Changes in terraform files to ensure a working network and DNS of ALB

Author: Lavanya-GOW

terraform_infra/frontend_asg.tf

@@ -4,7 +4,7 @@ data "aws_ami" "ubuntu" {
 
   filter {
     name   = "name"
-    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
+    values = ["ubuntu/images/hvm-ssd-gp3/ubuntu-noble-24.04-amd64-server-*"]
   }
 
   filter {

terraform_infra/scripts/backend_user_data.sh

@@ -1,17 +1,52 @@
 #!/bin/bash
 set -e
 exec > /var/log/user-data.log 2>&1
-sudo apt update && sudo apt upgrade -y
+
+date
+
+ip addr
+
+ip route
+
+nslookup security.ubuntu.com
+
+curl http://security.ubuntu.com
+
+sleep 60
+
+curl http://security.ubuntu.com
+
+echo "Waiting for apt repositories..."
+
+until sudo apt update; do
+    echo "apt update failed. Retrying in 10 seconds..."
+    sleep 10
+done
+
+sudo apt upgrade -y
 sudo apt install docker.io -y
 sudo apt install git -y
-sudo mkdir -p /usr/local/lib/docker/cli-plugins && sudo curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-linux-x86_64 -o /usr/local/lib/docker/cli-plugins/docker-compose && sudo chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+
+sudo mkdir -p /usr/local/lib/docker/cli-plugins
+
+sudo curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-linux-x86_64 \
+-o /usr/local/lib/docker/cli-plugins/docker-compose
+
+sudo chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+
 sudo systemctl start docker
 sudo systemctl enable docker
-usermod -aG docker ubuntu
+
+sudo usermod -aG docker ubuntu
+
 cd /home/ubuntu
+
 git clone https://github.com/Lavanya-GOW/terraform-aws-three-tier-architecture
+
 cd /home/ubuntu/terraform-aws-three-tier-architecture
+
 docker --version
-sed -i "s/^IMAGE_TAG=.*/IMAGE_TAG=latest" .env
-docker compose pull
-docker compose up -d
+
+sed -i "s/^IMAGE_TAG=.*/IMAGE_TAG=latest/" .env
+
+docker compose up -d --build

terraform_infra/scripts/frontend_user_data.sh

@@ -1,17 +1,52 @@
 #!/bin/bash
 set -e
 exec > /var/log/user-data.log 2>&1
-sudo apt update && sudo apt upgrade -y
+
+date
+
+ip addr
+
+ip route
+
+nslookup security.ubuntu.com
+
+curl http://security.ubuntu.com
+
+sleep 60
+
+curl http://security.ubuntu.com
+
+echo "Waiting for apt repositories..."
+
+until sudo apt update; do
+    echo "apt update failed. Retrying in 10 seconds..."
+    sleep 10
+done
+
+sudo apt upgrade -y
 sudo apt install docker.io -y
 sudo apt install git -y
-sudo mkdir -p /usr/local/lib/docker/cli-plugins && sudo curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-linux-x86_64 -o /usr/local/lib/docker/cli-plugins/docker-compose && sudo chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+
+sudo mkdir -p /usr/local/lib/docker/cli-plugins
+
+sudo curl -SL https://github.com/docker/compose/releases/latest/download/docker-compose-linux-x86_64 \
+-o /usr/local/lib/docker/cli-plugins/docker-compose
+
+sudo chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+
 sudo systemctl start docker
 sudo systemctl enable docker
-usermod -aG docker ubuntu
+
+sudo usermod -aG docker ubuntu
+
 cd /home/ubuntu
+
 git clone https://github.com/Lavanya-GOW/terraform-aws-three-tier-architecture
+
 cd /home/ubuntu/terraform-aws-three-tier-architecture
+
 docker --version
-sed -i "s/^IMAGE_TAG=.*/IMAGE_TAG=latest" .env
-docker compose pull
-docker compose up -d
+
+sed -i "s/^IMAGE_TAG=.*/IMAGE_TAG=latest/" .env
+
+docker compose up -d --build

terraform_infra/security_groups.tf

@@ -104,8 +104,8 @@ resource "aws_security_group" "frontend_sg" {
 
   ingress {
     description     = "Allow HTTP from external ALB"
-    from_port       = 5000
-    to_port         = 5000
+    from_port       = 80
+    to_port         = 80
     protocol        = "tcp"
     security_groups = [aws_security_group.external_alb_sg.id]
   }

