Стандартизация операций инфраструктуры для контейнеров и виртуальных машин

# main.tf
module "microservice" {
  source  = "./modules/unified-deployment"
  version = "1.0.0"

  service_name      = "user-profile"
  container_image   = "registry.example.com/user-profile:v1.2.3"
  vm_image_id       = "ami-0abcdef1234567890"
  vm_instance_type  = "t3.medium"

  # Shared configuration
  environment = "production"
  team_id     = "platform"
}

# modules/unified-deployment/main.tf
variable "service_name" {}
variable "container_image" {}
variable "vm_image_id" {}
variable "vm_instance_type" {}
variable "environment" {}
variable "team_id" {}

# Kubernetes namespace and deployment
resource "kubernetes_namespace" "this" {
  metadata {
    name = "${var.service_name}-${var.environment}"
    labels = {
      team        = var.team_id
      environment = var.environment
    }
  }
}

resource "kubernetes_deployment" "this" {
  metadata {
    name      = var.service_name
    namespace = kubernetes_namespace.this.metadata[0].name
    labels = {
      app = var.service_name
      env = var.environment
    }
  }
  spec {
    replicas = 3
    selector {
      match_labels = {
        app = var.service_name
      }
    }
    template {
      metadata {
        labels = {
          app = var.service_name
          env = var.environment
        }
      }
      spec {
        container {
          image = var.container_image
          name  = var.service_name
          port {
            container_port = 8080
          }
          resources {
            limits = {
              cpu    = "500m"
              memory = "512Mi"
            }
            requests = {
              cpu    = "250m"
              memory = "256Mi"
            }
          }
        }
      }
    }
  }
}

# VM provisioning (AWS example)
resource "aws_instance" "db_vm" {
  ami           = var.vm_image_id
  instance_type = var.vm_instance_type
  tags = {
    Name        = "${var.service_name}-db-${var.environment}"
    Environment = var.environment
    Team        = var.team_id
    Service     = var.service_name
  }
}

# Security group: DB port from Kubernetes nodes (replace with your data source)
resource "aws_security_group" "db_access" {
  name        = "${var.service_name}-db-sg"
  description = "Allow database access from microservice pods"

  ingress {
    from_port   = 5432
    to_port     = 5432
    protocol    = "tcp"
    security_groups = [data.aws_security_group.kubenodes.id]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
}