diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..e43b0f9
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+.DS_Store
diff --git a/08-meta-arguments.md b/08-meta-arguments.md
index 0bb59b6..dd7cb56 100644
--- a/08-meta-arguments.md
+++ b/08-meta-arguments.md
@@ -17,16 +17,44 @@ Add a count argument to the Azure Virtual Machine resource in `main.tf` with a v
```hcl
# ...
resource "azurerm_virtual_machine" "training" {
- count = 2
- name = "${var.prefix}vm-${count.index + 1}"
- location = azurerm_resource_group.training.location
- resource_group_name = azurerm_resource_group.training.name
+ count = 2
+ name = "${var.prefix}vm-${count.index + 1}"
+ location = azurerm_resource_group.training.location
+ resource_group_name = azurerm_resource_group.training.name
network_interface_ids = [azurerm_network_interface.training[count.index].id]
vm_size = "Standard_D2s_v4"
-# ... leave the rest of the resource block unchanged...
+
+ delete_os_disk_on_termination = true
+ delete_data_disks_on_termination = true
+
+ storage_image_reference {
+ publisher = "Canonical"
+ offer = "UbuntuServer"
+ sku = "16.04-LTS"
+ version = "latest"
+ }
+ storage_os_disk {
+ name = "${var.prefix}disk-${count.index + 1}"
+ caching = "ReadWrite"
+ create_option = "FromImage"
+ managed_disk_type = "Standard_LRS"
+ }
+ os_profile {
+ computer_name = "${var.computer_name}-${count.index + 1}"
+ admin_username = var.admin_username
+ admin_password = var.admin_password
+ }
+
+ os_profile_linux_config {
+ disable_password_authentication = false
+ }
+
+ tags = {
+ environment = var.EnvironmentTag
+ }
}
-The name of the storage disk also needs to be updated to reflect the use of count:
+Notice that the name of the storage disk also needs to be updated to reflect the use of count:
storage_os_disk {
name = "${var.prefix}disk-${count.index + 1}"
@@ -53,11 +81,10 @@ resource "azurerm_network_interface" "training" {
resource_group_name = azurerm_resource_group.training.name
ip_configuration {
- name = "azureuser${var.prefix}ip"
+ name = "azureuser${var.prefix}ip-${count.index + 1}"
subnet_id = azurerm_subnet.training.id
- private_ip_address_allocation = "dynamic"
- #private_ip_address = "10.0.2.5"
- public_ip_address_id = azurerm_public_ip.training[count.index].id
+ private_ip_address_allocation = "Dynamic"
+ public_ip_address_id = azurerm_public_ip.training[count.index].id
}
}
diff --git a/09-provisioners.md b/09-provisioners.md
index 1090299..7e4d9c1 100644
--- a/09-provisioners.md
+++ b/09-provisioners.md
@@ -169,7 +169,7 @@ resource "azurerm_network_interface" "nic" {
ip_configuration {
name = "${var.prefix}NICConfg"
subnet_id = azurerm_subnet.subnet.id
- private_ip_address_allocation = "dynamic"
+ private_ip_address_allocation = "Dynamic"
public_ip_address_id = azurerm_public_ip.publicip.id
}
}
@@ -335,18 +335,10 @@ azurerm_virtual_machine.vm
azurerm_virtual_network.vnet
```
-Taint our VM:
-```shell
-terraform taint azurerm_virtual_machine.vm
-```
-
-```text
-Resource instance azurerm_virtual_machine.vm has been marked as tainted.
