浏览代码

Updates SH module to latest and adds legacy IPs to vpc-system-services

Fred Damstra 4 年之前
父节点
当前提交
74b7b5db5a

+ 1 - 1
prod/aws-us-gov/mdr-prod-c2/170-splunk-searchhead/terragrunt.hcl

@@ -13,7 +13,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/searchhead?ref=v1.10.17"
+  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/searchhead?ref=v1.20.6"
 }
 
 dependency "vpc" {

+ 4 - 4
prod/env.hcl

@@ -44,10 +44,10 @@ locals {
                              ],
 
     "vpc-private-services" = [
-                               "10.40.28.0/22",                  # Private Services - fm-shared-search, qcompliance, phantom, etc.
-                               "10.80.101.221/32",               # Phantom - legacy account production
-                               "10.80.0.0/16",                   # the whole legacy infra VPC, so the sync lambda can sync (this is temp)
-                                                                 # (wes made me do it honest)
+                               "10.40.28.0/22",    # Private Services - fm-shared-search, qcompliance, phantom, etc.
+                               "10.80.101.221/32", # Phantom - legacy account production
+                               "10.80.0.0/16",     # the whole legacy infra VPC, so the sync lambda can sync (this is temp)
+                                                   # (wes made me do it honest)
                              ],
 
     # "old" mappings before architecture planning... we should eliminate these.

+ 1 - 1
test/aws-us-gov/mdr-test-c2/170-splunk-searchhead/terragrunt.hcl

@@ -13,7 +13,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/searchhead?ref=v1.0.0"
+  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/searchhead?ref=v1.20.6"
 }
 
 dependency "vpc" {

+ 3 - 0
test/env.hcl

@@ -41,6 +41,9 @@ locals {
                                "10.96.1.160/32",   # legacy smtp
                              ],
     "vpc-private-services" = [ "10.20.28.0/22",    # Private Services - fm-shared-search, qcompliance, phantom, etc. 
+                               "10.96.101.221/32", # Phantom - legacy account production
+                               "10.96.0.0/16",     # the whole legacy infra VPC, so the sync lambda can sync (this is temp)
+                                                   # (wes made me do it honest)
                              ],
 
     # "old" mappings before architecture planning... we should eliminate these.