#terraform - August 2020

resource "aws_codebuild_project" "myapp" {
  // ...
  environment_variable {
    name = "MY_VARIABLE"
    value = var.my_variable
  }
  // ...
}

phases:
  commands: 
    - echo $MY_VARIABLE

.
├── environments
│   ├── prod
│   │   ├── america
│   │   │   ├── main.tf
│   │   │   └── prod-america.tfvars
│   │   └── europe
│   │       ├── main.tf
│   │       └── prod-europe.tfvars
│   ├── qa
│   │   ├── main.tf
│   │   └── qa.tfvars
│   └── staging
│       ├── america
│       │   ├── main.tf
│       │   └── staging-america.tfvars
│       └── europe
│           ├── main.tf
│           └── staging-europe.tfvars
└── modules
    ├── dns
    │   └── main.tf
    ├── gcp
    │   ├── gke.tf
    │   ├── main.tf
    │   └── network.tf
    └── releases
        ├── product-a-infra
        │   └── main.tf
        ├── product-b-infra
        │   └── main.tf
        └── shared-infra
            └── main.tf

task_logging = [
    for k, v in var.task_logging_options : {
      name = trimprefix(k,"TASK_LOGGING_")
      value = v
    }
  ]

task_logging_options = {
    TASK_LOGGING_Name = "es"
    // TASK_LOGGING_Host 
  }

task_logging_options = {
    TASK_LOGGING_Name = "es"
    // TASK_LOGGING_Host 
  }

Error: configmaps "aws-auth" already exists

  on .terraform/modules/eks_cluster/terraform-aws-eks-cluster-0.24.0/auth.tf line 84, in resource "kubernetes_config_map" "aws_auth_ignore_changes":
  84: resource "kubernetes_config_map" "aws_auth_ignore_changes" {

Error: Invalid expression

  on main.tf line 35, in module "eks":
  35:     pre_userdata = << EOF

Expected the start of an expression, but found an invalid expression token.

on main.tf line 168, in resource "aws_security_group" "lb_adv2_sg":

168: tags = locals.tags

A managed resource "locals" "tags" has not been declared in the root module.

locals {
  tags = {
    env         = var.environment
    owner       = "DevOps"
    product     = "adv2.0"
    managed_by  = "terraform"
  }
}

Error: Unsupported attribute

  on ../../../../../application-stack/helm.tf line 19, in output "k-ns-url2":
  19:   value = kubernetes_namespace.borrower[0].self_url

This object has no argument, nested block, or exported attribute named
"self_url".

modules "example" {
services =  [ "a", "b", "c"]
.
.
.
}

locals {
`` I need to know if local can loop on the list services and pick up each element and assign the value matching

a = if "a" exist then local.a = 1 or if not there no matching element a = 0
b = ...
c = ...
}

resource "aws_resoure_type" "service a" {
count = local.a 
.
.
.
}
resource "aws_resoure_type" "service b" {
count = local.b 
.
.
.
}

Error: Error in function call

  on .terraform/modules/haystack.dynamic_subnets/nat-gateway.tf line 42, in resource "aws_nat_gateway" "default":
  42:   subnet_id     = element(aws_subnet.public.*.id, count.index)
    |----------------
    | aws_subnet.public is empty tuple
    | count.index is 0

Call to function "element" failed: cannot use element function with an empty
list.

locals {
  monitor_defs = {
    log_errors_high_volume = {
      type       = "log alert",
      recipients = local.recipients,
      query      = "....
    },
    oom = {
      type       = "log alert",
      recipients = local.recipients,
      query      = "....

Usage: terraform state mv [options] SOURCE DESTINATION

 This command will move an item matched by the address given to the
 destination address. This command can also move to a destination address
 in a completely different state file.

 This can be used for simple resource renaming, moving items to and from
 a module, moving entire modules, and more. And because this command can also
 move data to a completely new state, it can also be used for refactoring
 one configuration into multiple separately managed Terraform configurations.

 This command will output a backup copy of the state prior to saving any
 changes. The backup cannot be disabled. Due to the destructive nature
 of this command, backups are required.

 If you're moving an item to a different state file, a backup will be created
 for each state file.

This module can be made compatible with depends_on by changing it to receive all of its provider configurations from the calling module, by using the "providers" argument in the calling module block.

