main.tf

module "local_execution" {
  source  = "../generic_modules/local_exec"
  enabled = var.pre_deployment
}

# This locals entry is used to store the IP addresses of all the machines.
# Autogenerated addresses example based in 10.0.0.0/24
# Iscsi server: 10.0.0.4
# Monitoring: 10.0.0.5
# Hana ips: 10.0.0.10, 10.0.0.11
# Hana cluster vip: 10.0.0.12
# Hana cluster vip secondary: 10.0.0.13
# DRBD ips: 10.0.0.20, 10.0.0.21
# DRBD cluster vip: 10.0.0.22
# Netweaver ips: 10.0.0.30, 10.0.0.31, 10.0.0.32, 10.0.0.33
# Netweaver virtual ips: 10.0.0.34, 10.0.0.35, 10.0.0.36, 10.0.0.37
# If the addresses are provided by the user they will always have preference
locals {
  bastion_srv_ip    = var.bastion_srv_ip != "" ? var.bastion_srv_ip : cidrhost(local.subnet_address_range, 3)
  iscsi_srv_ip      = var.iscsi_srv_ip != "" ? var.iscsi_srv_ip : cidrhost(local.subnet_address_range, 4)
  monitoring_srv_ip = var.monitoring_srv_ip != "" ? var.monitoring_srv_ip : cidrhost(local.subnet_address_range, 5)

  hana_ip_start              = 10
  hana_ips                   = length(var.hana_ips) != 0 ? var.hana_ips : [for ip_index in range(local.hana_ip_start, local.hana_ip_start + var.hana_count) : cidrhost(local.subnet_address_range, ip_index)]
  hana_cluster_vip           = var.hana_cluster_vip != "" ? var.hana_cluster_vip : cidrhost(cidrsubnet(local.subnet_address_range, -8, 0), 256 + local.hana_ip_start + var.hana_count)
  hana_cluster_vip_secondary = var.hana_cluster_vip_secondary != "" ? var.hana_cluster_vip_secondary : cidrhost(cidrsubnet(local.subnet_address_range, -8, 0), 256 + local.hana_ip_start + var.hana_count + 1)

  # 2 is hardcoded for drbd because we always deploy 4 machines
  drbd_ip_start    = 20
  drbd_ips         = length(var.drbd_ips) != 0 ? var.drbd_ips : [for ip_index in range(local.drbd_ip_start, local.drbd_ip_start + 2) : cidrhost(local.subnet_address_range, ip_index)]
  drbd_cluster_vip = var.drbd_cluster_vip != "" ? var.drbd_cluster_vip : cidrhost(cidrsubnet(local.subnet_address_range, -8, 0), 256 + local.drbd_ip_start + 2)

  netweaver_xscs_server_count = var.netweaver_enabled ? (var.netweaver_ha_enabled ? 2 : 1) : 0
  netweaver_count             = var.netweaver_enabled ? local.netweaver_xscs_server_count + var.netweaver_app_server_count : 0
  netweaver_virtual_ips_count = var.netweaver_ha_enabled ? max(local.netweaver_count, 3) : max(local.netweaver_count, 2) # We need at least 2 virtual ips, if ASCS and PAS are in the same machine

  netweaver_ip_start    = 30
  netweaver_ips         = length(var.netweaver_ips) != 0 ? var.netweaver_ips : [for ip_index in range(local.netweaver_ip_start, local.netweaver_ip_start + local.netweaver_count) : cidrhost(local.subnet_address_range, ip_index)]
  netweaver_virtual_ips = length(var.netweaver_virtual_ips) != 0 ? var.netweaver_virtual_ips : [for ip_index in range(local.netweaver_ip_start, local.netweaver_ip_start + local.netweaver_virtual_ips_count) : cidrhost(cidrsubnet(local.subnet_address_range, -8, 0), 256 + ip_index + 4)]

  # Check if iscsi server has to be created
  use_sbd       = var.hana_cluster_fencing_mechanism == "sbd" || var.drbd_cluster_fencing_mechanism == "sbd" || var.netweaver_cluster_fencing_mechanism == "sbd"
  iscsi_enabled = var.sbd_storage_type == "iscsi" && ((var.hana_count > 1 && var.hana_ha_enabled) || var.drbd_enabled || (local.netweaver_count > 1 && var.netweaver_ha_enabled)) && local.use_sbd ? true : false

