## THESE LOAD BALANCERS ARE MANAGED BY K8S INGRESS CONTROLLER, THEY SHOULD NOT BE MANAGED BY THIS TERRAFORM CODE. THEY ARE HERE FOR REFERENCE PURPOSES ONLY. ## --- IGNORE ---

resource "aws_lb" "c79d0295-aoma3-aomaustingr-3cd6" {
  desync_mitigation_mode                      = "defensive"
  drop_invalid_header_fields                  = false
  enable_cross_zone_load_balancing            = true
  enable_deletion_protection                  = false
  enable_http2                                = true
  enable_tls_version_and_cipher_suite_headers = false
  enable_waf_fail_open                        = false
  enable_xff_client_port                      = false
  idle_timeout                                = 60
  internal                                    = true
  ip_address_type                             = "ipv4"
  load_balancer_type                          = "application"
  name                                        = "c79d0295-aoma3-aomaustingr-3cd6"
  preserve_host_header                        = false
  security_groups = [
    "sg-0a5cddded7d80906d",
  ]
  subnets = [
    "subnet-05683f17a210241cf",
    "subnet-0e320c25c3ca7b86d",
  ]
  tags = {
    "Name"                               = "aomad2-ust-alb"
    "ingress.k8s.aws/cluster"            = "aomad-ms-eks"
    "ingress.k8s.aws/resource"           = "LoadBalancer"
    "ingress.k8s.aws/stack"              = "aoma3/aoma-ust-ingress"
    "kubernetes.io/cluster/aomad-ms-eks" = "owned"
    "kubernetes.io/ingress-name"         = "aoma-ust-ingress"
    "kubernetes.io/namespace"            = "aoma3"
  }
  tags_all = {
    "Name"                               = "aomad2-ust-alb"
    "ingress.k8s.aws/cluster"            = "aomad-ms-eks"
    "ingress.k8s.aws/resource"           = "LoadBalancer"
    "ingress.k8s.aws/stack"              = "aoma3/aoma-ust-ingress"
    "kubernetes.io/cluster/aomad-ms-eks" = "owned"
    "kubernetes.io/ingress-name"         = "aoma-ust-ingress"
    "kubernetes.io/namespace"            = "aoma3"
  }
  xff_header_processing_mode = "append"

  access_logs {
    bucket  = "aoma-core-elb-logs"
    enabled = true
    prefix  = "eks-elb-dev-aomad2-ust"
  }

  subnet_mapping {
    subnet_id = "subnet-05683f17a210241cf"
  }
  subnet_mapping {
    subnet_id = "subnet-0e320c25c3ca7b86d"
  }
}

resource "aws_lb" "k8s-actionsr-actionsr-73c6377a4a" {
  # checkov:skip=CKV2_AWS_28: Ensure public facing ALB are protected by WAF
  desync_mitigation_mode                      = "defensive"
  drop_invalid_header_fields                  = false
  enable_cross_zone_load_balancing            = true
  enable_deletion_protection                  = false
  enable_http2                                = true
  enable_tls_version_and_cipher_suite_headers = false
  enable_waf_fail_open                        = false
  enable_xff_client_port                      = false
  idle_timeout                                = 60
  internal                                    = false
  ip_address_type                             = "ipv4"
  load_balancer_type                          = "application"
  name                                        = "k8s-actionsr-actionsr-73c6377a4a"
  preserve_host_header                        = false
  security_groups = [
    "sg-04b0f711c5b7bf09d",
    "sg-056796abe4da22b2b",
  ]
  subnets = [
    "subnet-03850eeb366195b45",
    "subnet-0f8ca49e26fcecceb",
  ]
  tags = {
    "Name"                     = "aoma-runner-eks-alb"
    "elbv2.k8s.aws/cluster"    = "aomad-runner-eks"
    "ingress.k8s.aws/resource" = "LoadBalancer"
    "ingress.k8s.aws/stack"    = "actions-runner-system/actions-runner-controller-github-webhook-server"
  }
  tags_all = {
    "Name"                     = "aoma-runner-eks-alb"
    "elbv2.k8s.aws/cluster"    = "aomad-runner-eks"
    "ingress.k8s.aws/resource" = "LoadBalancer"
    "ingress.k8s.aws/stack"    = "actions-runner-system/actions-runner-controller-github-webhook-server"
  }
  xff_header_processing_mode = "append"

  access_logs {
    bucket  = "aoma-core-elb-logs"
    enabled = true
    prefix  = "aoma-runner-eks-alb"
  }

  subnet_mapping {
    subnet_id = "subnet-03850eeb366195b45"
  }
  subnet_mapping {
    subnet_id = "subnet-0f8ca49e26fcecceb"
  }
}