Create a bastion vm fixture module and enable ssh to TFE instances in Active/Active mode

[anniehedgpeth]

What problem would you like to address?

Customers and team members alike have needed an AWS active/active installation that they can easily SSH to, and currently, this module does not support that; instead SSM is strictly enforced.

Who is the audience for this request?

TFE Engineers, internal teams needed test instances

What would the ideal solution look like?

I have started a branch here. You will notice that there is a bastion_host fixture module. I would continue working on this to get it to a streamlined build.

I attempted to build out the solution here, running it in tf-onprem-dev-infra/modules/release-testing, but I didn't have time to complete it.

Ideally, someone would just pick up on this work.

What alternatives have you considered?

Being able to SSH directly to the TFE instances for DEV scenarios, but I'm not sure if that's possible.

How does this impact you?

Not having this adds a lot of toil to building out this scenario manually.

Are there any deadlines?

No, but we waste a lot of time on it.

Is there any additional context?

I had to build a module for someone (convo here) who didn't have access to our AWS account to use SSM, so me and another engineer spent two hours figuring it out manually. Having a prebuilt solution would reduce toil.