terraform-modules
terraform-modules copied to clipboard
dsaidgovsg
Reusable Terraform modules
For end to end TLS for Vault See https://www.vaultproject.io/guides/operations/production.html Make this be "optional"
Including: - IP Address in octet format (currently, the host name is something obscure like "ip-10-123-123-123" which is not nice to work with - EC2 Instance ID Retrieve it from...
Some of them can be run as Nomad Jobs. - [ ] [Consul service metrics](https://github.com/influxdata/telegraf/tree/release-1.7/plugins/inputs/consul) - [ ] [Elasticsearch](https://github.com/influxdata/telegraf/tree/release-1.7/plugins/inputs/elasticsearch) metrics. Circular dependency? - [ ] [Fluentd](https://github.com/influxdata/telegraf/tree/release-1.7/plugins/inputs/fluentd) - [ ] [Docker](https://github.com/influxdata/telegraf/tree/release-1.7/plugins/inputs/docker)...
Find some mechanism to register a health check with Consul. This will not check that logs are being delivered. We need some form of "absence" monitoring.
Register Health Check in Consul by opening a connection to its [socket_listener](https://github.com/influxdata/telegraf/tree/release-1.7/plugins/inputs/socket_listener). This won't check that the agent is actually collecting and sending stats. We probably need some other kind...
https://github.com/hashicorp/terraform-aws-nomad/tree/master/modules/run-nomad#how-do-you-handle-encryption
- Nomad Client - Nomad Server - Consul Server - Vault
- [ ] Vault TLS Private Key - [ ] Nomad's Vault configuration file containing the token
https://www.nomadproject.io/docs/agent/encryption.html
https://www.consul.io/docs/agent/encryption.html