Autoscaling Groups With Terraform on AWS Part 2: Instance Security Group and Boot Script
In this post, we shall add a security group to the autoscaling group and an http server to serve the requests.
CORE
·
Previously, we followed the minimum steps required in order to spin up an autoscaling group in Terraform. In this post, we shall add a security group to the autoscaling group and an http server to serve the requests.
Using our base configuration we shall create the security group for the instances.
resource "aws_security_group" "instance_security_group" {
name = "autoscalling_security_group"
ingress {
from_port = 8080
to_port = 8080
protocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
egress {
from_port = 0
protocol = "-1"
to_port = 0
cidr_blocks = ["0.0.0.0/0"]
}
}
Our instances shall spin up a server listening at port 8080 thus the security port shall allow ingress traffic to that port. Pay attention to the egress. We shall access resources from the internet thus we want to be able to download em.
Then we will just set the security group at the launch configuration.
xxxxxxxxxx
resource"aws_launch_configuration" "launch-configuration" {
name = var.launch_configuration_name
image_id = var.image_id
instance_type = var.instance_type
security_groups = ["${aws_security_group.instance_security_group.id}"]
}
Now it’s time to spin up a server on those instances. The aws_launch_configuration gives us the option to specify the startup script (user data on aws ec2). I shall use the Apache Ignite server and its http interface.
xxxxxxxxxx
resource"aws_launch_configuration" "launch-configuration" {
name = var.launch_configuration_name
image_id = var.image_id
instance_type = var.instance_type
security_groups = ["${aws_security_group.instance_security_group.id}"]
user_data = <<-EOF
#!/bin/bash
yum install java unzip -y
curl https://www-eu.apache.org/dist/ignite/2.7.6/apache-ignite-2.7.6-bin.zip -o apache-ignite.zip
unzip apache-ignite.zip -d /opt/apache-ignite
cd /opt/apache-ignite/apache-ignite-2.7.6-bin/
cp -r libs/optional/ignite-rest-http/ libs/ignite-rest-http/
./bin/ignite.sh ./examples/config/example-cache.xml
EOF
And now we are ready to spin up the autoscaling as shown previously.
xxxxxxxxxx
> terraform init
> terraform apply
We successfully added an instance security group and a bootstrap script. The next challenge is to add some load balancing and health checks.
Published at DZone with permission of Emmanouil Gkatziouras. See the original article here.
Opinions expressed by DZone contributors are their own.