RKE CICD Cluster should be from REPO1
The terraform to spin up an RKE cluster should be from Repo1:
https://repo1.dso.mil/platform-one/distros/rancher-federal
instead of
module "rke2" {
source = "git::https://github.com/rancherfederal/rke2-aws-tf.git"
cluster_name = local.name
vpc_id = var.vpc_id
subnets = var.private_subnets
ami = var.server_ami
servers = var.servers
instance_type = var.server_instance_type
ssh_authorized_keys = var.ssh_authorized_keys
controlplane_internal = var.controlplane_internal
rke2_version = var.rke2_version
enable_ccm = var.enable_ccm
download = var.download
# TODO: These need to be set in pre-baked ami's
pre_userdata = <<-EOF
# Temporarily disable selinux enforcing due to missing policies in containerd
# The change is currently being upstreamed and can be tracked here: https://github.com/rancher/k3s/issues/2240
setenforce 0
# Tune vm sysctl for elasticsearch
sysctl -w vm.max_map_count=262144
EOF
tags = merge({}, local.tags, var.tags)
}