#terraform - September 2021

locals {
  iac_version = ...get git short hash...
}

provider "aws" {
  ...
  default_tags {
    tags = {
      IAC_Version = local.iac_version
    }
  }
  ignore_tags {
    keys = ["IAC_Version"]
  }
}

Error: Value for unconfigurable attribute

  on ../../modules/deployment/data_aws_lb.tf line 3, in data "aws_lb" "lb":
   3:   arn_suffix = var.arn_suffix

Can't configure a value for "arn_suffix": its value will be decided
automatically based on the result of applying this configuration.

╷
│ Error: Invalid value for module argument
│ 
│   on main.tf line 40, in module "ecs_alb_service_task":
│   40:   volumes = var.volumes
│ 
│ The given value is not suitable for child module variable "volumes" defined at .terraform/modules/ecs_alb_service_task/variables.tf:226,1-19: element 0: attributes "efs_volume_configuration" and "host_path" are required.
╵

  dynamic "volume" {
    for_each = var.volumes
    content {
      host_path = lookup(volume.value, "host_path", null)
      name      = volume.value.name

      dynamic "docker_volume_configuration" {
        for_each = lookup(volume.value, "docker_volume_configuration", [])
        content {
          autoprovision = lookup(docker_volume_configuration.value, "autoprovision", null)
          driver        = lookup(docker_volume_configuration.value, "driver", null)
          driver_opts   = lookup(docker_volume_configuration.value, "driver_opts", null)
          labels        = lookup(docker_volume_configuration.value, "labels", null)
          scope         = lookup(docker_volume_configuration.value, "scope", null)
        }
      }

      dynamic "efs_volume_configuration" {
        for_each = lookup(volume.value, "efs_volume_configuration", [])
        content {
          file_system_id          = lookup(efs_volume_configuration.value, "file_system_id", null)
          root_directory          = lookup(efs_volume_configuration.value, "root_directory", null)
          transit_encryption      = lookup(efs_volume_configuration.value, "transit_encryption", null)
          transit_encryption_port = lookup(efs_volume_configuration.value, "transit_encryption_port", null)
          dynamic "authorization_config" {
            for_each = lookup(efs_volume_configuration.value, "authorization_config", [])
            content {
              access_point_id = lookup(authorization_config.value, "access_point_id", null)
              iam             = lookup(authorization_config.value, "iam", null)
            }
          }
        }
      }
    }
  }

variable "volumes" {
  type = list(object({
    host_path = string
    name      = string
    docker_volume_configuration = list(object({
      autoprovision = bool
      driver        = string
      driver_opts   = map(string)
      labels        = map(string)
      scope         = string
    }))
    efs_volume_configuration = list(object({
      file_system_id          = string
      root_directory          = string
      transit_encryption      = string
      transit_encryption_port = string
      authorization_config = list(object({
        access_point_id = string
        iam             = string
      }))
    }))
  }))
  description = "Task volume definitions as list of configuration objects"
  default     = []
}

volumes = [
  {
    name = "etc"
    docker_volume_configuration = {
      scope         = "shared"
      autoprovision = true
    }
  },
  {
    name      = "log"
    host_path = "/var/log/hello"
  },
  {
    name = "opt"
    docker_volume_configuration = {
      scope         = "shared"
      autoprovision = true
    }
  },
]

variable "volumes" {
  type = list(object({
    #host_path = string
    #name      = string
    #docker_volume_configuration = list(object({
    #  autoprovision = bool
    #  driver        = string
    #  driver_opts   = map(string)
    #  labels        = map(string)
    #  scope         = string
    #}))
    #efs_volume_configuration = list(object({
    #  file_system_id          = string
    #  root_directory          = string
    #  transit_encryption      = string
    #  transit_encryption_port = string
    #  authorization_config = list(object({
    #    access_point_id = string
    #    iam             = string
    #  }))
    #}))
  }))
  description = "Task volume definitions as list of configuration objects"
  default     = []
}

module.kafka.aws_msk_cluster.default[0]: Still creating... [26m0s elapsed]
module.kafka.aws_msk_cluster.default[0]: Still creating... [26m10s elapsed]

