#terraform - September 2020

Error: Missing required argument

The argument "api_key" is required, but was not set.

This assumes we have a bucket created called mybucket

Error: Provider configuration not present

To work with
module.vpc.module.label.data.null_data_source.tags_as_list_of_maps[3] its
original provider configuration at provider["<http://registry.terraform.io/-/null|registry.terraform.io/-/null>"] is
required, but it has been removed. This occurs when a provider configuration
is removed while objects created by that provider still exist in the state.
Re-add the provider configuration to destroy
module.vpc.module.label.data.null_data_source.tags_as_list_of_maps[3], after
which you can remove the provider configuration again.

In this specific upgrade situation the problem is actually the missing resource block rather than the missing provider block: Terraform would normally refer to the configuration to see if this resource has an explicit provider argument that would override the default strategy for selecting a provider. If you see the above after upgrading, re-add the resource mentioned in the error message until you've completed the upgrade.

my_objs = [ {"foo": "a"} {"foo": "b"}]
# find_by("foo", "a", my_objs) --> {"foo": "a"}

[for o in local.my_objs : o if o.foo == "a"][0]

  container_volumes          = {
    files_staging = {
      name = var.file_staging_bucket
      docker_volume_configuration = [{
        scope         = "shared"
        autoprovision = false
        driver        = "rexray/s3fs"
      }]
    }
    files_store = {
      name = var.file_store_bucket
      docker_volume_configuration = [{
        scope         = "shared"
        autoprovision = false
        driver        = "rexray/s3fs"
      }]
    }

 volume = toset([
   local.container_volumes["files_staging"],
   local.container_volumes["files_store"]
 ])

  dynamic "volume" {
    for_each = ["files_staging", "files_store",]
    content { 
      name = volume.value
      dynamic "docker_volume_configuration" {
        for_each = local.container_volumes[volume.value].docker_volume_configuration
        content {
          scope = docker_volume_configuration.value.scope
          autoprovision = docker_volume_configuration.value.autoprovision
          driver = docker_volume_configuration.value.driver
        }
      }
    }
  }

locals {
  private_buckets = [
    "company-${var.environment}-secrets",

    "company-${var.environment}-service-auth",
    # object level logging = company-prod-cloudtrail-logs
    "company-${var.environment}-db-connections",
    # object level logging = company-prod-cloudtrail-logs
    "company-${var.environment}-service-file-upload",
    # object level logging = company-prod-cloudtrail-logs
    "company-${var.environment}-service-feedback"
    # object level logging = company-prod-cloudtrail-logs
  ]

  default_lifecycle = {
    id = "DeleteAfterOneMonth"
    expiration_days = 31
    abort_incomplete_multipart_upload_days = 7
    enabled = false
  }

  private_buckets_w_lifecycles = {
    "company-service-imports" = {
      "name" = "company-${var.environment}-service-imports"
      "lifecycle_rl" = local.default_lifecycle 
    }
  }

  public_object_buckets = [
    # "company-${var.environment}-service-transmit"
  ]

  public_buckets_w_lifecycles = {
    "company-service-transmit" = {
      "name" = "company-${var.environment}-service-transmit"
      "lifecycle_rl" = local.default_lifecycle 
    }
  }

}


resource "aws_s3_bucket" "adv2_priv_bucket" {
    for_each = toset(local.private_buckets)
    bucket = each.value

    tags = local.tags
}


resource "aws_s3_bucket" "adv2_priv_bucket_w_lc" {
    for_each = local.private_buckets_w_lifecycles
    bucket = each.value.name

    lifecycle_rule {
        id = each.value.lifecycle_rl.id
        expiration {
          days = each.value.lifecycle_rl.expiration_days
        }
        enabled = each.value.lifecycle_rl.enabled
        abort_incomplete_multipart_upload_days = each.value.lifecycle_rl.abort_incomplete_multipart_upload_days
    }

    tags = local.tags
}


resource "aws_s3_bucket" "adv2_pubobj_bucket_w_lc" {
    for_each = local.public_buckets_w_lifecycles
    bucket = each.value.name

    # log to cloudtrail bucket (this is for server logging, not object level logging)
    # logging {
    #   target_bucket = aws_s3_bucket.adv2_cloudtrail_log_bucket.id
    # }

    lifecycle_rule {
        id = each.value.lifecycle_rl.id
        expiration {
          days = each.value.lifecycle_rl.expiration_days
        }
        enabled = each.value.lifecycle_rl.enabled
        abort_incomplete_multipart_upload_days = each.value.lifecycle_rl.abort_incomplete_multipart_upload_days
    }

    tags = local.tags
}


resource "aws_s3_bucket" "adv2_pubobj_bucket" {
    for_each = toset(local.public_object_buckets)
    bucket = each.value

    tags = local.tags
}


resource "aws_s3_bucket_public_access_block" "adv2_priv_s3" {
  for_each = aws_s3_bucket.adv2_priv_bucket

  bucket = each.value.id

  # AWS console language in comments
  # Block public access to buckets and objects granted through new access control lists (ACLs)
  block_public_acls   = true

  # Block public access to buckets and objects granted through any access control lists (ACLs)
  ignore_public_acls = true

  # Block public access to buckets and objects granted through new public bucket or access point policies
  block_public_policy = true

  # Block public and cross-account access to buckets and objects through any public bucket or access point policies
  restrict_public_buckets = true
}


resource "aws_s3_bucket_public_access_block" "adv2_priv_s3_w_lc" {
  for_each = aws_s3_bucket.adv2_priv_bucket_w_lc

  bucket = each.value.id

  # AWS console language in comments
  # Block public access to buckets and objects granted through new access control lists (ACLs)
  block_public_acls   = true

