cloud-formation.yml

AWSTemplateFormatVersion: '2010-09-09'
Description: 'Cloudformation script to setup the Habitat Lab environment'
Parameters:
  KeyName:
    Description: Name of an existing EC2 key pair for ssh access
    Type: AWS::EC2::KeyPair::KeyName
    ConstraintDescription: Must be the name of an existing EC2 key pair
Resources:
  VPC:
    Type: AWS::EC2::VPC
    Properties:
      CidrBlock: 172.31.0.0/16
      EnableDnsSupport: true
      EnableDnsHostnames: true
      Tags:
        - Key: Name
          Value: 'hws-vpc'
        - Key: X-Dept
          Value: 'SA'
        - Key: X-Application
          Value: 'Habitat'
        - Key: X-Contact
          Value: "donald.slanec@progress.com"
        - Key: X-Production
          Value: "True"
        - Key: X-Project
          Value: "Hab"
  PrimarySubnet:
    Type: AWS::EC2::Subnet
    Properties:
      AvailabilityZone: us-west-2a
      VpcId: !Ref 'VPC'
      CidrBlock: 172.31.54.0/24
      Tags:
        - Key: Name
          Value: 'hws-subnet'
        - Key: X-Dept
          Value: 'SA'
        - Key: X-Application
          Value: 'Habitat'
        - Key: X-Contact
          Value: "donald.slanec@progress.com"
        - Key: X-Production
          Value: "True"
        - Key: X-Project
          Value: "Hab"
  InternetGateway:
    Type: AWS::EC2::InternetGateway
    Properties:
      Tags:
        - Key: Name
          Value: 'hws-IG'
        - Key: X-Dept
          Value: 'SA'
        - Key: X-Application
          Value: 'Habitat'
        - Key: X-Contact
          Value: "donald.slanec@progress.com"
        - Key: X-Production
          Value: "True"
        - Key: X-Project
          Value: "Hab"
  AttachGateway:
    Type: AWS::EC2::VPCGatewayAttachment
    Properties:
      VpcId: !Ref 'VPC'
      InternetGatewayId: !Ref 'InternetGateway'
  RouteTable:
    Type: AWS::EC2::RouteTable
    Properties:
      VpcId: !Ref 'VPC'
      Tags:
        - Key: Name
          Value: 'hws-RT'
        - Key: X-Dept
          Value: 'SA'
        - Key: X-Application
          Value: 'Habitat'
        - Key: X-Contact
          Value: "donald.slanec@progress.com"
        - Key: X-Production
          Value: "True"
        - Key: X-Project
          Value: "Hab"
  Route:
    Type: AWS::EC2::Route
    DependsOn: AttachGateway
    Properties:
      RouteTableId: !Ref 'RouteTable'
      DestinationCidrBlock: 0.0.0.0/0
      GatewayId: !Ref 'InternetGateway'
  SubnetRouteTableAssociation:
    Type: AWS::EC2::SubnetRouteTableAssociation
    Properties:
      SubnetId: !Ref 'PrimarySubnet'
      RouteTableId: !Ref 'RouteTable'
  NetworkAcl:
    Type: AWS::EC2::NetworkAcl
    Properties:
      VpcId: !Ref 'VPC'
      Tags:
        - Key: Name
          Value: 'hws-acl'
        - Key: X-Dept
          Value: 'SA'
        - Key: X-Application
          Value: 'Habitat'
        - Key: X-Contact
          Value: "donald.slanec@progress.com"
        - Key: X-Production
          Value: "True"
        - Key: X-Project
          Value: "Hab"
  InboundNetworkAclEntry:
    Type: AWS::EC2::NetworkAclEntry
    Properties:
      NetworkAclId: !Ref 'NetworkAcl'
      RuleNumber: 100
      Protocol: -1
      RuleAction: "Allow"
      Egress: false
      CidrBlock: 0.0.0.0/0
  OutboundNetworkAclEntry:
    Type: AWS::EC2::NetworkAclEntry
    Properties:
      NetworkAclId: !Ref 'NetworkAcl'
      RuleNumber: 100
      Protocol: -1
      RuleAction: "Allow"
      Egress: true
      CidrBlock: 0.0.0.0/0
  SubnetNetworkAclAssociation:
    Type: AWS::EC2::SubnetNetworkAclAssociation
    Properties:
      SubnetId: !Ref 'PrimarySubnet'
