joseberrocal / able_project_infraestructure_01

Deploy an infraestructure with load balancer, priv/pub network using cloudformation and adding jumpserver using jenkins

Able_Project_Infraestructure_01

Using my Udacity project as a base I prepare for the interview testing cloudformation circleci and github jobs

Overview

The main focus for this project is to deploy a webserver in a VPC, inside a subnet. Only a personal PC will be able to reach the webserver. The CI will be important to check in this project.

Project Tasks

This project goal is to prepare for the Able interview, create different possible scenarios and be ready during the execution. In this project you will:

• Create a new user
• Provide roles to the new user
• Test your project code using linting
• Configure CI using CircleCi and Github Jobs
• Deploy the infraestructure using cloudformation
• Deploy the network using cloudformation
• Create the appropiate permitions to deploy the complete infraestructure
• Deploy jump server using cloudformation

Project Plan

• Trello board for the project

Pre-requisites

1. Create the user
2. Create a policy with the following permissions:
   • iam:CreateInstanceProfile
   • iam:DeleteInstanceProfile
   • iam:PassRole
   • iam:DeleteRolePolicy
   • iam:RemoveRoleFromInstanceProfile
   • iam:CreateRole
   • iam:DeleteRole
   • iam:PutRolePolicy
   • iam:AddRoleToInstanceProfile
3. Add the following policies to a user:
   • AmazonEC2FullAccess
   • AWSCloudFormationFullAccess
   • Policy from point 2.
4. Configure the user in aws cli in your standalone environment
5. Configure the user in aws cli in your jenkins environment
6. Create a KeyPair (For this case I use "jb_aws_keypair.pem")

Instructions

• Architectural Diagram

1. Running the infraestructure in a standalone environment

a. Clone this repository in your local environment

b. Configure the user in your aws cli

c. Execute the following commands

cd infraestructure
sh create.sh  Able-Infra able-infra.yml able-infra-param.json
sh create.sh  Able-servers able-servers.yml able-servers-param.json
# To create the jumpserver
cd ../jumpserver
sh create.sh Able-jumpserv able-jump.yml able-jump-param.json

d. Test connection to the webserver, use the following URL

(.able-infra) [casita@localhost infraestructure]$ aws cloudformation list-exports  | grep -A1 "Able-Project-WebAppLBDNSName"
            "Name": "Able-Project-WebAppLBDNSName",
            "Value": "http://Able-WebAp-1GNX8CGTJLCXE-605727472.us-west-2.elb.amazonaws.com"
(.able-infra) [casita@localhost infraestructure]$ 

2. Running the infraestructure using a pipeline

a. The repository is associated to a jenkins server, the CD will be automated.

• To deploy the infraestructure and the network, run the jenkins branch
• To create the jumpserver, run the jump branch

b. Test connection to the webserver, use the following URL

(.able-infra) [casita@localhost infraestructure]$ aws cloudformation list-exports  | grep -A1 "Able-Project-WebAppLBDNSName"
            "Name": "Able-Project-WebAppLBDNSName",
            "Value": "http://Able-WebAp-1GNX8CGTJLCXE-605727472.us-west-2.elb.amazonaws.com"
(.able-infra) [casita@localhost infraestructure]$ 

The output will be the following:

3. Connect to the servers in the Private Network

a. Create KeyPairs (In my case I will use only one KeyPairs for both "jb_aws_keypair.pem")

• For the Jump Server in the Public Network
• For the Servers in the Private Network

#Stablish the connection to the Jump Server
ssh -i "jb_aws_keypair.pem" [email protected]
exit
#Copy the KeyPairs to the Jump Server
scp -i "jb_aws_keypair.pem" jb_aws_keypair.pem  [email protected]:/home/ubuntu
#Connect to the Jump Server
ssh -i "jb_aws_keypair.pem" [email protected]
#Connect to one of the servers in the Private Network
ssh -i "jb_aws_keypair.pem" [email protected]

Enhancements

To improve the project it will be required to deploy new scenarios, like deploy subnets inside AZ