  # Block public access to buckets and objects granted through any access control lists (ACLs)
  ignore_public_acls = true

  # Block public access to buckets and objects granted through new public bucket or access point policies
  block_public_policy = true

  # Block public and cross-account access to buckets and objects through any public bucket or access point policies
  restrict_public_buckets = true
}

Error: Error creating route: RouteAlreadyExists: The route identified by 0.0.0.0/0 already exists.
	status code: 400, request id: 8332210c-dcbe-4b6d-bde4-c8d37ce655c0

  on .terraform/modules/aws_infrastructure.vpc.eks_subnets/nat-gateway.tf line 67, in resource "aws_route" "default":
  67: resource "aws_route" "default" {

Error: Your query returned no results. Please change your search criteria and try again.

  on .terraform/modules/replicaSet40/main.tf line 64, in data "aws_ami" "info":
  64: data "aws_ami" "info" {

module "replicaSet40" {
  source                        = "git::<https://github.com/cloudposse/terraform-aws-ec2-instance.git?ref=tags/0.24.0>"
  ssh_key_pair                  = var.ssh_key_pair
  instance_type                 = var.ec2_replicaSet
  ami                           = var.ami_rhel77
  ami_owner                     = var.ami_owner
  vpc_id                        = module.vpc.vpc_id
  root_volume_size              = 10
  assign_eip_address            = false
  associate_public_ip_address   = false
  security_groups               = [aws_security_group.sg_replicaSet.id]
  subnet                        = module.subnets.private_subnet_ids[0]
  name                          = "om-replicaSet40"
  namespace                     = var.namespace
  stage                         = var.stage
  tags                          = var.instance_tags
}

variable "ami_owner" {
  default = "655848829540"
}

variable "ami_omserver40" {
  default = "ami-00916221e415292ed"
}

module "domain_hostname" {
  source  = "git::<https://github.com/cloudposse/terraform-aws-route53-cluster-hostname.git?ref=tags/0.7.0>"
  enabled   = var.enabled && var.dns_zone_id != "" ? 1 : 0
  ...
}

resource "aws_subnet" "adv2_public_subnets" {
  for_each = var.adv2_public_subnet_map[var.environment]

  vpc_id = var.vpc_map[var.environment]
  cidr_block = each.value
  availability_zone = each.key
  tags = merge(local.tags, { "Name" = "adv2-${var.environment}-pub-net-${each.key}" } )
}

resource "aws_lb" "aws_adv2_public_gateway_alb" {
  name               = "services-${var.environment}-public"
  internal           = false
  load_balancer_type = "application"
  
  subnets            = aws_subnet.adv2_public_subnets

  idle_timeout       = 120
  tags = local.tags
}

  subnets            = [aws_subnet.adv2_public_subnets[0].id, aws_subnet.adv2_public_subnets[1].id]

terraform apply -auto-approve -lock=false       
google_container_cluster.default: Creating...
google_container_cluster.default: Still creating... [10s elapsed]
Failed to save state: HTTP error: 308


Error: Failed to persist state to backend.

The error shown above has prevented Terraform from writing the updated state
to the configured backend. To allow for recovery, the state has been written
to the file "errored.tfstate" in the current working directory.

Running "terraform apply" again at this point will create a forked state,
making it harder to recover.

To retry writing this state, use the following command:
    terraform state push errored.tfstate

    restrictions {
    dynamic "geo_restriction" {
      for_each = var.geo_restriction
      content {
        restriction_type = geo_restriction.restriction_type
        locations        = geo_restriction.locations
      }
    }
  }

variable "geo_restriction" {
  type = object({
    restriction_type = string
    locations        = list(string)
  })
  description = "(optional) geo restriction for cloudfront"
  default     = null
}

for_each = var.geo_restriction
    |----------------
    | var.geo_restriction is null

Cannot use a null value in for_each.

## retrieve all organizational account ID's
data "aws_organizations_organization" "my_org" {
  for_each = toset(var.ACCOUNT_ID)

  ACCOUNT_ID = each.key
}

terraform apply
(applied many times)

~ dimensions                = {
          ~ "AutoScalingGroupName" = "terra-autoscaling-asg-garden" -> "terra-autoscaling-asg-prod"
        }
        evaluation_periods        = 2
        id                        = "cpu-low-alarm"

  AppUserCredentials:
    Type: AWS::SecretsManager::Secret
    Properties:
      Name: !Sub "${AWS::StackName}/app-user-credentials"
      GenerateSecretString:
        SecretStringTemplate: '{"username": "app_user"}'
        GenerateStringKey: 'password'
        PasswordLength: 16
        ExcludePunctuation: true

Error: AccessDenied: User: arn:aws:iam::395290764396:user/sabsab is not authorized to access this resource
        status code: 403, request id: 918de6f4-347c-420f-b7af-6a19b9a029a3

  on .terraform\modules\elastic_beanstalk_environment.dns_hostname\main.tf line 1, in resource "aws_route53_record" "default":
   1: resource "aws_route53_record" "default" {

log_configuration = {
  logDriver = "awslogs"
  options = {
    "awslogs-group" = "/ecs/ctportal"
    "awslogs-region" = var.vpc_region
    "awslogs-stream-prefix" = "ecs"
  }
  secretOptions = []
}

module "resource_group" {
  source                  = "../modules/azure_resource_group"
  resource_group_name     = "test"
  resource_group_location = "westus"
}



module "kubernetes" {
  source                     = "../modules/azure_aks"
  cluster_name               = var.cluster_name
  kubernetes_version         = var.kubernetes_version
  resource_group_name        = module.resource_group.name

Error: Error: Resource Group "test" was not found

  on ../modules/azure_aks/main.tf line 1, in data "azurerm_resource_group" "rg":
   1: data "azurerm_resource_group" "rg" {