File tree Expand file tree Collapse file tree 4 files changed +85
-8
lines changed
enos/modules/aws_rdp_member_server_with_worker Expand file tree Collapse file tree 4 files changed +85
-8
lines changed Original file line number Diff line number Diff line change @@ -311,11 +311,12 @@ resource "local_file" "worker_config" {
311
311
enos_local_exec . add_boundary_cli ,
312
312
]
313
313
content = templatefile (" ${ path . module } /scripts/worker.hcl" , {
314
- controller_ip = var.controller_ip
315
- aws_kms_key = data.aws_kms_key.kms_key.id
316
- aws_region = var.aws_region
317
- worker_public_ip = aws_instance.worker.public_ip
318
- test_dir = local.test_dir
314
+ controller_ip = var.controller_ip
315
+ aws_kms_key = data.aws_kms_key.kms_key.id
316
+ aws_region = var.aws_region
317
+ worker_public_ip = aws_instance.worker.public_ip
318
+ test_dir = local.test_dir
319
+ hcp_boundary_cluster_id = var.hcp_boundary_cluster_id
319
320
})
320
321
filename = " ${ path . root } /.terraform/tmp/worker.hcl"
321
322
}
Original file line number Diff line number Diff line change 4
4
# disable memory from being swapped to disk
5
5
disable_mlock = true
6
6
7
- # Increase log level for debuggin
7
+ # Increase log level for debugging
8
8
log_level = " debug"
9
9
10
10
# listener denoting this is a worker proxy
@@ -20,7 +20,7 @@ worker {
20
20
name = " win-worker-0"
21
21
initial_upstreams = [" [${ controller_ip } ]:9201" ]
22
22
tags {
23
- type = [" worker" , " egress " , " windows" ]
23
+ type = [" worker" , " rdp " , " windows" ]
24
24
}
25
25
}
26
26
Original file line number Diff line number Diff line change
1
+ # Copyright (c) HashiCorp, Inc.
2
+ # SPDX-License-Identifier: BUSL-1.1
3
+
4
+ # disable memory from being swapped to disk
5
+ disable_mlock = true
6
+
7
+ # Increase log level for debugging
8
+ log_level = " debug"
9
+
10
+ # listener denoting this is a worker proxy
11
+ listener "tcp" {
12
+ address = " 0.0.0.0:9202"
13
+ purpose = " proxy"
14
+ }
15
+
16
+ hcp_boundary_cluster_id = " ${ hcp_boundary_cluster_id } "
17
+
18
+ # worker block for configuring the specifics of the
19
+ # worker service
20
+ worker {
21
+ public_addr = " ${ worker_public_ip } "
22
+ tags {
23
+ type = [" worker" , " rdp" , " windows" ]
24
+ }
25
+
26
+ auth_storage_path = " ${ test_dir } /worker"
27
+ recording_storage_path = " ${ test_dir } /recordings"
28
+ }
29
+
30
+ # Events (logging) configuration. This
31
+ # configures logging for ALL events to both
32
+ # stderr and a file at ${test_dir}<boundary_use>.log
33
+ events {
34
+ audit_enabled = true
35
+ sysevents_enabled = true
36
+ observations_enable = true
37
+ sink "stderr" {
38
+ name = " all-events"
39
+ description = " All events sent to stderr"
40
+ event_types = [" *" ]
41
+ format = " cloudevents-json"
42
+ }
43
+ sink {
44
+ name = " file-sink"
45
+ description = " All events sent to a file"
46
+ event_types = [" *" ]
47
+ format = " cloudevents-json"
48
+ file {
49
+ path = " ${ test_dir } "
50
+ file_name = " worker.log"
51
+ }
52
+ audit_config {
53
+ audit_filter_overrides {
54
+ sensitive = " redact"
55
+ secret = " redact"
56
+ }
57
+ }
58
+ }
59
+ }
Original file line number Diff line number Diff line change @@ -109,4 +109,21 @@ variable "domain_controller_private_key" {
109
109
variable "domain_controller_sec_group_id_list" {
110
110
type = list (any )
111
111
description = " ID's of AWS Network Security Groups created during creation of the domain controller."
112
- }
112
+ }
113
+
114
+ # =================================================================
115
+ # Boundary Worker Configuration
116
+ # =================================================================
117
+ variable "worker_config_file_path" {
118
+ description = " Path to config file to use (relative to module directory)"
119
+ type = string
120
+ default = " scripts/worker.hcl"
121
+ }
122
+
123
+ variable "hcp_boundary_cluster_id" {
124
+ description = " ID of the Boundary cluster in HCP"
125
+ type = string
126
+ default = " "
127
+ // If using HCP int, ensure that the cluster id starts with "int-"
128
+ // Example: "int-19283a-123123-..."
129
+ }
You can’t perform that action at this time.
0 commit comments