terraform-aws-github-runner/modules/runners/pool.tf at d7254091f7fe9e2027b43fe2edc30ea53fa7c01d · github-aws-runners/terraform-aws-github-runner · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
module "pool" {
  count = length(var.pool_config) == 0 ? 0 : 1

  source = "./pool"

  config = {
    prefix = var.prefix
    ghes = {
      ssl_verify = var.ghes_ssl_verify
      url        = var.ghes_url
    }
    user_agent                    = var.user_agent
    github_app_parameters         = var.github_app_parameters
    instance_allocation_strategy  = var.instance_allocation_strategy
    instance_max_spot_price       = var.instance_max_spot_price
    instance_target_capacity_type = var.instance_target_capacity_type
    instance_types                = var.instance_types
    kms_key_arn                   = local.kms_key_arn
    ami_kms_key_arn               = local.ami_kms_key_arn
    ami_id_ssm_parameter_arn      = local.ami_id_ssm_module_managed ? aws_ssm_parameter.runner_ami_id[0].arn : var.ami.id_ssm_parameter_arn
    lambda = {
      log_level                      = var.log_level
      logging_retention_in_days      = var.logging_retention_in_days
      logging_kms_key_id             = var.logging_kms_key_id
      reserved_concurrent_executions = var.pool_lambda_reserved_concurrent_executions
      s3_bucket                      = var.lambda_s3_bucket
      s3_key                         = var.runners_lambda_s3_key
      s3_object_version              = var.runners_lambda_s3_object_version
      security_group_ids             = var.lambda_security_group_ids
      subnet_ids                     = var.lambda_subnet_ids
      architecture                   = var.lambda_architecture
      memory_size                    = var.pool_lambda_memory_size
      runtime                        = var.lambda_runtime
      timeout                        = var.pool_lambda_timeout
      zip                            = local.lambda_zip
    }
    pool                      = var.pool_config
    role_path                 = local.role_path
    role_permissions_boundary = var.role_permissions_boundary
    runner = {
      disable_runner_autoupdate            = var.disable_runner_autoupdate
      ephemeral                            = var.enable_ephemeral_runners
      enable_jit_config                    = var.enable_jit_config
      enable_on_demand_failover_for_errors = var.enable_on_demand_failover_for_errors
      boot_time_in_minutes                 = var.runner_boot_time_in_minutes
      labels                               = var.runner_labels
      launch_template                      = aws_launch_template.runner
      group_name                           = var.runner_group_name
      name_prefix                          = var.runner_name_prefix
      pool_owner                           = var.pool_runner_owner
      role                                 = var.iam_overrides["override_runner_role"] ? { arn = var.iam_overrides["runner_role_arn"] } : aws_iam_role.runner[0]
    }
    subnet_ids                           = var.subnet_ids
    ssm_token_path                       = "${var.ssm_paths.root}/${var.ssm_paths.tokens}"
    ssm_config_path                      = "${var.ssm_paths.root}/${var.ssm_paths.config}"
    ami_id_ssm_parameter_name            = local.ami_id_ssm_parameter_name
    ami_id_ssm_parameter_read_policy_arn = local.ami_id_ssm_parameter_name != null ? aws_iam_policy.ami_id_ssm_parameter_read[0].arn : null
    tags                                 = local.tags
    lambda_tags                          = var.lambda_tags
    arn_ssm_parameters_path_config       = local.arn_ssm_parameters_path_config
  }

  aws_partition  = var.aws_partition
  tracing_config = var.tracing_config
}