Fixes Vault nodes access issue due to missing SGs

Flaconi · Jul 29, 2021 · 8715d87 · 8715d87
1 parent 04fc821
commit 8715d87
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/modules/consul-cluster/main.tf b/modules/consul-cluster/main.tf
@@ -29,6 +29,12 @@ resource "aws_autoscaling_group" "autoscaling_group" {
     ],
     local.tags_asg_format,
   )
+
+  lifecycle {
+    ignore_changes = [
+      load_balancers,
+    ]
+  }
 }
 
 resource "aws_launch_configuration" "launch_configuration" {

diff --git a/modules/vault-cluster/main.tf b/modules/vault-cluster/main.tf
@@ -41,6 +41,13 @@ resource "aws_launch_configuration" "launch_configuration" {
   iam_instance_profile = aws_iam_instance_profile.instance_profile.name
   placement_tenancy    = var.tenancy
 
+  security_groups = [
+    module.lc_security_group.security_group_id,
+    module.attach_security_group.security_group_id,
+  ]
+
+  associate_public_ip_address = false
+
   ebs_optimized = var.root_volume_ebs_optimized
   root_block_device {
     volume_type           = var.root_volume_type