ocp.tf

################################################################
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Licensed Materials - Property of IBM
#
# ©Copyright IBM Corp. 2022
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
################################################################

provider "openstack" {
  user_name   = var.user_name
  password    = var.password
  tenant_name = var.tenant_name
  domain_name = var.domain_name
  auth_url    = var.auth_url
  insecure    = var.insecure
}

resource "random_id" "label" {
  count       = var.cluster_id == "" ? 1 : 0
  byte_length = "2" # Since we use the hex, the word lenght would double
  prefix      = "${var.cluster_id_prefix}-"
}

locals {
  # Generates cluster_id as combination of cluster_id_prefix + (random_id or user-defined cluster_id)
  cluster_id   = var.cluster_id == "" ? random_id.label[0].hex : (var.cluster_id_prefix == "" ? var.cluster_id : "${var.cluster_id_prefix}-${var.cluster_id}")
  storage_type = lookup(var.bastion, "count", 1) > 1 ? "none" : var.storage_type
}

module "bastion" {
  source = "./modules/1_bastion"

  cluster_domain                  = var.cluster_domain
  cluster_id                      = local.cluster_id
  bastion                         = var.bastion
  bastion_port_ids                = module.network.bastion_port_ids
  scg_id                          = var.scg_id
  openstack_availability_zone     = var.openstack_availability_zone
  rhel_username                   = var.rhel_username
  private_key                     = local.private_key
  public_key                      = local.public_key
  create_keypair                  = local.create_keypair
  keypair_name                    = "${local.cluster_id}-keypair"
  ssh_agent                       = var.ssh_agent
  connection_timeout              = var.connection_timeout
  jump_host                       = var.jump_host
  rhel_subscription_username      = var.rhel_subscription_username
  rhel_subscription_password      = var.rhel_subscription_password
  rhel_subscription_org           = var.rhel_subscription_org
  rhel_subscription_activationkey = var.rhel_subscription_activationkey
  ansible_repo_name               = var.ansible_repo_name
  storage_type                    = local.storage_type
  volume_size                     = var.volume_size
  volume_storage_template         = var.volume_storage_template
  setup_squid_proxy               = var.setup_squid_proxy
  proxy                           = var.proxy
}

module "network" {
  source = "./modules/2_network"

  cluster_id              = local.cluster_id
  network_name            = var.network_name
  bastion                 = var.bastion
  bootstrap               = var.bootstrap
  master                  = var.master
  worker                  = var.worker
  network_type            = var.network_type
  sriov_vnic_failover_vfs = var.sriov_vnic_failover_vfs
  sriov_capacity          = var.sriov_capacity
}

module "helpernode" {
  source = "./modules/3_helpernode"

  cluster_domain            = var.cluster_domain
  cluster_id                = local.cluster_id
  dns_forwarders            = var.dns_forwarders
  lb_ipaddr                 = var.lb_ipaddr
  ext_dns                   = var.ext_dns
  gateway_ip                = module.network.gateway_ip
  cidr                      = module.network.cidr
  allocation_pools          = module.network.allocation_pools
  bastion_vip               = module.network.bastion_vip
  bastion_ip                = module.bastion.bastion_ip
  rhel_username             = var.rhel_username
  private_key               = local.private_key
  ssh_agent                 = var.ssh_agent
  connection_timeout        = var.connection_timeout
  jump_host                 = var.jump_host
  bootstrap_port_ip         = module.network.bootstrap_port_ip
  master_port_ips           = module.network.master_port_ips
  worker_port_ips           = module.network.worker_port_ips
  bootstrap_mac             = module.network.bootstrap_mac
  master_macs               = module.network.master_macs
  worker_macs               = module.network.worker_macs
  openshift_install_tarball = var.openshift_install_tarball
  openshift_client_tarball  = var.openshift_client_tarball
  enable_local_registry     = var.enable_local_registry
  local_registry_image      = var.local_registry_image
  ocp_release_tag           = var.ocp_release_tag
  helpernode_repo           = var.helpernode_repo
  helpernode_tag            = var.helpernode_tag
  ansible_extra_options     = var.ansible_extra_options
  chrony_config             = var.chrony_config
  chrony_config_servers     = var.chrony_config_servers
  pull_secret               = file(coalesce(var.pull_secret_file, "/dev/null"))
}

