Talos linux implementation

.gitignore

@@ -1,17 +1,45 @@
+# Talos / Kubernetes credentials
+talos/talosconfig
+talos/kubeconfig
+talos/controlplane.yaml
+talos/worker.yaml
+talos/*.pem
+talos/*.key
+talos/*.crt
+talos/*.csr
+talos/support-*.zip
+talos_backup_*/talos_backup_*/talos_backup_*/
+
+# Local Kubectl
+.kube/
+*.log
+
+
 # Terraform
 .terraform/
 *.tfstate*
 .crash
 *.lock.hcl
 *.tfstate.backup
 .terraform.lock.hcl
-
+crash.log
+*.tfvars
+*.tfvars.json
 
 # AWS credentials
 *.pem
 *.key
 
-# Editor files
+# file editors
 .DS_Store
 .idea/
 .vscode/
+*.swp
+
+
+kubeconfig*
+cilium-quick-install.yaml
+talos_backup_*/
+*.backup
+*.tfstate
+*.tfstate.*

core/backend/versions.tf

@@ -6,7 +6,6 @@ terraform {
       version = "~> 5.60"
     }
   }
-  backend "s3" {}
 }
 provider "aws" {
   region = "us-east-1"

core/vpc/main.tf

@@ -17,11 +17,11 @@ module "vpc" {
   private_subnets = var.private_subnet_cidrs
 
   # Enable NAT Gateway for outbound traffic from private subnets
-  enable_nat_gateway   = true
+  enable_nat_gateway   = false
 
   # Create one NAT Gateway per AZ for high availability
   single_nat_gateway   = false   
-  one_nat_gateway_per_az = true
+  one_nat_gateway_per_az = false
 
   # Enable DNS hostnames and DNS resolution support within the VPC
   enable_dns_hostnames = true

core/vpc/versions.tf

@@ -1,20 +1,10 @@
 terraform {
   required_version = ">= 1.6.0"
+
   required_providers {
     aws = {
       source  = "hashicorp/aws"
       version = "~> 5.60"
     }
   }
-  backend "s3" {
-    bucket         = "shopstack-dev-tfstate"
-    key            = "shopstack/dev/terraform.tfstate"
-    region         = "us-east-1"
-    dynamodb_table = "shopstack-dev-tflock"
-    encrypt        = true
-  }
-}
-
-provider "aws" {
-  region = var.region
 }

envs/dev/backend.tf

@@ -1,9 +1,9 @@
 terraform {
   backend "s3" {
-    bucket         = "terraform-state-shopstack-770132776547"
+    bucket         = "shopstack-dev-tfstate"
     key            = "envs/dev/terraform.tfstate"
     region         = "us-east-1"
-    dynamodb_table = "terraform-locks"
+    dynamodb_table = "shopstack-dev-tflock"
     encrypt        = true
   }
 }

envs/dev/main.tf

@@ -1 +1,18 @@
-locals { tags = { Project = "ShopStack", Env = "dev" } }
+locals {
+  project = "shopstack"
+  env     = "dev"
+}
+
+module "network" {
+  source = "../../vpc"
+
+  project              = local.project
+  env                  = local.env
+  region               = "us-east-1"
+  vpc_cidr             = "10.0.0.0/16"
+  azs                  = ["us-east-1a", "us-east-1b"]
+  public_subnet_cidrs  = ["10.0.0.0/24", "10.0.1.0/24"]
+  private_subnet_cidrs = ["10.0.10.0/24", "10.0.11.0/24"]
+}
+
+

envs/dev/outputs.tf

@@ -0,0 +1 @@
+# no outputs yet

envs/dev/versions.tf

@@ -1,7 +1,14 @@
 terraform {
   required_version = ">= 1.6.0"
+
   required_providers {
-    aws = { source = "hashicorp/aws", version = "~> 5.0" }
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.60"
+    }
   }
 }
-provider "aws" { region = "us-east-1" }
+
+provider "aws" {
+  region = "us-east-1"
+}

talos/ntp.patch.yaml

@@ -0,0 +1,5 @@
+machine:
+  time:
+    servers:
+      - time.google.com
+      - pool.ntp.org

vpc/main.tf

@@ -0,0 +1,24 @@
+provider "aws" {
+  region = var.region
+}
+
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "5.8.1"
+
+  name = "${var.project}-${var.env}-vpc"
+  cidr = var.vpc_cidr
+
+  azs             = var.azs
+  public_subnets  = var.public_subnet_cidrs
+  private_subnets = var.private_subnet_cidrs
+
+  # Mantenerlo barato / simple
+  enable_nat_gateway = false
+  single_nat_gateway = false
+
+  tags = {
+    Project = var.project
+    Env     = var.env
+  }
+}

vpc/outputs.tf

@@ -0,0 +1,11 @@
+output "vpc_id" {
+  value = module.vpc.vpc_id
+}
+
+output "public_subnets" {
+  value = module.vpc.public_subnets
+}
+
+output "private_subnets" {
+  value = module.vpc.private_subnets
+}

vpc/variables.tf

@@ -0,0 +1,27 @@
+variable "project" {
+  type = string
+}
+
+variable "env" {
+  type = string
+}
+
+variable "region" {
+  type = string
+}
+
+variable "vpc_cidr" {
+  type = string
+}
+
+variable "azs" {
+  type = list(string)
+}
+
+variable "public_subnet_cidrs" {
+  type = list(string)
+}
+
+variable "private_subnet_cidrs" {
+  type = list(string)
+}

vpc/versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = ">= 1.5.0"
+
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 5.0"
+    }
+  }
+}