  # Obtain machines os_image value
  bastion_os_image    = var.bastion_os_image != "" ? var.bastion_os_image : var.os_image
  hana_os_image       = var.hana_os_image != "" ? var.hana_os_image : var.os_image
  iscsi_os_image      = var.iscsi_os_image != "" ? var.iscsi_os_image : var.os_image
  monitoring_os_image = var.monitoring_os_image != "" ? var.monitoring_os_image : var.os_image
  drbd_os_image       = var.drbd_os_image != "" ? var.drbd_os_image : var.os_image
  netweaver_os_image  = var.netweaver_os_image != "" ? var.netweaver_os_image : var.os_image

  # Netweaver password checking
  # If Netweaver is not enabled, a dummy password is passed to pass the variable validation and not require
  # a password in this case
  # Otherwise, the validation will fail unless a correct password is provided
  netweaver_master_password = var.netweaver_enabled ? var.netweaver_master_password : "DummyPassword1234"
}

resource "openstack_compute_keypair_v2" "key_terraform" {
  name       = "terraform"
  public_key = file(var.public_key)
}

data "template_file" "userdata" {
  template = <<CLOUDCONFIG
#cloud-config

cloud_config_modules:
  - resolv_conf

manage_resolv_conf: true

resolv_conf:
  nameservers: ['8.8.4.4', '8.8.8.8']

users:
  - name: sles
    sudo: [ "ALL=(ALL) NOPASSWD:ALL" ]
    shell: /bin/bash
    # you could set a password here, default is just key login
    # lock_passwd: false
    # plain_text_passwd: 'SecurePassword'
    ssh-authorized-keys:
    - ${file(var.public_key)}

runcmd:
- |
  # add any command here
  # echo "any command"

CLOUDCONFIG
}

module "common_variables" {
  source                              = "../generic_modules/common_variables"
  provider_type                       = "openstack"
  deployment_name                     = local.deployment_name
  reg_code                            = var.reg_code
  reg_email                           = var.reg_email
  reg_additional_modules              = var.reg_additional_modules
  ha_sap_deployment_repo              = var.ha_sap_deployment_repo
  additional_packages                 = var.additional_packages
  public_key                          = var.public_key
  private_key                         = var.private_key
  authorized_keys                     = var.authorized_keys
  authorized_user                     = "sles"
  bastion_enabled                     = var.bastion_enabled
  bastion_public_key                  = var.bastion_public_key
  bastion_private_key                 = var.bastion_private_key
  provisioner                         = var.provisioner
  provisioning_log_level              = var.provisioning_log_level
  provisioning_output_colored         = var.provisioning_output_colored
  background                          = var.background
  monitoring_enabled                  = var.monitoring_enabled
  monitoring_srv_ip                   = var.monitoring_enabled ? local.monitoring_srv_ip : ""
  qa_mode                             = var.qa_mode
  hana_hwcct                          = var.hwcct
  hana_sid                            = var.hana_sid
  hana_instance_number                = var.hana_instance_number
  hana_cost_optimized_sid             = var.hana_cost_optimized_sid
  hana_cost_optimized_instance_number = var.hana_cost_optimized_instance_number
  hana_master_password                = var.hana_master_password
  hana_cost_optimized_master_password = var.hana_cost_optimized_master_password == "" ? var.hana_master_password : var.hana_cost_optimized_master_password
  hana_primary_site                   = var.hana_primary_site
  hana_secondary_site                 = var.hana_secondary_site
  hana_inst_master                    = var.hana_inst_master
  hana_inst_folder                    = var.hana_inst_folder
  hana_fstype                         = var.hana_fstype
  hana_platform_folder                = var.hana_platform_folder
  hana_sapcar_exe                     = var.hana_sapcar_exe
  hana_archive_file                   = var.hana_archive_file
  hana_extract_dir                    = var.hana_extract_dir
  hana_client_folder                  = var.hana_client_folder
  hana_client_archive_file            = var.hana_client_archive_file
  hana_client_extract_dir             = var.hana_client_extract_dir
  hana_scenario_type                  = var.scenario_type
  hana_cluster_vip_mechanism          = ""
  hana_cluster_vip                    = local.hana_cluster_vip
  hana_cluster_vip_secondary          = var.hana_active_active ? local.hana_cluster_vip_secondary : ""
  hana_ha_enabled                     = var.hana_ha_enabled
  hana_ignore_min_mem_check           = var.hana_ignore_min_mem_check
  hana_cluster_fencing_mechanism      = var.hana_cluster_fencing_mechanism
  hana_sbd_storage_type               = var.sbd_storage_type
  netweaver_sid                       = var.netweaver_sid
  netweaver_ascs_instance_number      = var.netweaver_ascs_instance_number
  netweaver_ers_instance_number       = var.netweaver_ers_instance_number
  netweaver_pas_instance_number       = var.netweaver_pas_instance_number
  netweaver_master_password           = local.netweaver_master_password
  netweaver_product_id                = var.netweaver_product_id
  netweaver_inst_folder               = var.netweaver_inst_folder
  netweaver_extract_dir               = var.netweaver_extract_dir
  netweaver_swpm_folder               = var.netweaver_swpm_folder
  netweaver_sapcar_exe                = var.netweaver_sapcar_exe
  netweaver_swpm_sar                  = var.netweaver_swpm_sar
  netweaver_sapexe_folder             = var.netweaver_sapexe_folder
  netweaver_additional_dvds           = var.netweaver_additional_dvds
  netweaver_nfs_share                 = var.drbd_enabled ? "${local.drbd_cluster_vip}:${var.drbd_nfs_mounting_point}/${var.netweaver_sid}" : var.netweaver_nfs_share
  netweaver_sapmnt_path               = var.netweaver_sapmnt_path
  netweaver_hana_ip                   = var.hana_ha_enabled ? local.hana_cluster_vip : element(local.hana_ips, 0)
  netweaver_hana_sid                  = var.hana_sid
  netweaver_hana_instance_number      = var.hana_instance_number
  netweaver_hana_master_password      = var.hana_master_password
  netweaver_ha_enabled                = var.netweaver_ha_enabled
  netweaver_cluster_fencing_mechanism = var.netweaver_cluster_fencing_mechanism
  netweaver_sbd_storage_type          = var.sbd_storage_type
}

