#terraform - May 2019

When the environment variable TF_IN_AUTOMATION is set to any non-empty value, Terraform makes some minor adjustments to its output to de-emphasize specific commands to run. The specific changes made will vary over time, but generally-speaking Terraform will consider this variable to indicate that there is some wrapping application that will help the user with the next step.

* aws_vpc_peering_connection_options.requester: Error modifying VPC Peering Connection Options: OperationNotPermitted: Modifying VPC peering connection options AllowEgressFromLocalClassicLinkToRemoteVpc, AllowEgressFromLocalVpcToRemoteClassicLink is not supported for cross-region VPC peering connections

~ module.vpc_peering_cross_account.aws_vpc_peering_connection_options.accepter
      accepter.1102046665.allow_classic_link_to_remote_vpc:  "" => "false"

👉️ Add it to your calendar

https://zoom.us/j/684901853

#office-hours (our channel)

forwarded_values {
      query_string = true
 }

When specified, along with a value of true for query_string, all query strings are forwarded, however only the query string keys listed in this argument are cached. When omitted with a value of true for query_string, all query string keys are cached.

👉️ Add it to your calendar

https://zoom.us/j/684901853

#office-hours (our channel)

data "template_file" "init" {
  template = "${replace(replace(file("${var.bucket_policy}"),"[log_prefix]","${var.log_prefix}"),"[bucket_name]","${var.bucket_name}")}"
}

  vars    = {
    bucket_name = "${var.bucket_name}"
    log_prefix  = "${var.log_prefix}"

...
  providers = {
    aws = "aws.users.frankfurt"
  }

provider "aws" {
  region = "${var.region}"
}

provider "aws" {
  region  = "eu-central-1"
  profile = "${var.aws_profile}"
}

provider "aws" {
  version = ">= 2.10"
  region  = "eu-central-1"

  assume_role {
    role_arn = "arn:aws:iam::${var.custom_account_id}:role/${var.custom_role_name}"
  }

  profile = "${var.aws_profile}"

  allowed_account_ids = [
    "${var.custom_account_id}",
  ]

  alias = "custom.frankfurt"
}

provider "aws" {
  version = ">= 2.10"
  region  = "eu-central-1"

  assume_role {
    role_arn = "arn:aws:iam::12345:role/12345-admin"
  }

  allowed_account_ids = [
    "12345",
  ]

  profile = "${var.aws_profile}"

  alias = "12345.frankfurt"
}

provider "aws" {
  version = ">= 2.10"
  region  = "eu-central-1"

  assume_role {
    role_arn = "arn:aws:iam::12354:role/12354-admin"
  }

  allowed_account_ids = [
    "12354",
  ]

  alias = "12354.frankfurt"
}

The output of this tool is in GitHub-flavored Markdown format so it can easily be pasted into a Markdown-capable issue tracker, like GitHub issues. Here is an example of output from a tailored configuration I wrote to show off some of the different checklist item types:

provider "helm" {
  install_tiller  = true
  tiller_image    = "<http://gcr.io/kubernetes-helm/tiller:v2.11.0|gcr.io/kubernetes-helm/tiller:v2.11.0>"
  service_account = "${kubernetes_service_account.tiller.metadata.0.name}"
  namespace       = "${kubernetes_service_account.tiller.metadata.0.namespace}"

  kubernetes {
    host = "${module.eks_cluster.endpoint}"
    cluster_ca_certificate = "${base64decode(module.eks_cluster.certificate_authority_data)}"
    token            = "${data.aws_eks_cluster_auth.eks.token}"
    load_config_file = false
  }
}

👉️ Add it to your calendar

https://zoom.us/j/684901853

#office-hours (our channel)

* module.ecs-service.random_string.ecs-service-suffix: keepers (ordered_placement_strategy): '' expected type 'string', got unconvertible type '[]interface {}'

                               # ["${var.ordered-placement-strategy}"]
ordered_placement_strategy =  "${random_string.default.keepers.ordered-placement-strat}" 

* local.encoded: local.encoded: formatlist: list has non-string element (string) in:

${formatlist("${jsonencode("%v")}", local.values)}

tags      = "${merge(var.resource_tags, map("Name", "support-iq"))}"

terraform output foo

terraform_remote_state

output "foo" { value = "${data.terraform_remote_state.some_output_name}" }

data "terraform_remote_state" "vpc" {
  backend = "atlas"
  config {
    name = "hashicorp/vpc-prod"
  }
}

# Terraform >= 0.12
resource "aws_instance" "foo" {
  # ...
  subnet_id = "${data.terraform_remote_state.vpc.outputs.subnet_id}"
}

# Terraform <= 0.11
resource "aws_instance" "foo" {
  # ...
  subnet_id = "${data.terraform_remote_state.vpc.subnet_id}"
}

👉️ Add it to your calendar

https://zoom.us/j/684901853

#office-hours (our channel)

Terraform will perform the following actions:

  ~ module.server_ini.aws_ssm_parameter.main
      value: <sensitive> => <sensitive> (attribute changed)

Plan: 0 to add, 1 to change, 0 to destroy.

private_subnet_ids        = ["xxxxx", "yyyyy", "zzzzz"]

CREATE TABLE employee(phone VARCHAR(32), firstname VARCHAR(32), lastname VARCHAR(32), address VARCHAR(64), company VARCHAR(32));

INSERT INTO employee(phone, firstname, lastname, address, company) VALUES(\'+10000000000\', \'John\', \'Doe\', \'Country\', \'Company Ltd.\');

SELECT * FROM employee ORDER BY lastname;

aws_ecs_service.bluegreen: InvalidParameterException: The target group with targetGroupArn arn:aws:elasticloadbalancing:us-east-1:4444444:targetgroup/dev-fargateecs-app/07be25bc125ab2a0 does not have an associated load balancer.

resource "aws_security_group_rule" "ecs-servicetask-allow-alb-ingress" {
  security_group_id = "${aws_security_group.ecs_service.id}"

  type = "ingress"
  from_port = 0
  to_port = 0
  protocol = "-1"

  source_security_group_id = "${var.security_group_ids.[0]}"

Error parsing .terraform/modules/359629d31c12c09f870d559d03898da7/terraform-aws-modules-terraform-aws-vpc-e99089a/main.tf: At 2:23: Unknown token: 2:23 IDENT max