      NetworkAclId: !Ref 'NetworkAcl'


  LinuxWorkstation:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t3.medium
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-0269fb6a157cc9c9a'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'WorkstationSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.6
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      BlockDeviceMappings:
        - DeviceName: /dev/sda1
          Ebs:
            VolumeSize: 80
      UserData:
        Fn::Base64:
          Fn::Sub:
            - |
                #!/bin/bash -xe
                exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
                hostname "workstation"
                systemctl start vscode
                cat <<EOT>> /home/ubuntu/systeminfo.txt
                System --- Private ip --- Public ip
                Automate/Builder --- 172.31.54.5 --- ${automate}
                2nd Builder --- 172.31.54.7 --- ${secondbuilder}
                Jenkins --- 172.31.54.8 --- ${jenkins}
                Store 1 Device 1 --- 172.31.54.11 --- ${s1d1}
                Store 1 Device 2 --- 172.31.54.12 --- ${s1d2}
                Store 2 Device 1 --- 172.31.54.21 --- ${s2d1}
                Store 3 Device 1 --- 172.31.54.31 --- ${s3d1}
                Store 3 Device 2 ---  172.31.54.32 --- ${s3d2}
                ----- Lab 10 Details -----
                Repo Url: http://${jenkins}:3000//administrator/hab-application.git
                Jenkins Url: http://${jenkins}:8080
                Git Login: user=administrator pass=habworkshop
                Jenkins Login: user=admin pass=habworkshop
                EOT
            - automate: !GetAtt Automate.PublicIp
              secondbuilder: !GetAtt SecondBuilder.PublicIp
              jenkins: !GetAtt Jenkins.PublicIp
              s1d1: !GetAtt Store1Device1.PublicIp
              s1d2: !GetAtt Store1Device2.PublicIp
              s2d1: !GetAtt Store2Device1.PublicIp
              s3d1: !GetAtt Store3Device1.PublicIp
              s3d2: !GetAtt Store3Device2.PublicIp
      Tags:
      - Key: Name
        Value: 'Workshop Workstation'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  Automate:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: m4.xlarge
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-04d7819ea6805fc56'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'AutomateSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.5
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      BlockDeviceMappings:
        - DeviceName: /dev/sda1
          Ebs:
            VolumeSize: 80
      UserData:
        Fn::Base64: |
          #!/bin/bash -xe
          exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
          PUBLIC_IP=$(curl -s http://169.254.169.254/latest/meta-data/public-ipv4)
          rm -rf /home/ubuntu/*.toml
          cat <<EOT>> /home/ubuntu/automatedn.toml
          [global]
          [global.v1]
          EOT
          echo "fqdn=\"$PUBLIC_IP\"" >> /home/ubuntu/automatedn.toml
          chef-automate config patch /home/ubuntu/automatedn.toml
      Tags:
      - Key: Name
        Value: 'Automate'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  SecondBuilder:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t3.medium
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-011ab6605a9935dad'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'AutomateSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.7
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      BlockDeviceMappings:
        - DeviceName: /dev/sda1
          Ebs:
            VolumeSize: 80
