Terraform to deploy the CTE AMI on aws for encrypted-control-planes demo. Presumes RHDPS deployments
- Use of RHDPS open environment w/ openshift installed.
- Install
opentofu
anddirenv
-
Login to aws ui
- navigate to subnets (e.g. https://ap-southeast-1.console.aws.amazon.com/vpcconsole/home?region=ap-southeast-1#subnets)
- get the subnet id for the public subnet
- get the corresponding vpc id
- Navigate to security groups (e.g. https://ap-southeast-1.console.aws.amazon.com/vpcconsole/home?region=ap-southeast-1#SecurityGroups:)
- Get the worker security group id e.g. similar for the group named similar to
cluster-mv2lh-jtng4-worker-sg
- Get the worker security group id e.g. similar for the group named similar to
- navigate to subnets (e.g. https://ap-southeast-1.console.aws.amazon.com/vpcconsole/home?region=ap-southeast-1#subnets)
-
cp sample.envrc .envrc
- Fill in the blanks
- The public access subnets should initially correspond to your public facing IP address.
-
tofu init
-
tofu apply
-
Visit
https://{{public_ip_address}}
and immediately change the admin password (default horribly is admin/admin)