78 строки
3.1 KiB
HCL
78 строки
3.1 KiB
HCL
data "aws_iam_policy_document" "mesos-slave-production-host-policy-document" {
|
|
statement {
|
|
effect = "Allow"
|
|
actions = [
|
|
"sts:AssumeRole",
|
|
"iam:GetRole"
|
|
]
|
|
|
|
resources = [
|
|
"${module.discourse-staging.container-role-arn}",
|
|
"${module.discourse-production.container-role-arn}",
|
|
"${module.mozillians-staging.container-role-arn}",
|
|
"${module.remo-staging.container-role-arn}",
|
|
"${module.remo-production.container-role-arn}",
|
|
"${module.coss-staging.container-role-arn}",
|
|
"${module.coss-production.container-role-arn}",
|
|
"${aws_iam_role.mozdef-logs-role.arn}"
|
|
]
|
|
}
|
|
}
|
|
|
|
module "mesos-cluster-staging" {
|
|
source = "./modules/mesos-cluster"
|
|
# provider vars
|
|
name = "mesos-cluster-staging"
|
|
environment = "staging"
|
|
master_instance_type = "t2.micro"
|
|
slave_instance_type = "t2.medium"
|
|
slave_as_max_size = 1
|
|
slave_as_desired_capacity = 1
|
|
slave_as_min_size = 1
|
|
master_as_max_size = 1
|
|
master_as_desired_capacity = 1
|
|
master_as_min_size = 1
|
|
|
|
vpc_id = "${aws_vpc.apps-staging-vpc.id}"
|
|
shared_vpc_cidr = "${aws_vpc.apps-shared-vpc.cidr_block}"
|
|
# We can't interpolate referenced resources so we have to manually add subnets
|
|
subnet1 = "${aws_subnet.apps-staging-1a.id}"
|
|
subnet2 = "${aws_subnet.apps-staging-1c.id}"
|
|
subnet3 = "${aws_subnet.apps-staging-1d.id}"
|
|
sns_topic_arn = "${aws_sns_topic.sns-cloudwatch-partinfra.arn}"
|
|
aws_account_id = "${var.aws_account_id}"
|
|
adminaccessrole-uid = "${aws_iam_role.admin-access-role.unique_id}"
|
|
}
|
|
|
|
module "mesos-cluster-production" {
|
|
source = "./modules/mesos-cluster"
|
|
# provider vars
|
|
name = "mesos-cluster-production"
|
|
environment = "production"
|
|
master_instance_type = "t2.micro"
|
|
slave_instance_type = "t2.xlarge"
|
|
slave_as_max_size = 5
|
|
slave_as_desired_capacity = 3
|
|
slave_as_min_size = 3
|
|
master_as_max_size = 5
|
|
master_as_desired_capacity = 3
|
|
master_as_min_size = 3
|
|
|
|
vpc_id = "${aws_vpc.apps-production-vpc.id}"
|
|
shared_vpc_cidr = "${aws_vpc.apps-shared-vpc.cidr_block}"
|
|
# We can't interpolate referenced resources so we have to manually add subnets
|
|
subnet1 = "${aws_subnet.apps-production-1a.id}"
|
|
subnet2 = "${aws_subnet.apps-production-1c.id}"
|
|
subnet3 = "${aws_subnet.apps-production-1d.id}"
|
|
sns_topic_arn = "${aws_sns_topic.sns-cloudwatch-partinfra.arn}"
|
|
aws_account_id = "${var.aws_account_id}"
|
|
adminaccessrole-uid = "${aws_iam_role.admin-access-role.unique_id}"
|
|
mozillians-slave-ec2-sg-id = "${aws_security_group.mozillians-slave-ec2-sg.id}"
|
|
}
|
|
|
|
resource "aws_iam_role_policy" "mesos-slave-production-host-role-policy" {
|
|
name = "mesos-slave-host-role-policy"
|
|
role = "${module.mesos-cluster-production.slave-host-role-arn}"
|
|
policy = "${data.aws_iam_policy_document.mesos-slave-production-host-policy-document.json}"
|
|
}
|