i. Ensure to establish passwordless connection between Master & Node first 38 | // ii. Your deployment.yaml file must contain the Dockerhub image within the container block 39 | steps { 40 | sshagent(['my_ec2_creds']) { // store EC2 username & pem-key in Jenkins credentials 41 | sh "ssh -o StrictHostKeyChecking=no ${EC2_NAME}@${NODE_IP}" // enter your Node-Server private IP here 42 | sh "ssh -o StrictHostKeyChecking=no ${EC2_NAME}@${NODE_IP} kubectl apply -f deployment.yaml" 43 | sh "ssh -o StrictHostKeyChecking=no ${EC2_NAME}@${NODE_IP} kubectl apply -f service.yaml" 44 | sh "ssh -o StrictHostKeyChecking=no ${EC2_NAME}@${NODE_IP} kubectl rollout restart deploy" 45 | sh "ssh -o StrictHostKeyChecking=no ${EC2_NAME}@${NODE_IP} kubectl get service" 46 | } 47 | } 48 | } 49 | } 50 | } 51 | -------------------------------------------------------------------------------- /Jenkinsfile-CI: -------------------------------------------------------------------------------- 1 | // JENKINS CI PIPELINE/ 2 | // Purpose: The Code will be built into executable file (.jar) & pushed to Dockerhub 3 | // NOTE: 4 | // i. Store Dockerhub, EC2 pem key credentials in Jenkins Server 5 | // ii. Install 'ssh agent' plugin in Jenkins 6 | 7 | pipeline { 8 | agent any 9 | // DECLARE THE VARIABLES HERE: 10 | environment { 11 | DOCKER_USERNAME = "nasirpatel" // check the 'ID' in your Jenkins credentials 12 | } 13 | 14 | stages { 15 | stage("1. Cleanup") { 16 | // Clean workspace directory for the current build 17 | steps { 18 | deleteDir () 19 | } 20 | } 21 | 22 | stage ('2. Git Checkout') { 23 | // use pipeline syntax generator to generate below step 24 | // 'Pipeline syntax' --> Steps 'Smaple step' --> git (enter url & branch & generate) 25 | steps { 26 | dir ("DevopsProject1"){ 27 | script { 28 | git branch: 'main', url: 'https://github.com/pandacloud1/DevopsProject1.git' 29 | } 30 | } 31 | } 32 | } 33 | 34 | stage("3. Maven Unit Test") { 35 | // Test the individual units of code 36 | steps{ 37 | dir ("DevopsProject1"){ 38 | sh 'mvn test' 39 | } 40 | } 41 | } 42 | 43 | stage('4. Maven Build') { 44 | // Build the application into an executable file (.jar) 45 | steps{ 46 | dir ("DevopsProject1"){ 47 | sh 'mvn clean install' 48 | } 49 | } 50 | } 51 | 52 | stage("5. Maven Integration Test") { 53 | // Test the interaction between different units of code 54 | steps{ 55 | dir ("DevopsProject1"){ 56 | sh 'mvn verify' 57 | } 58 | } 59 | } 60 | 61 | stage('6. Docker Image Build') { 62 | // Build Docker Image 63 | steps{ 64 | dir('DevopsProject1') { // go to directory where 'Dockerfile' is stored 65 | script { 66 | def JOB = env.JOB_NAME.toLowerCase() // Convert Jenkins Job name to lower-case 67 | sh "docker build -t ${JOB}:${BUILD_NUMBER} ." // 'JOB_NAME' & 'BUILD_NUMBER' are Jenkins Global variable 68 | } 69 | } 70 | } 71 | } 72 | 73 | stage('7. Docker Image Tag') { 74 | // Rename the Docker Image before pushing to Dockerhub 75 | steps{ 76 | dir('DevopsProject1') { // go to directory where Docker Image is created 77 | script { 78 | def JOB = env.JOB_NAME.toLowerCase() // Convert Jenkins Job name to lower-case 79 | sh "docker tag ${JOB}:${BUILD_NUMBER} ${DOCKER_USERNAME}/${JOB}:v${BUILD_NUMBER}" 80 | sh "docker tag ${JOB}:${BUILD_NUMBER} ${DOCKER_USERNAME}/${JOB}:latest" 81 | } 82 | } 83 | } 84 | } 85 | 86 | stage('8. Trivy Image Scan') { 87 | // Scan Docker images for vulnerabilities 88 | steps{ 89 | script { 90 | def JOB = env.JOB_NAME.toLowerCase() // Convert Jenkins Job name to lower-case 91 | sh "trivy image ${DOCKER_USERNAME}/${JOB}:v${BUILD_NUMBER} > scan.txt" 92 | } 93 | } 94 | } 95 | 96 | stage('9. Docker Image Push') { 97 | // Login to Dockerhub & Push the image to Dockerhub 98 | steps{ 99 | script { 100 | withCredentials([usernamePassword(credentialsId: 'my_dockerhub_creds', usernameVariable: 'docker_user', passwordVariable: 'docker_pass')]) { 101 | sh "docker login -u '${docker_user}' -p '${docker_pass}'" 102 | def JOB = env.JOB_NAME.toLowerCase() // Convert Jenkins Job name to lower-case 103 | sh "docker push ${DOCKER_USERNAME}/${JOB}:v${BUILD_NUMBER}" 104 | sh "docker push ${DOCKER_USERNAME}/${JOB}:latest" 105 | } 106 | } 107 | } 108 | } 109 | 110 | stage('10. Docker Image Cleanup') { 111 | // Remove the unwanted (dangling) images created in Jenkins Server to free-up space 112 | steps{ 113 | script { 114 | sh "docker image prune -af" 115 | } 116 | } 117 | } 118 | } 119 | } 120 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Devops-Project. 2 | 3 | ![Tools](https://github.com/pandacloud1/DevopsProject1/assets/134182273/b553e105-136d-4ce4-93ec-540809cdc6ee) 4 | 5 | This repository contains the following components: 6 | 7 | 1. Simple Java Code 8 | 2. Dockerfile 9 | 3. Kubernetes manifests (`deployment.yaml` & `service.yaml`) 10 | 4. Jenkinsfile (CI & CD) 11 | 5. Terraform code 12 | 13 | ## Algorithm 14 | 15 | #### 1. Create two EC2 instances: 'Master-Server' & 'Node-Server' using Terraform 16 | 17 | a. 