main.tf

#resource "aws_key_pair" "personal" {
#  key_name   = "amazon-key"
#  public_key = "ssh-rsa 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 infracloud@vivek-shilimkar"
#}

resource "aws_instance" "ec2-instance" {

  ami                         = var.ami
  instance_type               = var.instance_type
  subnet_id                   = "subnet-6127e62d"
  security_groups             = [var.vpc_security_group_id_for_ec2]
  associate_public_ip_address = true
  key_name                    = "mit-pub-key-pair"
  #depends_on                  = [aws_key_pair.personal]
  ebs_block_device {
    device_name = "/dev/sda1"
    volume_size = 320
  }
  tags = {
    Name = "${var.name}"
  }
  user_data = <<-EOF
    #!/bin/bash
    set -x
    curl https://releases.rancher.com/install-docker/20.10.sh | sh
    sudo chmod 777 /var/run/docker.sock
    #Install Rancher
    docker run -d --restart=unless-stopped -p 80:80 -p 443:443 --privileged -e CATTLE_BOOTSTRAP_PASSWORD=${var.BTPASSWORD} rancher/rancher:${var.rancher_version}
    curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
    sleep 600
    
    sudo apt install unzip
    sudo snap install jq

    unzip awscliv2.zip
    sudo ./aws/install
    aws --version
    aws --profile default configure set AWS_ACCESS_KEY_ID ${var.AWS_KEY_ID}
    aws --profile default configure set AWS_SECRET_ACCESS_KEY ${var.AWS_SECRET_ACCESS_KEY}
    aws --profile default configure set AWS_DEFAULT_OUTPUT ${var.AWS_DEFAULT_OUTPUT}
    aws --profile default configure set AWS_REGION us-east-2
    aws ec2 describe-instances --region us-east-2 --filters "Name=tag:Name,Values=${var.name}" | grep -i publicipaddress | cut -d '"' -f 4 > /tmp/server_url
    URL=`cat /tmp/server_url`
    RANCHERENDPOINT=https://$URL/v3
    USERNAME=testuser
    PASSWORD=rancher#1234
    GLOBALROLE=user
    

    # Login token good for 1 minute
    LOGINTOKEN=`curl -k -s 'https://'"$URL"'/v3-public/localProviders/local?action=login' -H 'content-type: application/json' --data-binary '{"username":"admin","password":"'"$PASSWORD"'","ttl":60000}' | jq -r .token`
    
    # Change password
    # curl -k -s 'https://'"$URL"'/v3/users?action=changepassword' -H 'Content-Type: application/json' -H "Authorization: Bearer $LOGINTOKEN" --data-binary '{"currentPassword":"admin","newPassword":"something better"}'

    # Create API key good forever
    APIKEY=`curl -k -s 'https://'"$URL"'/v3/token' -H 'Content-Type: application/json' -H "Authorization: Bearer $LOGINTOKEN" --data-binary '{"type":"token","description":"for scripts and stuff"}' | jq -r .token`
   
    #create new user and assign role binding
    USERID=`curl -s -u "$APIKEY" 'https://'"$URL"'/v3/user' -H 'content-type: application/json' --data-binary '{"type":"user","username":"'"$USERNAME"'","password":"'"$PASSWORD"'","name":"vivek"}' --insecure | jq -r .id`
    curl -s -u "$APIKEY" https://$URL/v3/globalrolebinding -H 'content-type: application/json' --data-binary '{"type":"globalRoleBinding","globalRoleId":"user","userId":"'"$USERID"'"}' --insecure

    # Login as user and get usertoken
    LOGINRESPONSE=`curl -s 'https://'"$URL"'/v3-public/localProviders/local?action=login' -H 'content-type: application/json' --data-binary '{"username":"'"$USERNAME"'","password":"'"$PASSWORD"'"}' --insecure`
    USERTOKEN=`echo $LOGINRESPONSE | jq -r .token`
    
    echo $APIKEY > /tmp/Tokens
    echo $USERTOKEN >> /tmp/Tokens

    # Set server-url
    # curl -k -s 'https://127.0.0.1/v3/settings/server-url' -H 'Content-Type: application/json' -H "Authorization: Bearer $APIKEY" -X PUT --data-binary '{"name":"server-url","value":"https://your-rancher.com/"}'

    # Do whatever else you want

  EOF
}