Merge pull request #5159 from connext/ops/lh-propose-in-vpc

fix: enable lambda-in-vpc for lh propose
connext · Nov 13, 2023 · d355257 · d355257
2 parents 14f3c4a + 242b131
commit d355257
Showing 1 changed file with 13 additions and 10 deletions.
diff --git a/ops/testnet/staging/core/main.tf b/ops/testnet/staging/core/main.tf
@@ -419,16 +419,19 @@ module "lighthouse_web3signer" {
 }
 
 module "lighthouse_propose_cron" {
-  source              = "../../../modules/lambda"
-  ecr_repository_name = "nxtp-lighthouse"
-  docker_image_tag    = var.lighthouse_image_tag
-  container_family    = "lighthouse-propose"
-  environment         = var.environment
-  stage               = var.stage
-  container_env_vars  = merge(local.lighthouse_env_vars, { LIGHTHOUSE_SERVICE = "propose" })
-  schedule_expression = "rate(30 minutes)"
-  memory_size         = 1536
-  timeout             = 900
+  source                 = "../../../modules/lambda"
+  ecr_repository_name    = "nxtp-lighthouse"
+  docker_image_tag       = var.lighthouse_image_tag
+  container_family       = "lighthouse-propose"
+  environment            = var.environment
+  stage                  = var.stage
+  container_env_vars     = merge(local.lighthouse_env_vars, { LIGHTHOUSE_SERVICE = "propose" })
+  schedule_expression    = "rate(30 minutes)"
+  memory_size            = 1536
+  timeout                = 900
+  lambda_in_vpc          = true
+  subnet_ids             = module.network.private_subnets
+  lambda_security_groups = flatten([module.network.allow_all_sg, module.network.ecs_task_sg])
 }
 
 module "relayer" {