'Master-Server' will have Java, Jenkins, Maven, Docker, Ansible, & Trivy packages 18 | b. 'Node-Server' will have Docker, Kubeadm & Kubernetes packages 19 | 20 | #### 2. Establish passwordless connection between 'Master-Server' & 'Node-Server' 21 | 22 | sudo su - 23 | passwd ec2-user # (set password) 24 | vi /etc/ssh/sshd_config # (Allow 'PermitRootLogin yes' & allow 'PasswordAuthentication yes') 25 | service sshd restart 26 | 27 | 28 | ssh-keygen # (this will generate ssh key, press enter when prompted) 29 | ssh-copy-id ec2-user@ # (enter 'yes' when prompted & enter the Node's ec2-user password when prompted) 30 | 31 | #### 3. Access Jenkins portal & add credentials in Jenkins portal as below: 32 | (Manage Jenkins --> Credentials --> System --> Global credentials) 33 | 34 | a. Dockerhub credentials - username & password (Use 'secret text' & save them separately) 35 | b. K8s server username with private key (Use 'SSH Username with private key') 36 | c. Add Github username & token (Generate Github token & save as 'secret key' in Jenkins server) 37 | (Github: Github settings --> Developer settings --> Personal Token classic --> Generate) 38 | d. Dockerhub token (optional) (Generate token & save as 'secret key') 39 | (Dockerhub: Account --> Settings --> Security --> Generate token & copy it) 40 | 41 | #### 4. Add required plugins in Jenkins portal 42 | (Manage Jenkins --> Plugins --> Available plugins --> 'ssh agent' --> Install) 43 | (This plugin is required to generate ssh agent syntax using pipeline syntax generator) 44 | 45 | #### 5. Access Jenkins portal & paste the 'CI-pipeline' code 46 | Run the pipeline 47 | 48 | #### 6. Now create another 'CD-pipeline' 49 | a. Enter the 'Pipeline name', 'Project Name' & 'Node-Server' Private IP under the environment variables section 50 | b. Run the pipeline 51 | c. Access the content from the browser using : 52 | 53 | #### 7. Automation 54 | a. Automate the CD pipeline after CI pipeline is built successfully 55 | (CD-pipeline --> Configure --> Build Triggers --> Projects to watch (CI-pipeline) --> 56 | Trigger only if build is stable --> Save) 57 | b. Automate CI pipeline if any changes are pushed to Github 58 | (Webhook will be created in Github & trigger will be created in Jenkins) 59 | Jenkins --> Configure --> Build triggers --> 'Github hook trigger for GitSCM polling' --> Save 60 | Jenkins --> --> Configure --> API Tokens --> 61 | Github --> --> Settings --> Webhooks --> ":8080/github-webhook/"; --> 62 | Content type: json; Secret: --> Add Webhook 63 | (Try making any changes in your code & the pipeline should automatically trigger) 64 | 65 | #### 8. Deletion 66 | a. Run the below command in Terraform to destroy the entire infrastructure 67 | terraform destroy --auto-approve 68 | -------------------------------------------------------------------------------- /deployment.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: apps/v1 2 | kind: Deployment 3 | metadata: 4 | name: mydeploy 5 | spec: 6 | replicas: 1 7 | selector: 8 | matchLabels: 9 | name: mydeploy1 10 | template: 11 | metadata: 12 | name: mypod1 13 | labels: 14 | name: mydeploy1 15 | spec: 16 | containers: 17 | - name: mycontainer 18 | image: nasirpatel/ci-pipeline:latest # replace with your Docker-image pushed on Dockerhub 19 | ports: 20 | - containerPort: 8080 21 | -------------------------------------------------------------------------------- /mvnw: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | # ---------------------------------------------------------------------------- 3 | # Licensed to the Apache Software Foundation (ASF) under one 4 | # or more contributor license agreements. See the NOTICE file 5 | # distributed with this work for additional information 6 | # regarding copyright ownership. The ASF licenses this file 7 | # to you under the Apache License, Version 2.0 (the 8 | # "License"); you may not use this file except in compliance 9 | # with the License. You may obtain a copy of the License at 10 | # 11 | # https://www.apache.org/licenses/LICENSE-2.0 12 | # 13 | # Unless required by applicable law or agreed to in writing, 14 | # software distributed under the License is distributed on an 15 | # "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY 16 | # KIND, either express or implied. See the License for the 17 | # specific language governing permissions and limitations 18 | # under the License. 