module "drbd_node" {
  source              = "./modules/drbd_node"
  common_variables    = module.common_variables.configuration
  region              = var.region
  region_net          = var.region_net
  bastion_host        = module.bastion.public_ip
  drbd_count          = var.drbd_enabled == true ? 2 : 0
  flavor              = var.drbd_flavor
  userdata            = data.template_file.userdata.rendered
  network_name        = local.network_name
  network_id          = local.network_id
  network_subnet_name = local.subnet_name
  network_subnet_id   = local.subnet_id
  firewall_internal   = openstack_networking_secgroup_v2.ha_firewall_internal.id
  os_image            = local.drbd_os_image
  host_ips            = local.drbd_ips
  fencing_mechanism   = var.drbd_cluster_fencing_mechanism
  sbd_storage_type    = var.sbd_storage_type
  iscsi_srv_ip        = module.iscsi_server.iscsisrv_ip
  drbd_data_disk_type = var.drbd_data_disk_type
  drbd_data_disk_size = var.drbd_data_disk_size
  drbd_cluster_vip    = local.drbd_cluster_vip
  cluster_ssh_pub     = var.cluster_ssh_pub
  cluster_ssh_key     = var.cluster_ssh_key
  nfs_mounting_point  = var.drbd_nfs_mounting_point
  nfs_export_name     = var.netweaver_sid
  on_destroy_dependencies = [
    openstack_networking_secgroup_v2.ha_firewall_internal
  ]
}
#
module "netweaver_node" {
  source                    = "./modules/netweaver_node"
  common_variables          = module.common_variables.configuration
  region                    = var.region
  region_net                = var.region_net
  bastion_host              = module.bastion.public_ip
  xscs_server_count         = local.netweaver_xscs_server_count
  app_server_count          = var.netweaver_enabled ? var.netweaver_app_server_count : 0
  flavor                    = var.netweaver_flavor
  userdata                  = data.template_file.userdata.rendered
  network_name              = local.network_name
  network_id                = local.network_id
  network_subnet_name       = local.subnet_name
  network_subnet_id         = local.subnet_id
  firewall_internal         = openstack_networking_secgroup_v2.ha_firewall_internal.id
  os_image                  = local.netweaver_os_image
  network_domain            = "tf.local"
  iscsi_srv_ip              = module.iscsi_server.iscsisrv_ip
  fencing_mechanism         = var.hana_cluster_fencing_mechanism
  sbd_storage_type          = var.sbd_storage_type
  cluster_ssh_pub           = var.cluster_ssh_pub
  cluster_ssh_key           = var.cluster_ssh_key
  netweaver_software_bucket = var.netweaver_software_bucket
  host_ips                  = local.netweaver_ips
  virtual_host_ips          = local.netweaver_virtual_ips
  netweaver_inst_media      = var.netweaver_inst_media
  on_destroy_dependencies = [
    openstack_networking_secgroup_v2.ha_firewall_internal
  ]
}

