terraform/modules/privsubnet/main.tf

# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.

data "aws_region" "current" {
}

data "aws_vpc_peering_connection" "taskcluster-pc" {
  filter {
    name   = "tag:Name"
    values = ["Taskcluster-hg"]
  }
}

resource "aws_subnet" "privsubnet" {
  availability_zone       = "${data.aws_region.current.name}${var.availability_zone}"
  cidr_block              = var.cidr_block
  map_public_ip_on_launch = false
  vpc_id                  = var.vpc_id

  tags = {
    Name = "Private subnet ${var.availability_zone}"
  }
}

resource "aws_route_table" "routetable" {
  vpc_id = var.vpc_id

  route {
    cidr_block                = var.taskcluster_vpc_cidr
    vpc_peering_connection_id = data.aws_vpc_peering_connection.taskcluster-pc.id
  }

  route {
    cidr_block     = "0.0.0.0/0"
    nat_gateway_id = var.nat_gateway_id
  }

  route {
    cidr_block = "10.0.0.0/10"
    gateway_id = var.vpn_gateway_id
  }

  tags = {
    Name = "Private route table ${var.availability_zone}"
  }
}

resource "aws_route_table_association" "route_associate" {
  route_table_id = aws_route_table.routetable.id
  subnet_id      = aws_subnet.privsubnet.id
}