Add log destination, remove bastion in dev

Author: ryanjjung

pulumi/__main__.py

@@ -25,6 +25,17 @@
     **psm_opts,
 )
 
+logdest_opts = resources.get('tb:cloudwatch:LogDestination', {})
+logdests = {
+    logdest_name: tb_pulumi.cloudwatch.LogDestination(
+        f'{project.name_prefix}-logdest-{logdest_name}',
+        app_name=logdest_name,
+        project=project,
+        **logdest_config,
+    )
+    for logdest_name, logdest_config in logdest_opts.items()
+}
+
 # Build out some private network space
 vpc_opts = resources['tb:network:MultiTierVpc']['vpc']
 vpc = tb_pulumi.network.MultiTierVpc(

pulumi/config.dev.yaml

@@ -8,6 +8,15 @@ resources:
         - stalwart.postboot.keycloak_backend
       recovery_window_in_days: 0
 
+  tb:cloudwatch:LogDestination:
+    stalwart:
+      log_group:
+        retention_in_days: 7
+      log_streams:
+        stalwart-api-logs: api
+        stalwart-mail-logs: mail
+      org_name: tb
+
   tb:network:MultiTierVpc:
     vpc:
       cidr_block: 10.2.0.0/16
@@ -48,13 +57,13 @@ resources:
       endpoint_interfaces:
         - secretsmanager
 
-  # tb:ec2:SshableInstance: {}
+  tb:ec2:SshableInstance: {}
   # Fill out this template to build an SSH bastion
-  tb:ec2:SshableInstance:
-    bastion:
-      ssh_keypair_name: mailstrom-dev
-      source_cidrs:
-        - 10.2.0.0/16  # Internal access
+  # tb:ec2:SshableInstance:
+  #   bastion:
+  #     ssh_keypair_name: mailstrom-dev
+  #     source_cidrs:
+  #       - 10.2.0.0/16  # Internal access
 
   tb:mailstrom:StalwartCluster:
     thundermail: