redis allow from anywhere + bigger nodes

ops/modules/redis/main.tf

@@ -2,7 +2,7 @@
 resource "aws_elasticache_cluster" "redis" {
   cluster_id      = "redis-cluster-${var.environment}-${var.stage}-${var.family}"
   engine          = "redis"
-  node_type       = "cache.t2.micro"
+  node_type       = var.node_type
   num_cache_nodes = 1
   # parameter_group_name = "default.redis6.x"
   # engine_version           = "6.x"

ops/modules/redis/sgs.tf

@@ -41,3 +41,33 @@ resource "aws_security_group_rule" "allow-res-to-redis" {
   to_port                  = 6379
   type                     = "ingress"
 }
+
+
+
+resource "aws_security_group" "allow_from_anywhere" {
+  count       = var.public_redis ? 1 : 0
+  description = "Allow all inbound traffic"
+  name        = "redis-cluster-${var.environment}-${var.family}-allow-all"
+  vpc_id      = var.vpc_id
+
+  ingress {
+    from_port   = 6379
+    to_port     = 6379
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+
+
+resource "aws_security_group_rule" "allow-all-to-redis" {
+  count                    = var.public_redis ? 1 : 0
+  description              = "Allow worker nodes to communicate with cache"
+  from_port                = 6379
+  protocol                 = "tcp"
+  security_group_id        = aws_security_group.redis.id
+  source_security_group_id = aws_security_group.allow_from_anywhere[0].id
+  to_port                  = 6379
+  type                     = "ingress"
+}
+

ops/modules/redis/variables.tf

@@ -22,5 +22,17 @@ variable "family" {
 
 variable "cache_subnet_group_subnet_ids" {
   description = "subnet group ids"
-  type = list(string)
+  type        = list(string)
+}
+
+variable "node_type" {
+  description = "node type of redis cluster"
+  default     = "cache.t2.small"
+  type        = string
+}
+
+variable "public_redis" {
+  description = "whether to make redis public"
+  default     = false
+  type        = bool
 }

ops/testnet/prod/core/main.tf

@@ -446,6 +446,8 @@ module "sequencer_cache" {
   sg_id                         = module.network.ecs_task_sg
   vpc_id                        = module.network.vpc_id
   cache_subnet_group_subnet_ids = module.network.public_subnets
+  node_type                     = "cache.t2.medium"
+  public_redis                  = true
 }
 
 module "router_cache" {
@@ -456,6 +458,8 @@ module "router_cache" {
   sg_id                         = module.network.ecs_task_sg
   vpc_id                        = module.network.vpc_id
   cache_subnet_group_subnet_ids = module.network.public_subnets
+  node_type                     = "cache.t2.medium"
+  public_redis                  = true
 }
 
 module "relayer_cache" {
@@ -466,4 +470,6 @@ module "relayer_cache" {
   sg_id                         = module.network.ecs_task_sg
   vpc_id                        = module.network.vpc_id
   cache_subnet_group_subnet_ids = module.network.public_subnets
+  node_type                     = "cache.t2.medium"
+  public_redis                  = true
 }

ops/testnet/staging/core/main.tf

@@ -499,6 +499,7 @@ module "sequencer_cache" {
   sg_id                         = module.network.ecs_task_sg
   vpc_id                        = module.network.vpc_id
   cache_subnet_group_subnet_ids = module.network.public_subnets
+  public_redis                  = true
 }
 
 module "router_cache" {
@@ -508,7 +509,8 @@ module "router_cache" {
   family                        = "router"
   sg_id                         = module.network.ecs_task_sg
   vpc_id                        = module.network.vpc_id
-  cache_subnet_group_subnet_ids = module.network.public_subnets
+  cache_subnet_group_subnet_ids = module.network.public_sub
+  public_redis                  = true
 }
 
 module "relayer_cache" {
@@ -519,4 +521,5 @@ module "relayer_cache" {
   sg_id                         = module.network.ecs_task_sg
   vpc_id                        = module.network.vpc_id
   cache_subnet_group_subnet_ids = module.network.public_subnets
+  public_redis                  = true
 }