Skip to content

Commit

Permalink
terraform: remove okta, github apps (now preset apps) (#11)
Browse files Browse the repository at this point in the history
  • Loading branch information
clstokes authored Apr 15, 2024
1 parent a99976c commit 8ad515a
Show file tree
Hide file tree
Showing 23 changed files with 17 additions and 236 deletions.
6 changes: 2 additions & 4 deletions terraform/aws/aws-ec2-autoscaling-dual-subnet/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -71,10 +71,8 @@ module "tailscale_aws_ec2_autoscaling" {
]

tailscale_advertise_connector = true
# tailscale_advertise_github_service_names = [
# "api",
# "packages",
# "website",
# tailscale_advertise_aws_service_names = [
# "GLOBALACCELERATOR",
# ]

depends_on = [
Expand Down
17 changes: 4 additions & 13 deletions terraform/aws/aws-ec2-autoscaling/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -55,24 +55,15 @@ module "tailscale_aws_ec2_autoscaling" {
tailscale_set_preferences = var.tailscale_set_preferences
tailscale_ssh = true
tailscale_advertise_exit_node = true
tailscale_advertise_connector = true

tailscale_advertise_routes = [
module.vpc.vpc_cidr_block,
]

tailscale_advertise_aws_service_names = [
"GLOBALACCELERATOR",
]
tailscale_advertise_github_service_names = [
"api",
"packages",
"website",
]
tailscale_advertise_okta_cell_names = [
"us_cell_1",
"emea_cell_2",
]
tailscale_advertise_connector = true
# tailscale_advertise_aws_service_names = [
# "GLOBALACCELERATOR",
# ]

depends_on = [
module.vpc.natgw_ids, # ensure NAT gateway is available before instance provisioning - primarily for private subnets
Expand Down
5 changes: 0 additions & 5 deletions terraform/aws/aws-ec2-instance-dual-stack-ipv4-ipv6/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -53,11 +53,6 @@ module "tailscale_aws_ec2" {
)

tailscale_advertise_connector = true
# tailscale_advertise_github_service_names = [
# "api",
# "packages",
# "website",
# ]

depends_on = [
module.vpc.natgw_ids, # ensure NAT gateway is available before instance provisioning - primarily for private subnets
Expand Down
2 changes: 1 addition & 1 deletion terraform/aws/aws-ec2-instance/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ module "tailscale_aws_ec2" {
]

tailscale_advertise_connector = true
# tailscale_advertise_github_service_names = [
# tailscale_advertise_aws_service_names = [
# "GLOBALACCELERATOR",
# ]

Expand Down
6 changes: 2 additions & 4 deletions terraform/aws/internal-modules/aws-ec2-autoscaling/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,8 @@ module "tailscale_install_scripts" {
tailscale_set_preferences = var.tailscale_set_preferences
tailscale_ssh = var.tailscale_ssh

tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names
tailscale_advertise_github_service_names = var.tailscale_advertise_github_service_names
tailscale_advertise_okta_cell_names = var.tailscale_advertise_okta_cell_names
tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names

additional_before_scripts = var.additional_before_scripts
additional_after_scripts = var.additional_after_scripts
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,13 +57,3 @@ variable "tailscale_advertise_aws_service_names" {
type = set(string)
default = []
}
variable "tailscale_advertise_github_service_names" {
description = "List of GitHub Services to retrieve IP prefixes for - e.g. ['web','api']"
type = set(string)
default = []
}
variable "tailscale_advertise_okta_cell_names" {
description = "List of Okta cells to retrieve IP prefixes for - e.g. ['us_cell_1','emea_cell_2']"
type = set(string)
default = []
}
6 changes: 2 additions & 4 deletions terraform/aws/internal-modules/aws-ec2-instance/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,8 @@ module "tailscale_install_scripts" {
tailscale_set_preferences = var.tailscale_set_preferences
tailscale_ssh = var.tailscale_ssh

tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names
tailscale_advertise_github_service_names = var.tailscale_advertise_github_service_names
tailscale_advertise_okta_cell_names = var.tailscale_advertise_okta_cell_names
tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names

additional_before_scripts = var.additional_before_scripts
additional_after_scripts = var.additional_after_scripts
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,13 +57,3 @@ variable "tailscale_advertise_aws_service_names" {
type = set(string)
default = []
}
variable "tailscale_advertise_github_service_names" {
description = "List of GitHub Services to retrieve IP prefixes for - e.g. ['web','api']"
type = set(string)
default = []
}
variable "tailscale_advertise_okta_cell_names" {
description = "List of Okta cells to retrieve IP prefixes for - e.g. ['us_cell_1','emea_cell_2']"
type = set(string)
default = []
}
5 changes: 0 additions & 5 deletions terraform/azure/azure-linux-vm/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -66,11 +66,6 @@ module "tailscale_azure_linux_virtual_machine" {
tailscale_advertise_routes = module.network.vnet_address_space

tailscale_advertise_connector = true
# tailscale_advertise_github_service_names = [
# "api",
# "packages",
# "website",
# ]

depends_on = [
module.network.natgw_ids, # for private subnets - ensure NAT gateway is available before instance provisioning
Expand Down
6 changes: 2 additions & 4 deletions terraform/azure/internal-modules/azure-linux-vm/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,8 @@ module "tailscale_install_scripts" {
tailscale_set_preferences = var.tailscale_set_preferences
tailscale_ssh = var.tailscale_ssh

tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names
tailscale_advertise_github_service_names = var.tailscale_advertise_github_service_names
tailscale_advertise_okta_cell_names = var.tailscale_advertise_okta_cell_names
tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names

additional_before_scripts = var.additional_before_scripts
additional_after_scripts = var.additional_after_scripts
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,13 +57,3 @@ variable "tailscale_advertise_aws_service_names" {
type = set(string)
default = []
}
variable "tailscale_advertise_github_service_names" {
description = "List of GitHub Services to retrieve IP prefixes for - e.g. ['web','api']"
type = set(string)
default = []
}
variable "tailscale_advertise_okta_cell_names" {
description = "List of Okta cells to retrieve IP prefixes for - e.g. ['us_cell_1','emea_cell_2']"
type = set(string)
default = []
}
5 changes: 0 additions & 5 deletions terraform/google/google-compute-instance/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -59,11 +59,6 @@ module "tailscale_instance" {
tailscale_advertise_routes = module.vpc.subnets_ips

tailscale_advertise_connector = true
# tailscale_advertise_github_service_names = [
# "api",
# "packages",
# "website",
# ]

depends_on = [
module.vpc.nat_ids, # ensure NAT gateway is available before instance provisioning - primarily for private subnets
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,8 @@ module "tailscale_install_scripts" {
tailscale_set_preferences = var.tailscale_set_preferences
tailscale_ssh = var.tailscale_ssh

tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names
tailscale_advertise_github_service_names = var.tailscale_advertise_github_service_names
tailscale_advertise_okta_cell_names = var.tailscale_advertise_okta_cell_names
tailscale_advertise_routes = var.tailscale_advertise_routes
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names

additional_before_scripts = var.additional_before_scripts
additional_after_scripts = var.additional_after_scripts
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -57,13 +57,3 @@ variable "tailscale_advertise_aws_service_names" {
type = set(string)
default = []
}
variable "tailscale_advertise_github_service_names" {
description = "List of GitHub Services to retrieve IP prefixes for - e.g. ['web','api']"
type = set(string)
default = []
}
variable "tailscale_advertise_okta_cell_names" {
description = "List of Okta cells to retrieve IP prefixes for - e.g. ['us_cell_1','emea_cell_2']"
type = set(string)
default = []
}
52 changes: 0 additions & 52 deletions terraform/internal-modules/tailscale-advertise-routes/github.tf

This file was deleted.

4 changes: 0 additions & 4 deletions terraform/internal-modules/tailscale-advertise-routes/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -3,15 +3,11 @@ locals {
# boolean - do we have any routes to advertise?
length(var.tailscale_advertise_routes)
+ length(var.tailscale_advertise_aws_service_names)
+ length(var.tailscale_advertise_github_service_names)
+ length(var.tailscale_advertise_okta_cell_names)
) == 0

saas_routes_to_advertise = (
# boolean - do we have any **SaaS** routes to advertise?
length(var.tailscale_advertise_aws_service_names)
+ length(var.tailscale_advertise_github_service_names)
+ length(var.tailscale_advertise_okta_cell_names)
) == 0

advertise_routes_script = local.routes_to_advertise ? "" : templatefile(
Expand Down
15 changes: 0 additions & 15 deletions terraform/internal-modules/tailscale-advertise-routes/okta.tf

This file was deleted.

Original file line number Diff line number Diff line change
@@ -1,13 +1,11 @@
/**
* See other files for vendor-specific variables/outputs - `aws.tf`, `github.tf`, etc.
* See other files for vendor-specific variables/outputs - `aws.tf`, etc.
*/

output "routes_script" {
description = "Sript to fetch, parse, and save routes to `var.routes_file_to_append`"
value = join("\n", compact([
local.aws_routes_script,
local.github_routes_script,
local.okta_routes_script,
local.advertise_routes_script,
]))
}
Expand Down

This file was deleted.

This file was deleted.

Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
/**
* See other files for vendor-specific variables/outputs - `aws.tf`, `github.tf`, etc.
* See other files for vendor-specific variables/outputs - `aws.tf`, etc.
*/

variable "tailscale_advertise_routes_from_file_on_host" {
Expand Down
2 changes: 0 additions & 2 deletions terraform/internal-modules/tailscale-install-scripts/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,4 @@ module "tailscale-advertise-routes" {

tailscale_advertise_routes_from_file_on_host = "/root/tailscale-routes-to-advertise.txt"
tailscale_advertise_aws_service_names = var.tailscale_advertise_aws_service_names
tailscale_advertise_github_service_names = var.tailscale_advertise_github_service_names
tailscale_advertise_okta_cell_names = var.tailscale_advertise_okta_cell_names
}
10 changes: 0 additions & 10 deletions terraform/internal-modules/tailscale-install-scripts/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -57,13 +57,3 @@ variable "tailscale_advertise_aws_service_names" {
type = set(string)
default = []
}
variable "tailscale_advertise_github_service_names" {
description = "List of GitHub Services to retrieve IP prefixes for - e.g. ['web','api']"
type = set(string)
default = []
}
variable "tailscale_advertise_okta_cell_names" {
description = "List of Okta cells to retrieve IP prefixes for - e.g. ['us_cell_1','emea_cell_2']"
type = set(string)
default = []
}

0 comments on commit 8ad515a

Please sign in to comment.