19 | # ---------------------------------------------------------------------------- 20 | 21 | # ---------------------------------------------------------------------------- 22 | # Maven Start Up Batch script 23 | # 24 | # Required ENV vars: 25 | # ------------------ 26 | # JAVA_HOME - location of a JDK home dir 27 | # 28 | # Optional ENV vars 29 | # ----------------- 30 | # M2_HOME - location of maven2's installed home dir 31 | # MAVEN_OPTS - parameters passed to the Java VM when running Maven 32 | # e.g. to debug Maven itself, use 33 | # set MAVEN_OPTS=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000 34 | # MAVEN_SKIP_RC - flag to disable loading of mavenrc files 35 | # ---------------------------------------------------------------------------- 36 | 37 | if [ -z "$MAVEN_SKIP_RC" ] ; then 38 | 39 | if [ -f /usr/local/etc/mavenrc ] ; then 40 | . /usr/local/etc/mavenrc 41 | fi 42 | 43 | if [ -f /etc/mavenrc ] ; then 44 | . /etc/mavenrc 45 | fi 46 | 47 | if [ -f "$HOME/.mavenrc" ] ; then 48 | . "$HOME/.mavenrc" 49 | fi 50 | 51 | fi 52 | 53 | # OS specific support. $var _must_ be set to either true or false. 54 | cygwin=false; 55 | darwin=false; 56 | mingw=false 57 | case "`uname`" in 58 | CYGWIN*) cygwin=true ;; 59 | MINGW*) mingw=true;; 60 | Darwin*) darwin=true 61 | # Use /usr/libexec/java_home if available, otherwise fall back to /Library/Java/Home 62 | # See https://developer.apple.com/library/mac/qa/qa1170/_index.html 63 | if [ -z "$JAVA_HOME" ]; then 64 | if [ -x "/usr/libexec/java_home" ]; then 65 | export JAVA_HOME="`/usr/libexec/java_home`" 66 | else 67 | export JAVA_HOME="/Library/Java/Home" 68 | fi 69 | fi 70 | ;; 71 | esac 72 | 73 | if [ -z "$JAVA_HOME" ] ; then 74 | if [ -r /etc/gentoo-release ] ; then 75 | JAVA_HOME=`java-config --jre-home` 76 | fi 77 | fi 78 | 79 | if [ -z "$M2_HOME" ] ; then 80 | ## resolve links - $0 may be a link to maven's home 81 | PRG="$0" 82 | 83 | # need this for relative symlinks 84 | while [ -h "$PRG" ] ; do 85 | ls=`ls -ld "$PRG"` 86 | link=`expr "$ls" : '.*-> \(.*\)$'` 87 | if expr "$link" : '/.*' > /dev/null; then 88 | PRG="$link" 89 | else 90 | PRG="`dirname "$PRG"`/$link" 91 | fi 92 | done 93 | 94 | saveddir=`pwd` 95 | 96 | M2_HOME=`dirname "$PRG"`/.. 97 | 98 | # make it fully qualified 99 | M2_HOME=`cd "$M2_HOME" && pwd` 100 | 101 | cd "$saveddir" 102 | # echo Using m2 at $M2_HOME 103 | fi 104 | 105 | # For Cygwin, ensure paths are in UNIX format before anything is touched 106 | if $cygwin ; then 107 | [ -n "$M2_HOME" ] && 108 | M2_HOME=`cygpath --unix "$M2_HOME"` 109 | [ -n "$JAVA_HOME" ] && 110 | JAVA_HOME=`cygpath --unix "$JAVA_HOME"` 111 | [ -n "$CLASSPATH" ] && 112 | CLASSPATH=`cygpath --path --unix "$CLASSPATH"` 113 | fi 114 | 115 | # For Mingw, ensure paths are in UNIX format before anything is touched 116 | if $mingw ; then 117 | [ -n "$M2_HOME" ] && 118 | M2_HOME="`(cd "$M2_HOME"; pwd)`" 119 | [ -n "$JAVA_HOME" ] && 120 | JAVA_HOME="`(cd "$JAVA_HOME"; pwd)`" 121 | fi 122 | 123 | if [ -z "$JAVA_HOME" ]; then 124 | javaExecutable="`which javac`" 125 | if [ -n "$javaExecutable" ] && ! [ "`expr \"$javaExecutable\" : '\([^ ]*\)'`" = "no" ]; then 126 | # readlink(1) is not available as standard on Solaris 10. 127 | readLink=`which readlink` 128 | if [ ! `expr "$readLink" : '\([^ ]*\)'` = "no" ]; then 129 | if $darwin ; then 130 | javaHome="`dirname \"$javaExecutable\"`" 131 | javaExecutable="`cd \"$javaHome\" && pwd -P`/javac" 132 | else 133 | javaExecutable="`readlink -f \"$javaExecutable\"`" 134 | fi 135 | javaHome="`dirname \"$javaExecutable\"`" 136 | javaHome=`expr "$javaHome" : '\(.*\)/bin'` 137 | JAVA_HOME="$javaHome" 138 | export JAVA_HOME 139 | fi 140 | fi 141 | fi 142 | 143 | if [ -z "$JAVACMD" ] ; then 144 | if [ -n "$JAVA_HOME" ] ; then 145 | if [ -x "$JAVA_HOME/jre/sh/java" ] ; then 146 | # IBM's JDK on AIX uses strange locations for the executables 147 | JAVACMD="$JAVA_HOME/jre/sh/java" 148 | else 149 | JAVACMD="$JAVA_HOME/bin/java" 150 | fi 151 | else 152 | JAVACMD="`\\unset -f command; \\command -v java`" 153 | fi 154 | fi 155 | 156 | if [ ! -x "$JAVACMD" ] ; then 157 | echo "Error: JAVA_HOME is not defined correctly." >&2 158 | echo " We cannot execute $JAVACMD" >&2 159 | exit 1 160 | fi 161 | 162 | if [ -z "$JAVA_HOME" ] ; then 163 | echo "Warning: JAVA_HOME environment variable is not set." 164 | fi 165 | 166 | CLASSWORLDS_LAUNCHER=org.codehaus.plexus.classworlds.launcher.Launcher 167 | 168 | # traverses directory structure from process work directory to filesystem root 169 | # first directory with .mvn subdirectory is considered project base directory 170 | find_maven_basedir() { 171 | 172 | if [ -z "$1" ] 173 | then 174 | echo "Path not specified to find_maven_basedir" 175 | return 1 176 | fi 177 | 178 | basedir="$1" 179 | wdir="$1" 180 | while [ "$wdir" != '/' ] ; do 181 | if [ -d "$wdir"/.mvn ] ; then 182 | basedir=$wdir 183 | break 184 | fi 185 | # workaround for JBEAP-8937 (on Solaris 10/Sparc) 186 | if [ -d "${wdir}" ]; then 187 | wdir=`cd "$wdir/.."; pwd` 188 | fi 189 | # end of workaround 190 | done 191 | echo "${basedir}" 192 | } 193 | 194 | # concatenates all lines of a file 195 | concat_lines() { 196 | if [ -f "$1" ]; then 197 | echo "$(tr -s '\n' ' ' < "$1")" 198 | fi 199 | } 200 | 201 | BASE_DIR=`find_maven_basedir "$(pwd)"` 202 | if [ -z "$BASE_DIR" ]; then 203 | exit 1; 204 | fi 205 | 206 | ########################################################################################## 207 | # Extension to allow automatically downloading the maven-wrapper.jar from Maven-central 208 | # This allows using the maven wrapper in projects that prohibit checking in binary data. 209 | ########################################################################################## 210 | if [ -r "$BASE_DIR/.mvn/wrapper/maven-wrapper.jar" ]; then 211 | if [ "$MVNW_VERBOSE" = true ]; then 212 | echo "Found .mvn/wrapper/maven-wrapper.jar" 213 | fi 214 | else 215 | if [ "$MVNW_VERBOSE" = true ]; then 216 | echo "Couldn't find .mvn/wrapper/maven-wrapper.jar, downloading it ..." 217 | fi 218 | if [ -n "$MVNW_REPOURL" ]; then 219 | jarUrl="$MVNW_REPOURL/org/apache/maven/wrapper/maven-wrapper/3.1.0/maven-wrapper-3.1.0.jar" 220 | else 221 | jarUrl="https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.1.0/maven-wrapper-3.1.0.jar" 222 | fi 223 | while IFS="=" read key value; do 224 | case "$key" in (wrapperUrl) jarUrl="$value"; break ;; 225 | esac 226 | done < "$BASE_DIR/.mvn/wrapper/maven-wrapper.properties" 227 | if [ "$MVNW_VERBOSE" = true ]; then 228 | echo "Downloading from: $jarUrl" 229 | fi 230 | wrapperJarPath="$BASE_DIR/.mvn/wrapper/maven-wrapper.jar" 231 | if $cygwin; then 232 | wrapperJarPath=`cygpath --path --windows "$wrapperJarPath"` 233 | fi 234 | 235 | if command -v wget > /dev/null; then 236 | if [ "$MVNW_VERBOSE" = true ]; then 237 | echo "Found wget ... using wget" 238 | fi 239 | if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then 240 | wget "$jarUrl" -O "$wrapperJarPath" || rm -f "$wrapperJarPath" 241 | else 242 | wget --http-user=$MVNW_USERNAME --http-password=$MVNW_PASSWORD "$jarUrl" -O "$wrapperJarPath" || rm -f "$wrapperJarPath" 243 | fi 244 | elif command -v curl > /dev/null; then 245 | if [ "$MVNW_VERBOSE" = true ]; then 246 | echo "Found curl ... using curl" 247 | fi 248 | if [ -z "$MVNW_USERNAME" ] || [ -z "$MVNW_PASSWORD" ]; then 249 | curl -o "$wrapperJarPath" "$jarUrl" -f 250 | else 251 | curl --user $MVNW_USERNAME:$MVNW_PASSWORD -o "$wrapperJarPath" "$jarUrl" -f 252 | fi 253 | 254 | else 255 | if [ "$MVNW_VERBOSE" = true ]; then 256 | echo "Falling back to using Java to download" 257 | fi 258 | javaClass="$BASE_DIR/.mvn/wrapper/MavenWrapperDownloader.java" 259 | # For Cygwin, switch paths to Windows format before running javac 260 | if $cygwin; then 261 | javaClass=`cygpath --path --windows "$javaClass"` 262 | fi 263 | if [ -e "$javaClass" ]; then 264 | if [ ! -e "$BASE_DIR/.mvn/wrapper/MavenWrapperDownloader.class" ]; then 265 | if [ "$MVNW_VERBOSE" = true ]; then 266 | echo " - Compiling MavenWrapperDownloader.java ..." 267 | fi 268 | # Compiling the Java class 269 | ("$JAVA_HOME/bin/javac" "$javaClass") 270 | fi 271 | if [ -e "$BASE_DIR/.mvn/wrapper/MavenWrapperDownloader.class" ]; then 272 | # Running the downloader 273 | if [ "$MVNW_VERBOSE" = true ]; then 274 | echo " - Running MavenWrapperDownloader.java ..." 275 | fi 276 | ("$JAVA_HOME/bin/java" -cp .mvn/wrapper MavenWrapperDownloader "$MAVEN_PROJECTBASEDIR") 277 | fi 278 | fi 279 | fi 280 | fi 281 | ########################################################################################## 282 | # End of extension 283 | ########################################################################################## 284 | 285 | export MAVEN_PROJECTBASEDIR=${MAVEN_BASEDIR:-"$BASE_DIR"} 286 | if [ "$MVNW_VERBOSE" = true ]; then 287 | echo $MAVEN_PROJECTBASEDIR 288 | fi 289 | MAVEN_OPTS="$(concat_lines "$MAVEN_PROJECTBASEDIR/.mvn/jvm.config") $MAVEN_OPTS" 290 | 291 | # For Cygwin, switch paths to Windows format before running java 292 | if $cygwin; then 293 | [ -n "$M2_HOME" ] && 294 | M2_HOME=`cygpath --path --windows "$M2_HOME"` 295 | [ -n "$JAVA_HOME" ] && 296 | JAVA_HOME=`cygpath --path --windows "$JAVA_HOME"` 297 | [ -n "$CLASSPATH" ] && 298 | CLASSPATH=`cygpath --path --windows "$CLASSPATH"` 299 | [ -n "$MAVEN_PROJECTBASEDIR" ] && 300 | MAVEN_PROJECTBASEDIR=`cygpath --path --windows "$MAVEN_PROJECTBASEDIR"` 301 | fi 302 | 303 | # Provide a "standardized" way to retrieve the CLI args that will 304 | # work with both Windows and non-Windows executions. 