-```
+Replace our VM using the `terraform apply -replace` option:
-Run an `apply` and confirm:
```shell
-terraform apply
+terraform apply -replace azurerm_virtual_machine.vm
```
```text
diff --git a/11-modules.md b/11-modules.md
index cf6a548..6f3232f 100644
--- a/11-modules.md
+++ b/11-modules.md
@@ -75,7 +75,7 @@ resource "azurerm_network_interface" "main" {
ip_configuration {
name = "config1"
subnet_id = azurerm_subnet.main.id
- private_ip_address_allocation = "dynamic"
+ private_ip_address_allocation = "Dynamic"
public_ip_address_id = azurerm_public_ip.main.id
}
}
@@ -86,6 +86,9 @@ resource "azurerm_virtual_machine" "main" {
resource_group_name = azurerm_resource_group.main.name
network_interface_ids = [azurerm_network_interface.main.id]
vm_size = var.vm_size
+
+ delete_os_disk_on_termination = true
+ delete_data_disks_on_termination = true
storage_image_reference {
publisher = "Canonical"
diff --git a/automated_testing.md b/automated_testing.md
new file mode 100644
index 0000000..af2b2ba
--- /dev/null
+++ b/automated_testing.md
@@ -0,0 +1,442 @@
+# Lab: Automated Testing
+
+We may want to test our infrastructure to ensure it is healthy and behaving how we want it to.
+
+Duration: 15 minutes
+
+- Task 1: Write a Terraform Module
+- Task 2: Write a unit test for your Terraform module
+- Task 3: Use Terratest to Deploy infrastructure
+- Task 4: Validate infrastructure with Terratest
+- Task 5: Undeploy
+
+The only real way to test infrastructure code beyond static analysis is by deploying it to a real environment, whatever environment you happen to be using.
+
+[Terratest](https://terratest.gruntwork.io) is a Go library that provides patterns and helper functions for testing infrastructure, with 1st-class support for Terraform, Packer, Docker, Kubernetes, AWS, GCP, and more.
+
+## Task 1: Write a Terraform Module
+
+First, ensure you are in the `~/workstation/terraform/` directory on your workstation. Inside of the `~/workstation/terraform/` directory create a `testing_lab` folder add a `main.tf` calling a module that we will be writing and testing. We will also be deploying a flask application so we need to create a `hello.py` file.
+
+### Root Module
+```shell
+mkdir -p ~/workstation/terraform/testing_lab
+touch ~/workstation/terraform/testing_lab/main.tf
+touch ~/workstation/terraform/testing_lab/hello.py
+```
+
+`main.tf`
+
+```terraform
+module "linux-python-vm" {
+ source = "./modules/my_linux_vm"
+ prefix = "###-testing"
+ location = "East US"
+ vm_count = 1
+ vm_size = "Standard_DS1_v2"
+ admin_username = "testadmin"
+ admin_password = "Password1234!"
+ flask_app_code = "hello.py"
+ flask_app_port = "8000"
+}
+
+output "public_dns" {
+ value = module.linux-python-vm.public_dns
+}
+
+output "app_url" {
+ value = module.linux-python-vm.app_url
+}
+```
+
+Update the `###` in the prefix with your initials.
+
+Application Code
+
+`hello.py`
+```python
+from flask import Flask
+import requests
+
+app = Flask(__name__)
+
+import requests
+@app.route('/')
+def hello_world():
+ return """
+
+
+ Kittens
+
+
+ 
+
+"""
+```
+
+### Linux VM with Flask App Module for Testing
+
+Create a Module for building a Linux VM with a Flask Application that will be the source of our unit tests.
