Page MenuHomePhabricator

[terraform] create separate lb security groups for landing and web
ClosedPublic

Authored by will on Jul 24 2024, 12:57 PM.
Tags
None
Referenced Files
F3369139: D12875.diff
Mon, Nov 25, 9:58 PM
Unknown Object (File)
Tue, Nov 12, 12:25 PM
Unknown Object (File)
Sat, Nov 9, 9:11 AM
Unknown Object (File)
Fri, Nov 8, 3:25 AM
Unknown Object (File)
Fri, Nov 1, 12:31 PM
Unknown Object (File)
Oct 22 2024, 10:24 PM
Unknown Object (File)
Oct 14 2024, 12:23 PM
Unknown Object (File)
Oct 14 2024, 12:23 PM
Subscribers

Details

Summary

Originally used a shared lb-sg but this is a bad idea given that the disabling ingress approach for the migration script would disable traffic for the webapp and landing page, not just
the keyserver.

Depends on D12874

Test Plan

terraform apply and was able to access landing page and webapp at custom domains

Diff Detail

Repository
rCOMM Comm
Branch
keyserver_to_aws
Lint
No Lint Coverage
Unit
No Test Coverage

Event Timeline

will requested review of this revision.Jul 24 2024, 1:15 PM
bartek added inline comments.
services/terraform/self-host/landing.tf
168

Can we be more specific here?

services/terraform/self-host/webapp.tf
168

Can we be more specific here?

This revision is now accepted and ready to land.Jul 25 2024, 6:51 AM
services/terraform/self-host/landing.tf
168

Thanks for catching that. Including in next rebase

services/terraform/self-host/webapp.tf
168

Same as above. Including in next rebase

update descriptions for landing and webapp security groups