      UserData:
        Fn::Base64: |
          #!/bin/bash -xe
          exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
          PUBLIC_IP=$(curl -s http://169.254.169.254/latest/meta-data/public-ipv4)
          rm -rf /home/ubuntu/*.toml
          cat <<EOT>> /home/ubuntu/automatedn.toml
          [global]
          [global.v1]
          EOT
          echo "fqdn=\"$PUBLIC_IP\"" >> /home/ubuntu/automatedn.toml
          chef-automate config patch /home/ubuntu/automatedn.toml
      Tags:
      - Key: Name
        Value: 'Workshop 2nd Builder'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  Jenkins:
    Type: AWS::EC2::Instance
    Properties:
      InstanceType: t3.medium
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-020955bfe230c3c6d'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'JenkinsSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.8
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      BlockDeviceMappings:
        - DeviceName: /dev/sda1
          Ebs:
            VolumeSize: 80
      UserData:
        Fn::Base64: |
          #!/bin/bash -xe
          exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
          systemctl stop gitea
          PUBLIC_IP=$(curl -s http://169.254.169.254/latest/meta-data/public-ipv4)
          sed -i -e "s#ROOT_URL.*#ROOT_URL=http://$PUBLIC_IP:3000#" /etc/gitea/app.ini
          sed -i -e "s#SSH_DOMAIN.*#SSH_DOMAIN=$PUBLIC_IP#" /etc/gitea/app.ini
          sed -i -e "s#DOMAIN.*#DOMAIN=$PUBLIC_IP#" /etc/gitea/app.ini
          systemctl start gitea
      Tags:
      - Key: Name
        Value: 'Workshop Jenkins'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  Store1Device1:
    Type: AWS::EC2::Instance
    DependsOn: Automate
    Properties:
      InstanceType: t3.micro
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-03e1bc7a33d356537'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'HabSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.11
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      UserData:
        Fn::Base64:
          Fn::Sub:
            - |
                #!/bin/bash -xe
                exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
                hostname "device1"
                groupadd hab
                useradd -g hab hab
                cat <<EOT>> /etc/systemd/system/hab.service
                [Unit]
                Description=The Chef Habitat Supervisor
                [Service]
                ExecStart=/bin/hab sup run --listen-ctl=0.0.0.0:9632 --event-stream-application="POS" --event-stream-environment="production" --event-stream-site="Store 1" --event-stream-url="${automate}:4222" --event-stream-token="E2bCL2WgfBqyo_lw8M-2OWm8WT0=" --permanent-peer --peer=172.31.54.11 --peer=172.31.54.12 --peer=172.31.54.21 --peer=172.31.54.31 --peer=172.31.54.32
                [Install]
                WantedBy=default.target
                EOT
                cat <<EOT>> /hab/cache/ssl/ip-172-31-54-7.cert
                -----BEGIN CERTIFICATE-----
                MIIEBTCCAu2gAwIBAgIQF5XKPpqGN0QxgRzHGRlOzzANBgkqhkiG9w0BAQsFADBx
                MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UECxMN
                Q2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2VzdC0y
                LmNvbXB1dGUuaW50ZXJuYWwwHhcNMjIxMDI2MTU0NzQ3WhcNMzIxMDIzMTU0NzQ3
                WjBxMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UE
                CxMNQ2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2Vz
                dC0yLmNvbXB1dGUuaW50ZXJuYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
