Skip to content

README.md

Latest commit

 

History

History
181 lines (110 loc) · 7.81 KB

README.md

File metadata and controls

181 lines (110 loc) · 7.81 KB

Terraform Provider Infoblox.

Website: https://infoblox.com

The Terraform provider for Infoblox POC/Lab is a Terraform plugin to enable full lifecycle management of CSPs resources. The provider is maintained internally by Infoblox TME team.

Infoblox Lab Example

The goal is to illustrate the various capabilities of Infoblox functionalities.

The Demo infrastructure used is a basic deployment that creates and manages resources in either AWS, Azure of GCP. The examples utilize standard modules from the Terraform registry to set up networking, create virtual machines, and other resources. Each example also includes a custom modular design that utilizes variables and modules to make the code reusable and scalable.

The module structure is also aplicable for Infoblox resources as well which will be treated as module. The table below is per Region setup.

AWS Azure
3x VPC 2x Vnet
3x Internet Gateway 2x RG
3x Subnet 2x Subnet
3x Virtual Machine 2x Virtual Machine
1x TGW ( optional ) 1x vWAN( optional )
3x SSH Key-Pair 2x SSH Key-Pair
1x Private Hosted zone and associaton with VPCs 1x Private Hosted zone and associaton with Vnets
3x DNS A record for each EC2 App 2x DNS A record for each App
1x S3 bucket with image uploaded + Bucket Policy
1x DNS CNAME record for S3 bucket access via custom domain

⚠️ IMPORTANT NOTE ⚠️

🚀 This setup is fully customizable!
You can adjust:

  • The number of VPCs per region
  • The number of subnets per VPC
  • Any other configuration to fit the Infoblox POC architecture

💡 Use the internet switch to toggle between private and public infrastructure deployment.

🔐 Secure Authentication with AWS SSO

✅ This Terraform setup uses AWS SSO (Single Sign-On) for temporary credentials, ensuring:

  • No long-lived AWS access keys are stored in environment variables.
  • No credentials are hardcoded in Terraform code.
  • Access is dynamically managed via AWS SSO login sessions.

🔹 Before running Terraform, make sure you are authenticated via AWS SSO:

aws sso login --profile your-sso-profile

⏳ Automatic AWS SSO Session Refresh

To prevent session timeouts, an automated refresh script ensures your AWS SSO session remains active.

📜 Script: terraform-sso.sh

🚀 Running Terraform with Automatic SSO Refresh

Instead of manually logging in every time, run Terraform using:

./terraform-sso.sh plan
./terraform-sso.sh apply

⏰ Automating SSO Session Refresh with a Cron Job

To automatically refresh AWS SSO credentials, a cron job runs the script periodically.

🔹 Schedule it every hour

Edit your crontab:

crontab -e

Add this line:

0 * * * * /path/to/terraform-sso.sh > /dev/null 2>&1

Every module has a possibility to spin up TGW as an option. SSH Key-pair is also created with an option to download public key to the local system.

The script lets you generate SSH private key on the fly using tls_private_key resource. I see people using tls_private_key who don’t want to keep the manual activity of creating the key outside terraform - This is suitable for LAB demo. But this comes at a cost.

NOTE: The private key generated by tls_private_key is stored unencrypted in your terraform state file which is unsafe.Never use this in the production.

⚡ Terraform Aliases for Faster Execution

To simplify running Terraform with AWS SSO, you can create short command aliases.

🔹 Add these aliases to your shell profile

Run the following to make these aliases permanent:

For Bash (.bashrc or .bash_profile):

echo 'alias tfplan="./terraform-sso.sh plan"' >> ~/.bashrc
echo 'alias tfapply="./terraform-sso.sh apply"' >> ~/.bashrc
echo 'alias tfdestroy="./terraform-sso.sh destroy"' >> ~/.bashrc
echo 'alias tfinit="./terraform-sso.sh init"' >> ~/.bashrc
echo 'alias tfvalidate="./terraform-sso.sh validate"' >> ~/.bashrc
echo 'alias tfoutput="./terraform-sso.sh output"' >> ~/.bashrc
source ~/.bashrc

For Zsh (.zshrc, default shell on macOS):

echo 'alias tfplan="./terraform-sso.sh plan"' >> ~/.zshrc
echo 'alias tfapply="./terraform-sso.sh apply"' >> ~/.zshrc
echo 'alias tfdestroy="./terraform-sso.sh destroy"' >> ~/.zshrc
echo 'alias tfinit="./terraform-sso.sh init"' >> ~/.zshrc
echo 'alias tfvalidate="./terraform-sso.sh validate"' >> ~/.zshrc
echo 'alias tfoutput="./terraform-sso.sh output"' >> ~/.zshrc
source ~/.zshrc

🚀 How to Use the Aliases

Now, instead of typing long commands, use:

tfplan     # Equivalent to ./terraform-sso.sh plan
tfapply    # Equivalent to ./terraform-sso.sh apply
tfdestroy  # Equivalent to ./terraform-sso.sh destroy
tfinit     # Equivalent to ./terraform-sso.sh init
tfvalidate # Equivalent to ./terraform-sso.sh validate
tfoutput   # Equivalent to ./terraform-sso.sh output

📊 Infoblox POC Architecture – Terraform Deployment

A detailed architecture diagram illustrating the Infoblox Proof of Concept (POC) deployment, created in Lucidchart.

🔹 View the Diagram in Lucidchart:
Infoblox Diagram

Modular Framework

This Demo example demonstrates a modular structure approach in Terraform, which allows the infrastructure to be easily scaled and managed. By using modules, resource configurations are organized and encapsulated, making it easier to create and manage infrastructure resources that share common functionality and can be replicated as needed.

The use of modules also allows for easier maintenance and updating of the resources over time, and it enables the reuse of resource configurations across different projects.

With this modular approach, the infrastructure resources can be deployed and managed easily, making the code more scalable and maintainable over time.

Outputs

aws_ec2_public_ip_eu

Public IPs of EC2 instances in EU Region

aws_ec2_public_ip_us

Public IPs of EC2 instances in US Region