Commit 4a5c3acb authored by Michael Kennedy's avatar Michael Kennedy 🎱
Browse files

validated deployment and variable corrections

parent c01082e7

terraform/f5-sgw-ts/README.md

+6 −1
Original line number Diff line number Diff line
@@ -104,4 +104,9 @@ terraform show 
```

this should return a blank line



https://github.com/mjmenger/terraform-aws-bigip-setup
 
# Todo

* adjust subnets and ranges to remove hardcoding for dynamic generation (smaller cidr for inspections)

* template var passes between deployment and modules

* AWS SSM integration for keystore/passwords

* flow log addition/creation for CIS Foundations

* AWS Security HUB(?)

terraform/f5-sgw-ts/modules/functions/bigip/vars.tf

+4 −0
Original line number Diff line number Diff line
@@ -34,6 +34,10 @@ variable "keyname" { 


}



variable "keyfile" {



}



variable "vpcid" {



}

terraform/f5-sgw-ts/modules/functions/docker/vars.tf

+4 −0
Original line number Diff line number Diff line
@@ -26,4 +26,8 @@ variable "keyname" { 


}



variable "keyfile" {



}



variable "vpcid" {}
 
 No newline at end of file

terraform/f5-sgw-ts/modules/functions/jumpbox/main.tf

+3 −3
Original line number Diff line number Diff line
@@ -107,7 +107,7 @@ resource "null_resource" "transfer" { 
    connection {

      type        = "ssh"

      user        = "ubuntu"

      private_key = file(var.keyname)

      private_key = file(var.keyfile)

      host        = module.jumphost.public_ip[count.index]

    }

  }
@@ -121,7 +121,7 @@ data "aws_network_interface" "bar" { 
resource "aws_eip" "juiceshop" {

  count                     = length(var.azs)

  vpc                       = true

  network_interface         = "${data.aws_network_interface.bar[count.index].id}"

  network_interface         = data.aws_network_interface.bar[count.index].id

  associate_with_private_ip = element(flatten(data.aws_network_interface.bar[count.index].private_ips), 1)

  tags = {

    Name = format("%s-juiceshop-eip-%s%s", var.prefix, var.random.hex, count.index)
@@ -131,7 +131,7 @@ resource "aws_eip" "juiceshop" { 
resource "aws_eip" "grafana" {

  count                     = length(var.azs)

  vpc                       = true

  network_interface         = "${data.aws_network_interface.bar[count.index].id}"

  network_interface         = data.aws_network_interface.bar[count.index].id

  associate_with_private_ip = element(flatten(data.aws_network_interface.bar[count.index].private_ips), 2)

  tags = {

    Name = format("%s-grafana-eip-%s%s", var.prefix, var.random.hex, count.index)

terraform/f5-sgw-ts/modules/functions/jumpbox/vars.tf

+3 −0
Original line number Diff line number Diff line
@@ -26,6 +26,9 @@ variable "keyname" { 


}



variable "keyfile" {



}

variable "vpcid" {



}