                AoIBAQCh198QXfDw3gPjW2QHthYv+COvCBJMeEqC+Y/lqatSFcD8L7nZKRvXvAB2
                1voVw+dkfi1uBFymZbVrOZguFkpcKjwn08zT1Er5sVuQ5i4ANFMP7wMPgFSK4XXw
                EOA8WFDcriQcKH1juPYewebJvdDxIqkAyNOXNvlCuLsENZHJN4PVtOrwrLP4gkGA
                DQGc0PnSdvSAPBTuxqUgjvS11RTFrwPv1OZTCclQkiOV+ykBEMO7fBeEgb0NoGal
                45OT2er2+BS+yzjKgVAeOurcWf5gMHw8ijaS3N/CG763mPItwOZoj4jZfpB7fRnT
                4NB4Fd3sGz/5dkDf/zDD1jm4Jj/BAgMBAAGjgZgwgZUwDgYDVR0PAQH/BAQDAgKk
                MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAQH/
                MB0GA1UdDgQWBBSEw+ROswtW1c5OiEeb2xvKfJWESTA0BgNVHREELTArgilpcC0x
                NzItMzEtNTQtNy51cy13ZXN0LTIuY29tcHV0ZS5pbnRlcm5hbDANBgkqhkiG9w0B
                AQsFAAOCAQEALmnKZ82rm6NqZXqINRLBh66q9w3DveOeGgrRVT5aa04csyxcL7v0
                u5zKh14q0Q9W7KWNQYdMVLtP0kVuoA/a+vcB4ZvOPZoIylEJ0qIVH1ozfxLH23fF
                /3C0I3Lh3eXW37O1dXgwvq7IDHd6X2ZowlDTZYZCV80+nvbWz6YVba3xYClKtsqF
                tW6Hzci2z11E40EMIDxE5Rx5lJ+lcGgWbv/1j1RHiIZXJ7Cs1zhqe7r42n23y+Tr
                Uwz1+5G6CQnIxzsoKhmAeKSnzt0ZVhxiRwOKzQBFnWhIQwBGRy6C0i7KDDhO9zir
                epNXho1ZJVY3XK7vJgNIclAdyFpdvyjnDQ==
                -----END CERTIFICATE-----
                EOT
                rm -rf /hab/svc/
                rm /hab/sup/default/MEMBER_ID
                rm -rf /hab/sup/default/data
                systemctl start hab
            - automate: !GetAtt Automate.PrivateDnsName
      Tags:
      - Key: Name
        Value: 'Store 1 Device 1'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  Store1Device2:
    Type: AWS::EC2::Instance
    DependsOn: Automate
    Properties:
      InstanceType: t3.micro
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-03e1bc7a33d356537'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'HabSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.12
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      UserData:
        Fn::Base64:
          Fn::Sub:
            - |
                #!/bin/bash -xe
                exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
                hostname "device2"
                groupadd hab
                useradd -g hab hab
                cat <<EOT>> /etc/systemd/system/hab.service
                [Unit]
                Description=The Chef Habitat Supervisor
                [Service]
                ExecStart=/bin/hab sup run --listen-ctl=0.0.0.0:9632 --event-stream-application="POS" --event-stream-environment="production" --event-stream-site="Store 1" --event-stream-url="${automate}:4222" --event-stream-token="E2bCL2WgfBqyo_lw8M-2OWm8WT0=" --permanent-peer --peer=172.31.54.11 --peer=172.31.54.12 --peer=172.31.54.21 --peer=172.31.54.31 --peer=172.31.54.32
                [Install]
                WantedBy=default.target
                EOT
                cat <<EOT>> /hab/cache/ssl/ip-172-31-54-7.cert
                -----BEGIN CERTIFICATE-----
                MIIEBTCCAu2gAwIBAgIQF5XKPpqGN0QxgRzHGRlOzzANBgkqhkiG9w0BAQsFADBx
                MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UECxMN
                Q2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2VzdC0y
                LmNvbXB1dGUuaW50ZXJuYWwwHhcNMjIxMDI2MTU0NzQ3WhcNMzIxMDIzMTU0NzQ3
                WjBxMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UE
                CxMNQ2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2Vz
                dC0yLmNvbXB1dGUuaW50ZXJuYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
                AoIBAQCh198QXfDw3gPjW2QHthYv+COvCBJMeEqC+Y/lqatSFcD8L7nZKRvXvAB2
