#terraform - July 2019

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

attr = { foo = "bar" }
block {
  foo = "bar"
}

"${var.ami-id == "" ? data.aws_ami.default.image_id : var.ami-id}"

Error creating S3 bucket: BucketAlreadyExists: The requested bucket name is not available. The bucket namespace is shared by all users of the system. Please select a different name and try again.

2019/07/05 16:53:27 [DEBUG] [aws-sdk-go] {}
2019/07/05 16:53:27 [DEBUG] plugin: waiting for all plugin processes to complete...
2019-07-05T16:53:27.934Z [DEBUG] plugin.terraform-provider-aws_v2.18.0_x4: 2019/07/05 16:53:27 [ERR] plugin: plugin server: accept unix /tmp/plugin915308162: use of closed network connection
2019-07-05T16:53:27.945Z [DEBUG] plugin: plugin process exited: path=/conf/guardduty/.terraform/plugins/linux_amd64/terraform-provider-aws_v2.18.0_x4

2019/07/05 17:08:44 [TRACE] BuiltinEvalContext: Initialized "aws" provider for provider.aws.replicaregion
2019/07/05 17:08:44 [TRACE] <root>: eval: terraform.EvalNoop
2019/07/05 17:08:44 [TRACE] <root>: eval: *terraform.EvalOpFilter
2019/07/05 17:08:44 [TRACE] <root>: eval: *terraform.EvalSequence
2019/07/05 17:08:44 [TRACE] <root>: eval: *terraform.EvalGetProvider
2019/07/05 17:08:44 [TRACE] <root>: eval: *terraform.EvalValidateProvider
2019/07/05 17:08:44 [TRACE] buildProviderConfig for provider.aws.replicaregion: using explicit config only
2019/07/05 17:08:44 [TRACE] GRPCProvider: GetSchema
2019-07-05T17:08:44.916Z [INFO]  plugin: configuring client automatic mTLS
2019-07-05T17:08:44.954Z [DEBUG] plugin: starting plugin: path=/conf/temp/.terraform/plugins/linux_amd64/terraform-provider-aws_v2.17.0_x4 args=[/conf/temp/.terraform/plugins/linux_amd64/terraform-provider-aws_v2.17.0_x4]
2019/07/05 17:08:44 [ERROR] <root>: eval: *terraform.EvalInitProvider, err: fork/exec /conf/temp/.terraform/plugins/linux_amd64/terraform-provider-aws_v2.17.0_x4: no such file or directory
2019/07/05 17:08:44 [ERROR] <root>: eval: *terraform.EvalSequence, err: fork/exec /conf/temp/.terraform/plugins/linux_amd64/terraform-provider-aws_v2.17.0_x4: no such file or directory
2019-07-05T17:08:45.081Z [DEBUG] plugin: plugin process exited: path=/conf/temp/.terraform/plugins/linux_amd64/terraform-provider-aws_v2.17.0_x4 pid=1730
2019-07-05T17:08:45.081Z [DEBUG] plugin: plugin exited
2019/07/05 17:08:45 [TRACE] [walkValidate] Exiting eval tree: provider.aws.replicaregion (close)

Error: fork/exec /conf/temp/.terraform/plugins/linux_amd64/terraform-provider-aws_v2.17.0_x4: no such file or directory

terraform-provider-aws_v2.17.0_x4: no such file or directory

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

data "aws_ami" "instance" {
  most_recent = true

  filter = "${var.runner_ami_filter}"

  owners = "${var.runner_ami_owners}"
}


variable "ami_filter" {
  type        = "list"

  default = [{
    name   = "name"
    values = ["amzn-ami-hvm-2018.03*-x86_64-ebs"]
  }]
}

variable "ami_filter" {
  type        = "list"

  default {
    name   = "name"
    values = ["amzn-ami-hvm-2018.03*-x86_64-ebs"]
  }
}

variable "ami_filter" {
  type        = "list"

  default = {
    name   = "name"
    values = ["amzn-ami-hvm-2018.03*-x86_64-ebs"]
  }
}

variable "ami_filter" {
  type        = list(map())

  default = [{
    name   = "name"
    values = ["amzn-ami-hvm-2018.03*-x86_64-ebs"]
  }]
}

 aws_db_instance.this: Error modifying DB Instance aartdb-eakf: InvalidDBInstanceState: Database instance is not in available state

module "alb_service_task" {
  source = "git::<https://github.com/cloudposse/terraform-aws-ecs-alb-service-task.git?ref=tags/0.13.0>"
}

module "alb_ingress" {
  source = "git::<https://github.com/cloudposse/terraform-aws-alb-ingress.git?ref=tags/0.7.0>"
}

module "alb_ingress_green" {
  source = "git::<https://github.com/cloudposse/terraform-aws-alb-ingress.git?ref=tags/0.7.0>"
}

resource "aws_lb_listener" "green" {
  load_balancer_arn = "${var.alb_arn}"

  port            = "${var.alb_ingress_port_green}"
  protocol        = "${coalesce(var.alb_ingress_protocol_green, var.alb_ingress_protocol)}"
  ssl_policy      = "${var.ssl_policy}"
  certificate_arn = "${var.certificate_arn}"

  default_action {
    target_group_arn = "${module.alb_ingress_green.target_group_arn}"
    type             = "forward"
  }
}

default_action {
    target_group_arn = "${module.alb_ingress_green.target_group_arn}"
    type             = "forward"
  }

      deployment_controller.0.type:                                                                                     "ECS" => "CODE_DEPLOY" (forces new resource)

  load_balancer_info {
    target_group_pair_info {
      prod_traffic_route {
        listener_arns = ["${module.alb.https_listener_arn}"]
      }

      target_group {
        name = "${module.main_container.alb_target_group_name}"
      }

      test_traffic_route {
        listener_arns = ["${module.main_container.alb_green_listener_arn}"]
      }
    }
  }