+
+```shell
+mkdir -p ~/workstation/terraform/testing_lab/modules/my_linux_vm
+touch ~/workstation/terraform/testing_lab/modules/my_linux_vm/{linux,variables,outputs,terraform}.tf
+```
+
+The structure for this module testing will look similar to the following file layout:
+
+```sh
+testing_lab
+├── main.tf
+├── hello.py
+├── modules
+│ └── my_linux_vm
+| └── linux.tf
+| └── variables.tf
+| └── outputs.tf
+├── terraform.tfvars
+└── variables.tf
+```
+
+Insided the `my_linux_vm` directory update the terraform configuration files as follows:
+
+`linux.tf`
+```terraform
+provider "azurerm" {
+ features {}
+}
+
+# Create a resource group
+resource "azurerm_resource_group" "rg" {
+ name = "${var.prefix}-provisioner-rg"
+ location = var.location
+}
+# Create virtual network
+resource "azurerm_virtual_network" "vnet" {
+ name = "${var.prefix}TFVnet"
+ address_space = ["10.0.0.0/16"]
+ location = var.location
+ resource_group_name = azurerm_resource_group.rg.name
+}
+
+# Create subnet
+resource "azurerm_subnet" "subnet" {
+ name = "${var.prefix}TFSubnet"
+ resource_group_name = azurerm_resource_group.rg.name
+ virtual_network_name = azurerm_virtual_network.vnet.name
+ address_prefixes = ["10.0.1.0/24"]
+}
+
+# Create public IP
+resource "azurerm_public_ip" "publicip" {
+ count = var.vm_count
+ name = "${var.prefix}publicipprovision-${count.index}"
+ location = var.location
+ resource_group_name = azurerm_resource_group.rg.name
+ allocation_method = "Dynamic"
+ domain_name_label = "${lower(var.prefix)}publicipprovision-${count.index}"
+}
+
+# Create Network Security Group and rules
+resource "azurerm_network_security_group" "nsg" {
+ name = "${var.prefix}TFNSG"
+ location = var.location
+ resource_group_name = azurerm_resource_group.rg.name
+}
+
+resource "azurerm_network_security_rule" "ssh" {
+ resource_group_name = azurerm_resource_group.rg.name
+ network_security_group_name = azurerm_network_security_group.nsg.name
+ name = "SSH"
+ priority = 1001
+ direction = "Inbound"
+ access = "Allow"
+ protocol = "Tcp"
+ source_port_range = "*"
+ destination_port_range = "22"
+ source_address_prefix = "*"
+ destination_address_prefix = "*"
+}
+
+resource "azurerm_network_security_rule" "app" {
+ resource_group_name = azurerm_resource_group.rg.name
+ network_security_group_name = azurerm_network_security_group.nsg.name
+ name = "App"
+ priority = 1002
+ direction = "Inbound"
+ access = "Allow"
+ protocol = "Tcp"
+ source_port_range = "*"
+ destination_port_range = var.flask_app_port
+ source_address_prefix = "*"
+ destination_address_prefix = "*"
+}
+
+# Create network interface
+resource "azurerm_network_interface" "nic" {
+ count = var.vm_count
+ name = "${var.prefix}NIC-${count.index}"
+ location = var.location
+ resource_group_name = azurerm_resource_group.rg.name
+
+ ip_configuration {
+ name = "${var.prefix}NICConfg-${count.index}"
+ subnet_id = azurerm_subnet.subnet.id
+ private_ip_address_allocation = "Dynamic"
+ public_ip_address_id = azurerm_public_ip.publicip[count.index].id
+ }
+}
+
+# Create a Linux virtual machine
+resource "azurerm_virtual_machine" "vm" {
+ count = var.vm_count
+ name = "${var.prefix}TFVM-${count.index}"
+ location = var.location
+ resource_group_name = azurerm_resource_group.rg.name
+ network_interface_ids = [azurerm_network_interface.nic[count.index].id]
+ vm_size = var.vm_size
+
+ delete_os_disk_on_termination = true
+ storage_os_disk {
+ name = "${var.prefix}OsDisk-${count.index}"
+ caching = "ReadWrite"
+ create_option = "FromImage"
+ managed_disk_type = "Premium_LRS"
+ }
+
+ storage_image_reference {
+ publisher = "Canonical"
+ offer = "UbuntuServer"
+ sku = "18.04-LTS"
+ version = "latest"
+ }
+
+ os_profile {
+ computer_name = "${var.prefix}TFVM-${count.index}"
+ admin_username = var.admin_username
+ admin_password = var.admin_password
+ }
+
+ os_profile_linux_config {
+ disable_password_authentication = false
+ }
+
+ provisioner "file" {
+ connection {
+ host = azurerm_public_ip.publicip[count.index].fqdn
+ type = "ssh"
+ user = var.admin_username
+ password = var.admin_password
+ }
+
+ source = var.flask_app_code
+ destination = var.flask_app_code
+ }
+
+ provisioner "remote-exec" {
+ connection {
+ host = azurerm_public_ip.publicip[count.index].fqdn
+ type = "ssh"
+ user = var.admin_username
+ password = var.admin_password
+ }
+
+ inline = [
+ "python3 -V",
+ "sudo apt update",
+ "sudo apt install -y python3-pip python3-flask",
+ "python3 -m flask --version",
+ "sudo FLASK_APP=${var.flask_app_code} nohup flask run --host=0.0.0.0 --port=${var.flask_app_port} &",
+ "sleep 1"
+ ]
+ }
+}
+```
+
+`variables.tf`
+```terraform
+variable "prefix" {
+ description = "Unique prefix, no dashes or numbers please."
