Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-02 10:35:08 -05:00
Code Issues Packages Projects Releases Wiki Activity

terraform: use HTTPS health check for AWS

Browse Source
This commit is contained in:
Leonard Cohnen 2022-11-02 11:46:52 +01:00 committed by 3u13r
parent 7e385c4c86
commit be2b38f2ac
3 changed files with 71 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

91
cli/internal/terraform/terraform/aws/main.tf
View File

@ -125,6 +125,14 @@ resource "aws_security_group" "security_group" {
description = "konnectivity" description = "konnectivity"
} }
ingress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = [aws_vpc.vpc.cidr_block]
description = "allow all internal"
}
dynamic "ingress" { dynamic "ingress" {
for_each = var.debug ? [1] : [] for_each = var.debug ? [1] : []
content { content {
@ -144,60 +152,67 @@ resource "aws_cloudwatch_log_group" "log_group" {
} }
module "load_balancer_target_bootstrapper" { module "load_balancer_target_bootstrapper" {
source = "./modules/load_balancer_target" source = "./modules/load_balancer_target"
name = "${local.name}-bootstrapper" name = "${local.name}-bootstrapper"
vpc_id = aws_vpc.vpc.id vpc_id = aws_vpc.vpc.id
lb_arn = aws_lb.front_end.arn lb_arn = aws_lb.front_end.arn
port = local.ports_bootstrapper port = local.ports_bootstrapper
tags = local.tags tags = local.tags
healthcheck_protocol = "TCP"
} }
module "load_balancer_target_kubernetes" { module "load_balancer_target_kubernetes" {
source = "./modules/load_balancer_target" source = "./modules/load_balancer_target"
name = "${local.name}-kubernetes" name = "${local.name}-kubernetes"
vpc_id = aws_vpc.vpc.id vpc_id = aws_vpc.vpc.id
lb_arn = aws_lb.front_end.arn lb_arn = aws_lb.front_end.arn
port = local.ports_kubernetes port = local.ports_kubernetes
tags = local.tags tags = local.tags
healthcheck_protocol = "HTTPS"
healthcheck_path = "/readyz"
} }
module "load_balancer_target_verify" { module "load_balancer_target_verify" {
source = "./modules/load_balancer_target" source = "./modules/load_balancer_target"
name = "${local.name}-verify" name = "${local.name}-verify"
vpc_id = aws_vpc.vpc.id vpc_id = aws_vpc.vpc.id
lb_arn = aws_lb.front_end.arn lb_arn = aws_lb.front_end.arn
port = local.ports_verify port = local.ports_verify
tags = local.tags tags = local.tags
healthcheck_protocol = "TCP"
} }
module "load_balancer_target_debugd" { module "load_balancer_target_debugd" {
count = var.debug ? 1 : 0 // only deploy debugd in debug mode count = var.debug ? 1 : 0 // only deploy debugd in debug mode
source = "./modules/load_balancer_target" source = "./modules/load_balancer_target"
name = "${local.name}-debugd" name = "${local.name}-debugd"
vpc_id = aws_vpc.vpc.id vpc_id = aws_vpc.vpc.id
lb_arn = aws_lb.front_end.arn lb_arn = aws_lb.front_end.arn
port = local.ports_debugd port = local.ports_debugd
tags = local.tags tags = local.tags
healthcheck_protocol = "TCP"
} }
module "load_balancer_target_konnectivity" { module "load_balancer_target_konnectivity" {
source = "./modules/load_balancer_target" source = "./modules/load_balancer_target"
name = "${local.name}-konnectivity" name = "${local.name}-konnectivity"
vpc_id = aws_vpc.vpc.id vpc_id = aws_vpc.vpc.id
lb_arn = aws_lb.front_end.arn lb_arn = aws_lb.front_end.arn
port = local.ports_konnectivity port = local.ports_konnectivity
tags = local.tags tags = local.tags
healthcheck_protocol = "TCP"
} }
# TODO: Remove when development is more advanced # TODO: Remove when development is more advanced
module "load_balancer_target_ssh" { module "load_balancer_target_ssh" {
count = var.debug ? 1 : 0 // only deploy SSH in debug mode count = var.debug ? 1 : 0 // only deploy SSH in debug mode
source = "./modules/load_balancer_target" source = "./modules/load_balancer_target"
name = "${local.name}-ssh" name = "${local.name}-ssh"
vpc_id = aws_vpc.vpc.id vpc_id = aws_vpc.vpc.id
lb_arn = aws_lb.front_end.arn lb_arn = aws_lb.front_end.arn
port = local.ports_ssh port = local.ports_ssh
tags = local.tags tags = local.tags
healthcheck_protocol = "TCP"
} }
module "instance_group_control_plane" { module "instance_group_control_plane" {

8
cli/internal/terraform/terraform/aws/modules/load_balancer_target/main.tf
View File

@ -15,8 +15,12 @@ resource "aws_lb_target_group" "front_end" {
tags = var.tags tags = var.tags
health_check { health_check {
port = var.port port = var.port
protocol = "TCP" protocol = var.healthcheck_protocol
path = var.healthcheck_protocol == "HTTPS" ? var.healthcheck_path : null
interval = 10
healthy_threshold = 2
unhealthy_threshold = 2
} }
lifecycle { lifecycle {

12
cli/internal/terraform/terraform/aws/modules/load_balancer_target/variables.tf
View File

@ -18,6 +18,18 @@ variable "lb_arn" {
description = "ARN of the load balancer." description = "ARN of the load balancer."
} }
variable "healthcheck_protocol" {
type = string
default = "TCP"
description = "Type of the load balancer target."
}
variable "healthcheck_path" {
type = string
default = ""
description = "Path for health check."
}
variable "tags" { variable "tags" {
type = map(string) type = map(string)
description = "The tags to add to the loadbalancer." description = "The tags to add to the loadbalancer."