305 | MAVEN_CMD_LINE_ARGS="$MAVEN_CONFIG $@" 306 | export MAVEN_CMD_LINE_ARGS 307 | 308 | WRAPPER_LAUNCHER=org.apache.maven.wrapper.MavenWrapperMain 309 | 310 | exec "$JAVACMD" \ 311 | $MAVEN_OPTS \ 312 | $MAVEN_DEBUG_OPTS \ 313 | -classpath "$MAVEN_PROJECTBASEDIR/.mvn/wrapper/maven-wrapper.jar" \ 314 | "-Dmaven.home=${M2_HOME}" \ 315 | "-Dmaven.multiModuleProjectDirectory=${MAVEN_PROJECTBASEDIR}" \ 316 | ${WRAPPER_LAUNCHER} $MAVEN_CONFIG "$@" 317 | -------------------------------------------------------------------------------- /mvnw.cmd: -------------------------------------------------------------------------------- 1 | @REM ---------------------------------------------------------------------------- 2 | @REM Licensed to the Apache Software Foundation (ASF) under one 3 | @REM or more contributor license agreements. See the NOTICE file 4 | @REM distributed with this work for additional information 5 | @REM regarding copyright ownership. The ASF licenses this file 6 | @REM to you under the Apache License, Version 2.0 (the 7 | @REM "License"); you may not use this file except in compliance 8 | @REM with the License. You may obtain a copy of the License at 9 | @REM 10 | @REM https://www.apache.org/licenses/LICENSE-2.0 11 | @REM 12 | @REM Unless required by applicable law or agreed to in writing, 13 | @REM software distributed under the License is distributed on an 14 | @REM "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY 15 | @REM KIND, either express or implied. See the License for the 16 | @REM specific language governing permissions and limitations 17 | @REM under the License. 18 | @REM ---------------------------------------------------------------------------- 19 | 20 | @REM ---------------------------------------------------------------------------- 21 | @REM Maven Start Up Batch script 22 | @REM 23 | @REM Required ENV vars: 24 | @REM JAVA_HOME - location of a JDK home dir 25 | @REM 26 | @REM Optional ENV vars 27 | @REM M2_HOME - location of maven2's installed home dir 28 | @REM MAVEN_BATCH_ECHO - set to 'on' to enable the echoing of the batch commands 29 | @REM MAVEN_BATCH_PAUSE - set to 'on' to wait for a keystroke before ending 30 | @REM MAVEN_OPTS - parameters passed to the Java VM when running Maven 31 | @REM e.g. to debug Maven itself, use 32 | @REM set MAVEN_OPTS=-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=8000 33 | @REM MAVEN_SKIP_RC - flag to disable loading of mavenrc files 34 | @REM ---------------------------------------------------------------------------- 35 | 36 | @REM Begin all REM lines with '@' in case MAVEN_BATCH_ECHO is 'on' 37 | @echo off 38 | @REM set title of command window 39 | title %0 40 | @REM enable echoing by setting MAVEN_BATCH_ECHO to 'on' 41 | @if "%MAVEN_BATCH_ECHO%" == "on" echo %MAVEN_BATCH_ECHO% 42 | 43 | @REM set %HOME% to equivalent of $HOME 44 | if "%HOME%" == "" (set "HOME=%HOMEDRIVE%%HOMEPATH%") 45 | 46 | @REM Execute a user defined script before this one 47 | if not "%MAVEN_SKIP_RC%" == "" goto skipRcPre 48 | @REM check for pre script, once with legacy .bat ending and once with .cmd ending 49 | if exist "%USERPROFILE%\mavenrc_pre.bat" call "%USERPROFILE%\mavenrc_pre.bat" %* 50 | if exist "%USERPROFILE%\mavenrc_pre.cmd" call "%USERPROFILE%\mavenrc_pre.cmd" %* 51 | :skipRcPre 52 | 53 | @setlocal 54 | 55 | set ERROR_CODE=0 56 | 57 | @REM To isolate internal variables from possible post scripts, we use another setlocal 58 | @setlocal 59 | 60 | @REM ==== START VALIDATION ==== 61 | if not "%JAVA_HOME%" == "" goto OkJHome 62 | 63 | echo. 64 | echo Error: JAVA_HOME not found in your environment. >&2 65 | echo Please set the JAVA_HOME variable in your environment to match the >&2 66 | echo location of your Java installation. >&2 67 | echo. 68 | goto error 69 | 70 | :OkJHome 71 | if exist "%JAVA_HOME%\bin\java.exe" goto init 72 | 73 | echo. 74 | echo Error: JAVA_HOME is set to an invalid directory. >&2 75 | echo JAVA_HOME = "%JAVA_HOME%" >&2 76 | echo Please set the JAVA_HOME variable in your environment to match the >&2 77 | echo location of your Java installation. >&2 78 | echo. 79 | goto error 80 | 81 | @REM ==== END VALIDATION ==== 82 | 83 | :init 84 | 85 | @REM Find the project base dir, i.e. the directory that contains the folder ".mvn". 86 | @REM Fallback to current working directory if not found. 87 | 88 | set MAVEN_PROJECTBASEDIR=%MAVEN_BASEDIR% 89 | IF NOT "%MAVEN_PROJECTBASEDIR%"=="" goto endDetectBaseDir 90 | 91 | set EXEC_DIR=%CD% 92 | set WDIR=%EXEC_DIR% 93 | :findBaseDir 94 | IF EXIST "%WDIR%"\.mvn goto baseDirFound 95 | cd .. 96 | IF "%WDIR%"=="%CD%" goto baseDirNotFound 97 | set WDIR=%CD% 98 | goto findBaseDir 99 | 100 | :baseDirFound 101 | set MAVEN_PROJECTBASEDIR=%WDIR% 102 | cd "%EXEC_DIR%" 103 | goto endDetectBaseDir 104 | 105 | :baseDirNotFound 106 | set MAVEN_PROJECTBASEDIR=%EXEC_DIR% 107 | cd "%EXEC_DIR%" 108 | 109 | :endDetectBaseDir 110 | 111 | IF NOT EXIST "%MAVEN_PROJECTBASEDIR%\.mvn\jvm.config" goto endReadAdditionalConfig 112 | 113 | @setlocal EnableExtensions EnableDelayedExpansion 114 | for /F "usebackq delims=" %%a in ("%MAVEN_PROJECTBASEDIR%\.mvn\jvm.config") do set JVM_CONFIG_MAVEN_PROPS=!JVM_CONFIG_MAVEN_PROPS! %%a 115 | @endlocal & set JVM_CONFIG_MAVEN_PROPS=%JVM_CONFIG_MAVEN_PROPS% 116 | 117 | :endReadAdditionalConfig 118 | 119 | SET MAVEN_JAVA_EXE="%JAVA_HOME%\bin\java.exe" 120 | set WRAPPER_JAR="%MAVEN_PROJECTBASEDIR%\.mvn\wrapper\maven-wrapper.jar" 121 | set