File tree Expand file tree Collapse file tree 3 files changed +46
-31
lines changed Expand file tree Collapse file tree 3 files changed +46
-31
lines changed Original file line number Diff line number Diff line change @@ -61,11 +61,9 @@ health_check_allow_cidrs = ["<your preferred health check CIDR(s)>"] // d
6161mirror_ingress_allow_cidrs = ["<your preferred mirror CIDR(s)>"] // default: ["0.0.0.0/0"]
6262
6363// Licensing Module Provided - with Fleet (Option A)
64- fleet_config = {
65- token = "<your fleet token>"
66- url = "https://<your-fleet-instance>:1443/fleet/v1/internal/softsensor/websocket"
67- server_ssl_name = "1.broala.fleet.product.corelight.io"
68- }
64+ fleet_token = "<your fleet token>"
65+ fleet_url = "https://<your-fleet-instance>:1443/fleet/v1/internal/softsensor/websocket"
66+ fleet_server_sslname = "1.broala.fleet.product.corelight.io"
6967
7068// Licensing Module Provided - Without Fleet (Option B)
7169license_key_file_path = "/path/to/license.txt"
Original file line number Diff line number Diff line change @@ -66,12 +66,12 @@ module "config" {
6666 sensor_management_interface_name = " eth1"
6767 sensor_monitoring_interface_name = " eth0"
6868
69- fleet_token = var. license_key_file_path == " " ? var. fleet_config . token : " "
70- fleet_url = var. license_key_file_path == " " ? var. fleet_config . url : " "
71- fleet_server_sslname = var. license_key_file_path == " " ? var. fleet_config . server_ssl_name : " "
72- fleet_http_proxy = var. license_key_file_path == " " ? var. fleet_config . http_proxy : " "
73- fleet_https_proxy = var. license_key_file_path == " " ? var. fleet_config . https_proxy : " "
74- fleet_no_proxy = var. license_key_file_path == " " ? var. fleet_config . no_proxy : " "
69+ fleet_token = var. license_key_file_path == " " ? var. fleet_token : " "
70+ fleet_url = var. license_key_file_path == " " ? var. fleet_url : " "
71+ fleet_server_sslname = var. license_key_file_path == " " ? var. fleet_server_sslname : " "
72+ fleet_http_proxy = var. license_key_file_path == " " ? var. fleet_http_proxy : " "
73+ fleet_https_proxy = var. license_key_file_path == " " ? var. fleet_https_proxy : " "
74+ fleet_no_proxy = var. license_key_file_path == " " ? var. fleet_no_proxy : " "
7575}
7676
7777module "instance" {
Original file line number Diff line number Diff line change @@ -141,26 +141,43 @@ variable "iam_instance_profile_name" {
141141 default = " "
142142}
143143
144- variable "fleet_config" {
145- description = " (optional) Configuration for Fleet. This can be used in place of `license_key_file_path` for licensing the sensor"
146- type = object ({
147- token = string
148- url = string
149- server_ssl_name = string
150- http_proxy = string
151- https_proxy = string
152- no_proxy = string
153- })
154-
155- sensitive = true
156- default = {
157- token = " "
158- url = " "
159- server_ssl_name = " "
160- http_proxy = " "
161- https_proxy = " "
162- no_proxy = " "
163- }
144+
145+ variable "fleet_token" {
146+ type = string
147+ default = " "
148+ sensitive = true
149+ description = " (optional) the pairing token from the Fleet UI. Must be set if 'fleet_url' is provided"
150+ }
151+
152+ variable "fleet_url" {
153+ type = string
154+ default = " "
155+ description = " (optional) the URL of the fleet instance from the Fleet UI. Must be set if 'fleet_token' is provided"
156+ }
157+
158+ variable "fleet_server_sslname" {
159+ type = string
160+ default = " 1.broala.fleet.product.corelight.io"
161+ description = " (optional) the SSL hostname for the fleet server"
162+
163+ }
164+
165+ variable "fleet_http_proxy" {
166+ type = string
167+ default = " "
168+ description = " (optional) the proxy URL for HTTP traffic from the fleet"
169+ }
170+
171+ variable "fleet_https_proxy" {
172+ type = string
173+ default = " "
174+ description = " (optional) the proxy URL for HTTPS traffic from the fleet"
175+ }
176+
177+ variable "fleet_no_proxy" {
178+ type = string
179+ default = " "
180+ description = " (optional) hosts or domains to bypass the proxy for fleet traffic"
164181}
165182
166183variable "egress_allow_cidrs" {
You can’t perform that action at this time.
0 commit comments