#terraform - October 2020

version: '3.0'

services:
  web:
    build: .
    command: >
      sh -c "echo yes | python manage.py collectstatic
      && gunicorn wormhole.wsgi:application --bind 0.0.0.0:8080"
    volumes:
      - ./:/usr/src/app/
      - static_volume:/usr/src/app/static
      - media_volume:/usr/src/app/media
    expose:
      - 8080

  nginx:
    build:
      context: .
      dockerfile: ./Dockerfile-nginx
    volumes:
      - static_volume:/usr/src/app/static
      - media_volume:/usr/src/app/media
    ports:
      - 8000:8000
    depends_on:
      - web

volumes:
  static_volume:
  media_volume:

Dearest Terraform Community,

It is with great pleasure that I stand before your virtual selves to publicly present the fruit of the last 18 months of our labor: Scalr, a remote backend for Terraform to compete with Terraform Cloud and Terraform Enterprise.

- Sebastian Stadil, CEO

Error: POST <https://api.github.com/repos/$user/$repo/hooks>: 404 Not Found []

  on codepipeline.tf line 128, in resource "github_repository_webhook" "webhook":
 128: resource "github_repository_webhook" "webhook" {

locals {
  endpoint_config = local.is_test ? {"writer": writer_endpoint} : {"writer": writer_endpoint, "reader": reader_endpoint }
}

locals {
  endpoint_config = merge({"writer": writer_endpoint}, local.is_test ? {} : {"reader": reader_endpoint })
}

locals {
  writer_config = { "writer": writer_endpoint }
  reader_config = { "reader": reader_endpoint }
  endpoint_config = local.is_test ? local.writer_config : merge( local.reader_config, local.writer_config )
}

service_dependency = {
    for l in chunklist(flatten([
      for k, v in local.technical_services :
      [
        for s in v.depends_on :
        [k, s]
      ] if can(v.depends_on)
    ]), 2) : join("_", l) => l
  }

provider "aws" {
  alias = "dns"
  ...
}

module "b" {
  providers = { aws = aws.b }
  ...
}

...

resource "acme_certificate" "certificate" {
  ...
  dns_challenge {
    provider = "route53"
  }
}

  dns_challenge {
    provider = "route53"

    config = {
      AWS_ACCESS_KEY_ID     = "${var.aws_access_key}"
      AWS_SECRET_ACCESS_KEY = "${var.aws_secret_key}"
      AWS_DEFAULT_REGION    = "us-east-1"
    }
  }

├── main.tf
├── mock_api.tf
├── variables.tf
├── vars
    ├── dev.tfvars
    ├── prod.tfvars   

resource aws_iam_role_policy_attachment {
  for_each = setproduct(["role1", "role2"], ["policy1", "policy2", "policy3"])
  role = each.key[0]
  policy_arn = each.key[1]
}

The given "for_each" argument value is unsuitable: the "for_each" argument
must be a map, or set of strings, and you have provided a value of type list
of tuple.

output "alb" {
  value = module.alb
}

listener_arn = data.terraform_remote_state.alb.outputs.alb.alb_https_listener_arn

module "aws_cloudtrail" {
  source  = "cloudposse/cloudtrail/aws"
  version = "0.11.0"

sns_list = toset(["first", "second", "third"])


# SNS
resource "aws_sns_topic" "this" {
  for_each = local.sns_list

  name = "${each.key}-${var.environment}"

  tags = merge(
    {
      Environment = var.environment
      Terraform   = "true"
    },
  var.tags)
}

data "aws_iam_policy_document" "this" {
  for_each = local.sns_list

  policy_id = "__default_policy_ID"

  statement {
    actions = [
      "SNS:Publish",
      "SNS:GetTopicAttributes"
    ]

    effect = "Allow"

    principals {
      type        = "AWS"
      identifiers = ["*"]
    }

    resources = [
      aws_sns_topic.this[each.value].arn,
    ]

    sid = "__default_statement_ID"
  }

  depends_on = []

