ops.tf

module "ops" {
  source = "github.com/UKHomeOffice/dq-tf-ops"

  providers = {
    aws = aws.ENV_ACCT
  }

  naming_suffix                                = local.naming_suffix
  cidr_block                                   = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.0/16"
  vpc_subnet_cidr_block                        = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.0/24"
  public_subnet_cidr_block                     = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.2.0/24"
  ad_subnet_cidr_block                         = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.4.0/24"
  tableau_subnet_cidr_block                    = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.6.0/24"
  az                                           = "eu-west-2a"
  bastion_linux_ip                             = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.11"
  bastions_windows_ip                          = ["${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.12", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.13", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.14", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.15", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.16"]
  test_bastions_windows_ip                     = ["${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.16", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.17"]
  management_access                            = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.11/32"
  analysis_instance_ip                         = "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.2.8"
  tableau_deployment_ip                        = ["${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.6.10", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.6.11", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.6.12", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.6.13", "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.6.14"]
  ad_aws_ssm_document_name                     = module.ad.ad_aws_ssm_document_name
  ad_writer_instance_profile_name              = module.ad.ad_writer_instance_profile_name
  log_archive_s3_bucket                        = module.apps.log_archive_bucket_id
  httpd_config_bucket_name                     = "s3-dq-httpd-config-bucket-${var.NAMESPACE}"
  data_archive_bucket_name                     = "s3-dq-data-archive-bucket-${var.NAMESPACE}"
  ops_config_bucket                            = "s3-dq-ops-config-${var.NAMESPACE}"
  athena_maintenance_bucket                    = "s3-dq-athena-maintenance-bucket-${var.NAMESPACE}"
  athena_log_bucket                            = module.apps.athena_log_bucket
  aws_bucket_key                               = module.apps.aws_bucket_key
  dq_pipeline_ops_readwrite_database_name_list = module.apps.dq_pipeline_ops_readwrite_database_name_list
  dq_pipeline_ops_readonly_database_name_list  = module.apps.dq_pipeline_ops_readonly_database_name_list
  dq_pipeline_ops_readwrite_bucket_list        = module.apps.dq_pipeline_ops_readwrite_bucket_list
  dq_pipeline_ops_readonly_bucket_list         = module.apps.dq_pipeline_ops_readonly_bucket_list
  apps_aws_bucket_key                          = module.apps.aws_bucket_key
  namespace                                    = var.NAMESPACE

  vpc_peering_connection_ids = {
    ops_and_apps    = aws_vpc_peering_connection.apps_to_ops.id
    ops_and_peering = aws_vpc_peering_connection.peering_to_ops.id
    ops_and_acpvpn  = data.aws_vpc_peering_connection.ops_to_acpvpn.id
  }

  route_table_cidr_blocks = {
    peering_cidr = module.peering.peeringvpc_cidr_block
    apps_cidr    = module.apps.appsvpc_cidr_block
    acp_vpn      = data.aws_vpc_peering_connection.ops_to_acpvpn.cidr_block
  }

  ad_sg_cidr_ingress = [
    module.peering.peeringvpc_cidr_block,
    module.apps.appsvpc_cidr_block,
    module.ad.cidr_block,
    "${var.NAMESPACE == "prod" ? "10.2" : "10.8"}.0.0/16",
  ]
}