Tinkerbell.Sandbox/deploy/terraform/main.tf

# Configure the Packet Provider.
terraform {
  required_providers {
    metal = {
      source  = "equinix/metal"
      version = "1.0.0"
    }
    null = {
      source  = "hashicorp/null"
      version = "~> 2.1.2"
    }
    template = {
      source  = "hashicorp/template"
      version = "~> 2.1.2"
    }
  }
}

provider "metal" {
  auth_token = var.metal_api_token
}

# Create a new VLAN in datacenter "ewr1"
resource "metal_vlan" "provisioning_vlan" {
  description = "provisioning_vlan"
  facility    = var.facility
  project_id  = var.project_id
}

# Create a device and add it to tf_project_1
resource "metal_device" "tink_provisioner" {
  hostname         = "tink-provisioner"
  plan             = var.device_type
  facilities       = [var.facility]
  operating_system = "ubuntu_18_04"
  billing_cycle    = "hourly"
  project_id       = var.project_id
  user_data        = file("install_package.sh")
}

resource "null_resource" "tink_directory" {
  connection {
    type = "ssh"
    user = var.ssh_user
    host = metal_device.tink_provisioner.network[0].address
  }

  provisioner "remote-exec" {
    inline = [
      "mkdir -p /root/tink/deploy"
    ]
  }

  provisioner "file" {
    source      = "../../setup.sh"
    destination = "/root/tink/setup.sh"
  }

  provisioner "file" {
    source      = "../../generate-envrc.sh"
    destination = "/root/tink/generate-envrc.sh"
  }

  provisioner "file" {
    source      = "../../deploy"
    destination = "/root/tink"
  }

  provisioner "remote-exec" {
    inline = [
      "iptables -A FORWARD -i eth1 -o bond0 -j ACCEPT",
      "iptables -A FORWARD -i bond0 -o eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT",
      "iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE",
    ]
  }

  provisioner "remote-exec" {
    inline = [
      "chmod +x /root/tink/*.sh /root/tink/deploy/tls/*.sh"
    ]
  }
}

resource "metal_device_network_type" "tink_provisioner_network_type" {
  device_id = metal_device.tink_provisioner.id
  type      = "hybrid"
}

# Create a device and add it to tf_project_1
resource "metal_device" "tink_worker" {
  count = var.worker_count

  hostname         = "tink-worker-${count.index}"
  plan             = var.device_type
  facilities       = [var.facility]
  operating_system = "custom_ipxe"
  ipxe_script_url  = "https://boot.netboot.xyz"
  always_pxe       = "true"
  billing_cycle    = "hourly"
  project_id       = var.project_id
}

resource "metal_device_network_type" "tink_worker_network_type" {
  count = var.worker_count

  device_id = metal_device.tink_worker[count.index].id
  type      = "layer2-individual"
}

# Attach VLAN to provisioner
resource "metal_port_vlan_attachment" "provisioner" {
  depends_on = [metal_device_network_type.tink_provisioner_network_type]
  device_id  = metal_device.tink_provisioner.id
  port_name  = "eth1"
  vlan_vnid  = metal_vlan.provisioning_vlan.vxlan
}

# Attach VLAN to worker
resource "metal_port_vlan_attachment" "worker" {
  count      = var.worker_count
  depends_on = [metal_device_network_type.tink_worker_network_type]

  device_id = metal_device.tink_worker[count.index].id
  port_name = "eth0"
  vlan_vnid = metal_vlan.provisioning_vlan.vxlan
}

data "template_file" "worker_hardware_data" {
  count    = var.worker_count
  template = file("${path.module}/hardware_data.tpl")
  vars = {
    id            = metal_device.tink_worker[count.index].id
    facility_code = metal_device.tink_worker[count.index].deployed_facility
    plan_slug     = metal_device.tink_worker[count.index].plan
    address       = "192.168.1.${count.index + 5}"
    mac           = metal_device.tink_worker[count.index].ports[1].mac
  }
}

resource "null_resource" "hardware_data" {
  count      = var.worker_count
  depends_on = [null_resource.tink_directory]

  connection {
    type = "ssh"
    user = var.ssh_user
    host = metal_device.tink_provisioner.network[0].address
  }

  provisioner "file" {
    content     = data.template_file.worker_hardware_data[count.index].rendered
    destination = "/root/tink/deploy/hardware-data-${count.index}.json"
  }
}