linux-one-node.yaml

AWSTemplateFormatVersion: '2010-09-09'
Description: Template to Create an EC2 instance in a VPC
   
Parameters:

  ImageIDLinux:
    Type: 'AWS::SSM::Parameter::Value<AWS::EC2::KeyPair::ImageIDLinux>'
    Description: YOUR_IMAGE_ID
    Default: ImageIDLinux
  VpcId:
    Type: String
    Description: VPC id
    Default: vpc-07377e6c
  SubnetId:
    Type: String
    Description: Subnet in which to launch an EC2
    Default: subnet-06377e6d
  AvailabilityZone:
    Type: String
    Description: Availability Zone into which instance will launch
    Default: us-west-2a
  InstanceType:
    Type: String
    Description: Instance type
    Default: i3.4xlarge
  KeyName:
    Type: AWS::EC2::KeyPair::KeyName
    Description: SSH Keypair to login to the instance
    Default: mmalgeri777-keypair-mdb
  MyIp:
    Type: 'AWS::SSM::Parameter::Value<AWS::EC2::KeyPair::MyIp>'
    Description: MY_IP
    Default: MyIp
  DemoIpRange:
    Type: String
    Description: Demo Ip Range
    Default: 172.31.32.0/20
  DemoIp1:
    Type: String
    Description: Demo Ip 1
    Default: 172.31.42.77
  primaryReplicaPassword:
    Type: 'AWS::SSM::Parameter::Value<AWS::EC2::KeyPair::primaryReplicaPassword>'
    Description: YOUR_PASSWORD
    Default: primaryReplicaPassword
  

Resources:
  linux1:
    Type: 'AWS::EC2::Instance'
    Properties: 
      ImageId: !Ref ImageIDLinux
      InstanceType: !Ref InstanceType
      AvailabilityZone: !Ref AvailabilityZone
      KeyName: !Ref KeyName
      NetworkInterfaces:
        - DeviceIndex: 0
          PrivateIpAddress: !Ref DemoIp1
          DeleteOnTermination: true
          SubnetId: !Ref SubnetId
          GroupSet: 
            - !Ref DemoSecurityGroup
            - !Ref DemoHttpSecurityGroup
      Tags:
            - Key: Name
              Value: linux1
      UserData:
        Fn::Base64: !Sub |
            #!/bin/bash
            exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
            echo "Installing mariadb enterprise" 
            yum update -y
            echo "Updated yum" 
            echo "get private ip address" 
            ip=$(hostname -i)
            echo "private address is " 
            echo $ip  
            sudo yum -y install wget
            echo "Installed wget" 

            echo "Installing sshpass" 
            sudo yum -y install sshpass
            echo "Stopping and disabling firewalld" 
            sudo systemctl stop firewalld
            sudo systemctl disable firewalld 
            echo "firewalld stopped and disabled" 

            echo "Download and install kubectl" 
            sudo curl -o kubectl https://s3.us-west-2.amazonaws.com/amazon-eks/1.22.6/2022-03-09/bin/linux/amd64/kubectl
            sudo chmod +x ./kubectl
            sudo mkdir -p $HOME/bin && cp ./kubectl $HOME/bin/kubectl && export PATH=$PATH:$HOME/bin
            sudo echo 'export PATH=$PATH:$HOME/bin' >> ~/.bashrc

            echo "Download and install eksctl" 
            sudo curl --silent --location "https://github.com/weaveworks/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz" | tar xz -C /tmp
            sudo mv /tmp/eksctl /usr/local/bin

            echo "Install http web server" 
            sudo yum install -y httpd # install web server 
            sudo systemctl start httpd
            sudo systemctl enable httpd
            sudo echo "Hello World" > /var/www/html/mainPage.html

            


  DemoSecurityGroup:
    Type: 'AWS::EC2::SecurityGroup'
    Properties:
      VpcId: !Ref VpcId
      GroupDescription: SG to allow SSH access via port 22
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: '22'
          ToPort: '22'
          CidrIp: !Ref MyIp
        - IpProtocol: tcp
          FromPort: '22'
          ToPort: '22'
          CidrIp: !Ref DemoIpRange
        - IpProtocol: tcp
          FromPort: '3306'
          ToPort: '3306'
          CidrIp: !Ref DemoIpRange
      Tags:
        - Key: Name
          Value: SSH-SG

  DemoHttpSecurityGroup:
    Type: 'AWS::EC2::SecurityGroup'
    Properties:
      VpcId: !Ref VpcId
      GroupDescription: SG to allow HTTP access via port 80
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: '80'
          ToPort: '80'
          CidrIp: !Ref MyIp
      Tags:
        - Key: Name
          Value: SSH-HTTPD

Outputs:
  DemoInstanceId:
    Description: Instance Id 
    Value: !Ref linux1