terraform-aws-executors/main.tf at main · sourcegraph/terraform-aws-executors · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
module "aws-networking" {
  source = "./modules/networking"

  randomize_resource_names = var.randomize_resource_names
  resource_prefix          = var.executor_resource_prefix
  availability_zone        = var.availability_zone
  nat                      = var.private_networking
}

module "aws-docker-mirror" {
  source = "./modules/docker-mirror"

  randomize_resource_names               = var.randomize_resource_names
  resource_prefix                        = var.executor_resource_prefix
  vpc_id                                 = module.aws-networking.vpc_id
  subnet_id                              = module.aws-networking.subnet_id
  http_access_cidr_range                 = module.aws-networking.ip_cidr
  machine_ami                            = var.docker_mirror_machine_ami
  machine_type                           = var.docker_mirror_machine_type
  ami_version                            = var.ami_version
  boot_disk_size                         = var.docker_mirror_boot_disk_size
  static_ip                              = var.docker_mirror_static_ip
  ssh_access_cidr_range                  = var.docker_mirror_ssh_access_cidr_range
  instance_tag_prefix                    = var.executor_instance_tag
  assign_public_ip                       = var.private_networking ? false : true
  docker_mirror_access_security_group_id = var.security_group_id
  permissions_boundary_arn               = var.permissions_boundary_arn
}

module "aws-executor" {
  source = "./modules/executors"

  randomize_resource_names                 = var.randomize_resource_names
  resource_prefix                          = var.executor_resource_prefix
  vpc_id                                   = module.aws-networking.vpc_id
  subnet_id                                = module.aws-networking.subnet_id
  machine_image                            = var.executor_machine_image
  machine_type                             = var.executor_machine_type
  ami_version                              = var.ami_version
  boot_disk_size                           = var.executor_boot_disk_size
  preemptible_machines                     = var.executor_preemptible_machines
  instance_tag                             = var.executor_instance_tag
  ssh_access_cidr_range                    = var.executor_ssh_access_cidr_range
  sourcegraph_external_url                 = var.executor_sourcegraph_external_url
  sourcegraph_executor_proxy_password      = var.executor_sourcegraph_executor_proxy_password
  queue_name                               = var.executor_queue_name
  queue_names                              = var.executor_queue_names
  use_firecracker                          = var.executor_use_firecracker
  maximum_runtime_per_job                  = var.executor_maximum_runtime_per_job
  maximum_num_jobs                         = var.executor_maximum_num_jobs
  num_total_jobs                           = var.executor_num_total_jobs
  max_active_time                          = var.executor_max_active_time
  job_num_cpus                             = var.executor_job_num_cpus != "" ? var.executor_job_num_cpus : var.executor_firecracker_num_cpus
  job_memory                               = var.executor_job_memory != "" ? var.executor_job_memory : var.executor_firecracker_memory
  firecracker_disk_space                   = var.executor_firecracker_disk_space
  min_replicas                             = var.executor_min_replicas
  max_replicas                             = var.executor_max_replicas
  jobs_per_instance_scaling                = var.executor_jobs_per_instance_scaling
  metrics_environment_label                = var.executor_metrics_environment_label
  docker_registry_mirror                   = "http://${var.docker_mirror_static_ip}:5000"
  docker_registry_mirror_node_exporter_url = "http://${var.docker_mirror_static_ip}:9999"
  assign_public_ip                         = var.private_networking ? false : true
  metrics_access_security_group_id         = var.security_group_id
  docker_auth_config                       = var.executor_docker_auth_config
  permissions_boundary_arn                 = var.permissions_boundary_arn
  private_ca_cert_path                     = var.private_ca_cert_path
}