WRAPPER_LAUNCHER=org.apache.maven.wrapper.MavenWrapperMain 122 | 123 | set DOWNLOAD_URL="https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.1.0/maven-wrapper-3.1.0.jar" 124 | 125 | FOR /F "usebackq tokens=1,2 delims==" %%A IN ("%MAVEN_PROJECTBASEDIR%\.mvn\wrapper\maven-wrapper.properties") DO ( 126 | IF "%%A"=="wrapperUrl" SET DOWNLOAD_URL=%%B 127 | ) 128 | 129 | @REM Extension to allow automatically downloading the maven-wrapper.jar from Maven-central 130 | @REM This allows using the maven wrapper in projects that prohibit checking in binary data. 131 | if exist %WRAPPER_JAR% ( 132 | if "%MVNW_VERBOSE%" == "true" ( 133 | echo Found %WRAPPER_JAR% 134 | ) 135 | ) else ( 136 | if not "%MVNW_REPOURL%" == "" ( 137 | SET DOWNLOAD_URL="%MVNW_REPOURL%/org/apache/maven/wrapper/maven-wrapper/3.1.0/maven-wrapper-3.1.0.jar" 138 | ) 139 | if "%MVNW_VERBOSE%" == "true" ( 140 | echo Couldn't find %WRAPPER_JAR%, downloading it ... 141 | echo Downloading from: %DOWNLOAD_URL% 142 | ) 143 | 144 | powershell -Command "&{"^ 145 | "$webclient = new-object System.Net.WebClient;"^ 146 | "if (-not ([string]::IsNullOrEmpty('%MVNW_USERNAME%') -and [string]::IsNullOrEmpty('%MVNW_PASSWORD%'))) {"^ 147 | "$webclient.Credentials = new-object System.Net.NetworkCredential('%MVNW_USERNAME%', '%MVNW_PASSWORD%');"^ 148 | "}"^ 149 | "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; $webclient.DownloadFile('%DOWNLOAD_URL%', '%WRAPPER_JAR%')"^ 150 | "}" 151 | if "%MVNW_VERBOSE%" == "true" ( 152 | echo Finished downloading %WRAPPER_JAR% 153 | ) 154 | ) 155 | @REM End of extension 156 | 157 | @REM Provide a "standardized" way to retrieve the CLI args that will 158 | @REM work with both Windows and non-Windows executions. 159 | set MAVEN_CMD_LINE_ARGS=%* 160 | 161 | %MAVEN_JAVA_EXE% ^ 162 | %JVM_CONFIG_MAVEN_PROPS% ^ 163 | %MAVEN_OPTS% ^ 164 | %MAVEN_DEBUG_OPTS% ^ 165 | -classpath %WRAPPER_JAR% ^ 166 | "-Dmaven.multiModuleProjectDirectory=%MAVEN_PROJECTBASEDIR%" ^ 167 | %WRAPPER_LAUNCHER% %MAVEN_CONFIG% %* 168 | if ERRORLEVEL 1 goto error 169 | goto end 170 | 171 | :error 172 | set ERROR_CODE=1 173 | 174 | :end 175 | @endlocal & set ERROR_CODE=%ERROR_CODE% 176 | 177 | if not "%MAVEN_SKIP_RC%"=="" goto skipRcPost 178 | @REM check for post script, once with legacy .bat ending and once with .cmd ending 179 | if exist "%USERPROFILE%\mavenrc_post.bat" call "%USERPROFILE%\mavenrc_post.bat" 180 | if exist "%USERPROFILE%\mavenrc_post.cmd" call "%USERPROFILE%\mavenrc_post.cmd" 181 | :skipRcPost 182 | 183 | @REM pause the script if MAVEN_BATCH_PAUSE is set to 'on' 184 | if "%MAVEN_BATCH_PAUSE%"=="on" pause 185 | 186 | if "%MAVEN_TERMINATE_CMD%"=="on" exit %ERROR_CODE% 187 | 188 | cmd /C exit /B %ERROR_CODE% 189 | -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 4.0.0 5 | 6 | org.springframework.boot 7 | spring-boot-starter-parent 8 | 2.7.0 9 | 10 | 11 | com.javatechie 12 | devops-integration 13 | 0.0.1-SNAPSHOT 14 | devops-integration 15 | Demo project for Spring Boot 16 | 17 | 1.8 18 | 19 | 20 | 21 | org.springframework.boot 22 | spring-boot-starter-web 23 | 24 | 25 | 26 | org.springframework.boot 27 | spring-boot-starter-test 28 | test 29 | 30 | 31 | org.springframework.boot 32 | spring-boot-starter-actuator 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | org.springframework.boot 41 | spring-boot-maven-plugin 42 | 43 | 44 | 45 | org.springframework.boot 46 | spring-boot-maven-plugin 47 | 48 | 49 | 50 | build-info 51 | 52 | 53 | 54 | 55 | 56 | pl.project13.maven 57 | git-commit-id-plugin 58 | 59 | 60 | devops-integration 61 | 62 | 63 | 64 | -------------------------------------------------------------------------------- /service.yaml: -------------------------------------------------------------------------------- 1 | apiVersion: v1 2 | kind: Service 3 | metadata: 4 | name: myservice 5 | spec: 6 | type: NodePort 7 | selector: 8 | name: mydeploy1 9 | ports: 10 | - port: 80 11 | targetPort: 8080 12 | -------------------------------------------------------------------------------- /src/main/java/com/javatechie/DevopsIntegrationApplication.java: -------------------------------------------------------------------------------- 1 | package com.javatechie; 2 | 3 | import org.springframework.boot.SpringApplication; 4 | import org.springframework.boot.autoconfigure.SpringBootApplication; 5 | import org.springframework.web.bind.annotation.GetMapping; 6 | import org.springframework.web.bind.annotation.RestController; 7 | 8 | @SpringBootApplication 9 | @RestController 10 | public class DevopsIntegrationApplication { 11 | 12 | @GetMapping 13 | public String message(){ 14 | return "Welcome to our DevOps Project !!"; 15 | } 16 | 17 | public static void main(String[] args) { 18 | SpringApplication.run(DevopsIntegrationApplication.class, args); 19 | } 20 | 21 | } 22 | -------------------------------------------------------------------------------- /src/main/resources/application.