#terraform - December 2018

module.eks_cluster.aws_security_group_rule.ingress_security_groups: aws_security_group_rule.ingress_security_groups: value of 'count' cannot be computed

module.eks_workers.module.autoscale_group.data.null_data_source.tags_as_list_of_maps: data.null_data_source.tags_as_list_of_maps: value of 'count' cannot be computed

# data "null_data_source" "tags_as_list_of_maps" {
#   count = "${var.enabled == "true" ? length(keys(var.tags)) : 0}"
# 
#   inputs = "${map(
#     "key", "${element(keys(var.tags), count.index)}",
#     "value", "${element(values(var.tags), count.index)}",
#     "propagate_at_launch", true
#   )}"
# }

resource "aws_autoscaling_group" "default" {
  count = "${var.enabled == "true" ? 1 : 0}"

  name_prefix               = "${format("%s%s", module.label.id, var.delimiter)}"
  ...
  service_linked_role_arn   = "${var.service_linked_role_arn}"

  launch_template = {
    id      = "${join("", aws_launch_template.default.*.id)}"
    version = "${aws_launch_template.default.latest_version}"
  }

  # tags = ["${data.null_data_source.tags_as_list_of_maps.*.outputs}"]

  lifecycle {
    create_before_destroy = true
  }
}

module.eks_cluster.aws_security_group_rule.ingress_security_groups: aws_security_group_rule.ingress_security_groups: value of 'count' cannot be computed

* aws_alb_listener.my_app-443: Error creating LB Listener: CertificateNotFound: Certificate 'arn:aws:acm:us-east-1:011123456789:certificate/a7f83c2e-57c4-4046-b81a-f9a6fe153ad0' not found
	status code: 400, request id: 6c1234e8-f111-12e3-af9f-19f5bf9b2312
2018/12/01 11:41:44 [ERROR] root.compute.my_app: eval: *terraform.EvalSequence, err: 1 error(s) occurred:

* aws_alb_listener.my_app-443: Error creating LB Listener: CertificateNotFound: Certificate 'arn:aws:acm:us-east-1:011123456789:certificate/a7f83c2e-57c4-4046-b81a-f9a6fe153ad0' not found
	status code: 400, request id: 6c1234e8-f111-12e3-af9f-19f5bf9b2312

Error: Error applying plan:

3 error(s) occurred:

* module.compute.module.my_app.cloudflare_record.my_app_cloudflare_public: 1 error(s) occurred:

* cloudflare_record.my_app_cloudflare_public: Error finding zone "<http://crs.org|crs.org>": ListZones command failed: error from makeRequest: HTTP status 400: content "{\"success\":false,\"errors\":[{\"code\":6003,\"message\":\"Invalid request headers\",\"error_chain\":[{\"code\":6103,\"message\":\"Invalid format for X-Auth-Key header\"}]}],\"messages\":[],\"result\":null}"
* module.compute.module.my_app.cloudflare_record.dns_cert_validation: 1 error(s) occurred:

* cloudflare_record.dns_cert_validation: Error finding zone "<http://crs.org|crs.org>": ListZones command failed: error from makeRequest: HTTP status 400: content "{\"success\":false,\"errors\":[{\"code\":6003,\"message\":\"Invalid request headers\",\"error_chain\":[{\"code\":6103,\"message\":\"Invalid format for X-Auth-Key header\"}]}],\"messages\":[],\"result\":null}"
* module.compute.module.my_app.aws_alb_listener.my_app-443: 1 error(s) occurred:

* aws_alb_listener.my_app-443: Error creating LB Listener: CertificateNotFound: Certificate 'arn:aws:acm:us-east-1:011123456789:certificate/a7f83c2e-57c4-4046-b81a-f9a6fe153ad0' not found
	status code: 400, request id: 6c1234e8-f111-12e3-af9f-19f5bf9b2312

IN	<http://ns13.dnsmadeeasy.com|ns13.dnsmadeeasy.com>.	86400
IN	<http://ns15.dnsmadeeasy.com|ns15.dnsmadeeasy.com>.	86400
IN	<http://ns11.dnsmadeeasy.com|ns11.dnsmadeeasy.com>.	86400
IN	<http://ns12.dnsmadeeasy.com|ns12.dnsmadeeasy.com>.	86400
IN	<http://ns10.dnsmadeeasy.com|ns10.dnsmadeeasy.com>.	86400
IN	<http://ns14.dnsmadeeasy.com|ns14.dnsmadeeasy.com>.	86400

if we create internal alb, then then the only way to is to do email validation, correct ?

Q: What are the benefits of using AWS Certificate Manager (ACM) and ACM Private Certificate Authority (CA)?

