feat: deploy ooniprobe service to prod

tf/environments/prod/main.tf

@@ -486,6 +486,57 @@ module "ooniapi_ooniauth" {
  )
 }
 
+#### OONI Probe service
+
+module "ooniapi_ooniprobe_deployer" {
+ source = "../../modules/ooniapi_service_deployer"
+
+ service_name = "ooniprobe"
+ repo = "ooni/backend"
+ branch_name = "master"
+ buildspec_path = "ooniprobe/services/ooniprobe/buildspec.yml"
+ codestar_connection_arn = aws_codestarconnections_connection.oonidevops.arn
+
+ codepipeline_bucket = aws_s3_bucket.ooniapi_codepipeline_bucket.bucket
+
+ ecs_service_name = module.ooniapi_ooniprobe.ecs_service_name
+ ecs_cluster_name = module.ooniapi_cluster.cluster_name
+}
+
+module "ooniapi_ooniprobe" {
+ source = "../../modules/ooniapi_service"
+
+ # First run should be set on first run to bootstrap the task definition
+ first_run = true
+
+ vpc_id = module.network.vpc_id
+ private_subnet_ids = module.network.vpc_subnet_private[*].id
+ public_subnet_ids = module.network.vpc_subnet_public[*].id
+
+ service_name = "ooniprobe"
+ default_docker_image_url = "ooni/api-ooniprobe:latest"
+ stage = local.environment
+ dns_zone_ooni_io = local.dns_zone_ooni_io
+ key_name = module.adm_iam_roles.oonidevops_key_name
+ ecs_cluster_id = module.ooniapi_cluster.cluster_id
+
+ service_desired_count = 2
+
+ task_secrets = {
+ POSTGRESQL_URL = aws_secretsmanager_secret_version.oonipg_url.arn
+ JWT_ENCRYPTION_KEY = aws_secretsmanager_secret_version.jwt_secret.arn
+ PROMETHEUS_METRICS_PASSWORD = aws_secretsmanager_secret_version.prometheus_metrics_password.arn
+ }
+
+ ooniapi_service_security_groups = [
+ module.ooniapi_cluster.web_security_group_id
+ ]
+
+ tags = merge(
+ local.tags,
+ { Name = "ooni-tier0-ooniprobe" }
+ )
+}
 #### OONI Tier0 API Frontend
 
 module "ooniapi_frontend" {