+}
+variable "vm_size" {
+ description = "Size of Virtual Machine"
+ default = ""
+}
+variable "location" {
+ description = "Azure Region to deploy Virtual Machine to"
+}
+
+variable "vm_count" {
+ type = number
+ description = "Number of Virtual Machines to provision"
+ default = 1
+}
+
+variable "flask_app_code" {
+ type = string
+ description = "Python Flask App Code to deploy"
+ default = "hello.py"
+}
+
+variable "flask_app_port" {
+ type = string
+ description = "Python Flask App Network Port"
+ default = "8000"
+}
+
+variable "admin_username" {
+ description = "Virtual Machine User Name"
+}
+variable "admin_password" {
+ description = "Virtual Machine Password"
+}
+```
+
+`outputs.tf`
+```terraform
+output "app_url" {
+ value = [for i in azurerm_public_ip.publicip.*.fqdn : "http://${i}:${var.flask_app_port}"]
+}
+
+output "public_dns" {
+ value = azurerm_public_ip.publicip.*.fqdn
+}
+```
+
+## Task 2: Write a unit test for your Terraform module
+
+Install Go on your training workstation
+
+```bash
+ wget -c https://dl.google.com/go/go1.14.2.linux-amd64.tar.gz -O - | sudo tar -xz -C /usr/local
+export PATH=$PATH:/usr/local/go/bin
+```
+
+```bash
+go version
+```
+
+Create a new folder within the `~/workstation/terraform/testing_lab/modules/my_linux_vm` folder called `test`. This will house your test for the server module.
+
+```shell
+mkdir -p ~/workstation/terraform/testing_lab/modules/my_linux_vm/test
+touch ~/workstation/terraform/testing_lab/modules/my_linux_vm/test/server_test.go
+```
+
+In the `test` folder, update the unit test in the `server_test.go` file.
+
+`server_test.go`
+
+```go
+package test
+
+import (
+ "testing"
+ "fmt"
+ "net/http"
+ "github.com/gruntwork-io/terratest/modules/shell"
+ "github.com/gruntwork-io/terratest/modules/terraform"
+ "github.com/stretchr/testify/assert"
+)
+
+func TestEnvironment(t *testing.T) {
+ t.Parallel()
+
+ // Configuring the Terraform Options that we use to pass into terraform. We have an environment variables map to declare env variables. We also
+ // configure the options with default retryable errors to handle the most common retryable errors encountered in
+ // terraform testing.
+ terraformOptions := terraform.WithDefaultRetryableErrors(t, &terraform.Options{
+ // The path to where our Terraform code is located
+ TerraformDir: "../../../",
+ })
+
+ // defer is like a try finally, where at the end of this test, this line will always run. This line calls a Terraform destroy, which always gets called.
+ defer terraform.Destroy(t, terraformOptions)
+
+ // Run `terraform init` and `terraform apply`. The test fails if there are any errors
+ terraform.InitAndApply(t, terraformOptions)
+
+ server_dns := terraform.OutputList(t, terraformOptions, "public_dns")
+ app_url := terraform.OutputList(t, terraformOptions, "app_url")
+
+ //pings the server ips, will fail if they do not ping. The ping will wait for 60 seconds to ensure the ip is ready and can be pinged.