ACM Private CA is a managed private CA service that helps you easily and securely manage the lifecycle of your private certificates. ACM Private CA provides you a highly-available private CA service without the upfront investment and ongoing maintenance costs of operating your own private CA.

data "template_file" "user-data" {
  template = "${file("${path.cwd}/modules/compute/user-data.sh.tpl")}"

  vars = {
    app_env               = "${terraform.workspace}"
    region_name           = "${local.aws_region}"
    chef_environment_name = "${local.get_chef_environment_name}"
  }
}

export NODE_NAME="$$(app_env)app-$$(curl --silent --show-error --retry 3 <http://169.254.169.254/latest/meta-data/instance-id>)" # this uses the EC2 instance ID as the node name

export NODE_NAME="$(app_env)app-$$(curl --silent --show-error --retry 3 <http://169.254.169.254/latest/meta-data/instance-id>)" # this uses the EC2 instance ID as the node name

locals {
  enabled    = "${var.enabled == "true" ? true : false }"
  id         = "${local.enabled == true ? join(var.delimiter, compact(concat(list(var.namespace, var.stage, var.name), var.attributes))) : ""}"
  name       = "${local.enabled == true ? format("%v", var.name) : ""}"
  namespace  = "${local.enabled == true ? format("%v", var.namespace) : ""}"
  stage      = "${local.enabled == true ? format("%v", var.stage) : ""}"
  attributes = "${local.enabled == true ? format("%v", join(var.delimiter, compact(var.attributes))) : ""}"

  # Merge input tags with our tags.
  # Note: `Name` has a special meaning in AWS and we need to disamgiuate it by using the computed `id`
  tags = "${
      merge( 
        map(
          "Name", "${local.id}",
          "Namespace", "${local.namespace}",
          "Stage", "${local.stage}"
        ), var.tags
      )
    }"
}

  id = "${local.enabled == true ? (local.convert_case == true ? lower(join(var.delimiter, compact(concat(list(var.namespace, var.stage, var.name), var.attributes)))) : join(var.delimiter, compact(concat(list(var.namespace, var.stage, var.name), var.attributes))))) : ""}"

{

  "source": [
    "aws.autoscaling"
  ],
  "detail-type": [
    "EC2 Instance Terminate Successful"
  ],
  "detail": {
    "AutoScalingGroupName": [
      "MY-ASG"
    ]
  }
}

resource "aws_cloudwatch_event_rule" "console" {
  name        = "name"
  description = "....."

  event_pattern = <<PATTERN
{
  "detail-type": [
    "..."
  ]
 ,
 "resources": [
   "${aws_autoscaling_group.default.name}"
]
}
PATTERN
}

Serving Individual users with attributes
user                = [
  {
      username       = "${data.vault_generic_secret.amq.data["username"]}"
      password       = "${data.vault_generic_secret.amq.data["password"]}"
      console_access = true
  }
]

Sending a dictionary of users
user = [${data.vault_generic_secret.amq.data["users"]}]

      username       = "${data.vault_generic_secret.amq.data["username"]}"
      password       = "${data.vault_generic_secret.amq.data["password"]}"

[{ username: "foo", password: "bar"}, {username: "a", password: "b"}]

amq_users = ["${data.vault_generic_secret.amq.data["users"]}"]

amq_users = "${data.vault_generic_secret.amq.data["users"]}"

validate the resource dependancies

locals {
  convert_case = "${var.convert_case == "true" ? true : false }"
 }

provider "kubernetes" {
  host                   = "${module.aks_cluster.host}"
  client_certificate     = "${base64decode(module.aks_cluster.client_cert)}"
  client_key             = "${base64decode(module.aks_cluster.client_key)}"
  cluster_ca_certificate = "${base64decode(module.aks_cluster.ca_cert)}"
}

  filter {
    name   = "name"
    values = ["amzn-ami-hvm-*-x86_64-gp2"]
  }

# Grab most recent linux ami
data "aws_ami" "linux_ami" {
  most_recent      = true
  owners = ["137112412989"]
  executable_users = ["self"]

   filter {
    name   = "name"
    values = ["amzn-ami-hvm-*-x86_64-gp2"]
  }
}

  website {
    index_document = "${var.webui_root_object}"
  }

dig <http://production-kibana.infra.mytonic.com|production-kibana.infra.mytonic.com>                                                                              

;; QUESTION SECTION:
;production-kibana.infra.mytonic.com. IN	A

;; ANSWER SECTION:
<http://production-kibana.infra.mytost.com|production-kibana.infra.mytost.com>. 59	IN CNAME <http://vpc-fluentd-production-elastic-43nbkjmxhatoajegdhyxekul3a.ap-southeast-1.es.amazonaws.com/_plugin/kibana/|vpc-fluentd-production-elastic-43nbkjmxhatoajegdhyxekul3a.ap-southeast-1.es.amazonaws.com/_plugin/kibana/>.

;; AUTHORITY SECTION:
.			86398	IN	SOA	<http://a.root-servers.net|a.root-servers.net>. <http://nstld.verisign-grs.com|nstld.verisign-grs.com>. 2018120700 1800 900 604800 86400

;; Query time: 333 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)