guilherme.silva/iac-sei
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Minor Improvemnts

Browse Source
This commit is contained in:
Guilherme Silva
2026-09-01 20:40:20 -03:00
parent 32ea963243
commit 9ed5e6ec51
2 changed files with 25 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
nsg-sei-fss.tf
View File

@@ -4,7 +4,7 @@ resource "oci_core_network_security_group" "fss-servers-nsg" {
vcn_id = var.ocid_vcn_3_tier vcn_id = var.ocid_vcn_3_tier
} }
#-------------------------------------------------------------------------------------------------------------------------------------------- #--------------------------------------------------------------------------------------------------------------------------------------------
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_01" { resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_01" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn." description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app source = var.cidr_subnet_app
@@ -19,7 +19,7 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i
} }
} }
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_02" { resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_02" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn." description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app source = var.cidr_subnet_app
@@ -34,7 +34,7 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i
} }
} }
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_03" { resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_03" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn." description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app source = var.cidr_subnet_app
@@ -49,7 +49,7 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i
} }
} }
resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_04" { resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_04" {
network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id
description = "Ingress fss from app-vcn." description = "Ingress fss from app-vcn."
source = var.cidr_subnet_app source = var.cidr_subnet_app
@@ -58,8 +58,8 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i
protocol = "17" protocol = "17"
udp_options { udp_options {
destination_port_range { destination_port_range {
max = 2048 max = 2050
min = 2050 min = 2048
} }
} }
} }

20
sei_public_load_balancer.tf
View File

@@ -133,7 +133,7 @@ resource "oci_load_balancer_backend_set" "backend_set_solr_servers_https" {
url_path = "/solr" url_path = "/solr"
} }
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
name = "bs-solr-servers-https-${var.environment}" name = "bs-solr-servers-http-${var.environment}"
policy = "IP_HASH" policy = "IP_HASH"
} }
@@ -251,6 +251,24 @@ resource "oci_load_balancer_listener" "lister_solr_http" {
} }
rule_set_names = [ oci_load_balancer_rule_set.redirectHttpToHttps[0].name ] rule_set_names = [ oci_load_balancer_rule_set.redirectHttpToHttps[0].name ]
} }
resource "oci_load_balancer_listener" "lister_solr_https" {
count = var.load_balancer_enable_https ? 1 : 0
default_backend_set_name = oci_load_balancer_backend_set.backend_set_solr_servers_https[0].name
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
name = "listener-solr-https-${var.environment}"
port = "8983"
protocol = "HTTP"
hostname_names = [ oci_load_balancer_hostname.solr_hostname.name ]
ssl_configuration {
certificate_ids = [ var.load_balancer_certificate_ocid ]
protocols = [ "TLSv1.2", "TLSv1.3" ]
cipher_suite_name = "oci-tls-12-13-ssl-cipher-suite-v3"
verify_peer_certificate = "false"
verify_depth = "1"
}
rule_set_names = [ oci_load_balancer_rule_set.redirectHttpToHttps[0].name ]
}
#------------------------------------------------------------------------------------------------------------------------------------------------ #------------------------------------------------------------------------------------------------------------------------------------------------
resource "oci_load_balancer_hostname" "sei_hostname" { resource "oci_load_balancer_hostname" "sei_hostname" {
hostname = var.sei_fqdn hostname = var.sei_fqdn