+
+ for i := 0; i < len(server_dns); i++ {
+ cmd := shell.Command{
+ Command: "ping",
+ Args: []string{"-w", "180", "-c", "10", server_dns[i]},
+ }
+ shell.RunCommandAndGetOutput(t, cmd)
+ }
+
+ for i := 0; i < len(server_dns); i++ {
+ //ensure that you can http get the servers and the response is 200
+ //resp, err := http.Get("http://" + server_dns[i])
+ resp, err := http.Get(app_url[i])
+ assert.Nil(t, err)
+ defer resp.Body.Close()
+ fmt.Print("HTTP request on " + app_url[i] + " was ")
+ fmt.Println(resp.StatusCode)
+ assert.Equal(t, 200, resp.StatusCode)
+ }
+
+}
+```
+
+At the end of this task you should have a file layout similar to the following:
+
+```shell
+testing_lab
+├── main.tf
+├── hello.py
+├── modules
+│ └── my_linux_vm
+| └── main.tf
+| └── variables.tf
+| └── outputs.tf
+│ └── test
+│ └── server_test.go
+```
+
+## Task 3: Use Terratest to Deploy infrastructure
+We will use Terratest to execute terraform to deploy our infrastructure into AWS.
+
+```bash
+cd ~/workstation/terraform/testing_lab/modules/my_linux_vm/test
+test_file="$(ls *test.go)"
+go mod init "${test_file%.*}"
+go mod tidy
+go test -v $test_file
+```
+**Note: Go tests have a default timeout of 10 minutes. If your infrastructure takes longer than 10 minutes to create, you may want to add the optional `-timeout` flag when running your go test. For a timeout of 30 minutes, you would do: `go test -v -timeout 30m $test_file`**
+
+If working correctly, the test should output something along the lines of:
+
+```
+TestEnvironment 2021-08-19T14:49:55Z logger.go:66: Destroy complete! Resources: 7 destroyed.
+TestEnvironment 2021-08-19T14:49:55Z logger.go:66:
+--- PASS: TestEnvironment (133.33s)
+PASS
+ok command-line-arguments 133.336s
+```
+
+
+## Task 4: Validate infrastructure with Terratest
+
+Terratest allows us to validate that the infrastructure works correctly in that environment by making HTTP requests, API calls, SSH connections, etc.
+
+For a full list of every function Terratest provides, visit their documentation [here](https://pkg.go.dev/github.com/gruntwork-io/terratest)
+
+While Terratest has many built-in functions, you can also use other Go packages in conjunction with Terratest. For instance, you can create a Terraform configuration that creates a VM instance with specific tags. In conjunction with the Azure package in Go, you can connect to Azure and use the Azure Go package's functions to ensure the Virtual Machine exists and has the specified tags in your configuration file.
+
+Finally, you can have your test fail if something is not as it should be. With the "assert" package in Go, you can ensure your outputs are as expected, causing the test to fail if they are not.
+
+## Task 5: Undeploy
+The final step of our test is to undeploy everything at the end. Terratest allows us to perform a terraform destroy at the end of the testing cycle. Take a look inside of your `server_test.go` file. You should be able to find the following lines:
+
+```go
+ // defer is like a try finally, where at the end of this test, this line will always run. This line calls a Terraform destroy, which always gets called.
+ defer terraform.Destroy(t, terraformOptions)
+```
+
+In Go, defer is a statement that will tell your test to run this command last no matter what. Even if the test fails, or errors out somewhere in the code during runtime, this `terraform.Destroy` line will always run to ensure your test infrastructure doesn't become unmanaged by Terraform and difficult to find.
\ No newline at end of file
diff --git a/for_each.md b/for_each.md
index d0d6c41..37a6788 100644
--- a/for_each.md
+++ b/for_each.md
@@ -73,7 +73,7 @@ resource "azurerm_network_interface" "training" {
ip_configuration {
name = "azureuser${var.prefix}ip"
subnet_id = azurerm_subnet.training.id
- private_ip_address_allocation = "dynamic"
+ private_ip_address_allocation = "Dynamic"
#private_ip_address = "10.0.2.5"
public_ip_address_id = azurerm_public_ip.training[count.index].id
}
@@ -157,8 +157,10 @@ variable "num_vms" {
`terraform.tfvars`
+Replace the `###` with your initials.