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/pandacloud1/DevopsProject1/a95e90f7500a80564105643ff8e2c9758c44b4cd/src/main/resources/application.properties -------------------------------------------------------------------------------- /src/main/resources/application.yml: -------------------------------------------------------------------------------- 1 | management: 2 | endpoints: 3 | web: 4 | exposure: 5 | include: 6 | - "*" 7 | server: 8 | port: 8081 -------------------------------------------------------------------------------- /src/test/java/com/javatechie/DevopsIntegrationApplicationTests.java: -------------------------------------------------------------------------------- 1 | package com.javatechie; 2 | 3 | import org.junit.jupiter.api.Test; 4 | import org.springframework.boot.test.context.SpringBootTest; 5 | 6 | @SpringBootTest 7 | class DevopsIntegrationApplicationTests { 8 | 9 | @Test 10 | void contextLoads() { 11 | } 12 | 13 | } 14 | -------------------------------------------------------------------------------- /terraform_files/README.md: -------------------------------------------------------------------------------- 1 | ### TERRAFORM FILES 2 | --- 3 | 4 | ![image](https://github.com/pandacloud1/DevopsProject1/assets/134182273/42370753-d725-4706-a0fa-39d5281e6546) 5 | 6 | #### The above Terraform files will create 'Jenkins' & 'K8s' servers 7 | #### Master-Server --> Git, Maven, Docker, Trivy, Ansible 8 | #### Node-Server --> Docker, K8s (Kubeadm) 9 | 10 | ##### *NOTE*: 11 | 1. Create a 'My_key.pem' from AWS EC2 console 12 | 2. Save the key file in the same location as your terraform code 13 | -------------------------------------------------------------------------------- /terraform_files/main.tf: -------------------------------------------------------------------------------- 1 | # SERVER1: 'MASTER-SERVER' (with Jenkins, Maven, Docker, Ansible, Trivy) 2 | # STEP1: CREATING A SECURITY GROUP FOR JENKINS SERVER 3 | # Description: Allow SSH, HTTP, HTTPS, 8080, 8081 4 | resource "aws_security_group" "my_security_group1" { 5 | name = "my-security-group1" 6 | description = "Allow SSH, HTTP, HTTPS, 8080 for Jenkins & Maven" 7 | 8 | # SSH Inbound Rules 9 | ingress { 10 | from_port = 22 11 | to_port = 22 12 | protocol = "tcp" 13 | cidr_blocks = ["0.0.0.0/0"] 14 | } 15 | 16 | ingress { 17 | from_port = 80 18 | to_port = 80 19 | protocol = "tcp" 20 | cidr_blocks = ["0.0.0.0/0"] 21 | } 22 | 23 | ingress { 24 | from_port = 443 25 | to_port = 443 26 | protocol = "tcp" 27 | cidr_blocks = ["0.0.0.0/0"] 28 | } 29 | 30 | ingress { 31 | from_port = 8080 32 | to_port = 8080 33 | protocol = "tcp" 34 | cidr_blocks = ["0.0.0.0/0"] 35 | } 36 | 37 | ingress { 38 | from_port = 8081 39 | to_port = 8081 40 | protocol = "tcp" 41 | cidr_blocks = ["0.0.0.0/0"] 42 | } 43 | 44 | # SSH Outbound Rules 45 | egress { 46 | from_port = 0 47 | to_port = 0 48 | protocol = "-1" 49 | cidr_blocks = ["0.0.0.0/0"] 50 | } 51 | } 52 | 53 | # STEP2: CREATE AN JENKINS EC2 INSTANCE USING EXISTING PEM KEY 54 | # Note: i. First create a pem-key manually from the AWS console 55 | #      ii. Copy it in the same directory as your terraform code 56 | resource "aws_instance" "my_ec2_instance1" { 57 | ami = "ami-0cf10cdf9fcd62d37" 58 | instance_type = "t2.medium" 59 | vpc_security_group_ids = [aws_security_group.my_security_group1.id] 60 | key_name = "My_Key" # paste your key-name here, do not use extension '.pem' 61 | 62 | # Consider EBS volume 30GB 63 | root_block_device { 64 | volume_size = 30 # Volume size 30 GB 65 | volume_type = "gp2" # General Purpose SSD 66 | } 67 | 68 | tags = { 69 | Name = "MASTER-SERVER" 70 | } 71 | 72 | user_data = <<-EOF 73 | #!/bin/bash 74 | # wait for 1min before EC2 initialization 75 | sleep 60 76 | sudo wget https://repos.fedorapeople.org/repos/dchen/apache-maven/epel-apache-maven.repo -O /etc/yum.repos.d/epel-apache-maven.repo 77 | sudo sed -i s/\$releasever/6/g /etc/yum.repos.d/epel-apache-maven.repo 78 | sudo yum install -y apache-maven 79 | sudo yum install java-1.8.0-devel -y 80 | EOF 81 | 82 | # STEP3: USING REMOTE-EXEC PROVISIONER TO INSTALL TOOLS 83 | provisioner "remote-exec" { 84 | # ESTABLISHING SSH CONNECTION WITH EC2 85 | connection { 86 | type = "ssh" 87 | private_key = file("./My_Key.pem") # replace with your key-name 88 | user = "ec2-user" 89 | host = self.public_ip 90 | } 91 | 92 | inline = [ 93 | # wait for 200sec before EC2 initialization 94 | "sleep 200", 95 | # Install Git 96 | "sudo yum install git -y", 97 | 98 | # Install Jenkins 99 | # REF: https://www.jenkins.io/doc/tutorials/tutorial-for-installing-jenkins-on-AWS/ 100 | "sudo wget -O /etc/yum.repos.d/jenkins.repo https://pkg.jenkins.io/redhat-stable/jenkins.repo", 101 | "sudo rpm --import https://pkg.jenkins.io/redhat-stable/jenkins.io-2023.key", 102 | "sudo yum install java-17-amazon-corretto -y", 103 | "sudo