# variables.tf ``` variable "prefix" { description = "Prefix for all resources" default = "dev" } variable "region" { description = "region" default = "ap-northeast-2" } variable "nickname" { description = "nickname" default = "jhs512" } ``` # main.tf ````tf terraform { // aws 라이브러리 불러옴 required_providers { aws = { source = "hashicorp/aws" version = "~> 4.0" } } } # AWS 설정 시작 provider "aws" { region = var.region } # AWS 설정 끝 # VPC 설정 시작 resource "aws_vpc" "vpc_1" { cidr_block = "10.0.0.0/16" # 무조건 켜세요. enable_dns_support = true # 무조건 켜세요. enable_dns_hostnames = true tags = { Name = "${var.prefix}-vpc-1" } } resource "aws_subnet" "subnet_1" { vpc_id = aws_vpc.vpc_1.id cidr_block = "10.0.1.0/24" availability_zone = "${var.region}a" map_public_ip_on_launch = true tags = { Name = "${var.prefix}-subnet-1" } } resource "aws_subnet" "subnet_2" { vpc_id = aws_vpc.vpc_1.id cidr_block = "10.0.2.0/24" availability_zone = "${var.region}b" map_public_ip_on_launch = true tags = { Name = "${var.prefix}-subnet-2" } } resource "aws_subnet" "subnet_3" { vpc_id = aws_vpc.vpc_1.id cidr_block = "10.0.3.0/24" availability_zone = "${var.region}c" map_public_ip_on_launch = true tags = { Name = "${var.prefix}-subnet-3" } } resource "aws_internet_gateway" "igw_1" { vpc_id = aws_vpc.vpc_1.id tags = { Name = "${var.prefix}-igw-1" } } resource "aws_route_table" "rt_1" { vpc_id = aws_vpc.vpc_1.id route { cidr_block = "0.0.0.0/0" gateway_id = aws_internet_gateway.igw_1.id } tags = { Name = "${var.prefix}-rt-1" } } resource "aws_route_table_association" "association_1" { subnet_id = aws_subnet.subnet_1.id route_table_id = aws_route_table.rt_1.id } resource "aws_route_table_association" "association_2" { subnet_id = aws_subnet.subnet_2.id route_table_id = aws_route_table.rt_1.id } resource "aws_route_table_association" "association_3" { subnet_id = aws_subnet.subnet_3.id route_table_id = aws_route_table.rt_1.id } resource "aws_security_group" "sg_1" { name = "${var.prefix}-sg-1" ingress { from_port = 0 to_port = 0 protocol = "all" cidr_blocks = ["0.0.0.0/0"] } egress { from_port = 0 to_port = 0 protocol = "all" cidr_blocks = ["0.0.0.0/0"] } vpc_id = aws_vpc.vpc_1.id tags = { Name = "${var.prefix}-sg-1" } } # VPC 설정 끝 # ROUTE 53 설정 시작 resource "aws_route53_zone" "vpc_1_zone" { vpc { vpc_id = aws_vpc.vpc_1.id } name = "vpc-1.com" } # ROUTE 53 설정 끝 # EC2 설정 시작 # EC2 역할 생성 resource "aws_iam_role" "ec2_role_1" { name = "${var.prefix}-ec2-role-1" # 이 역할에 대한 신뢰 정책 설정. EC2 서비스가 이 역할을 가정할 수 있도록 설정 assume_role_policy = < /etc/containerd/config.toml sudo sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /etc/containerd/config.toml systemctl restart containerd # This overwrites any existing configuration in /etc/yum.repos.d/kubernetes.repo cat < /dev/null echo 'alias k=kubectl' >>~/.bashrc echo 'complete -o default -F __start_kubectl k' >>~/.bashrc source /usr/share/bash-completion/bash_completion ``` # helm 설치 - [https://helm.sh/docs/intro/install/](https://helm.sh/docs/intro/install/) ``` curl -fsSL -o get_helm.sh https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 chmod 700 get_helm.sh ./get_helm.sh rm get_helm.sh ``` ``` kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.14.4/config/manifests/metallb-native.yaml ``` ``` apiVersion: metallb.io/v1beta1 kind: IPAddressPool metadata: name: first-pool namespace: metallb-system spec: addresses: - 54.180.132.190-54.180.132.190 ``` ``` apiVersion: metallb.io/v1beta1 kind: L2Advertisement metadata: name: example namespace: metallb-system spec: ipAddressPools: - first-pool ``` # nginx-ingress ``` helm upgrade --install ingress-nginx ingress-nginx \ --repo https://kubernetes.github.io/ingress-nginx \ --namespace ingress-nginx --create-namespace ``` # 22강 - [영상 - 22 11 09, ken 11207, 22강, nginx-ingress 작동하는지 테스트](https://youtu.be/ACyDVTBsXg0) ## ingress-test 폴더 생성 후 이동 - mkdir -p /kube/ingress-test - cd /kube/ingress-test ## ingress-test.yaml 생성 - vim ingress-test.yaml ```yml apiVersion: apps/v1 kind: Deployment metadata: name: nginx-deploy-main labels: app: nginx spec: replicas: 2 selector: matchLabels: app: nginx-main template: metadata: labels: app: nginx-main spec: containers: - image: nginx name: nginx --- apiVersion: v1 kind: Service metadata: name: my-service spec: selector: app: nginx-main ports: - protocol: TCP port: 80 targetPort: 80 --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: nginx-ingress annotations: nginx.ingress.kubernetes.io/rewrite-target: / spec: ingressClassName: nginx rules: - host: test.kube-1.oa.gg http: paths: - path: / pathType: ImplementationSpecific backend: service: name: my-service port: number: 80 ``` - kubectl apply -f ingress-test.yaml ## curl로 테스트 - curl test.kube-1.oa.gg ## 크롬으로 접속 - http://test.kube-1.oa.gg # 23강

쿠버