e2e: use DNS instead of HTTP to get my_public_ipv4 (hashicorp#17759)

lattwood · Jun 28, 2023 · 6bd5098 · 6bd5098
1 parent 350c435
commit 6bd5098
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/e2e/terraform/network.tf b/e2e/terraform/network.tf
@@ -20,12 +20,18 @@ data "aws_subnet" "secondary" {
   }
 }
 
-data "http" "my_public_ipv4" {
-  url = "https://api.ipify.org"
+# using a dns lookup instead of http, because it's faster
+# and should be more reliable.
+data "external" "my_public_ipv4" {
+  program = ["/bin/sh", "-c", <<-EOT
+    ip="$(dig @resolver4.opendns.com myip.opendns.com +short -4)"
+    echo '{"ip": "'$ip'"}'
+    EOT
+  ]
 }
 
 locals {
-  ingress_cidr = var.restrict_ingress_cidrblock ? "${chomp(data.http.my_public_ipv4.body)}/32" : "0.0.0.0/0"
+  ingress_cidr = var.restrict_ingress_cidrblock ? "${chomp(data.external.my_public_ipv4.result["ip"])}/32" : "0.0.0.0/0"
 }
 
 resource "aws_security_group" "servers" {