2021/09/08 13:15:58 error running Init: fork/exec /tmp/tfinstall354531296/terraform: not a directory

resource "aws_subnet" "public_subnet" {
  for_each = {
    "${var.aws_region}a" = "172.16.1.0"
    "${var.aws_region}b" = "172.16.2.0"
    "${var.aws_region}c" = "172.16.3.0"
  }
  vpc_id                  = aws_vpc.vpc.id
  cidr_block              = "${each.value}/24"
  availability_zone       = each.key
  map_public_ip_on_launch = true
}

  subnet_ids = [
    aws_subnet.public_subnet["us-east-1a"].id,
    aws_subnet.public_subnet["us-east-1b"].id,
    aws_subnet.public_subnet["us-east-1c"].id
  ]

tf -version
Terraform v1.0.2
on linux_amd64

Your version of Terraform is out of date! The latest version
is 1.0.6. You can update by downloading from <https://www.terraform.io/downloads.html>

- services_api_assembly.this in .terraform/modules/services_api_assembly.this
╷
│ Error: Unsupported Terraform Core version
│
│   on .terraform/modules/services_api_alb.alb.access_logs.s3_bucket.this/versions.tf line 2, in terraform:
│    2:   required_version = ">= 0.12.0, < 0.14.0"
│
│ Module module.services_api_alb.module.alb.module.access_logs.module.s3_bucket.module.this (from git::<https://github.com/cloudposse/terraform-null-label.git?ref=tags/0.19.2>) does not support Terraform version 1.0.2. To
│ proceed, either choose another supported Terraform version or update this version constraint. Version constraints are normally set for good reason, so updating the constraint may lead to other errors or unexpected behavior.
╵

╷
│ Error: Unsupported Terraform Core version
│
│   on .terraform/modules/services_api_alb.alb.access_logs.this/versions.tf line 2, in terraform:
│    2:   required_version = ">= 0.12.0, < 0.14.0"
│
│ Module module.services_api_alb.module.alb.module.access_logs.module.this (from git::<https://github.com/cloudposse/terraform-null-label.git?ref=tags/0.19.2>) does not support Terraform version 1.0.2. To proceed, either choose
│ another supported Terraform version or update this version constraint. Version constraints are normally set for good reason, so updating the constraint may lead to other errors or unexpected behavior.
╵

╷
│ Error: Unsupported Terraform Core version
│
│   on .terraform/modules/services_api_alb.alb.default_target_group_label/versions.tf line 2, in terraform:
│    2:   required_version = ">= 0.12.0, < 0.14.0"
│
│ Module module.services_api_alb.module.alb.module.default_target_group_label (from git::<https://github.com/cloudposse/terraform-null-label.git?ref=tags/0.19.2>) does not support Terraform version 1.0.2. To proceed, either
│ choose another supported Terraform version or update this version constraint. Version constraints are normally set for good reason, so updating the constraint may lead to other errors or unexpected behavior.
╵

terraform {
  required_version = ">= 0.13.0"

  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = ">= 3.34"
    }
  }
}

  {
     "Sid": "AllowStatement3",
     "Action": ["s3:ListBucket"],
     "Effect": "Allow",
     "Resource": ["arn:aws:s3:::DOC-EXAMPLE-BUCKET"],
     "Condition":{"StringLike":{"s3:prefix":["media/*"]}}
    }

data "aws_ssm_parameter" "rds_master_password" {
  name = "/grafana/GF_RDS_MASTER_PASSWORD"
  with_decryption = "true"
}
resource "aws_ssm_parameter" "rds_master_password" {
  name        = "/grafana/GF_RDS_MASTER_PASSWORD"
  description = "The parameter description"
  type        = "SecureString"
  value       = data.aws_ssm_parameter.rds_master_password.value
}
resource "aws_ssm_parameter" "GF_SERVER_ROOT_URL" {
  name  = "/grafana/GF_SERVER_ROOT_URL"
  type  = "String"
  value = "https://${var.dns_name}"
}

resource "aws_ssm_parameter" "GF_LOG_LEVEL" {
  name  = "/grafana/GF_LOG_LEVEL"
  type  = "String"
  value = "INFO"
}