module "hana_node" {
  source                     = "./modules/hana_node"
  common_variables           = module.common_variables.configuration
  region                     = var.region
  region_net                 = var.region_net
  bastion_host               = module.bastion.public_ip
  hana_count                 = var.hana_count
  flavor                     = var.hana_flavor
  userdata                   = data.template_file.userdata.rendered
  network_name               = local.network_name
  network_id                 = local.network_id
  network_subnet_name        = local.subnet_name
  network_subnet_id          = local.subnet_id
  firewall_internal          = openstack_networking_secgroup_v2.ha_firewall_internal.id
  os_image                   = local.hana_os_image
  host_ips                   = local.hana_ips
  fencing_mechanism          = var.hana_cluster_fencing_mechanism
  sbd_storage_type           = var.sbd_storage_type
  hana_cluster_vip           = local.hana_cluster_vip
  hana_cluster_vip_secondary = local.hana_cluster_vip_secondary
  iscsi_srv_ip               = module.iscsi_server.iscsisrv_ip
  hana_data_disk_type        = var.hana_data_disk_type
  hana_data_disk_size        = var.hana_data_disk_size
  hana_backup_disk_type      = var.hana_backup_disk_type
  hana_backup_disk_size      = var.hana_backup_disk_size
  cluster_ssh_pub            = var.cluster_ssh_pub
  cluster_ssh_key            = var.cluster_ssh_key
  on_destroy_dependencies = [
    openstack_networking_secgroup_v2.ha_firewall_internal
  ]
}

module "monitoring" {
  source              = "./modules/monitoring"
  common_variables    = module.common_variables.configuration
  region              = var.region
  region_net          = var.region_net
  bastion_host        = module.bastion.public_ip
  flavor              = var.monitoring_flavor
  userdata            = data.template_file.userdata.rendered
  network_name        = local.network_name
  network_id          = local.network_id
  network_subnet_name = local.subnet_name
  network_subnet_id   = local.subnet_id
  firewall_internal   = openstack_networking_secgroup_v2.ha_firewall_internal.id
  os_image            = local.netweaver_os_image
  host_ips            = [local.monitoring_srv_ip]
  monitoring_srv_ip   = local.monitoring_srv_ip
  hana_targets        = concat(local.hana_ips, var.hana_ha_enabled ? [local.hana_cluster_vip] : [local.hana_ips[0]]) # we use the vip for HA scenario and 1st hana machine for non HA to target the active hana instance
  drbd_targets        = var.drbd_enabled ? local.drbd_ips : []
  netweaver_targets   = var.netweaver_enabled ? local.netweaver_virtual_ips : []
  on_destroy_dependencies = [
    openstack_networking_secgroup_v2.ha_firewall_internal
  ]
}

module "iscsi_server" {
  source              = "./modules/iscsi_server"
  common_variables    = module.common_variables.configuration
  region              = var.region
  region_net          = var.region_net
  bastion_host        = module.bastion.public_ip
  iscsi_count         = local.iscsi_enabled == true ? 1 : 0
  flavor              = var.iscsi_flavor
  userdata            = data.template_file.userdata.rendered
  network_name        = local.network_name
  network_id          = local.network_id
  network_subnet_name = local.subnet_name
  network_subnet_id   = local.subnet_id
  firewall_internal   = openstack_networking_secgroup_v2.ha_firewall_internal.id
  os_image            = local.iscsi_os_image
  iscsi_srv_ip        = var.iscsi_srv_ip
  host_ips            = [local.iscsi_srv_ip]
  lun_count           = var.iscsi_lun_count
  iscsi_disk_size     = var.iscsi_disk_size
  on_destroy_dependencies = [
    openstack_networking_secgroup_v2.ha_firewall_internal
  ]
}