+
```hcl
-prefix = "ghm"
+prefix = "###"
location = "East US"
admin_username = "testadmin"
admin_password = "Password1234!"
@@ -188,8 +190,10 @@ Notice the way resources are indexed when using meta-arguments.
Update the count from `2` to `1` by changing the `num_vms` variable in your `terraform.tfvars` file.
+Replace the `###` with your initials.
+
```hcl
-prefix = "ghm"
+prefix = "###"
location = "East US"
admin_username = "testadmin"
admin_password = "Password1234!"
@@ -281,7 +285,7 @@ resource "azurerm_network_interface" "training" {
ip_configuration {
name = "azureuser${var.prefix}ip"
subnet_id = azurerm_subnet.training.id
- private_ip_address_allocation = "dynamic"
+ private_ip_address_allocation = "Dynamic"
#private_ip_address = "10.0.2.5"
public_ip_address_id = azurerm_public_ip.training[each.key].id
}
diff --git a/locals.md b/locals.md
index 62bacc6..555fbae 100644
--- a/locals.md
+++ b/locals.md
@@ -98,7 +98,7 @@ resource "azurerm_network_interface" "training" {
ip_configuration {
name = "azureuser${var.prefix}ip"
subnet_id = azurerm_subnet.training.id
- private_ip_address_allocation = "dynamic"
+ private_ip_address_allocation = "Dynamic"
public_ip_address_id = azurerm_public_ip.training[count.index].id
}
}
diff --git a/pdf/terraform_fundamentals_azure.pdf b/pdf/terraform_fundamentals_azure.pdf
new file mode 100644
index 0000000..5e20c17
Binary files /dev/null and b/pdf/terraform_fundamentals_azure.pdf differ
diff --git a/variable_validation.md b/variable_validation.md
index 0a5f2c9..fc7fa06 100644
--- a/variable_validation.md
+++ b/variable_validation.md
@@ -41,7 +41,7 @@ variable "vm_size" {
validation {
condition = contains(["Standard_D2s_v4", "Standard_A2", "Standard_DS1_v2"], var.vm_size)
- error_message = "You must use an approved operating system. Options are Standard_A2, Standard_DS1_v2 or Standard_D2s_v4."
+ error_message = "You must use an approved VM Size. Options are Standard_A2, Standard_DS1_v2 or Standard_D2s_v4."
}
}
```
@@ -143,7 +143,7 @@ Create a file `terraform.tfvars` and add the following configuration and change
```hcl
resource_group_name = "###-resourcegroup-var-validate"
EnvironmentTag = "staging"
-prefix = "###"
+prefix = "###-validate"
location = "East US"
computer_name = "myserver"
admin_username = "testadmin"
@@ -153,6 +153,7 @@ num_vms = 1
```
```bash
+terraform init
terraform plan
```
@@ -247,10 +248,10 @@ department = "ABC"
cost_code = "1-3-4"
```
-Execute a `terraform apply` with the variables in the `terraform.tfvars`.
+Execute a `terraform validate` with the variables in the `terraform.tfvars`.
```bash
-terraform apply
+terraform validate
```
You will notice that the output block errors as it needs to have the `sensitive = true` value set.
@@ -270,7 +271,7 @@ You will notice that the output block errors as it needs to have the `sensitive
╵
```
-Update the output to set the `sensitive = true` attribute and rerun the apply.
+Update the output to set the `sensitive = true` attribute and rerun the validate.
```hcl
output "phone_number" {
@@ -279,6 +280,12 @@ output "phone_number" {
}
```
+```bash
+terraform validate
+```
+
+After validation is succesful, apply the configuration.
+
```bash
terraform apply
```