diff --git a/terraform/aws-autoscaling-sensor/main.tf b/terraform/aws-autoscaling-sensor/main.tf index 3671c63..c28fd1b 100644 --- a/terraform/aws-autoscaling-sensor/main.tf +++ b/terraform/aws-autoscaling-sensor/main.tf @@ -1,7 +1,7 @@ locals { vpc_id = "" - monitoring_subnet = "" - management_subnet = "" + management_subnet_ids = ["management subnet 1", "management subnet 2"] + monitoring_subnet_ids = ["monitoring subnet 1", "monitoring subnet 2"] sensor_ssh_key_pair_name = "" sensor_ami_id = "" license = "" @@ -9,12 +9,15 @@ locals { terraform : true, purpose : "Corelight" } - fleet_token = "b1cd099ff22ed8a41abc63929d1db126" - fleet_url = "https://fleet.example.com:1443/fleet/v1/internal/softsensor/websocket" + fleet_token = "b1cd099ff22ed8a41abc63929d1db126" + fleet_url = "https://fleet.example.com:1443/fleet/v1/internal/softsensor/websocket" + fleet_server_sslname = "SSL hostname for the fleet server" + } data "aws_subnet" "management" { - id = local.management_subnet + for_each = toset(local.management_subnet_ids) + id = each.value } module "asg_lambda_role" { @@ -22,8 +25,8 @@ module "asg_lambda_role" { lambda_cloudwatch_log_group_arn = module.sensor.cloudwatch_log_group_arn security_group_arn = module.sensor.management_security_group_arn - sensor_autoscaling_group_name = module.sensor.autoscaling_group_name - subnet_arn = data.aws_subnet.management.arn + sensor_autoscaling_group_arn = module.sensor.autoscaling_group_arn + subnet_arns = [for subnet in data.aws_subnet.management : subnet.arn] tags = local.tags } @@ -31,17 +34,17 @@ module "asg_lambda_role" { module "sensor" { source = "github.com/corelight/terraform-aws-sensor" - auto_scaling_availability_zones = ["us-east-1a"] - aws_key_pair_name = local.sensor_ssh_key_pair_name - corelight_sensor_ami_id = local.sensor_ami_id - license_key = local.license - management_subnet_id = local.management_subnet - monitoring_subnet_id = local.monitoring_subnet - community_string = "" - vpc_id = local.vpc_id - asg_lambda_iam_role_arn = module.asg_lambda_role.role_arn - fleet_token = local.fleet_token - fleet_url = local.fleet_url + aws_key_pair_name = local.sensor_ssh_key_pair_name + corelight_sensor_ami_id = local.sensor_ami_id + license_key = local.license + management_subnet_ids = local.management_subnet_ids + monitoring_subnet_ids = local.monitoring_subnet_ids + community_string = "" + vpc_id = local.vpc_id + asg_lambda_iam_role_arn = module.asg_lambda_role.role_arn + fleet_token = local.fleet_token + fleet_url = local.fleet_url + fleet_server_sslname = local.fleet_server_sslname tags = local.tags }