luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

backport of commit fd1683698bad3556d21e783a26ec1bca5d0de671 (#21477) 

Co-authored-by: Ryan Cragun <me@ryan.ec>
This commit is contained in:
hc-github-team-secure-vault-core 2023-06-27 12:58:02 -04:00 committed by GitHub
parent 649715eeb4
commit 32beec61bc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
enos/modules/target_ec2_instances/main.tf
View File

@ -98,7 +98,7 @@ locals {
"x86_64" = var.instance_types["amd64"] "x86_64" = var.instance_types["amd64"]
} }
instances = toset([for idx in range(var.instance_count) : tostring(idx)]) instances = toset([for idx in range(var.instance_count) : tostring(idx)])
name_prefix = "${var.project_name}-${local.cluster_name}" name_prefix = "${var.project_name}-${local.cluster_name}-${random_string.unique_id.result}"
} }
resource "random_string" "cluster_name" { resource "random_string" "cluster_name" {
@ -109,24 +109,32 @@ resource "random_string" "cluster_name" {
special = false special = false
} }
resource "random_string" "unique_id" {
length = 4
lower = true
upper = false
numeric = false
special = false
}
resource "aws_iam_role" "target_instance_role" { resource "aws_iam_role" "target_instance_role" {
name = "target_instance_role-${random_string.cluster_name.result}" name = "${local.name_prefix}-instance-role"
assume_role_policy = data.aws_iam_policy_document.target_instance_role.json assume_role_policy = data.aws_iam_policy_document.target_instance_role.json
} }
resource "aws_iam_instance_profile" "target" { resource "aws_iam_instance_profile" "target" {
name = "${local.name_prefix}-target" name = "${local.name_prefix}-instance-profile"
role = aws_iam_role.target_instance_role.name role = aws_iam_role.target_instance_role.name
} }
resource "aws_iam_role_policy" "target" { resource "aws_iam_role_policy" "target" {
name = "${local.name_prefix}-target" name = "${local.name_prefix}-role-policy"
role = aws_iam_role.target_instance_role.id role = aws_iam_role.target_instance_role.id
policy = data.aws_iam_policy_document.target.json policy = data.aws_iam_policy_document.target.json
} }
resource "aws_security_group" "target" { resource "aws_security_group" "target" {
name = "${local.name_prefix}-target" name = "${local.name_prefix}-sg"
description = "Target instance security group" description = "Target instance security group"
vpc_id = var.vpc_id vpc_id = var.vpc_id
@ -241,7 +249,7 @@ resource "aws_instance" "targets" {
tags = merge( tags = merge(
var.common_tags, var.common_tags,
{ {
Name = "${local.name_prefix}-${var.cluster_tag_key}-target" Name = "${local.name_prefix}-${var.cluster_tag_key}-instance-target"
"${var.cluster_tag_key}" = local.cluster_name "${var.cluster_tag_key}" = local.cluster_name
}, },
) )