Autoscaling Groups with terraform on AWS Part 2: Instance security group and Boot Script
Previously we followed the minimum steps required in order to spin up an autoscaling group in terraform.On this post we shall add a security group to the autoscaling group and an http server to serve the requests.
Using our base configuration we shall create the security group for the instances.
01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 | resource "aws_security_group" "instance_security_group" { name = "autoscalling_security_group" ingress { from_port = 8080 to_port = 8080 protocol = "tcp" cidr_blocks = [ "0.0.0.0/0" ] } egress { from_port = 0 protocol = "-1" to_port = 0 cidr_blocks = [ "0.0.0.0/0" ] } } |
Our instances shall spin up a server listening at port 8080 thus the security port shall allow ingress traffic to that port. Pay attention to the egress. We shall access resources from the internet thus we want to be able to download em.
Then we will just set the security group at the launch confiuration.
1 2 3 4 5 6 | resource "aws_launch_configuration" "launch-configuration" { name = var.launch_configuration_name image_id = var.image_id instance_type = var.instance_type security_groups = [ "${aws_security_group.instance_security_group.id}" ] } |
Now it’s time to spin up a server on those instances. The aws_launch_configuration gives us the option to specify the startup script (user data on aws ec2). I shall use the Apache Ignite server and its http interface.
01 02 03 04 05 06 07 08 09 10 11 12 13 14 | resource "aws_launch_configuration" "launch-configuration" { name = var.launch_configuration_name image_id = var.image_id instance_type = var.instance_type security_groups = [ "${aws_security_group.instance_security_group.id}" ] user_data = <<-EOF #!/bin/bash yum install java unzip -y curl https: //www-eu .apache.org /dist/ignite/2 .7.6 /apache-ignite-2 .7.6-bin.zip -o apache-ignite.zip unzip apache-ignite.zip -d /opt/apache-ignite cd /opt/apache-ignite/apache-ignite-2 .7.6-bin/ cp -r libs /optional/ignite-rest-http/ libs /ignite-rest-http/ . /bin/ignite .sh . /examples/config/example-cache .xml EOF |
And now we are ready to spin up the autoscaling as shown previously.
1 2 | > terraform init > terraform apply |
Published on Java Code Geeks with permission by Emmanouil Gkatziouras, partner at our JCG program. See the original article here: Autoscaling Groups with terraform on AWS Part 2: Instance security group and Boot Script Opinions expressed by Java Code Geeks contributors are their own. |