Terraform currently provides both a standalone Route resource and a Route Table resource with routes defined in-line. At this time you cannot use a Route Table with in-line routes in conjunction with any Route resources. Doing so will cause a conflict of rule settings and will overwrite rules.

### main.tf
provider "aws" {
  region     = "us-east-1"
  access_key = KEY
  secret_key = SECRET
}

terraform {
  backend "remote" {
    hostname     = "<http://app.terraform.io|app.terraform.io>"
    organization = "Org"

    workspaces {
      name = "aws-prod-route53"
    }
  }

  # <https://github.com/terraform-providers/terraform-provider-aws/issues/13626>
  required_providers {
    aws = "~> 2.64.0"
  }
}

resource "aws_route53_record" "staging_record" {
  zone_id = aws_route53_zone.org.zone_id
  name    = "<http://staging.org.com|staging.org.com>"
  type    = "A"
  ttl     = 300
  records = ["55.82.222.111"]
}

### network-team.tf
resource "aws_route53_record" "cisco_record" {
  zone_id = aws_route53_zone.org.zone_id
  name    = "<http://cisco.org.com|cisco.org.com>"
  type    = "A"
  ttl     = 300
  records = ["55.82.222.112"]
}

### CODEOWNERS
## <https://docs.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners>
*                  @global-owner1 @global-owner2
network-team.tf    @network-owner

module "ssh_key_pair" {
  source                = "git::<https://github.com/cloudposse/terraform-aws-key-pair.git?ref=0.11.0>"
  name                  = "KEYPAIR"
  ssh_public_key_path   = "${path.module}/"
  generate_ssh_key      = "true"
  private_key_extension = ".pem"
  public_key_extension  = ".pub"
}

#---------------------------------------------------
# CREATE ALIAS RECORDS
#---------------------------------------------------
resource "aws_route53_record" "alias_route53_record" {
  zone_id = data.aws_route53_zone.selected.zone_id
  name    = values(var.record_sets)
  type    = "A"

  alias {
    name                   = data.aws_lb.selected.dns_name
    zone_id                = data.aws_lb.selected.zone_id
    evaluate_target_health = true
  }
}

#tfvars
record_sets = {
  record_set0 = "foo"
  record_set1  = "bar"
}

Error: Incorrect attribute value type

  on main.tf line 39, in resource "aws_route53_record" "alias_route53_record":
  39:   name    = values(merge(var.record_sets))
    |----------------
    | var.record_sets is object with 2 attributes

Inappropriate value for attribute "name": string required.

resource "aws_route53_record" "alias_route53_record" {
  zone_id  = data.aws_route53_zone.selected.zone_id
  for_each = var.record_sets
  name     = each.value
  type     = "A"

  alias {
    name                   = data.aws_lb.selected.dns_name
    zone_id                = data.aws_lb.selected.zone_id
    evaluate_target_health = true
  }
}

Error: If `individual` is false, `organization` is required.

  on .terraform/modules/ecs_web_app.ecs_codepipeline.github_webhooks/main.tf line 7, in provider "github":
   7: provider "github" {

Error: If `anonymous` is false, `token` is required.

 on .terraform/modules/ecs_web_app.ecs_codepipeline.github_webhooks/main.tf line 7, in provider "github":
  7: provider "github" {

module "test" {
  source     = "../../terraform-aws-ec2-auto-scale/"
  region     = var.region
  aws_vpc    = var.aws_vpc
  subnet_ids = var.subnet_ids
}

2020/08/20 11:00:57 [ERROR] eval: *terraform.EvalSequence, err: Your query returned no results. Please change your search criteria and try again.
2020/08/20 11:00:58 [WARN] ReferenceTransformer: reference not found: "var.subnet_ids"
module.prtg.data.aws_security_group.default: Refreshing state...
module.prtg.data.aws_subnet_ids.default: Refreshing state...

