Update main.yml

.github/workflows/IaC-terraform.yml

@@ -0,0 +1,48 @@
+name: Deploy EC2 instance to AWS
+
+on:
+  workflow_dispatch:
+
+env:
+  AWS_REGION: us-west-1
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+
+      - name: Set up Terraform
+        uses: hashicorp/setup-terraform@v1
+        with:
+          terraform_version: 1.0.0
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1
+        with:
+          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws-region: ${{ env.AWS_REGION }}
+
+      - name: Initialize Terraform
+        working-directory:  IaC
+        run: terraform init -backend-config="bucket=appsilon-task" -backend-config="key=appsilon-terraform.tfstate" -backend-config="region=${{ env.AWS_REGION }}"
+
+      - name: Terraform Validation
+        working-directory: IaC
+        run: terraform validate
+
+      - name: Terraform Apply
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+        working-directory: IaC
+        run: terraform apply -auto-approve -input=false
+
+      - name: Save Terraform state file to S3
+        working-directory: IaC
+        run: |
+          aws s3 cp .terraform/terraform.tfstate s3://appsilon-task/appsilon-terraform.tfstate
+

.github/workflows/main.yml

@@ -0,0 +1,32 @@
+name: Build and Push
+
+on:
+  push:
+    branches:
+      - main
+  schedule:
+    - cron: "0 19 * * 6"  # Every Saturday at 7 PM
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v1
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v1
+
+      - name: Build and push image
+        uses: docker/build-push-action@v2
+        with:
+          context: .
+          push: true
+          tags: ayanfe5/hello-world:latest

Ansible/README.md

@@ -0,0 +1,20 @@
+## Creating New User and Installations using Ansible
+
+After spinning up the server, these commands were ran on it to updates and also installed ansible:
+
+```bash 
+sudo apt update      
+sudo apt install ansible -y
+```
+All the IP addresses of the target PC I configured was added to the inventory.txt file, whilst the public key of the host server where ansible is installed on was added to the authorized key file of the target server, so as to enable ease of logging in without password. The commands below were the steps I took to run the playbook.yml
+
+```bash 
+mkdir Appsilonansible
+cd Appsilonansible
+sudo nano inventory.txt
+sudo nano ansible.cfg
+sudo nano vars.yml
+sudo nano playbook.yml
+ansible-playbook -i inventory.txt playbook.yml
+```
+After, running all these commands, the task was successful, I navigated into the target system to confirm all the changes were made.

Ansible/ansible.cfg

@@ -0,0 +1,2 @@
+[defaults]
+inventory = inventory.txt

Ansible/inventory.txt

@@ -0,0 +1,2 @@
+[target]
+target_instance ansible_host=13.52.216.75

Ansible/playbook.yml

@@ -0,0 +1,69 @@
+ ---
+  - name: Configure new users and install packages
+    hosts: all
+    become: true
+
+    tasks:
+      - name: Create the script locally
+        copy:
+          content: |
+            #!/bin/bash
+            mount
+          dest: nice-script.sh
+          mode: 0755
+        delegate_to: localhost
+
+      - name: Create the directory on the remote machine
+        file:
+          path: "/better-place/{{ item }}"
+          state: directory
+          mode: '0755'
+          recurse: yes
+        loop: "{{ ansible_users }}"
+        vars:
+          ansible_users:
+            - john
+
+      - name: Create the user
+        user:
+          name: "{{ item }}"
+          uid: 1234
+          createhome: yes
+          home: "/better-place/{{ item }}"
+        loop: "{{ ansible_users }}"
+        vars:
+          ansible_users:
+            - john
+
+      - name: Grant sudo access without password
+        lineinfile:
+          dest: /etc/sudoers
+          line: "{{ item }} ALL=(ALL) NOPASSWD: /usr/bin/whoami"
+          validate: 'visudo -cf %s'
+        loop: "{{ ansible_users }}"
+        vars:
+          ansible_users:
+            - john
+
+      - name: Install packages
+        apt:
+          name: "{{ item }}"
+          state: present
+        loop:
+          - tmux
+          - vim
+
+      - name: Fetch latest Terraform version
+        uri:
+          url: "https://releases.hashicorp.com/terraform/"
+          return_content: yes
+        register: terraform_versions
+
+      - name: Parse latest Terraform version
+        set_fact:
+          latest_terraform_version: "{{ terraform_versions.content | regex_findall('terraform/([\\d.]+)/') | last }}"
+
+      - name: Download and install Terraform CLI
+        get_url:
+          url: "https://releases.hashicorp.com/terraform/{{ latest_terraform_version }}/terraform_{{ latest_terraform_version }}_linux_amd64.zip"
+          dest: /tmp/terraform.zip

