Skip to content
This repository has been archived by the owner on Feb 13, 2020. It is now read-only.

EmpaticoOrg/tf_consul

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

83 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Empatico Consul Terraform module

Terraform Consul Module. Can create both server and client agents.

Security

Warning - Enables encryption for the Gossip protocol and turns on ACLs with a single master ACL token. Secures the cluster from access except via the bastion host for SSH. Opens FW rule for HTTP and DNS interfaces but none of the interfaces are bound to an external IP by default. You could update that via the configuration file in the scripts directory. This may or may not be a good idea.

Usage

module "consul" {
  source            = "github.com/EmpaticoOrg/tf_consul"
  environment       = "${var.environment}"
  vpc_id            = "${module.vpc.vpc_id}"
  public_subnet_id  = "${module.vpc.public_subnet_id}"
  role              = "${var.role}"
  app               = "${var.app}"
  region            = "${var.region}"
  key_name          = "${var.key_name}"
  datacenter        = "${var.environment}"
  encryption_key    = "${var.encryption_key}"
  mastertoken       = "${var.mastertoken}"
  domain            = "${var.domain}"
}

Assumes you're building your Consul cluster inside a VPC created from this module.

See interface.tf for additional configurable variables.

License

Modified from Hashicorp's original with thanks to the team there and other contributors for their excellent work. Any broken bits are entirely my fault.

MIT

About

Empatico Consul module

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published