/chef-automate-terraform

Terraform plan to deploy Chef Automate to an AWS VPC

Primary LanguageHCL

chef-automate-terraform

A Terraform plan to build a fully functional Chef Automate cluster in AWS

Prequisites

  • An AWS account
  • AWS API keys or IAM role with access to create/modify/delete EC2 and VPC resources
  • An SSH keypair setup in AWS and a copy of the private key on the machine running Terraform
  • A VPC with at least one subnet that allows instances to route to the internet
  • Network access to SSH from the machine running Terraform to the EC2 instances it will provision. Note: This Terraform plan assumes that the instances created will not be publiclly accessable.
  • A Chef Delivery or Chef Automate license file

Usage Instructions:

  • Install Terraform from http://terraform.io
  • Configure your terminal with AWS credentials
  • From your terminal, enter the terraform directory of this repo
    • Edit the main.tfvars file and input your desired settings
    • Run 'terraform plan -var-file=main.tfvars' to review what Terraform will do
    • Run 'terraform apply --var-file=main.tfvars' to initiate the provisioning process

Post run:

  • You will find the Delivery user .pem key and the Chef Org validator .pem key in the directory you ran Terraform from.
  • The password for the user 'delivery' on the Chef Server is 'ChefDelivery2016'. You can and should change this after installation.
  • You will find the login information for the Automate server in the file delivery-admin-credentials located in the directory you ran Terraform from.

Development TODOs:

  • Variablize source URLs for Chef Packages
  • DNS is entirely via AWS hostnames. This may be ok, or not.
  • Evaluate sensitive key placement. This could use some refactoring.