From 55e3fd0cb4f0c4fd1caac9a2f3cf9efd4dd1ca9e Mon Sep 17 00:00:00 2001
From: Guy Inger <ginger@redhat.com>
Date: Mon, 16 Jan 2023 18:27:45 +0200
Subject: [PATCH] Terraform plan for creating an EC2 instance for hosting CRC
 cluster

Signed-off-by: Guy Inger <ginger@redhat.com>
---
 terraform/aws/aws.tf | 89 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 89 insertions(+)
 create mode 100644 terraform/aws/aws.tf

diff --git a/terraform/aws/aws.tf b/terraform/aws/aws.tf
new file mode 100644
index 00000000..f25d4677
--- /dev/null
+++ b/terraform/aws/aws.tf
@@ -0,0 +1,89 @@
+variable "access_key" {
+  type = string
+}
+
+variable "secret_key" {
+  type = string
+}
+
+variable "region" {
+  type = string
+  default = "us-west-2"
+}
+
+variable "ami" {
+  type = string
+  default = "ami-0569ce8a44f2351be"
+}
+
+variable "instance_type" {
+  type = string
+  default = "c6in.2xlarge"
+}
+
+
+# Specify the cloud provider
+provider "aws" {
+  access_key = var.access_key
+  secret_key = var.secret_key
+  region     = var.region
+}
+
+
+resource "aws_instance" "web" {
+  ami           = var.ami
+  instance_type = var.instance_type
+  security_groups = ["ssh", "https", "api"]
+  tags = {
+    Name = "web"
+  }
+}
+
+# Create a resource of type "aws_security_group" to enable SSH
+resource "aws_security_group" "ssh" {
+  name        = "ssh"
+  description = "Allow SSH access"
+
+  ingress {
+    from_port   = 22
+    to_port     = 22
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 6443
+    to_port     = 6443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_security_group" "https" {
+  name        = "https"
+  description = "Allow HTTPS access"
+
+  ingress {
+    from_port   = 443
+    to_port     = 443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_security_group" "API" {
+  name        = "api"
+  description = "Allow API access"
+
+  ingress {
+    from_port   = 6443 
+    to_port     = 6443 
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+
+output "public_ip" {
+  value = aws_instance.web.public_ip
+}