msel-terraform-aws-vpc/main.tf at master · jhu-sheridan-libraries/msel-terraform-aws-vpc · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
locals {
    max_private_subnets = min(
        length(var.availability_zones),
        length(var.private_subnet_ranges)
    )

    max_public_subnets = min(
        length(var.availability_zones),
        length(var.public_subnet_ranges)
    )

    vpc_id                      = var.create_vpc ? element(concat(aws_vpc.this.*.id, [""]), 0) : var.imported_vpc_id
}

######
# VPC
######
resource "aws_vpc" "this" {
    count                       = var.create_vpc ? 1 : 0

    cidr_block                  = var.cidr
    enable_dns_hostnames        = true
    enable_dns_support          = true

    tags = merge(
        {
            "Name" = format("%s-%s",
                var.project_name,
                terraform.workspace
            ),
            "Environment" = terraform.workspace,
        },
        var.tags,
        var.vpc_tags
    )
}

###################
# Internet Gateway
###################
resource "aws_internet_gateway" "this" {
    count                       = local.max_public_subnets > 0 ? 1 : 0

    vpc_id                      = local.vpc_id

    tags = merge(
        {
            "Name": format("%s-%s-%s",
                var.project_name,
                terraform.workspace,
                var.public_subnet_suffix
            ),
            "Environment": terraform.workspace
        },
        var.tags,
        var.igw_tags
    )
}

# ##############
# # NAT Gateway
# ##############
# resource "aws_eip" "nat" {
#     count                       = var.create_private_subnets && local.max_private_subnets > 0 ? 1 : 0

#     vpc                         = true
#     tags = merge(
#         {
#             "Name" = format("%s-%s-%s",
#                 var.project_name,
#                 terraform.workspace,
#                 element(var.availability_zones, 0)
#             )
#         },
#         var.tags,
#         # var.nat_eip_tags
#     )
# }

# resource "aws_nat_gateway" "this" {
#     count                       = var.create_private_subnets && local.max_private_subnets > 0 ? 1 : 0

#     allocation_id               = aws_eip.nat[0].id
#     subnet_id                   = aws_subnet.public[0].id

#     tags = merge(
#         {
#             "Name" = format("%s-%s-%s",
#                 var.project_name,
#                 terraform.workspace,
#                 )
#         },
#         var.tags,
#         # var.nat_gateway_tags
#     )

#     depends_on = [ aws_internet_gateway.this ]
# }

# resource "aws_route" "private_nat_gateway" {
#     count                       = var.create_private_subnets && local.max_private_subnets > 0 ? 1 : 0

#     route_table_id              = element(aws_route_table.private.*.id, count.index)
#     destination_cidr_block      = "0.0.0.0/0"
#     nat_gateway_id              = element(aws_nat_gateway.private.*.id, count.index)
# }

################
# Public Routes
################
resource "aws_route_table" "public" {
    count                       = var.create_public_subnets && local.max_public_subnets > 0 ? 1 : 0

    vpc_id                      = local.vpc_id

    tags = merge(
        {
            "Name"  = format("%s-%s-%s",
                var.project_name,
                terraform.workspace,
                var.public_subnet_suffix
            )
        },
        var.tags,
        # var.public_route_table_tags
    )
}

resource "aws_route" "public_internet_gateway" {
    count                       = var.create_public_subnets && local.max_public_subnets > 0 ? 1 : 0

    route_table_id              = aws_route_table.public[0].id
    destination_cidr_block      = "0.0.0.0/0"
    gateway_id                  = aws_internet_gateway.this[0].id
}

# #################
# # Private Routes
# #################
# resource "aws_route_table" "private" {
#     count                       = var.create_private_subnets && local.max_private_subnets > 0 ? 1 : 0

#     vpc_id                      = local.vpc_id

#     tags = merge(
#         {
#             "Name"  = format("%s-%s-%s",
#                 var.project_name,
#                 terraform.workspace,
#                 var.private_subnet_suffix
#             )
#         },
#         var.tags,
#         # var.private_route_table_tags
#     )
# }