module "installconfig" {
  depends_on = [module.helpernode]
  source     = "./modules/5_install/5_1_installconfig"

  cluster_domain             = var.cluster_domain
  cluster_id                 = local.cluster_id
  cidr                       = module.network.cidr
  bastion                    = var.bastion
  bastion_vip                = module.network.bastion_vip
  bastion_ip                 = module.bastion.bastion_ip
  rhel_username              = var.rhel_username
  private_key                = local.private_key
  ssh_agent                  = var.ssh_agent
  connection_timeout         = var.connection_timeout
  jump_host                  = var.jump_host
  bootstrap_ip               = module.network.bootstrap_port_ip
  master_ips                 = module.network.master_port_ips
  worker_ips                 = module.network.worker_port_ips
  public_key                 = local.public_key
  pull_secret                = file(coalesce(var.pull_secret_file, "/dev/null"))
  storage_type               = local.storage_type
  release_image_override     = var.release_image_override
  private_network_mtu        = var.private_network_mtu
  enable_local_registry      = var.enable_local_registry
  fips_compliant             = var.fips_compliant
  local_registry_image       = var.local_registry_image
  ocp_release_tag            = var.ocp_release_tag
  install_playbook_repo      = var.install_playbook_repo
  install_playbook_tag       = var.install_playbook_tag
  log_level                  = var.installer_log_level
  ansible_extra_options      = var.ansible_extra_options
  rhcos_pre_kernel_options   = var.rhcos_pre_kernel_options
  rhcos_kernel_options       = var.rhcos_kernel_options
  sysctl_tuned_options       = var.sysctl_tuned_options
  sysctl_options             = var.sysctl_options
  match_array                = var.match_array
  setup_squid_proxy          = var.setup_squid_proxy
  proxy                      = var.proxy
  upgrade_version            = var.upgrade_version
  upgrade_channel            = var.upgrade_channel
  upgrade_image              = var.upgrade_image
  upgrade_pause_time         = var.upgrade_pause_time
  upgrade_delay_time         = var.upgrade_delay_time
  eus_upgrade_version        = var.eus_upgrade_version
  eus_upgrade_channel        = var.eus_upgrade_channel
  eus_upgrade_image          = var.eus_upgrade_image
  eus_upstream               = var.eus_upstream
  chrony_config              = var.chrony_config
  chrony_config_servers      = var.chrony_config_servers
  cni_network_provider       = var.cni_network_provider
  cluster_network_cidr       = var.cluster_network_cidr
  cluster_network_hostprefix = var.cluster_network_hostprefix
  service_network            = var.service_network
  luks_compliant             = var.luks_compliant
  luks_config                = var.luks_config
  luks_filesystem_device     = var.luks_filesystem_device
  luks_format                = var.luks_format
  luks_wipe_filesystem       = var.luks_wipe_filesystem
  luks_device                = var.luks_device
  luks_label                 = var.luks_label
  luks_options               = var.luks_options
  luks_wipe_volume           = var.luks_wipe_volume
  luks_name                  = var.luks_name
  kdump_enable               = var.kdump_enable
  kdump_commandline_remove   = var.kdump_commandline_remove
  kdump_commandline_append   = var.kdump_commandline_append
  kdump_kexec_args           = var.kdump_kexec_args
  kdump_img                  = var.kdump_img
  kdump_log_path             = var.kdump_log_path
  kdump_crash_kernel_memory  = var.kdump_crash_kernel_memory
}

