Skip to content
This repository has been archived by the owner on Jul 11, 2023. It is now read-only.

Bastion module. #236

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Bastion module. #236

wants to merge 3 commits into from

Conversation

Magicloud
Copy link
Contributor

Tested via bastion-test example. Fixes #214.


name: Pull request template
about: Make a PR to terraform-aws-foundation

Please include the following in your PR:

Please also note that these are not hard requirements, but merely serve to define
what maintainers are looking for in PR's. Including these will more likely lead
to your PR being reviewed and accepted.

  • Update the changelog
  • Make sure that modules and files are documented. This can be done inside the module and files.
  • Make sure that new modules directories contain a basic README.md file.
  • Make sure that the module is added to tests/main.tf
  • Make sure that the linting passes on CI.
  • Make sure that there is an up to date example for your code:
    - For new modules this would entail example code for how to use the module or some explanation in the module readme.
    - For new examples please provide a README explaining how to run the example. It's also ideal to provide a basic makefile to use the example as well.
  • Make sure that there is a manual CI trigger that can test the deployment.

Abstract a usage pattern for IAM instance profile. The instance level
should setup this module and pass the role name to modules that attach
the policy. Refer to single-node-asg and persistent-ebs for usage.

Simply export profile id for attaching to instance, and role name for
ataching policies.
Since it is single node, binding an EIP to the instance is possible. And
it eases other things since the public interface is constant.

Add assign_eip variable to single-node-asg. If turns it on, an EIP will
be allocated, and assocated with the instance.
@Magicloud Magicloud requested a review from ketzacoatl August 2, 2019 11:48
Setup a ssh bastion for specified VPC. This is useful when managing a VPC.

Simply a single node ASG (with EIP) with SSH-in allowed.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

new module: bastion-host
1 participant