Documents RIs for NGA and Drops Cluster to 2

prod/aws-us-gov/mdr-prod-nga/150-splunk-cluster-master/terragrunt.hcl

@@ -34,6 +34,11 @@ inputs = {
     Purpose = "Splunk Cluster Master"
     Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
   }
+  instance_tags = {
+    Reserved = true
+    Reserved_Type = "m5a.xlarge"
+    Reservation_Expiration = "2023-02-22"
+  }
   prefix = local.account_vars.locals.splunk_prefix
   instance_type = local.account_vars.locals.instance_types["splunk-cm"]
   vpc_id = dependency.vpc.outputs.vpc_id

prod/aws-us-gov/mdr-prod-nga/160-splunk-indexer-cluster/terragrunt.hcl

@@ -34,6 +34,23 @@ inputs = {
     Purpose = "Splunk Indexer Cluster"
     Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
   }
+  instance_tags = [
+    {
+      Reserved = true
+      Reserved_Type = "i3en.3xlarge"
+      Reservation_Expiration = "2023-02-22"
+    },
+    {
+      Reserved = true
+      Reserved_Type = "i3en.3xlarge"
+      Reservation_Expiration = "2023-02-22"
+    },
+    {
+      Reserved = false
+      Reserved_Type = ""
+      Reservation_Expiration = ""
+    }
+  ]
   prefix = local.account_vars.locals.splunk_prefix
   instance_type = local.account_vars.locals.instance_types["splunk-indexer"]
   vpc_id = dependency.vpc.outputs.vpc_id

prod/aws-us-gov/mdr-prod-nga/170-splunk-searchhead/terragrunt.hcl

@@ -34,6 +34,11 @@ inputs = {
     Purpose = "Splunk Searchhead"
     Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
   }
+  instance_tags = {
+    Reserved = true
+    Reserved_Type = "m5a.4xlarge"
+    Reservation_Expiration = "2023-02-22"
+  }
   prefix = local.account_vars.locals.splunk_prefix
   instance_type = local.account_vars.locals.instance_types["splunk-sh"]
   vpc_id = dependency.vpc.outputs.vpc_id

prod/aws-us-gov/mdr-prod-nga/180-splunk-heavy-forwarder/terragrunt.hcl

@@ -34,6 +34,11 @@ inputs = {
     Purpose = "Splunk Heavy Forwarder"
     Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
   }
+  instance_tags = {
+    Reserved = true
+    Reserved_Type = "m5a.xlarge"
+    Reservation_Expiration = "2023-02-22"
+  }
   prefix = local.account_vars.locals.splunk_prefix
   instance_type = local.account_vars.locals.instance_types["splunk-hf"]
   vpc_id = dependency.vpc.outputs.vpc_id

prod/aws-us-gov/mdr-prod-nga/account.hcl

@@ -13,7 +13,7 @@ locals {
     "199.16.64.3/32", # TODO: Add customer's public IP addresses
   ]
   splunk_legacy_cidr = [ "10.2.0.0/22" ] # Should not be needed for new customers
-  splunk_asg_sizes   = [ 1, 1, 1 ] # How many indexers in each site
+  splunk_asg_sizes   = [ 1, 1, 0 ] # How many indexers in each site
   
   account_tags = {
     "Client": local.splunk_prefix,
@@ -40,10 +40,10 @@ locals {
   instance_types = {
     "alsi-master"    = "t3a.small",
     "alsi-worker"    = "t3a.small",
-    "splunk-cm"      = "m5a.xlarge",  # legacy: t2.small
-    "splunk-indexer" = "i3en.3xlarge", # legacy: t2.small, but whats the point if we don't have instance storage.
-    "splunk-hf"      = "m5a.xlarge", # legacy: t2.medium
-    "splunk-sh"      = "m5a.4xlarge", # legacy: ? not sure
+    "splunk-cm"      = "m5a.xlarge",
+    "splunk-indexer" = "i3en.3xlarge",
+    "splunk-hf"      = "m5a.xlarge",
+    "splunk-sh"      = "m5a.4xlarge",
   }
 
   # Splunk Volume Sizes are probably fine at defaults