add jumpserver for testing

terraform/environments/hmpps-domain-services/locals_security_groups.tf

@@ -133,6 +133,27 @@ locals {
           protocol    = -1
           self        = true
         }
+        rpc_tcp_rds = {
+          description = "135: Allow RPC TCP ingress from RDS"
+          from_port   = 135
+          to_port     = 135
+          protocol    = "TCP"
+          cidr_blocks = local.security_group_cidrs.rd_session_hosts
+        }
+        rds_udp_rds = {
+          description = "135: Allow RPC UDP ingress from RDS"
+          from_port   = 135
+          to_port     = 135
+          protocol    = "UDP"
+          cidr_blocks = local.security_group_cidrs.rd_session_hosts
+        }
+        rpc_tcp_cb = {
+          description = "445: Allow RPC TCP ingress from Connection Broker"
+          from_port   = 445
+          to_port     = 445
+          protocol    = "TCP"
+          cidr_blocks = local.security_group_cidrs.rd_session_hosts
+        }
         rdp_tcp_web = {
           description = "3389: Allow RDP TCP ingress"
           from_port   = 3389
@@ -147,6 +168,27 @@ locals {
           protocol    = "UDP"
           cidr_blocks = local.security_group_cidrs.rd_session_hosts
         }
+        winrm_rds = {
+          description = "5985/6: Allow WinRM TCP ingress (powershell remoting) for RDS"
+          from_port   = 5985
+          to_port     = 5986
+          protocol    = "TCP"
+          cidr_blocks = local.security_group_cidrs.rd_session_hosts
+        }
+        dynamic_rpc_tcp_rds = {
+          description = "49152-65535: Allow Dynamic RPC TCP ingress from RDS"
+          from_port   = 49152
+          to_port     = 65535
+          protocol    = "TCP"
+          cidr_blocks = local.security_group_cidrs.rd_session_hosts
+        }
+        dynamic_rpc_udp_rds = {
+          description = "49152-65535: Allow Dyanmic RPC UDP ingress from RDS"
+          from_port   = 49152
+          to_port     = 65535
+          protocol    = "UDP"
+          cidr_blocks = local.security_group_cidrs.rd_session_hosts
+        }
       }
       egress = {
         all = {

terraform/environments/hmpps-domain-services/locals_test.tf

@@ -99,11 +99,19 @@ locals {
       #     domain-name = "azure.noms.root"
       #   })
       # }
-      # test-rds-2-a = merge(local.ec2_autoscaling_groups.rds, {
-      #   tags = merge(local.ec2_autoscaling_groups.rds.tags, {
-      #     domain-name = "azure.noms.root"
-      #   })
-      # }
+      test-rds-2-a = merge(local.ec2_autoscaling_groups.rds, {
+        config = merge(local.ec2_autoscaling_groups.rds.config, {
+          availability_zone = "eu-west-2a"
+          user_data_raw = base64encode(templatefile(
+            "../../modules/baseline_presets/ec2-user-data/user-data-pwsh.yaml.tftpl", {
+            branch = "TM/TM-916/add-rds-role-to-jumpservers"
+            }
+          ))          
+        })
+        tags = merge(local.ec2_autoscaling_groups.rds.tags, {
+          domain-name = "azure.noms.root"
+        })
+      })
     }
 
     ec2_instances = {
@@ -126,6 +134,21 @@ locals {
           domain-name = "azure.noms.root"
         })
       })
+
+      # test jumpserver - do not use
+      t2-jump2022-2 = merge(local.ec2_instances.jumpserver, {
+        config = merge(local.ec2_instances.jumpserver.config, {
+          availability_zone = "eu-west-2b"
+          user_data_raw = base64encode(templatefile(
+            "../../modules/baseline_presets/ec2-user-data/user-data-pwsh.yaml.tftpl", {
+            branch = "TM/TM-916/add-rds-role-to-jumpservers"
+            }
+          ))
+        })
+        tags = merge(local.ec2_instances.jumpserver.tags, {
+          domain-name = "azure.noms.root"
+        })
+      })
     }
 
     fsx_windows = {