                1voVw+dkfi1uBFymZbVrOZguFkpcKjwn08zT1Er5sVuQ5i4ANFMP7wMPgFSK4XXw
                EOA8WFDcriQcKH1juPYewebJvdDxIqkAyNOXNvlCuLsENZHJN4PVtOrwrLP4gkGA
                DQGc0PnSdvSAPBTuxqUgjvS11RTFrwPv1OZTCclQkiOV+ykBEMO7fBeEgb0NoGal
                45OT2er2+BS+yzjKgVAeOurcWf5gMHw8ijaS3N/CG763mPItwOZoj4jZfpB7fRnT
                4NB4Fd3sGz/5dkDf/zDD1jm4Jj/BAgMBAAGjgZgwgZUwDgYDVR0PAQH/BAQDAgKk
                MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAQH/
                MB0GA1UdDgQWBBSEw+ROswtW1c5OiEeb2xvKfJWESTA0BgNVHREELTArgilpcC0x
                NzItMzEtNTQtNy51cy13ZXN0LTIuY29tcHV0ZS5pbnRlcm5hbDANBgkqhkiG9w0B
                AQsFAAOCAQEALmnKZ82rm6NqZXqINRLBh66q9w3DveOeGgrRVT5aa04csyxcL7v0
                u5zKh14q0Q9W7KWNQYdMVLtP0kVuoA/a+vcB4ZvOPZoIylEJ0qIVH1ozfxLH23fF
                /3C0I3Lh3eXW37O1dXgwvq7IDHd6X2ZowlDTZYZCV80+nvbWz6YVba3xYClKtsqF
                tW6Hzci2z11E40EMIDxE5Rx5lJ+lcGgWbv/1j1RHiIZXJ7Cs1zhqe7r42n23y+Tr
                Uwz1+5G6CQnIxzsoKhmAeKSnzt0ZVhxiRwOKzQBFnWhIQwBGRy6C0i7KDDhO9zir
                epNXho1ZJVY3XK7vJgNIclAdyFpdvyjnDQ==
                -----END CERTIFICATE-----
                EOT
                rm -rf /hab/svc/
                rm /hab/sup/default/MEMBER_ID
                rm -rf /hab/sup/default/data
                systemctl start hab
            - automate: !GetAtt Automate.PrivateDnsName
      Tags:
      - Key: Name
        Value: 'Store 1 Device 2'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  Store2Device1:
    Type: AWS::EC2::Instance
    DependsOn: Automate
    Properties:
      InstanceType: t3.micro
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-03e1bc7a33d356537'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'HabSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.21
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      UserData:
        Fn::Base64:
          Fn::Sub:
            - |
                #!/bin/bash -xe
                exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
                hostname "device1"
                groupadd hab
                useradd -g hab hab
                cat <<EOT>> /etc/systemd/system/hab.service
                [Unit]
                Description=The Chef Habitat Supervisor
                [Service]
                ExecStart=/bin/hab sup run --listen-ctl=0.0.0.0:9632 --event-stream-application="POS" --event-stream-environment="production" --event-stream-site="Store 2" --event-stream-url="${automate}:4222" --event-stream-token="E2bCL2WgfBqyo_lw8M-2OWm8WT0=" --permanent-peer --peer=172.31.54.11 --peer=172.31.54.12 --peer=172.31.54.21 --peer=172.31.54.31 --peer=172.31.54.32
                [Install]
                WantedBy=default.target
                EOT
                cat <<EOT>> /hab/cache/ssl/ip-172-31-54-7.cert
                -----BEGIN CERTIFICATE-----
                MIIEBTCCAu2gAwIBAgIQF5XKPpqGN0QxgRzHGRlOzzANBgkqhkiG9w0BAQsFADBx
                MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UECxMN
                Q2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2VzdC0y
                LmNvbXB1dGUuaW50ZXJuYWwwHhcNMjIxMDI2MTU0NzQ3WhcNMzIxMDIzMTU0NzQ3
                WjBxMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UE
                CxMNQ2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2Vz
                dC0yLmNvbXB1dGUuaW50ZXJuYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
                AoIBAQCh198QXfDw3gPjW2QHthYv+COvCBJMeEqC+Y/lqatSFcD8L7nZKRvXvAB2
                1voVw+dkfi1uBFymZbVrOZguFkpcKjwn08zT1Er5sVuQ5i4ANFMP7wMPgFSK4XXw
                EOA8WFDcriQcKH1juPYewebJvdDxIqkAyNOXNvlCuLsENZHJN4PVtOrwrLP4gkGA
