xdr-terraform-live/test/env.hcl

# Set common variables for the environment. This is automatically pulled in in the root terragrunt.hcl configuration to
# feed forward to the child modules.
locals {
  environment = "test"
  transit_gateway_account_name = "mdr-test-c2" # Which account has the transit gateway

  environment_tags = {
    Environment = local.environment
  }

  proxy = "proxy.msoc.defpoint.local"
  proxy_ip = "10.96.101.188"
  salt_master = "salt-master.msoc.defpoint.local"
  salt_master_ip = "10.96.101.161"
  hec = "iratemoses.pvt.xdrtest.accenturefederalcyber.com"
  hec_pub = "iratemoses.mdr-test.defpoint.com"

  # Todo: Add CIDRs from new environment as they are assigned
  # When there are multiples, put govcloud first, then commercial, and alternate if there are more than 2.
  # Put any standalone IPs at the end.
  cidr_map = {
    "bastions" = [ "10.96.101.218/32" ],
    "vpns"     = [ "10.96.101.249/32" ],
    "scanners" = [ "10.20.12.0/22" ],
    "dns"      = [ "10.20.0.0/22", "10.16.0.0/22" ], # DNS is in standard
    "monitoring" = [ "10.96.101.43/32" ],
    "salt"     = [ "10.96.101.161/32" ],
    "web"      = [ "10.96.101.188/32", "10.96.101.160/32" ], # Things systems need http/https access to, such as the proxy and the rep
    "smtp"     = [ "10.96.1.160/32" ],
    "moose"    = [ "10.96.0.0/16" ],
  }

  legacy_account = "527700175026"
  c2_accounts = {
    "aws-us-gov" = "738800754746" # mdr-test-c2-gov
    "aws"        = "816914342178" # mdr-test-c2
  }

  dns_servers = [
    "10.20.2.64",
    "10.16.2.123",
  ]
  inbound_resolver_endpoints = [
    "10.20.0.119",
    "10.20.0.211",
  ]
  dns_info = {
    "private" = {
      zone = "pvt.xdrtest.accenturefederalcyber.com",
      zone_id = "Z08514662ZGG8BM81TKD5"
    }
    "reverse" = {
      zone = "10.in-addr.arpa"
      zone_id = "Z08479312XJFUS20YJUJO"
    }
    "public" = {
      zone = "xdrtest.accenturefederalcyber.com" 
      zone_id = "Z01677392W0QM639KU2KC"
    }
  }

  # Legacy DNS
  dns_private = {
    "id" = "Z39OIGEKXXGJZ2"
    "name" = "msoc.defpoint.local"
  }
  dns_private2 = {
    "id" = "Z13C1OOJMG0BJ7", #zone 2
    "name" = "mdr-test.defpoint.com"
  }
  dns_public = {
    "id" = "Z3E22S3CIP0UCO",
    "name" = "mdr-test.defpoint.com"
  }

  # Provide some legacy DNS entries so that systems we build
  # don't have to be rebuilt when we migrate the supporting systems.
  # Idea here is just to build entries for those systems we need during
  # the transition.
  #
  # When you migrate one of the systems below:
  # 1) Remove the entry from this list.
  # 2) Reapply the legacy-mdr-*/026-legacy-dns-entries module.
  # 3) Create a new entry in the module with which you're creating the new instance.
  legacy_private_dns = {
    #"moose-splunk-cm" = "10.96.101.87",
    #"moose-splunk-hf" = "10.96.101.75",
    #"moose-splunk-sh" = "10.96.101.59",
    #"clu" = "10.96.101.122",
    #"fm-shared-search" = "10.96.1.39",
    #"ghe-backup" = "10.96.101.71",
    "mailrelay" = "10.96.1.160",
    #"openvpn" = "10.96.101.249",
    #"phantom" = "10.96.101.186",
    "proxy" = "10.96.101.188",
    "reposerver" = "10.96.101.160",
    "sensu" = "10.96.101.43",
    #"splunk-mc" = "10.96.1.133",
    #"vault-1" = "10.96.1.38",
    #"vault-2" = "10.96.2.63",
    #"vault-3" = "10.96.3.88",
    "salt-master" = "10.96.101.161",
  }
  legacy_private_cname_dns = {
    "iratemoses" = "internal-moose-internal-1036948608.us-east-1.elb.amazonaws.com."
  }
  # not many public entries, as the use of saml negates their usefulness
  legacy_public_dns = {
    "bastion" = "34.237.123.128",
    "proxy" = "18.214.39.158",
    "reposerver" = "34.202.16.40",
    "salt-master" = "18.233.43.236",
    "sensu" = "34.235.81.176"
  }
  # cnames only
  legacy_public_cname_dns = {
    "iratemoses" = "moose-external-1512880739.us-east-1.elb.amazonaws.com",
    "portal" = "portal-alb-test-868493124.us-east-1.elb.amazonaws.com"
  }
}