Error: Your query returned no results. Please change your search criteria and try again.

module "vpc" {
  source = "git::<https://github.com/cloudposse/terraform-aws-vpc.git?ref=tags/0.16.1>"
  namespace = var.namespace
  stage = var.stage
  name = var.name
  attributes = var.attributes
  cidr_block = "172.16.0.0/16"
  tags = local.tags
  enable_internet_gateway = true
}

module "subnets" {
  source = "git::<https://github.com/cloudposse/terraform-aws-dynamic-subnets.git?ref=tags/0.19.0>"
  availability_zones = var.availability_zones
  namespace = var.namespace
  stage = var.stage
  name = var.name
  attributes = var.attributes
  vpc_id = module.vpc.vpc_id
  igw_id = module.vpc.igw_id
  cidr_block = module.vpc.vpc_cidr_block
  nat_gateway_enabled = true
  nat_instance_enabled = true
  tags = local.tags
  vpc_default_route_table_id = ""

}

module "eks_cluster" {
  source = "git::<https://github.com/cloudposse/terraform-aws-eks-cluster.git?ref=tags/0.24.0>"
  namespace = var.namespace
  stage = var.stage
  name = var.name
  attributes = var.attributes
  tags = var.tags
  region = var.region
  vpc_id = module.vpc.vpc_id
  subnet_ids = module.subnets.public_subnet_ids
  kubernetes_version = var.kubernetes_version
  local_exec_interpreter = var.local_exec_interpreter
  oidc_provider_enabled = var.oidc_provider_enabled
  enabled_cluster_log_types = var.enabled_cluster_log_types
  cluster_log_retention_period = var.cluster_log_retention_period
  kubernetes_config_map_ignore_role_changes = false
}

Error: Error creating route: RouteAlreadyExists: The route identified by 0.0.0.0/0 already exists.
	status code: 400, request id: xxx
  on .terraform/modules/subnets/nat-gateway.tf line 62, in resource "aws_route" "default":
  62: resource "aws_route" "default" {



Error: Error creating route: RouteAlreadyExists: The route identified by 0.0.0.0/0 already exists.
	status code: 400, request id: xxx

  on .terraform/modules/subnets/nat-gateway.tf line 62, in resource "aws_route" "default":
  62: resource "aws_route" "default" {

 nat_gateway_enabled = true
  nat_instance_enabled = true

resource "aws_route53_record" "cloudfront" {

  for_each = toset(var.domain_name)
  name     = each.key
}

output "dns_record" {
  value = aws_route53_record.cloudfront[each.key].fqdn
}

Gives error : 
The "each" object can be used only in "resource" blocks, and only when the
"for_each" argument is set.

replication_configuration {
    role = aws_iam_role.replication.*.arn
    
    rules {
      status = local.enable_replica_bucket ? "Enabled" : "Disabled"

      destination {
        bucket        = aws_s3_bucket.replica_bucket.*.arn
        storage_class = "STANDARD"
      }
    }
  }

Error: Unsupported block type

  on .terraform/modules/terraform_s3_bucket/terraform-aws-s3-bucket-0.17.1/main.tf line 92, in resource "aws_s3_bucket" "default":
  92:   dynamic "grant" {

Blocks of type "grant" are not expected here.

{
   "bob.role":"arn:aws:iam::1234:role/access-role-bob",
   "bob.path":"*",
   "dave.role":"arn:aws:iam::1234:role/access-role-dave",
   "dave.path":"prod/files"
 }

locals {
  users = [
    { username : "bob", path : "*" },
    { username : "dave", path : "prod/files" },
  ]

  secret = [
    for index, data in local.users : 
      map(
        "${data["username"]}.role", "arn:aws:iam::1234:role/access-role-${data["username"]}",
        "${data["username"]}.path", "${data["path"]}"
      )
  ]
}

$ terraform console
> local.secret
[
  {
    "bob.path" = "*"
    "bob.role" = "arn:aws:iam::1234:role/access-role-bob"
  },
  {
    "dave.path" = "prod/files"
    "dave.role" = "arn:aws:iam::1234:role/access-role-dave"
  },
]

To work with module.docs-site.aws_acm_certificate.ssl its original
provider configuration at
module.docs-site.provider["<http://registry.terraform.io/hashicorp/aws|registry.terraform.io/hashicorp/aws>"].us-east-1
is required, but it has been removed. This occurs when a provider
configuration is removed while objects created by that provider still exist in
the state. Re-add the provider configuration to destroy
module.docs-site.aws_acm_certificate.ssl, after which you can
remove the provider configuration again.

Error: Invalid resource instance data in state

Instance module.public_api01.aws_instance.instance data could not be decoded
from the state: unsupported attribute "network_interface_id".

terraform {
  required_version = "0.13.1"
}

Error while installing hashicorp/template v2.1.2: after installing
<http://registry.terraform.io/hashicorp/template|registry.terraform.io/hashicorp/template> it is still not detected in the target directory; this is a bug in Terraform