                DQGc0PnSdvSAPBTuxqUgjvS11RTFrwPv1OZTCclQkiOV+ykBEMO7fBeEgb0NoGal
                45OT2er2+BS+yzjKgVAeOurcWf5gMHw8ijaS3N/CG763mPItwOZoj4jZfpB7fRnT
                4NB4Fd3sGz/5dkDf/zDD1jm4Jj/BAgMBAAGjgZgwgZUwDgYDVR0PAQH/BAQDAgKk
                MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAQH/
                MB0GA1UdDgQWBBSEw+ROswtW1c5OiEeb2xvKfJWESTA0BgNVHREELTArgilpcC0x
                NzItMzEtNTQtNy51cy13ZXN0LTIuY29tcHV0ZS5pbnRlcm5hbDANBgkqhkiG9w0B
                AQsFAAOCAQEALmnKZ82rm6NqZXqINRLBh66q9w3DveOeGgrRVT5aa04csyxcL7v0
                u5zKh14q0Q9W7KWNQYdMVLtP0kVuoA/a+vcB4ZvOPZoIylEJ0qIVH1ozfxLH23fF
                /3C0I3Lh3eXW37O1dXgwvq7IDHd6X2ZowlDTZYZCV80+nvbWz6YVba3xYClKtsqF
                tW6Hzci2z11E40EMIDxE5Rx5lJ+lcGgWbv/1j1RHiIZXJ7Cs1zhqe7r42n23y+Tr
                Uwz1+5G6CQnIxzsoKhmAeKSnzt0ZVhxiRwOKzQBFnWhIQwBGRy6C0i7KDDhO9zir
                epNXho1ZJVY3XK7vJgNIclAdyFpdvyjnDQ==
                -----END CERTIFICATE-----
                EOT
                rm -rf /hab/svc/
                rm /hab/sup/default/MEMBER_ID
                rm -rf /hab/sup/default/data
                systemctl start hab
            - automate: !GetAtt Automate.PrivateDnsName
      Tags:
      - Key: Name
        Value: 'Store 2 Device 1'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  Store3Device1:
    Type: AWS::EC2::Instance
    DependsOn: Automate
    Properties:
      InstanceType: t3.micro
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-03e1bc7a33d356537'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'HabSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.31
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      UserData:
        Fn::Base64:
          Fn::Sub:
            - |
                #!/bin/bash -xe
                exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
                hostname "device1"
                groupadd hab
                useradd -g hab hab
                cat <<EOT>> /etc/systemd/system/hab.service
                [Unit]
                Description=The Chef Habitat Supervisor
                [Service]
                ExecStart=/bin/hab sup run --listen-ctl=0.0.0.0:9632 --event-stream-application="POS" --event-stream-environment="production" --event-stream-site="Store 3" --event-stream-url="${automate}:4222" --event-stream-token="E2bCL2WgfBqyo_lw8M-2OWm8WT0=" --permanent-peer --peer=172.31.54.11 --peer=172.31.54.12 --peer=172.31.54.21 --peer=172.31.54.31 --peer=172.31.54.32
                [Install]
                WantedBy=default.target
                EOT
                cat <<EOT>> /hab/cache/ssl/ip-172-31-54-7.cert
                -----BEGIN CERTIFICATE-----
                MIIEBTCCAu2gAwIBAgIQF5XKPpqGN0QxgRzHGRlOzzANBgkqhkiG9w0BAQsFADBx
                MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UECxMN
                Q2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2VzdC0y
                LmNvbXB1dGUuaW50ZXJuYWwwHhcNMjIxMDI2MTU0NzQ3WhcNMzIxMDIzMTU0NzQ3
                WjBxMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UE
                CxMNQ2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2Vz
                dC0yLmNvbXB1dGUuaW50ZXJuYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
                AoIBAQCh198QXfDw3gPjW2QHthYv+COvCBJMeEqC+Y/lqatSFcD8L7nZKRvXvAB2
                1voVw+dkfi1uBFymZbVrOZguFkpcKjwn08zT1Er5sVuQ5i4ANFMP7wMPgFSK4XXw
                EOA8WFDcriQcKH1juPYewebJvdDxIqkAyNOXNvlCuLsENZHJN4PVtOrwrLP4gkGA
                DQGc0PnSdvSAPBTuxqUgjvS11RTFrwPv1OZTCclQkiOV+ykBEMO7fBeEgb0NoGal
