ethicalmohit / terraform-aws-sentry

Terraform Module for Self Hosted Sentry On AWS.

Terraform Sentry Setup

It will fulfill the requirements of the sentry self-hosted setup on AWS.

Resources Supported

• AWS EC2 Instance
• AWS Key Pair

AMI ID

• Using the latest stable CoreOs Container Linux AMI ID.

Requirements

• Terraform version >= v0.12.23
• AWS Provider >= v2.43.0
• Default VPC
• Default Public Subnet
• A Security group allowing connections on 80/443/22 attached to the instance.

Example Usage:

module "sentry_setup" {
  source              = "../modules"
  public_key_material = var.public_key_material
  instance_type       = "t2.large"

  tags = {
    name             = var.name
    project_name     = var.project_name
    environment_name = var.environment_name
    terraform        = var.terraform
  }
}

Inputs

Name	Description	Type	Default	Required
instance_type	EC2 Instance Type	string	t2.large	yes
public_key_material	A public key data.	string	null	yes
tags	Region name	map	null	yes

Outputs

Name	Description
sentry_instance_dns	Public DNS of the instance.
sentry_instance_ip	Public IP of the instance.
sentry_instance_id	Instance ID.

Future Scope

• Automatic tls private key creation to use with key_pair argument of the resource or to pass on the key pair resource name which should exist before running terraform apply.
• Spawn instance in an autoscaling group using launch template and launch config.
• Generating sentry key from the bootstrap script. Right now, It is hardcoded.
• Adding the capability to pass subnet groups, It will give modularity to use custom VPC.
• Creation of security group and attaching it with the instance.
• Storing Terraform state backend in s3 with DynamoDB locking.
• Getting the value of sentry initial username and password from the root module.
• Static test analysis of the code through terratest or tftest.

Note:

• Kindly change the secret key and the bootstrap username/password. Also, Current details including key mentioned is a "dummy text" and does not assosiate with any service.

License

See the LICENSE file.