yum install jenkins -y", 104 | "sudo systemctl enable jenkins", 105 | "sudo systemctl start jenkins", 106 | 107 | # Install Docker 108 | # REF: https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/install-docker.html 109 | "sudo yum update -y", 110 | "sudo yum install docker -y", 111 | "sudo systemctl start docker", 112 | "sudo systemctl enable docker", 113 | "sudo usermod -aG docker jenkins", 114 | # To avoid below permission error 115 | # Got permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock 116 | "sudo chmod 666 /var/run/docker.sock", 117 | 118 | # Install Trivy 119 | # REF: https://aquasecurity.github.io/trivy/v0.18.3/installation/ 120 | "sudo rpm -ivh https://github.com/aquasecurity/trivy/releases/download/v0.18.3/trivy_0.18.3_Linux-64bit.rpm", 121 | 122 | # Install Ansible 123 | "sudo yum update -y", 124 | "sudo yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm -y", 125 | "sudo yum install git python python-devel python-pip openssl ansible -y", 126 | ] 127 | } 128 | } 129 | 130 | # STEP3: OUTPUT PUBLIC IP OF EC2 INSTANCE 131 | output "ACCESS_YOUR_JENKINS_HERE" { 132 | value = "http://${aws_instance.my_ec2_instance1.public_ip}:8080" 133 | } 134 | 135 | output "Jenkins_Initial_Password" { 136 | value = "sudo cat /var/lib/jenkins/secrets/initialAdminPassword" 137 | } 138 | 139 | # STEP4: OUTPUT PUBLIC IP OF EC2 INSTANCE 140 | output "MASTER_SERVER_PUBLIC_IP" { 141 | value = aws_instance.my_ec2_instance1.public_ip 142 | } 143 | 144 | # STEP5: OUTPUT PRIVATE IP OF EC2 INSTANCE 145 | output "MASTER_SERVER_PRIVATE_IP" { 146 | value = aws_instance.my_ec2_instance1.private_ip 147 | } 148 | -------------------------------------------------------------------------------- /terraform_files/node.tf: -------------------------------------------------------------------------------- 1 | # SERVER2: 'NODE-SERVER' (with Docker & Kubernetes) 2 | # STEP1: CREATING A SECURITY GROUP FOR DOCKER-K8S 3 | # Description: K8s requires ports 22, 80, 443, 6443, 8001, 10250, 30000-32767 4 | resource "aws_security_group" "my_security_group2" { 5 | name = "my-security-group4" 6 | description = "Allow K8s ports" 7 | 8 | # SSH Inbound Rules 9 | ingress { 10 | from_port = 22 11 | to_port = 22 12 | protocol = "tcp" 13 | cidr_blocks = ["0.0.0.0/0"] 14 | } 15 | 16 | ingress { 17 | from_port = 80 18 | to_port = 80 19 | protocol = "tcp" 20 | cidr_blocks = ["0.0.0.0/0"] 21 | } 22 | 23 | ingress { 24 | from_port = 443 25 | to_port = 443 26 | protocol = "tcp" 27 | cidr_blocks = ["0.0.0.0/0"] 28 | } 29 | 30 | ingress { 31 | from_port = 6443 32 | to_port = 6443 33 | protocol = "tcp" 34 | cidr_blocks = ["0.0.0.0/0"] 35 | } 36 | 37 | ingress { 38 | from_port = 8001 39 | to_port = 8001 40 | protocol = "tcp" 41 | cidr_blocks = ["0.0.0.0/0"] 42 | } 43 | 44 | ingress { 45 | from_port = 8080 46 | to_port = 8080 47 | protocol = "tcp" 48 | cidr_blocks = ["0.0.0.0/0"] 49 | } 50 | 51 | ingress { 52 | from_port = 10250 53 | to_port = 10250 54 | protocol = "tcp" 55 | cidr_blocks = ["0.0.0.0/0"] 56 | } 57 | 58 | ingress { 59 | from_port = 30000 60 | to_port = 32767 61 | protocol = "tcp" 62 | cidr_blocks = ["0.0.0.0/0"] 63 | } 64 | 65 | # SSH Outbound Rules 66 | egress { 67 | from_port = 0 68 | to_port = 0 69 | protocol = "-1" 70 | cidr_blocks = ["0.0.0.0/0"] 71 | } 72 | } 73 | 74 | # STEP2: CREATE A K8S EC2 INSTANCE USING EXISTING PEM KEY 75 | # Note: i. First create a pem-key manually from the AWS console 76 | #      ii. Copy it in the same directory as your terraform code 77 | resource "aws_instance" "my_ec2_instance2" { 78 | ami = "ami-0cf10cdf9fcd62d37" 79 | instance_type = "t2.medium" # K8s requires min 2CPU & 4G RAM 80 | vpc_security_group_ids = [aws_security_group.my_security_group2.id] 81 | key_name = "My_Key" # paste your key-name here, do not use extension '.pem' 82 | 83 | # Consider EBS volume 30GB 84 | root_block_device { 85 | volume_size = 30 # Volume size 30 GB 86 | volume_type = "gp2" # General Purpose SSD 87 | } 88 | 89 | tags = { 90 | Name = "NODE-SERVER" 91 | } 92 | 93 | # STEP3: USING REMOTE-EXEC PROVISIONER TO INSTALL TOOLS 94 | provisioner "remote-exec" { 95 | # ESTABLISHING SSH CONNECTION WITH EC2 96 | connection { 97 | type = "ssh" 98 | private_key = file("./My_Key.pem") # replace with your key-name 99 | user = "ec2-user" 100 | host = self.public_ip 101 | } 102 | 103 | inline = [ 104 | "sleep 200", 105 | 106 | # Install Docker 107 | # REF: https://docs.aws.amazon.com/eks/latest/userguide/install-kubectl.html 108 | "sudo yum update -y", 109 | "sudo yum install docker -y", 110 | "sudo systemctl start docker", 111 | "sudo systemctl enable docker", 112 | "sudo chmod 777 /var/run/docker.sock", 113 | 114 | # Install K8s 115 | # REF: https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/ 116 | "sudo setenforce 0", 117 | "sudo sed -i 's/^SELINUX=enforcing$$/SELINUX=permissive/' /etc/selinux/config", 118 | "cat <