                45OT2er2+BS+yzjKgVAeOurcWf5gMHw8ijaS3N/CG763mPItwOZoj4jZfpB7fRnT
                4NB4Fd3sGz/5dkDf/zDD1jm4Jj/BAgMBAAGjgZgwgZUwDgYDVR0PAQH/BAQDAgKk
                MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAQH/
                MB0GA1UdDgQWBBSEw+ROswtW1c5OiEeb2xvKfJWESTA0BgNVHREELTArgilpcC0x
                NzItMzEtNTQtNy51cy13ZXN0LTIuY29tcHV0ZS5pbnRlcm5hbDANBgkqhkiG9w0B
                AQsFAAOCAQEALmnKZ82rm6NqZXqINRLBh66q9w3DveOeGgrRVT5aa04csyxcL7v0
                u5zKh14q0Q9W7KWNQYdMVLtP0kVuoA/a+vcB4ZvOPZoIylEJ0qIVH1ozfxLH23fF
                /3C0I3Lh3eXW37O1dXgwvq7IDHd6X2ZowlDTZYZCV80+nvbWz6YVba3xYClKtsqF
                tW6Hzci2z11E40EMIDxE5Rx5lJ+lcGgWbv/1j1RHiIZXJ7Cs1zhqe7r42n23y+Tr
                Uwz1+5G6CQnIxzsoKhmAeKSnzt0ZVhxiRwOKzQBFnWhIQwBGRy6C0i7KDDhO9zir
                epNXho1ZJVY3XK7vJgNIclAdyFpdvyjnDQ==
                -----END CERTIFICATE-----
                EOT
                rm -rf /hab/svc/
                rm /hab/sup/default/MEMBER_ID
                rm -rf /hab/sup/default/data
                systemctl start hab
            - automate: !GetAtt Automate.PrivateDnsName
      Tags:
      - Key: Name
        Value: 'Store 3 Device 1'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"
  Store3Device2:
    Type: AWS::EC2::Instance
    DependsOn: Automate
    Properties:
      InstanceType: t3.micro
      KeyName: !Ref 'KeyName'
      ImageId: 'ami-03e1bc7a33d356537'
      NetworkInterfaces:
        - GroupSet:
            - !Ref 'HabSG'
          AssociatePublicIpAddress: true
          PrivateIpAddress: 172.31.54.32
          DeviceIndex: "0"
          DeleteOnTermination: true
          SubnetId: !Ref 'PrimarySubnet'
      UserData:
        Fn::Base64:
          Fn::Sub:
            - |
                #!/bin/bash -xe
                exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1
                hostname "device2"
                groupadd hab
                useradd -g hab hab
                cat <<EOT>> /etc/systemd/system/hab.service
                [Unit]
                Description=The Chef Habitat Supervisor
                [Service]
                ExecStart=/bin/hab sup run --listen-ctl=0.0.0.0:9632 --event-stream-application="POS" --event-stream-environment="production" --event-stream-site="Store 3" --event-stream-url="${automate}:4222" --event-stream-token="E2bCL2WgfBqyo_lw8M-2OWm8WT0=" --permanent-peer --peer=172.31.54.11 --peer=172.31.54.12 --peer=172.31.54.21 --peer=172.31.54.31 --peer=172.31.54.32
                [Install]
                WantedBy=default.target
                EOT
                cat <<EOT>> /hab/cache/ssl/ip-172-31-54-7.cert
                -----BEGIN CERTIFICATE-----
                MIIEBTCCAu2gAwIBAgIQF5XKPpqGN0QxgRzHGRlOzzANBgkqhkiG9w0BAQsFADBx
                MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UECxMN
                Q2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2VzdC0y
                LmNvbXB1dGUuaW50ZXJuYWwwHhcNMjIxMDI2MTU0NzQ3WhcNMzIxMDIzMTU0NzQ3
                WjBxMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNQ2hlZiBTb2Z0d2FyZTEWMBQGA1UE
                CxMNQ2hlZiBBdXRvbWF0ZTEyMDAGA1UEAxMpaXAtMTcyLTMxLTU0LTcudXMtd2Vz
                dC0yLmNvbXB1dGUuaW50ZXJuYWwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
                AoIBAQCh198QXfDw3gPjW2QHthYv+COvCBJMeEqC+Y/lqatSFcD8L7nZKRvXvAB2
                1voVw+dkfi1uBFymZbVrOZguFkpcKjwn08zT1Er5sVuQ5i4ANFMP7wMPgFSK4XXw
                EOA8WFDcriQcKH1juPYewebJvdDxIqkAyNOXNvlCuLsENZHJN4PVtOrwrLP4gkGA
                DQGc0PnSdvSAPBTuxqUgjvS11RTFrwPv1OZTCclQkiOV+ykBEMO7fBeEgb0NoGal
