mvp complete for splunk + app setup

adb-splunk/README.md

@@ -0,0 +1,3 @@
+### Splunk quick demo
+
+http://20.212.33.56:8000

adb-splunk/main.tf

@@ -38,3 +38,10 @@ resource "azurerm_resource_group" "this" {
   location = local.location
   tags     = local.tags
 }
+
+module "adls_content" {
+  source                   = "./modules/adls_content"
+  rg                       = azurerm_resource_group.this.name
+  storage_account_location = var.rglocation
+  local_file_path          = "${path.root}/splunk_setup.sh" // local file to be uploaded to adls
+}

adb-splunk/modules/adls_content/README.md

@@ -0,0 +1,5 @@
+### adls_content module
+
+This module will create a storage account in specified rg, and create a container, and put a designated local file into the container.
+
+Ouput will be URL to that file in the container.

adb-splunk/modules/adls_content/main.tf

@@ -0,0 +1,48 @@
+terraform {
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = ">=3.0.0"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = ">=3.3.2"
+    }
+    local = {
+      source  = "hashicorp/local"
+      version = ">=2.2.3"
+    }
+  }
+}
+
+resource "random_string" "naming" {
+  special = false
+  upper   = false
+  length  = 6
+}
+
+locals {
+  storage_account_name = join("", ["adls", "${random_string.naming.result}"]) // must not have special chars
+}
+
+resource "azurerm_storage_account" "personaldropbox" {
+  name                     = local.storage_account_name
+  resource_group_name      = var.rg
+  location                 = var.storage_account_location
+  account_tier             = "Standard"
+  account_replication_type = "LRS"
+}
+
+resource "azurerm_storage_container" "container1" {
+  name                  = "cnt1"
+  storage_account_name  = azurerm_storage_account.personaldropbox.name
+  container_access_type = "container" // for anonymous read container from public
+}
+
+resource "azurerm_storage_blob" "file1" {
+  name                   = "splunk_setup.sh"
+  storage_account_name   = azurerm_storage_account.personaldropbox.name
+  storage_container_name = azurerm_storage_container.container1.name
+  type                   = "Block"
+  source                 = var.local_file_path
+}

adb-splunk/modules/adls_content/outputs.tf

@@ -0,0 +1,3 @@
+output "file_url" {
+  value = azurerm_storage_blob.file1.url
+}

adb-splunk/modules/adls_content/variables.tf

@@ -0,0 +1,13 @@
+variable "rg" {
+  type = string
+}
+
+variable "local_file_path" {
+  type    = string
+  default = ""
+}
+
+variable "storage_account_location" {
+  type    = string
+  default = "southeastasia"
+}

adb-splunk/outputs.tf

@@ -21,3 +21,7 @@ output "azure_region" {
 output "resource_group" {
   value = azurerm_resource_group.this.name
 }
+
+output "file_url" {
+  value = module.adls_content.file_url
+}

adb-splunk/splunk_setup.sh

@@ -0,0 +1,4 @@
+sudo apt update
+sudo apt install docker.io -y
+sudo apt install docker-compose -y
+sudo docker run -d -p 8000:8000 -e "SPLUNK_START_ARGS=--accept-license" -e "SPLUNK_PASSWORD=password" -e "SPLUNK_APPS_URL=https://jlaw-public-db.s3.ap-southeast-1.amazonaws.com/databricks-add-on-for-splunk_110.tgz" --name splunk splunk/splunk:latest

adb-splunk/splunkvm.tf

@@ -57,8 +57,34 @@ resource "azurerm_linux_virtual_machine" "example" {
     sku       = "20_04-lts-gen2"
     version   = "latest"
   }
+
+  depends_on = [
+    local_file.private_key,
+    module.adls_content
+  ]
 }
 
+resource "azurerm_virtual_machine_extension" "splunksetupagent" {
+  name                 = "hwangagent"
+  virtual_machine_id   = azurerm_linux_virtual_machine.example.id
+  publisher            = "Microsoft.Azure.Extensions"
+  type                 = "CustomScript"
+  type_handler_version = "2.1"
+
+  settings = <<SETTINGS
+  {
+    "fileUris": ["${module.adls_content.file_url}"],
+    "commandToExecute": "sh splunk_setup.sh"
+  }
+  SETTINGS
+
+  depends_on = [
+    azurerm_linux_virtual_machine.example,
+    module.adls_content
+  ]
+}
+
+
 /* 
 resource "null_resource" "test_null" {
   triggers = {

adb-splunk/versions.tf

@@ -2,7 +2,7 @@
 terraform {
   required_providers {
     databricks = {
-      source = "databricks/databricks"
+      source  = "databricks/databricks"
       version = ">=0.5.1"
     }