[terraform] Allow all ip addresses to access self-host internet gateway
AbandonedPublic
Actions

Authored by will on Jun 20 2024, 8:15 PM.

Details

Reviewers

varun
bartek

Summary

Setting this to allow any ip to access the internet gateway. This is necessary to allow ecs tasks to pull keyserver images

Depends on D12475

Test Plan

Successfully pulled keyserver image when initializing docker container

Diff Detail

Repository

rCOMM Comm

Lint

No Lint Coverage

Unit

No Test Coverage

Event Timeline

will created this revision.Jun 20 2024, 8:15 PM

Herald added subscribers: tomek, ashoat. · View Herald TranscriptJun 20 2024, 8:15 PM

will retitled this revision from [terraform] Allow all ip addresses to access internet gateway to [terraform] Allow all ip addresses to access self-host internet gateway.Jun 20 2024, 8:16 PM

will edited the summary of this revision. (Show Details)

will added a parent revision: D12528: [terraform] run mariadb in public db group.

will added a child revision: D12531: [terraform] initial ecs setup for keyserver primary.Jun 20 2024, 8:30 PM

Harbormaster completed remote builds in B29852: Diff 41587.Jun 20 2024, 8:30 PM

will requested review of this revision.Jun 20 2024, 8:30 PM

bartek accepted this revision.Jun 21 2024, 11:21 PM

This revision is now accepted and ready to land.Jun 21 2024, 11:21 PM

will edited the summary of this revision. (Show Details)Jul 12 2024, 11:12 AM

will added a parent revision: D12475: [keyserver] upgrade redis to version 7 on docker based keyserver.

will removed a parent revision: D12528: [terraform] run mariadb in public db group.

will abandoned this revision.Jul 17 2024, 6:56 PM

will removed a child revision: D12531: [terraform] initial ecs setup for keyserver primary.

will removed a parent revision: D12475: [keyserver] upgrade redis to version 7 on docker based keyserver.

Revision Contents
Changeset List

Path

Size

services/

terraform/

self-host/

aws_vpc.tf

2 lines

Diff 41587

View Options

services/terraform/self-host/aws_vpc.tf

Show All 18 Lines	import {
keyserverRegisterActionTypes,		keyserverRegisterActionTypes,
logInActionTypes,		logInActionTypes,
resetUserStateActionType,		resetUserStateActionType,
} from '../actions/user-actions.js';		} from '../actions/user-actions.js';
import { setNewSessionActionType } from '../keyserver-conn/keyserver-conn-types.js';		import { setNewSessionActionType } from '../keyserver-conn/keyserver-conn-types.js';
import {		import {
keyserverStoreOpsHandlers,		keyserverStoreOpsHandlers,
type ReplaceKeyserverOperation,		type ReplaceKeyserverOperation,
		type RemoveKeyserversOperation,
} from '../ops/keyserver-store-ops.js';		} from '../ops/keyserver-store-ops.js';
import { queueActivityUpdatesActionType } from '../types/activity-types.js';		import { queueActivityUpdatesActionType } from '../types/activity-types.js';
import type { KeyserverInfos, KeyserverStore } from '../types/keyserver-types';		import type { KeyserverInfos, KeyserverStore } from '../types/keyserver-types';
import type { BaseAction } from '../types/redux-types.js';		import type { BaseAction } from '../types/redux-types.js';
import {		import {
fullStateSyncActionType,		fullStateSyncActionType,
incrementalStateSyncActionType,		incrementalStateSyncActionType,
updateConnectionStatusActionType,		updateConnectionStatusActionType,
Show All 24 Lines	const replaceOperation: ReplaceKeyserverOperation = {
},		},
};		};

return {		return {
...state,		...state,
keyserverInfos: processStoreOps(state.keyserverInfos, [replaceOperation]),		keyserverInfos: processStoreOps(state.keyserverInfos, [replaceOperation]),
};		};
} else if (action.type === removeKeyserverActionType) {		} else if (action.type === removeKeyserverActionType) {
const { [action.payload.keyserverAdminUserID]: _, ...rest } =		const removeOperation: RemoveKeyserversOperation = {
state.keyserverInfos;		type: 'remove_keyservers',
		payload: {
		ids: [action.payload.keyserverAdminUserID],
		},
		};

return {		return {
...state,		...state,
keyserverInfos: rest,		keyserverInfos: processStoreOps(state.keyserverInfos, [removeOperation]),
};		};
} else if (action.type === resetUserStateActionType) {		} else if (action.type === resetUserStateActionType) {
// this action is only dispatched on native		// this action is only dispatched on native
const keyserverInfos = { ...state.keyserverInfos };		const keyserverInfos = { ...state.keyserverInfos };
for (const keyserverID in keyserverInfos) {		for (const keyserverID in keyserverInfos) {
const stateCookie = state.keyserverInfos[keyserverID]?.cookie;		const stateCookie = state.keyserverInfos[keyserverID]?.cookie;
const cookie =		const cookie =
stateCookie && stateCookie.startsWith('anonymous=')		stateCookie && stateCookie.startsWith('anonymous=')
▲ Show 20 Lines • Show All 366 Lines • Show Last 20 Lines

[terraform] Allow all ip addresses to access self-host internet gatewayAbandonedPublicActions