#terraform-aws-modules - January 2019

January 2019
Igor
Igoralmost 8 years ago
Is there a limitation that prevented BitBucket support for terraform-aws-atlantis?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
I just think it’s b/c anton didn’t have time to implement it
Maarten van der Hoef
Maarten van der Hoefalmost 8 years ago
also because Bitbucket just sucks 🙂 @Igor I've implemented it with bitbucket, but with a modified version of the module some time ago already.
Maarten van der Hoef
Maarten van der Hoefalmost 8 years ago
let me know if you need help
Igor
Igoralmost 8 years ago
@Maarten van der Hoef Would love to see your modified version. I am also trying to figure out how to work with Fargate - how would I configure AWS credentials, for example?
Maarten van der Hoef
Maarten van der Hoefalmost 8 years ago
The Fargate service has an IAM role, you can configure the role to have the Administrator policy, or better, to give it a policy to allow assuming roles into something Terraform works with
antonbabenko
antonbabenkoalmost 8 years ago
I agree to both of you guys - I didn’t have time and desire (aka “use case”) AND bitbucket sucks. Happy week-ends! 🙂
antonbabenko
antonbabenkoalmost 8 years ago
Really, it should be very easy to do, if there is a proper support in Terraform.
Pablo Costa
Pablo Costaalmost 8 years ago(edited)
Hello, I was planning to use terraform-aws-s3-website module for hosting a private website intended to be accessed only through VPN as a kind of intranet site, but I couldn't find a way to filter the access. Would It be possible ?
antonbabenko
antonbabenkoalmost 8 years ago
@Pablo Costa Hi! This channel is for modules inside :terraform: https://github.com/terraform-aws-modules/ . You can try to copy your question to #terraform , but I will answer you question anyway - no, it is not possible.
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)almost 8 years ago
S3 websites are always public, have public URLs
Andy
Andyalmost 8 years ago
Wouldn't this work? https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html#example-bucket-policies-use-case-3 I think I tested it in the past and it did (not with a TF module though)
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)almost 8 years ago(edited)
for the bucket itself yes (you can host the bucket behind a CloudFront CDN), but I think not when it’s a website (need to check that) (plain bucket and S3 website are diff things)
Andy
Andyalmost 8 years ago
Yup, pretty sure I tested with website as I had a similar use case (without CloudFront)
Pablo Costa
Pablo Costaalmost 8 years ago(edited)
Thank you guys !!
joshmyers
joshmyersalmost 8 years ago
I have seen this done by having nginx reverse proxy to an s3 bucket
Gonzalo Peci
Gonzalo Pecialmost 8 years ago
Gonzalo Peci
Gonzalo Pecialmost 8 years ago
seems it does not support snapshot_copy feature
Gonzalo Peci
Gonzalo Pecialmost 8 years ago
how are you handling that? we are using a count to check if we require snapshot copy, but feels a bit hacky
antonbabenko
antonbabenkoalmost 8 years ago
@Gonzalo Peci I don’t use redshift myself, can’t help much. In any case count is probably the best solution.
antonbabenko
antonbabenkoalmost 8 years ago
@Max This channel is for questions related to modules under https://github.com/terraform-aws-modules/ org. Consider asking in #terraform which is a better fit.
Andriy Knysh (Cloud Posse)
Andriy Knysh (Cloud Posse)almost 8 years ago
@Max hi, let’s move to #terraform
bamaral
bamaralalmost 8 years ago
I created Terraform 0.12 modules for several AWS resources.
bamaral
bamaralalmost 8 years ago
I'll create some forks hehe
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
@bamaral how was the overall experience?
Erik Osterman (Cloud Posse)
Erik Osterman (Cloud Posse)almost 8 years ago
Did you port existing modules or start from scratch?
bamaral
bamaralalmost 8 years ago
@Erik Osterman (Cloud Posse) I liked that we can use null as a variable value. There are the dynamic blocks and for_each loops that I can use to create optional and nested configuration blocks, but this is not straight forward in module that use resources with nested blocks with several levels.
bamaral
bamaralalmost 8 years ago
I created the modules from scratch
joshmyers
joshmyersalmost 8 years ago
@bamaral Got anything to look at? Am sure lots of folks would be interested
bamaral
bamaralalmost 8 years ago
I'll just move the modules from a private repository (not in github) to github and I'll share the links here