Terraforming Alibaba Cloud - VPC and vSwitch

Ankit Mehta — Sun, 25 Apr 2021 01:51:27 +0000

This post will help to build an Alibaba Cloud VPC and vswitches. VPC is an isolated network segment. Vswiches are logically divided VPC into smaller groups. For the people coming from another cloud provider, vswitches are overall subnets.

As a best practice, it is recommended to use all the subnets in different subnets.

This code is an extension of the previous post.

variable "access_key" {}
variable "secret_key" {}
variable "region" {}

#Provider Definition
terraform {
  required_providers {
    alicloud = {
      source  = "aliyun/alicloud"
      version = "1.121.1"
    }
  }
}

#Provider Variables
provider "alicloud" {
  access_key = var.access_key
  secret_key = var.secret_key
  region     = var.region
}

#Resource Management Definition
resource "alicloud_resource_manager_resource_group" "development-rg" {
  resource_group_name = "aliyun-development-rg"
  display_name        = "aliyun-development-rg"
}

#VPC Definition
resource "alicloud_vpc" "vpc" {
  vpc_name          = "Development-VPC"
  description       = "This is development VPC"
  cidr_block        = "192.168.0.0/16"
  resource_group_id = alicloud_resource_manager_resource_group.development-rg.id
  tags = {
    type       = "development"
    managed-by = "Terraform"
  }
}

#VSwich Definition 
resource "alicloud_vswitch" "vswitch-1" {
  cidr_block = "192.168.1.0/24"
  zone_id    = "ap-southeast-1a"
  vpc_id     = alicloud_vpc.vpc.id

  vswitch_name = "development-subnet-1"

  description = "development-subnet-1"

  tags = {
    type       = "development"
    managed-by = "Terraform"
  }
}
resource "alicloud_vswitch" "vswitch-2" {
  cidr_block = "192.168.2.0/24"
  zone_id    = "ap-southeast-1b"
  vpc_id     = alicloud_vpc.vpc.id

  vswitch_name = "development-subnet-2"

  description = "development-subnet-2"

  tags = {
    type       = "development"
    managed-by = "Terraform"
  }
}
resource "alicloud_vswitch" "vswitch-3" {
  cidr_block = "192.168.3.0/24"
  zone_id    = "ap-southeast-1c"
  vpc_id     = alicloud_vpc.vpc.id

  vswitch_name = "development-subnet-3"

  description = "development-subnet-3"

  tags = {
    type       = "development"
    managed-by = "Terraform"
  }
}

Terraforming Alibaba Cloud - Resource Management

Ankit Mehta — Sun, 18 Apr 2021 08:18:07 +0000

Cloud services categorization and management can be challenging if resources are not tagged and group properly. This is the first post in the Alibaba Cloud Weekly series.

In this blog post, the Alibaba Cloud Resource Management service is explained with Terraformation and provision.

When starting with Alibaba Cloud, a default Resource Management group is created. However, keeping all the resources in the default group can be messy. One can create a Resource Management group separated by Department, Functional Group, or Environment.

Following Terraform code can help in creating a new Resource Management group called "dev". For future posts, the same group will be used.

For the current solution following two files are created. (upcoming blog posts will use modules)

.
├── terraform.tf
└── terraform.tfvars

terraform.tf :

variable "access_key" {}
variable "secret_key" {}
variable "region" {}

terraform {
  required_providers {
    alicloud = {
      source  = "aliyun/alicloud"
      version = "1.121.1"
    }
  }
}

provider "alicloud" {
  access_key = var.access_key
  secret_key = var.secret_key
  region     = var.region
}

resource "alicloud_resource_manager_resource_group" "development-rg" {
  resource_group_name = "aliyun-development-rg"
  display_name        = "aliyun-development-rg"
}

terraform.tfvars : ( To generate access and secret keys
For Regions )

access_key            = "SOMEACCESSKEY"
secret_key            = "SOMESECRETKEY"
region                = "SOMEREGION"

On successful, a new resource management group should be visible as follows.

As stated earlier, the Resource Management Group is a one-stop location to find all the resources created for a particular group.

While using Terraform for the next post, the resource group will be specified. Any resources created without resource group directive are created under the "Default" resource group.

Note that there a soft limit on the Resource Management Group. Any account can have a maximum of 30 Groups, and this limit can be extended by opening a service limit increase ticket.

Permissions can be set for each resource group to provide more granular access.

Terraform Provider Reference: https://registry.terraform.io/providers/aliyun/alicloud/latest/docs

Do let us know your feedback in the comment box below. Also do let us know if you want us to explore any other Alibaba Cloud services.

Next week we will add a VPC and VSwitch creation under the newly created Resource Management group.

If you are new to Terraform and want us to create a post for it then do let us know in the comment section below.

DEV Community: Ankit Mehta

Terraforming Alibaba Cloud - VPC and vSwitch

Terraforming Alibaba Cloud - Resource Management