160 lines
4.1 KiB
HCL
160 lines
4.1 KiB
HCL
# Oracle Cloud Infrastructure 模块
|
|
|
|
terraform {
|
|
required_providers {
|
|
oci = {
|
|
source = "oracle/oci"
|
|
version = "~> 7.20"
|
|
}
|
|
}
|
|
}
|
|
|
|
# OCI Provider 配置
|
|
provider "oci" {
|
|
tenancy_ocid = var.oci_config.tenancy_ocid
|
|
user_ocid = var.oci_config.user_ocid
|
|
fingerprint = var.oci_config.fingerprint
|
|
private_key = file(var.oci_config.private_key_path)
|
|
region = var.oci_config.region
|
|
}
|
|
|
|
# 获取可用域
|
|
data "oci_identity_availability_domains" "ads" {
|
|
compartment_id = var.oci_config.tenancy_ocid
|
|
}
|
|
|
|
# 获取镜像
|
|
data "oci_core_images" "ubuntu_images" {
|
|
compartment_id = var.oci_config.tenancy_ocid
|
|
operating_system = "Canonical Ubuntu"
|
|
operating_system_version = "22.04"
|
|
shape = "VM.Standard.E2.1.Micro"
|
|
sort_by = "TIMECREATED"
|
|
sort_order = "DESC"
|
|
}
|
|
|
|
# VCN (虚拟云网络)
|
|
resource "oci_core_vcn" "main" {
|
|
compartment_id = var.oci_config.tenancy_ocid
|
|
cidr_blocks = [var.vpc_cidr]
|
|
display_name = "${var.project_name}-${var.environment}-vcn"
|
|
dns_label = "${var.project_name}${var.environment}"
|
|
|
|
freeform_tags = merge(var.common_tags, {
|
|
Name = "${var.project_name}-${var.environment}-vcn"
|
|
})
|
|
}
|
|
|
|
# 互联网网关
|
|
resource "oci_core_internet_gateway" "main" {
|
|
compartment_id = var.oci_config.tenancy_ocid
|
|
vcn_id = oci_core_vcn.main.id
|
|
display_name = "${var.project_name}-${var.environment}-igw"
|
|
enabled = true
|
|
|
|
freeform_tags = merge(var.common_tags, {
|
|
Name = "${var.project_name}-${var.environment}-igw"
|
|
})
|
|
}
|
|
|
|
# 路由表
|
|
resource "oci_core_route_table" "main" {
|
|
compartment_id = var.oci_config.tenancy_ocid
|
|
vcn_id = oci_core_vcn.main.id
|
|
display_name = "${var.project_name}-${var.environment}-rt"
|
|
|
|
route_rules {
|
|
destination = "0.0.0.0/0"
|
|
destination_type = "CIDR_BLOCK"
|
|
network_entity_id = oci_core_internet_gateway.main.id
|
|
}
|
|
|
|
freeform_tags = merge(var.common_tags, {
|
|
Name = "${var.project_name}-${var.environment}-rt"
|
|
})
|
|
}
|
|
|
|
# 安全列表
|
|
resource "oci_core_security_list" "main" {
|
|
compartment_id = var.oci_config.tenancy_ocid
|
|
vcn_id = oci_core_vcn.main.id
|
|
display_name = "${var.project_name}-${var.environment}-sl"
|
|
|
|
# 出站规则
|
|
egress_security_rules {
|
|
destination = "0.0.0.0/0"
|
|
protocol = "all"
|
|
}
|
|
|
|
# 入站规则 - SSH
|
|
ingress_security_rules {
|
|
protocol = "6" # TCP
|
|
source = "0.0.0.0/0"
|
|
tcp_options {
|
|
min = 22
|
|
max = 22
|
|
}
|
|
}
|
|
|
|
# 入站规则 - HTTP
|
|
ingress_security_rules {
|
|
protocol = "6" # TCP
|
|
source = "0.0.0.0/0"
|
|
tcp_options {
|
|
min = 80
|
|
max = 80
|
|
}
|
|
}
|
|
|
|
# 入站规则 - HTTPS
|
|
ingress_security_rules {
|
|
protocol = "6" # TCP
|
|
source = "0.0.0.0/0"
|
|
tcp_options {
|
|
min = 443
|
|
max = 443
|
|
}
|
|
}
|
|
|
|
freeform_tags = merge(var.common_tags, {
|
|
Name = "${var.project_name}-${var.environment}-sl"
|
|
})
|
|
}
|
|
|
|
# 子网
|
|
resource "oci_core_subnet" "public" {
|
|
count = length(var.availability_zones)
|
|
compartment_id = var.oci_config.tenancy_ocid
|
|
vcn_id = oci_core_vcn.main.id
|
|
cidr_block = cidrsubnet(var.vpc_cidr, 8, count.index)
|
|
display_name = "${var.project_name}-${var.environment}-public-${var.availability_zones[count.index]}"
|
|
dns_label = "public${var.availability_zones[count.index]}"
|
|
route_table_id = oci_core_route_table.main.id
|
|
security_list_ids = [oci_core_security_list.main.id]
|
|
|
|
freeform_tags = merge(var.common_tags, {
|
|
Name = "${var.project_name}-${var.environment}-public-${var.availability_zones[count.index]}"
|
|
Type = "public"
|
|
})
|
|
}
|
|
|
|
# 输出
|
|
output "vcn_id" {
|
|
description = "VCN ID"
|
|
value = oci_core_vcn.main.id
|
|
}
|
|
|
|
output "subnet_ids" {
|
|
description = "子网 ID 列表"
|
|
value = oci_core_subnet.public[*].id
|
|
}
|
|
|
|
output "availability_domains" {
|
|
description = "可用域列表"
|
|
value = data.oci_identity_availability_domains.ads.availability_domains[*].name
|
|
}
|
|
|
|
output "ubuntu_image_id" {
|
|
description = "Ubuntu 镜像 ID"
|
|
value = data.oci_core_images.ubuntu_images.images[0].id
|
|
} |