module "bootstrapnode" {
  source = "./modules/4_nodes/4_1_bootstrapnode"

  bastion_ip                  = module.network.bastion_vip == "" ? module.bastion.bastion_ip[0] : module.network.bastion_vip
  cluster_id                  = local.cluster_id
  bootstrap                   = var.bootstrap
  scg_id                      = var.scg_id
  openstack_availability_zone = var.openstack_availability_zone
  bootstrap_port_id           = module.network.bootstrap_port_id
  install_status              = module.installconfig.install_status
}

module "bootstrapconfig" {
  depends_on = [module.bootstrapnode]
  source     = "./modules/5_install/5_2_bootstrapconfig"

  bastion_ip            = module.bastion.bastion_ip
  rhel_username         = var.rhel_username
  private_key           = local.private_key
  ssh_agent             = var.ssh_agent
  connection_timeout    = var.connection_timeout
  jump_host             = var.jump_host
  ansible_extra_options = var.ansible_extra_options
}


module "masternodes" {
  source = "./modules/4_nodes/4_2_masternodes"

  bastion_ip                  = module.network.bastion_vip == "" ? module.bastion.bastion_ip[0] : module.network.bastion_vip
  cluster_id                  = local.cluster_id
  master                      = var.master
  scg_id                      = var.scg_id
  openstack_availability_zone = var.openstack_availability_zone
  master_port_ids             = module.network.master_port_ids
  mount_etcd_ramdisk          = var.mount_etcd_ramdisk
  install_status              = module.bootstrapconfig.install_status
}

module "bootstrapcomplete" {
  depends_on = [module.masternodes]
  source     = "./modules/5_install/5_3_bootstrapcomplete"

  bastion_ip            = module.bastion.bastion_ip
  rhel_username         = var.rhel_username
  private_key           = local.private_key
  ssh_agent             = var.ssh_agent
  connection_timeout    = var.connection_timeout
  jump_host             = var.jump_host
  ansible_extra_options = var.ansible_extra_options
}

module "workernodes" {
  source = "./modules/4_nodes/4_3_workernodes"

  bastion_ip                  = module.network.bastion_vip == "" ? module.bastion.bastion_ip[0] : module.network.bastion_vip
  cluster_id                  = local.cluster_id
  worker                      = var.worker
  scg_id                      = var.scg_id
  openstack_availability_zone = var.openstack_availability_zone
  worker_port_ids             = module.network.worker_port_ids
  rhel_username               = var.rhel_username
  private_key                 = local.private_key
  ssh_agent                   = var.ssh_agent
  connection_timeout          = var.connection_timeout
  jump_host                   = var.jump_host
  installconfig_status        = module.installconfig.install_status
  bootstrapcomplete_status    = module.bootstrapcomplete.install_status
}
module "install" {
  depends_on = [module.helpernode, module.installconfig, module.workernodes]
  source     = "./modules/5_install/5_4_installcomplete"

  cluster_domain        = var.cluster_domain
  cluster_id            = local.cluster_id
  bastion_vip           = module.network.bastion_vip
  bastion_ip            = module.bastion.bastion_ip
  rhel_username         = var.rhel_username
  private_key           = local.private_key
  ssh_agent             = var.ssh_agent
  connection_timeout    = var.connection_timeout
  jump_host             = var.jump_host
  worker_ips            = module.network.worker_port_ips
  ansible_extra_options = var.ansible_extra_options
  upgrade_version       = var.upgrade_version
  upgrade_channel       = var.upgrade_channel
  upgrade_image         = var.upgrade_image
  upgrade_pause_time    = var.upgrade_pause_time
  upgrade_delay_time    = var.upgrade_delay_time
  eus_upgrade_version   = var.eus_upgrade_version
  eus_upgrade_channel   = var.eus_upgrade_channel
  eus_upgrade_image     = var.eus_upgrade_image
  eus_upstream          = var.eus_upstream
}