Use Tesseract db for antispam

deployment/live/aws/conformance/ci/README.md

@@ -7,7 +7,7 @@ define a CI environment to run TesseraCT, backed by Trillian Tessera.
 
 At a high level, this environment consists of:
 
-- Aurora MySQL database
+- Aurora MySQL database, used by Tessera both for sequencing and antispam
 - S3 Bucket
 - Secrets Manager
 - ECS

deployment/live/aws/conformance/ci/terragrunt.hcl

@@ -7,4 +7,15 @@ include "root" {
   expose = true
 }
 
-inputs = include.root.locals
+inputs = merge (
+  include.root.locals,
+  {
+    # This hack makes it so that the antispam tables are created in the main
+    # tessera DB. We strongly recommend that the antispam DB is separate, but
+    # creating a second DB from Terraform is too difficult without a large
+    # rewrite. For CI purposes, testing antispam, even if in the same DB, is
+    # preferred compared to not testing antispam at all.
+    antispam_database_name = "tesseract"
+    create_antispam_db     = false
+  }
+)

deployment/modules/aws/tesseract/conformance/main.tf

@@ -20,7 +20,7 @@ module "storage" {
   base_name          = var.base_name
   region             = var.region
   ephemeral          = var.ephemeral
-  create_antispam_db = true
+  create_antispam_db = var.create_antispam_db
 }
 
 module "secretsmanager" {
@@ -171,7 +171,7 @@ resource "aws_ecs_task_definition" "conformance" {
       "--db_port=3306",
       "--signer_public_key_secret_name=${module.secretsmanager.ecdsa_p256_public_key_id}",
       "--signer_private_key_secret_name=${module.secretsmanager.ecdsa_p256_private_key_id}",
-      "--antispam_db_name=${module.storage.antispam_database_name}",
+      "--antispam_db_name=${var.antispam_database_name}",
       "--inmemory_antispam_cache_size=25000000", # About 1GB of memory.
       "-v=2"
     ],

deployment/modules/aws/tesseract/conformance/variables.tf

@@ -42,3 +42,14 @@ variable "ecs_conformance_task_role" {
   description = "Role assumed by conformance containers when they run."
   type        = string
 }
+
+variable "create_antispam_db" {
+  description = "Set to true to create another database to be used by the antispam implementation."
+  type        = bool
+  default     = false
+}
+
+variable "antispam_database_name" {
+  description = "The name of the antispam database."
+  type        = string
+}