resource "aws_ssm_parameter" "GF_INSTALL_PLUGINS" {
  name  = "/grafana/GF_INSTALL_PLUGINS"
  type  = "String"
  value = "grafana-worldmap-panel,grafana-clock-panel,jdbranham-diagram-panel,natel-plotly-panel"
}

resource "aws_ssm_parameter" "GF_DATABASE_USER" {
  name  = "/grafana/GF_DATABASE_USER"
  type  = "String"
  value = "root"
}

resource "aws_ssm_parameter" "GF_DATABASE_TYPE" {
  name  = "/grafana/GF_DATABASE_TYPE"
  type  = "String"
  value = "mysql"
}

resource "aws_ssm_parameter" "GF_DATABASE_HOST" {
  name  = "/grafana/GF_DATABASE_HOST"
  type  = "String"
  value = "${aws_rds_cluster.grafana.endpoint}:3306"
}

 Error: Error describing SSM parameter (/grafana/GF_RDS_MASTER_PASSWORD): ParameterNotFound: 
│ 
│   with module.Grafana_terraform.data.aws_ssm_parameter.rds_master_password,
│   on Grafana_terraform/ssm.tf line 1, in data "aws_ssm_parameter" "rds_master_password":
│    1: data "aws_ssm_parameter" "rds_master_password" {
│ 

resource "aws_ecs_task_definition" "main" {
  family                   = "${var.app_name}-app"
  execution_role_arn       = aws_iam_role.ecs_task_execution_role.arn
  #network_mode             = "awsvpc"
  requires_compatibilities = ["FARGATE"]
  #cpu                      = var.fargate_cpu
  #memory                   = var.fargate_memory
  container_definitions    = data.template_file.main.rendered
}

data "template_file" "main" {
  template = file("./templates/ecs/main_app.json.tpl")

  vars = {
    app_name       = var.app_name
    app_image      = var.app_image
    container_port = var.container_port
    app_port       = var.app_port
    fargate_cpu    = var.fargate_cpu
    fargate_memory = var.fargate_memory
    aws_region     = var.aws_region
  }
}

# ./templates/ecs/main_app.json.tpl
[
  {
    "name": "${app_name}",
    "image": "${app_image}",
    "cpu": ${fargate_cpu},
    "memory": ${fargate_memory},
    "logConfiguration": {
        "logDriver": "awslogs",
        "options": {
          "awslogs-group": "/ecs/${app_name}",
          "awslogs-region": "${aws_region}",
          "awslogs-stream-prefix": "ecs"
        }
    },
    "portMappings": [
      {
        "containerPort": ${container_port},
        "hostPort": ${app_port}
      }
    ]
  }
]

local{
  foo_values = [
    {
      "name"    = "foo_a"
      "content" = <<-EOT
var_1,var_2,var_3,var_4
value_1,value_2,value_3,value_4
EOT
    },
    {
      "name"    = "foo_b"
      "content" = <<-EOT
var_1,var_2,var_3,var_4
value_1,value_2,value_3,value_4
EOT
    }
  ]
}

resource "aws_s3_bucket_object" "ob" {
  bucket = aws_s3_bucket.b.id
  count  = length(local.foo_values)
  key    = "${local.foo_values[count.index].name}.csv"
  content      = local.foo_values[count.index].content
  content_type = "text/csv"
} 

if env = dev then run code A 
elseif env = stage run code B 
elseif env = prod run code C

resource "aws_wafv2_web_acl" "alb_waf" {
name = "ALB-WAF"
description = "ALB"
scope = "REGIONAL"

default_action {
block {}
}

rule {
name = "allow-specific-ips"
priority = 1

action {
  allow {}
}
statement {
  and_statement {
    ip_set_reference_statement {
      arn = aws_wafv2_ip_set.ipset.arn
    }
    regex_pattern_set_reference_statement {
      arn = aws_wafv2_regex_pattern_set.staging_regex.arn
    }
  } # and_statement
} # statement block

Error: Unsupported block type

on main.tf line 56, in resource "aws_wafv2_web_acl" "alb_waf":
56: regex_pattern_set_reference_statement {

Blocks of type "regex_pattern_set_reference_statement" are not expected here.