Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/timoa/terraform-jenkins-slaves-on-demand
Configuration of a Jenkins master with slaves on-demand (AWS EC2 version)
https://github.com/timoa/terraform-jenkins-slaves-on-demand
aws jenkins jenkins-master jenkins-slaves managed-by-terraform terraform
Last synced: about 1 month ago
JSON representation
Configuration of a Jenkins master with slaves on-demand (AWS EC2 version)
- Host: GitHub
- URL: https://github.com/timoa/terraform-jenkins-slaves-on-demand
- Owner: timoa
- License: mit
- Created: 2018-12-08T06:51:35.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2023-12-15T11:36:16.000Z (about 1 year ago)
- Last Synced: 2023-12-15T12:44:20.154Z (about 1 year ago)
- Topics: aws, jenkins, jenkins-master, jenkins-slaves, managed-by-terraform, terraform
- Language: HCL
- Homepage: https://timoa.com
- Size: 133 KB
- Stars: 5
- Watchers: 4
- Forks: 14
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# (WIP) Terraform template to create a Jenkins master with slaves on-demand
[![License: MIT][badge-license]][link-license]
Configuration of a Jenkins master with slaves on-demand (AWS EC2 only for now).
![Infrastructure diagram][image-infrastructure-diagram]
## Includes
### Network
#### Global
* Custom Virtual Private Cloud (VPC)
#### Jenkins master
* Public subnet
* Internet gateway
* NAT gateway
* Security group to allow access the Jenkins UI
* Security group to allow access to EFS storage from Jenkins master
#### Jenkins slaves
* Private subnet
* Security groups to allow only access from the Jenkins master
### Instances
#### Jenkins Master
* AWS EC2 instance (t3.large by default)
* AWS AMI (Amazon Linux 2)
* SSH key pair
* NGINX reverse-proxy configuration
#### Jenkins Slaves
* AWS EC2 instance template (different instance sizes)
* AWS AMI (Amazon Linux 2 minimal)
* SSH key pair
### Storage
* EBS root volume for all instances
* AWS Elastic File System (EFS) for the Jenkins master configuration and data
## How to install
Clone this Git repository
```bash
git clone [email protected]:timoa/terraform-jenkins-slaves-on-demand.git
```
Now, go to the `tf-vm/aws` folder (the only type and provider for the moment)
```bash
cd terraform-jenkins-slaves-on-demand/tf-vm/aws
```
You can change some of the variables in the `variables.tf`. See the [configuration section](#configuration)
Start by install the dependencies
```bash
terraform init
```
Run `terraform plan` to see which resources will be created and save the generated execution plan
```bash
terraform plan --out=jenkins.tfplan
```
Apply the Terraform plan
```bash
terraform apply jenkins.tfplan
```
## Configuration
This variables can be changed under the `variables.tf` file.
| Variable | Default value | Description |
|----------|---------------|-------------|
| `aws_region` | `us-east-1` | AWS Region |
| `env` | `dev` | Name of the environment |
| `vpc_cidr` | `10.0.0.0/16` | VPC CIDR |
| `public_subnet` | `10.0.1.0/24` | Public subnet |
| `private_subnet` | `10.0.2.0/24` | Private subnet |
| `instance_type` | `t3.large` | Instance type |
| `ebs_optimized` | `true` | EBS optimized |
| `path_public_key` | `jenkins-master-key.pub` | Path to the SSH public key for Jenkins master |
## Outputs
| Name | Description |
|------|-------------|
| `jenkins_master_public_ip` | Jenkins master public IP |
| `jenkins_master_public_dns` | Jenkins master public DNS |
## TODO
* Terraform backend with S3 + lock
* Add EC2 health check URL for the Jenkins master
* Encrypt the AMI with the new AWS API
* Encrypt EFS in transit (SSL)
* Mount the EFS volume when ready (can take up to 25 min to be provisionned)
* Configure Jenkins with the necessary plugins
* Create a separate Jenkins master IAM role to create the slaves on-demand
* Create the Jenkins slaves AMI
* Let's Encrypt SSL certificate for the Jenkins master
* Use an existing VPC ID
* Use an existing EFS ID
* Install and configure Prometheus Node Exporter for monitoring
* Install and configure Logstash and export logs to an Elasticsearch instance
[badge-license]: https://img.shields.io/badge/License-MIT-blue.svg
[link-license]: https://raw.githubusercontent.com/timoa/terraform-jenkins-slaves-on-demand/master/LICENSE
[image-infrastructure-diagram]: https://github.com/timoa/terraform-jenkins-slaves-on-demand/raw/master/doc/images/diagram-jenkins-slaves-on-demand.png