feat: implement RFC 16 to allow emergency node access (#3557)

terraform/infrastructure/aws/main.tf

@@ -29,6 +29,7 @@ locals {
     { name = "recovery", port = "9999", health_check = "TCP" },
     { name = "join", port = "30090", health_check = "TCP" },
     var.debug ? [{ name = "debugd", port = "4000", health_check = "TCP" }] : [],
+    var.emergency_ssh ? [{ name = "ssh", port = "22", health_check = "TCP" }] : [],
   ])
   target_group_arns = {
     control-plane : [

terraform/infrastructure/aws/outputs.tf

@@ -45,3 +45,8 @@ output "ip_cidr_node" {
   value       = local.cidr_vpc_subnet_nodes
   description = "CIDR block of the node network."
 }
+
+output "loadbalancer_address" {
+  value       = aws_lb.front_end.dns_name
+  description = "Public loadbalancer address."
+}

terraform/infrastructure/aws/variables.tf

@@ -85,3 +85,9 @@ variable "additional_tags" {
   default     = {}
   description = "Additional tags that should be applied to created resources."
 }
+
+variable "emergency_ssh" {
+  type        = bool
+  default     = false
+  description = "Wether to expose the SSH port through the public load balancer."
+}