Ansible/vars.yml

@@ -0,0 +1,3 @@
+---
+ansible_users:
+  - john

Dockerfile

@@ -0,0 +1,20 @@
+# Use an official Python runtime as the base image
+FROM python:3.8-alpine
+
+# Set the working directory in the container
+WORKDIR /app
+
+# Copy the current directory contents into the container at /app
+COPY hello/app.py /app
+
+# Copy the requirements.txt file from the hello folder into the container at /app
+COPY hello/requirements.txt /app/requirements.txt
+
+# Install the dependencies
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Expose the port on which the Flask app will run
+EXPOSE 5000
+
+# Define the command to run your application
+CMD ["python", "app.py"]

IaC/README.md

@@ -0,0 +1,26 @@
+# Creating an EC2 Instance on AWS using Terraform (IaC)
+
+IaC was used in spinning up my EC2 instance on AWS and the tool used was terraform.
+
+I created a providers.tf, variables.tf and main.tf files to contain all the necessary dependencies required for each IaC job to run seamlessly.
+Every of the content in the file was tailored to reference AWS since that is the provider I am using with terraform.
+These commands were ran to initialize and also test the terraform script on my local machine.
+
+```bash 
+Terraform init
+Terraform validate
+Terraform plan
+Terraform apply
+```
+Also in the IaC-terraform.yml workflow, I specified that terraform should save the statefile to my S3 bucket already created with the public access and bucket policy updated and I also added the IAM user credential (Access key and Secret key) to secrets options in github secret for ease of accessing AWS platform.
+
+## Specifications used in the terraform files
+
+```bash 
+AMI:Canonical, Ubuntu, 22.04 LTS, amd64 jammy image build on 2023-05-16
+AMI ID:ami-0f8e81a3da6e2510a
+Instance type: t2.micro
+Size: 1vCPU, 1Gb RAM
+region: us-west-1
+S3 Bucket: appsilon-task
+```

IaC/main.tf

@@ -0,0 +1,11 @@
+resource "aws_instance" "appsilon-task" {
+  ami           = "ami-0f8e81a3da6e2510a"  # Ubuntu 22.04 LTS
+  instance_type = "t2.micro"
+
+  tags = {
+    Name = "Ubuntu EC2 Instance"
+  }
+  key_name               = "appsilon-key"
+  vpc_security_group_ids = ["sg-068f9f3a590c31fae"]
+
+  }

IaC/providers.tf

@@ -0,0 +1,23 @@
+# Configure the AWS provider and version
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3"
+    }
+  }
+
+  backend "s3" {
+    bucket         = "appsilon-task"
+    key            = "appsilon-terraform.tfstate"
+    region         = "us-west-1"
+  }
+
+  #required_version = ">= 1.1.0"
+}
+
+provider "aws" {
+  access_key = var.aws_access_key
+  secret_key = var.aws_secret_access_key
+  region     = "us-west-1"
+}

IaC/terraform.tfvars

@@ -0,0 +1,6 @@
+aws_access_key = "AKIAZGJDMTD7E3QJJB4N"
+aws_secret_access_key = "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"
+
+
+
+

IaC/variables.tf

@@ -0,0 +1,9 @@
+variable "aws_access_key" {
+  description = "AWS access key"
+  type        = string
+}
+
+variable "aws_secret_access_key" {
+  description = "AWS secret access key"
+  type        = string
+}