                45OT2er2+BS+yzjKgVAeOurcWf5gMHw8ijaS3N/CG763mPItwOZoj4jZfpB7fRnT
                4NB4Fd3sGz/5dkDf/zDD1jm4Jj/BAgMBAAGjgZgwgZUwDgYDVR0PAQH/BAQDAgKk
                MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAPBgNVHRMBAf8EBTADAQH/
                MB0GA1UdDgQWBBSEw+ROswtW1c5OiEeb2xvKfJWESTA0BgNVHREELTArgilpcC0x
                NzItMzEtNTQtNy51cy13ZXN0LTIuY29tcHV0ZS5pbnRlcm5hbDANBgkqhkiG9w0B
                AQsFAAOCAQEALmnKZ82rm6NqZXqINRLBh66q9w3DveOeGgrRVT5aa04csyxcL7v0
                u5zKh14q0Q9W7KWNQYdMVLtP0kVuoA/a+vcB4ZvOPZoIylEJ0qIVH1ozfxLH23fF
                /3C0I3Lh3eXW37O1dXgwvq7IDHd6X2ZowlDTZYZCV80+nvbWz6YVba3xYClKtsqF
                tW6Hzci2z11E40EMIDxE5Rx5lJ+lcGgWbv/1j1RHiIZXJ7Cs1zhqe7r42n23y+Tr
                Uwz1+5G6CQnIxzsoKhmAeKSnzt0ZVhxiRwOKzQBFnWhIQwBGRy6C0i7KDDhO9zir
                epNXho1ZJVY3XK7vJgNIclAdyFpdvyjnDQ==
                -----END CERTIFICATE-----
                EOT
                rm -rf /hab/svc/
                rm /hab/sup/default/MEMBER_ID
                rm -rf /hab/sup/default/data
                systemctl start hab
            - automate: !GetAtt Automate.PrivateDnsName
      Tags:
      - Key: Name
        Value: 'Store 3 Device 2'
      - Key: X-Dept
        Value: 'SA'
      - Key: X-Application
        Value: 'Habitat'
      - Key: X-Contact
        Value: "donald.slanec@progress.com"
      - Key: X-Production
        Value: "True"
      - Key: X-Project
        Value: "Hab"


  WorkstationSG:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: SG for Linux WorkstationSG
      VpcId: !Ref 'VPC'
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 8000
          ToPort: 8020
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 3000
          ToPort: 3000
          CidrIp: 0.0.0.0/0
  AutomateSG:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: SG for Linux WorkstationSG
      VpcId: !Ref 'VPC'
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 443
          ToPort: 443
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 4222
          ToPort: 4222
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 9632
          ToPort: 9632
          CidrIp: 0.0.0.0/0
        - IpProtocol: udp
          FromPort: 9632
          ToPort: 9632
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 9638
          ToPort: 9638
          CidrIp: 0.0.0.0/0
        - IpProtocol: udp
          FromPort: 9638
          ToPort: 9638
          CidrIp: 0.0.0.0/0
  HabSG:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: SG for Hab Supervisors
      VpcId: !Ref 'VPC'
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 80
          ToPort: 80
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 8000
          ToPort: 8020
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 9631
          ToPort: 9631
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 9632
          ToPort: 9632
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 9638
          ToPort: 9638
          CidrIp: 0.0.0.0/0
        - IpProtocol: udp
          FromPort: 9638
          ToPort: 9638
          CidrIp: 0.0.0.0/0
  JenkinsSG:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: SG for Jenkins
      VpcId: !Ref 'VPC'
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 22
          ToPort: 22
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 8080
          ToPort: 8080
          CidrIp: 0.0.0.0/0
        - IpProtocol: tcp
          FromPort: 3000
          ToPort: 3000
          CidrIp: 0.0.0.0/0


Outputs:
  AutomateDNSName:
    Description: The public DNS Name of Chef Automate
    Value: !GetAtt Automate.PublicDnsName