xdr-terraform-modules/base/splunk_servers/heavy_forwarder/config.tf

locals {

  instance_type_default = "m5a.xlarge"
  instance_type_exceptions = {
    mdr-prod-afs                 = "m5a.2xlarge",
    afs-mdr-prod-c2-gov          = "m5a.4xlarge",
    afs-mdr-test-c2-gov          = "t3a.small",
    afs-mdr-test-modelclient-gov = "t3a.small",
  }
  instance_type = lookup(local.instance_type_exceptions, var.account_name, local.instance_type_default)

  volume_sizes_default = {
    "swap" : 8,           # minimum: 8
    "/" : 20,             # minimum: 10
    "/home" : 4,          # minimum: 4
    "/var" : 15,          # minimum: 15
    "/var/tmp" : 4,       # minimum: 4
    "/var/log" : 8,       # minimum: 8
    "/var/log/audit" : 8, # minimum: 8
    "/tmp" : 4,           # minimum: 4
    "/opt/splunk" : 30,   # No minimum; not in base image
  }
  volume_sizes_exceptions = {
    afs-mdr-test-c2-gov = {
      "swap" : 8,           # minimum: 8
      "/" : 20,             # minimum: 20
      "/home" : 4,          # minimum: 4
      "/var" : 15,          # minimum: 15
      "/var/tmp" : 4,       # minimum: 4
      "/var/log" : 8,       # minimum: 8
      "/var/log/audit" : 8, # minimum: 8
      "/tmp" : 4,           # minimum: 4
      "/opt/splunk" : 60,   # No minimum; not in base image
    },
  }
  volume_sizes = lookup(local.volume_sizes_exceptions, var.account_name, local.volume_sizes_default)
}