fleet/infrastructure/loadtesting/terraform/infra/mdm.tf

15 lines
445 B
Terraform
Raw Normal View History

Loadtesting IAC updates (#32629) # Github Actions (New) - New workflow to deploy/destroy loadtest infrastructure with one-click (Needs to be tested) - Common inputs drive configuration and deployment of loadtest infrastructure - tag - fleet_task_count - fleet_task_memory - fleet_task_cpu - fleet_database_instance_size - fleet_database_instance_count - fleet_redis_instance_size - fleet_redis_instance_count - terraform_workspace - terraform_action - New workflow to deploy/destroy osquery-perf to loadtest infrastructure with one-click (Needs to be tested) - Common inputs drive configuration and deployment of osquery-perf resources - tag - git_branch - loadtest_containers - extra_flags - terraform_workspace - terraform_action - New workflow to deploy shared loadtest resources with one-click (Needs to be tested) # Loadtest Infrastructure (New) - New directory (`infrastructure/loadtesting/terraform/infra`) for one-click deployment - Loadtest environment updated to use [fleet-terraform modules](https://github.com/fleetdm/fleet-terraform) - [Deployment documentation updated](https://github.com/fleetdm/fleet/blob/0c254bca4018bcf2421ae37f652f9191fb028adf/infrastructure/loadtesting/terraform/infra/README.md) to reflect new steps # Osquery-perf deployment (New) - New directory (`infrastructure/loadtesting/terraform/osquery-perf`) for the deployment of osquery-perf - osquery-perf updated to use [fleet-terraform modules](https://github.com/fleetdm/fleet-terraform) - [Deployment documentation updated](https://github.com/fleetdm/fleet/tree/0c254bca4018bcf2421ae37f652f9191fb028adf/infrastructure/loadtesting/terraform/osquery_perf) to reflect new steps
2025-10-08 19:31:37 +00:00
resource "random_password" "challenge" {
length = 12
special = false
}
resource "aws_secretsmanager_secret_version" "scep" {
secret_id = module.mdm.scep.id
secret_string = jsonencode(
{
FLEET_MDM_APPLE_SCEP_CERT_BYTES = tls_self_signed_cert.scep_cert.cert_pem
FLEET_MDM_APPLE_SCEP_KEY_BYTES = tls_private_key.scep_key.private_key_pem
FLEET_MDM_APPLE_SCEP_CHALLENGE = random_password.challenge.result
}
)
}