Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 00:49:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 143

Dogfood - Fleetbot ec2 instance deployment (#31120)

Browse source 
* Create fleetbot ec2 instance
* Create security group for fleetbot ec2 instance
* Create ingress/egress security group rules for fleetbot ec2 instance
This commit is contained in:
Jorge Falcon 2025-07-22 09:27:24 -04:00 committed by GitHub
parent b5de3c58e8
commit a87ec09e16
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 42 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

42
infrastructure/dogfood/terraform/aws-tf-module/ec2.tf Normal file
View file

@ -0,0 +1,42 @@
resource "aws_instance" "fleetbot" {
ami = "ami-0d1b5a8c13042c939" # us-east-2 - Ubuntu 24.04 LTS
instance_type = "t3.small"
subnet_id = module.main.vpc.private_subnets[0] # take the first subnet in the list
vpc_security_group_ids = [aws_security_group.fleetbot.id]
root_block_device {
volume_size = 50
}
key_name = "dogfood-fleetbot"
tags = {
Name = "${local.customer}-fleetbot"
}
volume_tags = merge({ Name = "${local.customer}-fleetbot" })
}
resource "aws_security_group" "fleetbot" {
name = "${local.customer}-fleetbot-sg"
description = "Primary security group for ${local.customer}-fleetbot (SSH)"
vpc_id = module.main.vpc.vpc_id
tags = {
Name = "${local.customer}-fleetbot-sg"
}
}
resource "aws_vpc_security_group_ingress_rule" "fleetbot_ssh" {
security_group_id = aws_security_group.fleetbot.id
cidr_ipv4 = "10.255.0.0/16"
from_port = 22
to_port = 22
ip_protocol = "tcp"
}
resource "aws_vpc_security_group_egress_rule" "fleetbot_any" {
security_group_id = aws_security_group.fleetbot.id
cidr_ipv4 = "0.0.0.0/0"
ip_protocol = "-1"
}