Merge pull request #48 from smarunich/aws-destroy

initial attempt on aws cleanup

Author: smarunich

Makefile

@@ -130,6 +130,19 @@ app_bookinfo:
 azure_oidc:
 	terraform apply ${terraform_apply_args} -target=module.azure_oidc
 
+.PHONY: fast_track
+fast_track:
+	make k8s
+	make tsb_mp
+	make tsb_cp cluster_id=0 cloud=azure || true
+	make tsb_cp cluster_id=1 cloud=azure || true
+	make tsb_cp cluster_id=0 cloud=aws || true
+	make tsb_cp cluster_id=0 cloud=gcp || true
+	make argocd cluster_id=0 cloud=azure || true
+	make argocd cluster_id=1 cloud=azure || true
+	make argocd cluster_id=0 cloud=aws || true
+	make argocd cluster_id=0 cloud=gcp || true
+
 ## destroy					 destroy the environment
 .PHONY: destroy
 destroy:
@@ -140,8 +153,11 @@ destroy:
 	terraform state list | grep "^module.es" | xargs -I '{}'  terraform state rm {}
 	terraform state list | grep "^module.keycloak" | xargs -I '{}'  terraform state rm {}
 	terraform state list | grep "^module.app" | xargs -I '{}'  terraform state rm {}
-	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.aws_k8s -target=module.aws_jumpbox  -target=module.aws_base
-	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.gcp_k8s  -target=module.gcp_jumpbox -target=module.gcp_base
-	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.azure_k8s  -target=module.azure_jumpbox -target=module.azure_base
+	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.aws_k8s 
+	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.aws_jumpbox  -target=module.aws_base
+	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.gcp_k8s  
+	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.gcp_jumpbox -target=module.gcp_base
+	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.azure_k8s 
+	terraform destroy ${terraform_destroy_args} -refresh=false -target=module.azure_jumpbox -target=module.azure_base
 	terraform destroy ${terraform_destroy_args} -refresh=false 
 	terraform destroy ${terraform_destroy_args}

main.tf

@@ -47,6 +47,7 @@ module "aws_jumpbox" {
   count                   = var.aws_eks_app_clusters_count > 0 ? 1 : 0
   owner                   = var.owner
   name_prefix             = var.name_prefix
+  region                  = var.aws_region
   vpc_id                  = module.aws_base[0].vpc_id
   vpc_subnet              = module.aws_base[0].vpc_subnets[0]
   cidr                    = var.cidr

modules/aws/jumpbox/aws_cleanup.sh.tmpl

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+export REGION="${region}"
+export VPC_ID="${vpc_id}"
+
+echo 'Destroying K8s ELBs...'
+for elb in $(aws elb describe-load-balancers --region $REGION --query 'LoadBalancerDescriptions[?VPCId=="$VPC_ID"]|[].LoadBalancerName' --output text);do echo "Removing $elb..."; aws elb delete-load-balancer --region $REGION --load-balancer-name $elb; done
+
+sleep 60
+
+echo 'Destroying K8s ELB SGs...'
+for sg in $(aws ec2 --region $REGION describe-security-groups --filters "Name=vpc-id,Values=$VPC_ID" --query "SecurityGroups[*].GroupId" --output text); do echo "Removing $sg..."; aws ec2 delete-security-group --region $REGION --group-id $sg; done

modules/aws/jumpbox/main.tf

@@ -247,6 +247,41 @@ resource "aws_instance" "jumpbox" {
 
 }
 
+resource "null_resource" "jumpbox_aws_cleanup" {
+
+  triggers = {
+    host        = aws_instance.jumpbox.public_ip
+    user        = var.jumpbox_username
+    private_key = tls_private_key.generated.private_key_pem
+  }
+
+  connection {
+    host        = self.triggers.host
+    type        = "ssh"
+    agent       = false
+    user        = self.triggers.user
+    private_key = self.triggers.private_key
+  }
+
+  provisioner "file" {
+    content = templatefile("${path.module}/aws_cleanup.sh.tmpl", {
+      vpc_id = var.vpc_id
+      region = var.region
+    })
+    destination = "/home/tsbadmin/aws_cleanup.sh"
+  }
+
+  provisioner "remote-exec" {
+    when = destroy
+    inline = [
+      "sh /home/tsbadmin/aws_cleanup.sh"
+    ]
+    on_failure = continue
+  }
+
+  depends_on = [aws_instance.jumpbox, tls_private_key.generated]
+}
+
 resource "local_file" "tsbadmin_pem" {
   content         = tls_private_key.generated.private_key_pem
   filename        = "${var.name_prefix}-aws-${var.jumpbox_username}.pem"

modules/aws/jumpbox/variables.tf

@@ -5,6 +5,9 @@ variable "name_prefix" {
 variable "owner" {
 }
 
+variable "region" {
+}
+
 variable "vpc_id" {
 }