mirror of
https://github.com/karpathy/nanochat.git
synced 2026-05-09 01:10:10 +00:00
b381933c3b
Add reusable Terraform modules and per-environment configs (dev/uat/prod) in us-west-2 covering: VPC (3 AZ public/private), EKS 1.29 with IRSA and ALB/EBS/EFS CSI add-ons, RDS PostgreSQL 15, four ECR repos, IAM roles (EKS node, ALB controller IRSA, GitHub Actions OIDC), Route53 + ACM for samosachaat.art, and EFS for model weights. State backend on S3 (samosachaat-terraform-state) with DynamoDB lock table. terraform validate passes for dev, uat, and prod. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
108 lines
2.8 KiB
HCL
108 lines
2.8 KiB
HCL
locals {
|
|
name_prefix = "samosachaat-${var.environment}"
|
|
cluster_name = "${local.name_prefix}-eks"
|
|
|
|
tags = {
|
|
Project = "samosachaat"
|
|
Environment = var.environment
|
|
}
|
|
}
|
|
|
|
module "vpc" {
|
|
source = "../../modules/vpc"
|
|
|
|
name = local.name_prefix
|
|
cluster_name = local.cluster_name
|
|
cidr = "10.0.0.0/16"
|
|
azs = ["us-west-2a", "us-west-2b", "us-west-2c"]
|
|
private_subnets = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
|
|
public_subnets = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"]
|
|
single_nat_gateway = true
|
|
tags = local.tags
|
|
}
|
|
|
|
module "eks" {
|
|
source = "../../modules/eks"
|
|
|
|
cluster_name = local.cluster_name
|
|
cluster_version = "1.29"
|
|
vpc_id = module.vpc.vpc_id
|
|
private_subnet_ids = module.vpc.private_subnet_ids
|
|
|
|
node_instance_type = "t3.large"
|
|
node_min_size = 2
|
|
node_max_size = 4
|
|
node_desired_size = 2
|
|
|
|
tags = local.tags
|
|
}
|
|
|
|
module "ecr" {
|
|
source = "../../modules/ecr"
|
|
|
|
force_delete = true
|
|
tags = local.tags
|
|
}
|
|
|
|
module "iam" {
|
|
source = "../../modules/iam"
|
|
|
|
name_prefix = local.name_prefix
|
|
oidc_provider_arn = module.eks.oidc_provider_arn
|
|
oidc_provider_url = module.eks.oidc_provider_url
|
|
create_github_oidc = true
|
|
github_repositories = var.github_repositories
|
|
tags = local.tags
|
|
}
|
|
|
|
module "rds" {
|
|
source = "../../modules/rds"
|
|
|
|
identifier = "${local.name_prefix}-pg"
|
|
vpc_id = module.vpc.vpc_id
|
|
private_subnet_ids = module.vpc.private_subnet_ids
|
|
eks_node_security_group_id = module.eks.node_security_group_id
|
|
|
|
instance_class = "db.t3.micro"
|
|
multi_az = false
|
|
skip_final_snapshot = true
|
|
deletion_protection = false
|
|
|
|
tags = local.tags
|
|
}
|
|
|
|
module "efs" {
|
|
source = "../../modules/efs"
|
|
|
|
name = "${local.name_prefix}-models"
|
|
vpc_id = module.vpc.vpc_id
|
|
private_subnet_ids = module.vpc.private_subnet_ids
|
|
eks_node_security_group_id = module.eks.node_security_group_id
|
|
|
|
tags = local.tags
|
|
}
|
|
|
|
module "acm" {
|
|
source = "../../modules/acm"
|
|
|
|
domain_name = var.domain_name
|
|
subject_alternative_names = ["*.${var.domain_name}"]
|
|
# First apply: leave wait_for_validation = false so Route53 records can be
|
|
# created in the same plan. Flip to true on a follow-up apply if desired.
|
|
wait_for_validation = false
|
|
|
|
tags = local.tags
|
|
}
|
|
|
|
module "route53" {
|
|
source = "../../modules/route53"
|
|
|
|
domain_name = var.domain_name
|
|
subdomains = ["grafana"]
|
|
acm_validation_records = module.acm.validation_records
|
|
# alb_dns_name / alb_zone_id are populated after the AWS Load Balancer
|
|
# Controller provisions the Ingress. Re-apply with -var to wire them up.
|
|
alb_dns_name = ""
|
|
alb_zone_id = ""
|
|
}
|