mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 21:47:20 +00:00
73501e5755
<!-- Add the related story/sub-task/bug number, like Resolves #123, or remove if NA --> **Related issue:** Resolves #34500 Terraform changes after my latest loadtest. VPC consolidation: updated (and deployed) shared VPC so that Signoz backend can now use it - Removed eks-vpc/ directory - Moved VPC management to shared/vpc.tf - Updated shared/init.tf to reflect VPC changes Infra improvements - infra/internal_alb.tf - changed suffix from -internal to -int since I hit max 32 characters issue OTEL - OTEL Collector configuration overrides for production stability
41 lines
1.2 KiB
HCL
41 lines
1.2 KiB
HCL
module "vpc" {
|
|
source = "terraform-aws-modules/vpc/aws"
|
|
version = "~> 5.0"
|
|
|
|
name = "fleet-vpc"
|
|
cidr = "10.12.0.0/16"
|
|
|
|
azs = ["us-east-2a", "us-east-2b", "us-east-2c"]
|
|
private_subnets = ["10.12.1.0/24", "10.12.2.0/24", "10.12.3.0/24"]
|
|
public_subnets = ["10.12.11.0/24", "10.12.12.0/24", "10.12.13.0/24"]
|
|
database_subnets = ["10.12.21.0/24", "10.12.22.0/24", "10.12.23.0/24"]
|
|
elasticache_subnets = ["10.12.31.0/24", "10.12.32.0/24", "10.12.33.0/24"]
|
|
|
|
create_database_subnet_group = true
|
|
create_database_subnet_route_table = true
|
|
|
|
create_elasticache_subnet_group = true
|
|
create_elasticache_subnet_route_table = true
|
|
|
|
enable_vpn_gateway = false
|
|
one_nat_gateway_per_az = false
|
|
|
|
single_nat_gateway = true
|
|
enable_nat_gateway = true
|
|
enable_dns_hostnames = true
|
|
|
|
# Tags required for EKS - role tags are required on subnets
|
|
public_subnet_tags = {
|
|
"kubernetes.io/role/elb" = 1
|
|
}
|
|
|
|
private_subnet_tags = {
|
|
"kubernetes.io/role/internal-elb" = 1
|
|
}
|
|
|
|
# Note: Kubernetes cluster-specific tags are added by the signoz module
|
|
# when creating each EKS cluster, not at the VPC level
|
|
tags = {
|
|
"shared" = "true"
|
|
}
|
|
}
|