115 строки
3.8 KiB
HCL
115 строки
3.8 KiB
HCL
# Admin EFS
|
|
resource "aws_security_group" "admin-efs-sg" {
|
|
name = "admin-efs-sg"
|
|
description = "Admin EFS SG"
|
|
vpc_id = "${aws_vpc.apps-shared-vpc.id}"
|
|
}
|
|
|
|
resource "aws_security_group_rule" "admin-efs-sg-allownfsfromadmin" {
|
|
type = "ingress"
|
|
from_port = 2049
|
|
to_port = 2049
|
|
protocol = "tcp"
|
|
source_security_group_id = "${aws_security_group.admin-ec2-sg.id}"
|
|
security_group_id = "${aws_security_group.admin-efs-sg.id}"
|
|
}
|
|
|
|
resource "aws_efs_file_system" "jenkins-efs" {
|
|
tags {
|
|
Name = "jenkins-efs"
|
|
}
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "jenkins-efs-shared-1a" {
|
|
file_system_id = "${aws_efs_file_system.jenkins-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1a.id}"
|
|
security_groups = ["${aws_security_group.admin-efs-sg.id}"]
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "jenkins-efs-shared-1c" {
|
|
file_system_id = "${aws_efs_file_system.jenkins-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1c.id}"
|
|
security_groups = ["${aws_security_group.admin-efs-sg.id}"]
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "jenkins-efs-shared-1d" {
|
|
file_system_id = "${aws_efs_file_system.jenkins-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1d.id}"
|
|
security_groups = ["${aws_security_group.admin-efs-sg.id}"]
|
|
}
|
|
|
|
# Grafana EFS
|
|
resource "aws_efs_file_system" "grafana-efs" {
|
|
tags {
|
|
Name = "grafana-efs"
|
|
}
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "grafana-efs-1a" {
|
|
file_system_id = "${aws_efs_file_system.grafana-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1a.id}"
|
|
security_groups = ["${aws_security_group.admin-efs-sg.id}"]
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "grafana-efs-1c" {
|
|
file_system_id = "${aws_efs_file_system.grafana-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1c.id}"
|
|
security_groups = ["${aws_security_group.admin-efs-sg.id}"]
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "grafana-efs-1d" {
|
|
file_system_id = "${aws_efs_file_system.grafana-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1d.id}"
|
|
security_groups = ["${aws_security_group.admin-efs-sg.id}"]
|
|
}
|
|
|
|
|
|
# Public Jenkins EFS
|
|
resource "aws_security_group" "jenkins-public-efs-sg" {
|
|
name = "jenkins-public-efs-sg"
|
|
description = "jenkins-public EFS SG"
|
|
vpc_id = "${aws_vpc.apps-shared-vpc.id}"
|
|
}
|
|
|
|
resource "aws_security_group_rule" "jenkins-public-efs-sg-allownfsfromjenkins" {
|
|
type = "ingress"
|
|
from_port = 2049
|
|
to_port = 2049
|
|
protocol = "tcp"
|
|
source_security_group_id = "${aws_security_group.jenkins-public-ec2-sg.id}"
|
|
security_group_id = "${aws_security_group.jenkins-public-efs-sg.id}"
|
|
}
|
|
|
|
resource "aws_security_group_rule" "jenkins-public-efs-sg-allownfsfromadmin" {
|
|
type = "ingress"
|
|
from_port = 2049
|
|
to_port = 2049
|
|
protocol = "tcp"
|
|
source_security_group_id = "${aws_security_group.admin-ec2-sg.id}"
|
|
security_group_id = "${aws_security_group.jenkins-public-efs-sg.id}"
|
|
}
|
|
|
|
resource "aws_efs_file_system" "jenkins-public-efs" {
|
|
tags {
|
|
Name = "jenkins-public-efs"
|
|
}
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "jenkins-public-efs-shared-1a" {
|
|
file_system_id = "${aws_efs_file_system.jenkins-public-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1a.id}"
|
|
security_groups = ["${aws_security_group.jenkins-public-efs-sg.id}"]
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "jenkins-public-efs-shared-1c" {
|
|
file_system_id = "${aws_efs_file_system.jenkins-public-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1c.id}"
|
|
security_groups = ["${aws_security_group.jenkins-public-efs-sg.id}"]
|
|
}
|
|
|
|
resource "aws_efs_mount_target" "jenkins-public-efs-shared-1d" {
|
|
file_system_id = "${aws_efs_file_system.jenkins-public-efs.id}"
|
|
subnet_id = "${aws_subnet.apps-shared-1d.id}"
|
|
security_groups = ["${aws_security_group.jenkins-public-efs-sg.id}"]
|
|
}
|