* aws_codedeploy_deployment_group.this: InvalidTargetGroupPairException: Target group pair must have exactly two target groups

resource "aws_codedeploy_deployment_group" "ecs_deployment_group" {
  app_name               = "${aws_codedeploy_app.bluegreen_ecs.name}"
  deployment_config_name = "CodeDeployDefault.ECSAllAtOnce"
  deployment_group_name  = "${module.codedeploy_label.id}-DeploymentGroup"
  service_role_arn       = "${aws_iam_role.code_deploy_ecs_role.arn}"

  auto_rollback_configuration {
    enabled = true
    events  = ["DEPLOYMENT_FAILURE"]
  }

  blue_green_deployment_config {
    deployment_ready_option {
      action_on_timeout = "STOP_DEPLOYMENT"
      wait_time_in_minutes = "${var.wait_time}"
    }

    terminate_blue_instances_on_deployment_success {
      action                           = "TERMINATE"
      termination_wait_time_in_minutes = "${var.wait_time}"
    }
  }

  deployment_style {
    deployment_option = "WITH_TRAFFIC_CONTROL"
    deployment_type   = "BLUE_GREEN"
  }

  ecs_service {
    cluster_name = "${var.cluster_name}"
    service_name = "${var.service_name}"
  }

  load_balancer_info {
    target_group_pair_info {
      prod_traffic_route {
        listener_arns = ["${var.alb_listener_arn}"]
      }

      target_group {
        name = "${var.alb_target_group_default_name}"
      }

      target_group {
        name = "${var.alb_target_group_green_name}"
      }

      test_traffic_route {
        listener_arns = ["${var.alb_green_listener_arn}"]
      }
    }
  }
}

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

variable dynamic_ordered_cache_behavior {
  description = "Ordered Cache Behaviors to be used in dynamic block"
  type = list(object({
    path_pattern            = string
    allowed_methods         = list(string)
    cached_methods          = list(string)
    target_origin_id        = string
    compress                = bool
    query_string            = bool
    cookies_forward         = string
    headers                 = list(string)
    query_string_cache_keys = list(string)
    whitelisted_names       = list(string)
    viewer_protocol_policy  = string
    min_ttl                 = number
    default_ttl             = number
    max_ttl                 = number
    lambda_function_associations = list(object({
      event_type   = string
      include_body = bool
      lambda_arn   = string
    }))
  }))
  default = []
}

variable "apply_config_map_aws_auth" {
  type        = "string"
  default     = "false"
  description = "Whether to generate local files from `kubeconfig` and `config_map_aws_auth` and perform `kubectl apply` to apply the ConfigMap to allow the worker nodes to join the EKS cluster"
}

* module.security_group.aws_security_group_rule.egress_with_cidr_blocks: lookup: lookup() may only be used with flat maps, this map contains elements of type list in:

${split(",", lookup(var.egress_with_cidr_blocks[count.index], "cidr_blocks", join(",", var.egress_cidr_blocks)))}

variable "groups" {
  description = "Map of groups with members"
  type       ┆= "map"
  default     = {
    "00_disabled"   = ["user1", "user2"]
    "01_group1"     = ["user2", "user3", "user4", "user5"]
    "02_group2"     = ["user3", "user4"]
    "03_group3      = ["user3", "user6"]
    "04_group4"     = ["user5", "user6", "user7"]
    "05_group5"     = ["user5", "user2"]
  }
}

resource "aws_iam_group" "groups" {
  count = "${length((keys(var.groups))}"
  name  = "${element(keys(var.groups), count.index)}"
}

resource "aws_iam_user" "users" {
  count = "${length(distinct(flatten(values(var.groups))))}"
  name  = "${element(distinct(flatten(values(var.groups))), count.index)}"

  depends_on = [aws_iam_group.groups]
}

  lifecycle {
    ignore_changes = ["tag_specifications"]

volumes = [
    {
      name      = "pepe"
      host_path = "/mnt/pepe.ramdisk"
    },
    {
      name      = "pepe-incrementals"
      docker_volume_configuration {
        scope         = "task"
        driver = "local"
      }
    }
  ]
}

 module.ecs_alb_service_task.aws_ecs_task_definition.default: volume.1.docker_volume_configuration: should be a list

docker_volume_configuration = [
{
        scope         = "task"
        driver = "local"
 }]

terraform {
  backend "s3" {
    bucket = "mybucket"
    key    = "path/to/my/project"
    region = "us-east-1"
  }
}

Specify volumes to attach to the instance besides the volumes specified by the AMI

Join us for "Office Hours" every Wednesday 11:30AM (PST, GMT-7) via Zoom.

👉️ Register for Webinar

#office-hours (our channel)

$ git grep  '{data.terraform_remote' |wc -l
    1102

To provide flexibility when upgrading decomposed environments that use terraform_remote_state, Terraform v0.11.14 introduced support for reading outputs from the Terraform v0.12 state format, so if you upgrade all of your configurations to Terraform v0.11.14 first you can then perform v0.12 upgrades of individual configurations in any order, without breaking terraform_remote_state usage.