terraform_infra/variables.tf

@@ -87,7 +87,7 @@ variable "key_name" {
 variable "target_group_port" {
   description = "The port for the target group"
   type        = number
-  default     = 5000
+  default     = 80
 }
 
 variable "enable_deletion_protection" {

terraform_infra/vpc.tf

@@ -103,18 +103,12 @@ resource "aws_nat_gateway" "main" {
 
 resource "aws_route_table" "public" {
   vpc_id = aws_vpc.main.id
-
-  route {
-    cidr_block = var.route_table_cidr
-    gateway_id = aws_internet_gateway.main.id
-  }
-
 }
 
 resource "aws_route" "public" {
   route_table_id         = aws_route_table.public.id
   gateway_id             = aws_internet_gateway.main.id
-  destination_cidr_block = "11.0.0.0/16"
+  destination_cidr_block = "0.0.0.0/0"
 }
 
 resource "aws_route_table_association" "public" {
@@ -126,71 +120,51 @@ resource "aws_route_table_association" "public" {
 }
 
 resource "aws_route_table" "frontend" {
-  count  = var.enable_nat_gateway ? length(var.availability_zones) : 0
+  count  = length(var.availability_zones)
   vpc_id = aws_vpc.main.id
-
-  tags = merge(
-    var.tags,
-    {
-      Name = "${var.environment}-${var.project}-frontend-rt-${count.index + 1}"
-      Tier = "frontend"
-    }
-  )
 }
 
 resource "aws_route" "frontend_nat" {
-  count                  = var.enable_nat_gateway ? length(var.availability_zones) : 0
+  count                  = length(var.availability_zones)
   route_table_id         = aws_route_table.frontend[count.index].id
-  destination_cidr_block = "12.0.0.0/16"
-  nat_gateway_id         = var.single_nat_gateway ? aws_nat_gateway.main[0].id : aws_nat_gateway.main[count.index].id
+  destination_cidr_block = "0.0.0.0/0"
+  nat_gateway_id         = aws_nat_gateway.main[count.index].id
 }
 
 resource "aws_route_table_association" "frontend" {
+
   count          = length(var.availability_zones)
   subnet_id      = aws_subnet.frontend[count.index].id
-  route_table_id = var.enable_nat_gateway ? aws_route_table.frontend[count.index].id : null
+  route_table_id = aws_route_table.frontend[count.index].id
+
 }
 
 resource "aws_route_table" "backend" {
-  count  = var.enable_nat_gateway ? length(var.availability_zones) : 0
+  count  = length(var.availability_zones)
   vpc_id = aws_vpc.main.id
-
-  tags = merge(
-    var.tags,
-    {
-      Name = "${var.environment}-${var.project}-backend-rt-${count.index + 1}"
-      Tier = "backend"
-    }
-  )
 }
 
 resource "aws_route" "backend_nat" {
-  count                  = var.enable_nat_gateway ? length(var.availability_zones) : 0
+  count                  = length(var.availability_zones)
   route_table_id         = aws_route_table.backend[count.index].id
-  destination_cidr_block = "13.0.0.0/16"
-  nat_gateway_id         = var.single_nat_gateway ? aws_nat_gateway.main[0].id : aws_nat_gateway.main[count.index].id
+  destination_cidr_block = "0.0.0.0/0"
+  nat_gateway_id         = aws_nat_gateway.main[count.index].id
 }
 
 resource "aws_route_table_association" "backend" {
+
   count          = length(var.availability_zones)
   subnet_id      = aws_subnet.backend[count.index].id
-  route_table_id = var.enable_nat_gateway ? aws_route_table.backend[count.index].id : null
+  route_table_id = aws_route_table.backend[count.index].id
+
 }
 
 resource "aws_route_table" "database" {
   vpc_id = aws_vpc.main.id
-
-  tags = merge(
-    var.tags,
-    {
-      Name = "${var.environment}-${var.project}-database-rt"
-      Tier = "database"
-    }
-  )
 }
 
 resource "aws_route_table_association" "database" {
   count          = length(var.availability_zones)
   subnet_id      = aws_subnet.database[count.index].id
   route_table_id = aws_route_table.database.id
-}
+}