commit 9f7ab513505c4af0608b1699eaf76bc1f5472d51
author Marcin Czech <maczech@gmail.com> Thu Aug 20 00:42:16 2020 +0200
committer Marcin Czech <maczech@gmail.com> Thu Aug 20 00:50:24 2020 +0200
tree 8784986178f441901ab7d9741d0836deb340790b
parent 116fbbe61ab2b9be819fb0ec39ad7b318bc5ef34

Expose Gerrit ssh port from the load balancer

Change-Id: I9a058f3c871b306a2e8d1dc8f8757c0f0c738712

dual-master/cf-service-lb.yml

diff --git a/dual-master/cf-service-lb.yml b/dual-master/cf-service-lb.yml
index d641851..39882ff 100644
--- a/dual-master/cf-service-lb.yml
+++ b/dual-master/cf-service-lb.yml
@@ -83,6 +83,7 @@
         Type: AWS::ECS::Service
         DependsOn:
           - HTTPListener
+          - SSHListener
         Properties:
             Cluster:
               Fn::ImportValue:
@@ -93,6 +94,9 @@
                 - ContainerName: !Ref LBServiceName
                   ContainerPort: !Ref HTTPContainerPort
                   TargetGroupArn: !Ref HTTPTargetGroup
+                - ContainerName: !Ref LBServiceName
+                  ContainerPort: !Ref SSHGerritPort
+                  TargetGroupArn: !Ref SSHTargetGroup
 
     TaskDefinition:
         Type: AWS::ECS::TaskDefinition
@@ -120,6 +124,9 @@
                     - ContainerPort: !Ref HTTPContainerPort
                       HostPort: !Ref HTTPHostPort
                       Protocol: tcp
+                    - ContainerPort: !Ref SSHGerritPort
+                      HostPort: !Ref SSHGerritPort
+                      Protocol: tcp
                   Links:
                     - !Ref SyslogSidecarServiceName
                   LogConfiguration:
@@ -181,6 +188,27 @@
             Port: !Ref HTTPSHostPort
             Protocol: TLS
 
+    SSHTargetGroup:
+        Type: AWS::ElasticLoadBalancingV2::TargetGroup
+        DependsOn: LoadBalancer
+        Properties:
+            VpcId:
+              Fn::ImportValue:
+                  !Join [':', [!Ref 'ClusterStackName', 'VPCId']]
+            Port: !Ref SSHGerritPort
+            Protocol: TCP
+
+    SSHListener:
+        Type: AWS::ElasticLoadBalancingV2::Listener
+        DependsOn: LoadBalancer
+        Properties:
+            DefaultActions:
+            - Type: forward
+              TargetGroupArn: !Ref SSHTargetGroup
+            LoadBalancerArn: !Ref LoadBalancer
+            Port: !Ref SSHGerritPort
+            Protocol: TCP
+
 Outputs:
   PublicLoadBalancerDNSName:
     Description: The DNS name of the external load balancer