}

resource "aws_sns_topic_policy" "this" {
  for_each = local.sns_list

  arn    = aws_sns_topic.this[each.value].arn
  policy = data.aws_iam_policy_document.this[each.value].json
}

-/+ aws_launch_configuration.master-us-east-1c-masters-... (new resource required)
      id:                                        "master-us-east-1c.masters....648338700000004" => <computed> (forces new resource)
      ...
      user_data:                                 "39e5e6f604706....43600e3513aaa2616" => "093492cc54eea....7c0a89df99fa72783" (forces new resource)

Error: Error creating S3 bucket: BucketAlreadyExists: The requested bucket name is not available. The bucket namespace is shared by all users of the system. Please select a different name and try again.
        status code: 409, request id: A97AF26F4D7B367B, host id: 5VvycnT8xomwlLocjMwYlFK7cFAQ8JWFXgTVQ9Y/uz4e17aOnLY4In0dxiLg9enmSDiNQ1u9fek=

  on .terraform/modules/elastic_beanstalk_environment/main.tf line 935, in resource "aws_s3_bucket" "elb_logs":
 935: resource "aws_s3_bucket" "elb_logs" {

Error: Invalid index

  on .terraform/modules/acm_request_certificate/main.tf line 30, in resource "aws_route53_record" "default":
  30:   name            = lookup(local.domain_validation_options_list[count.index], "resource_record_name")
    |----------------
    | count.index is 1
    | local.domain_validation_options_list is set of object with 2 elements

This value does not have any indices.

The true and false result expressions must have consistent types. The given
expressions are tuple and tuple, respectively.

Error: error configuring Terraform AWS Provider: no valid credential sources for Terraform AWS Provider found.

module "ecs_push_pipeline" {
  source                = "git::<https://github.com/cloudposse/terraform-aws-ecs-codepipeline.git?ref=0.17.0>"
  name                  = var.api_ecs_service_name
  namespace             = "eg"
  stage                 = "test"
  github_oauth_token    = var.pipeline_git_pat
  github_webhooks_token = var.pipeline_git_pat
  repo_owner            = var.pipeline_git_repo_owner
  repo_name             = var.api_pipeline_git_repo_name
  branch                = var.api_pipeline_git_pipeline_branch
  service_name          = var.api_ecs_service_name
  ecs_cluster_name      = var.ecs_cluster_name
  privileged_mode       = "true"
  region                = var.aws_region
  image_repo_name       = var.api_docker_repo
  build_image           = var.pipeline_build_image
  environment_variables = var.api_pipeline_env_variables
  s3_bucket_force_destroy = true

}

terraform { backend "s3" { } }

variable "storage_account_network_rule_set_subnets" {
  type = map(object({
    name                = string
    vnet_name           = string
    resource_group_name = string
  }))
  default     = {}
  description = "The Subnet ID(s) which should be able to access this Storage Account."
}

data "azurerm_subnet" "module" {
  for_each = { for s in var.storage_account_network_rule_set_subnets : s.name => s }

  name                 = each.value.name
  virtual_network_name = each.value.vnet_name
  resource_group_name  = each.value.resource_group_name
}

resource "azurerm_storage_account" "example" {
  name                = "storageaccountname"
  resource_group_name = azurerm_resource_group.example.name

  location                 = azurerm_resource_group.example.location
  account_tier             = "Standard"
  account_replication_type = "LRS"

  network_rules {
    default_action             = "Deny"
    ip_rules                   = ["100.0.0.1"]
<< vv INSERT THAT LIST HERE vv >>
    virtual_network_subnet_ids = [azurerm_subnet.example.id]
<< ^^ INSERT THAT LIST HERE ^^ >>
  }

  tags = {
    environment = "staging"
  }
}

  on .terraform/modules/eks_cluster.label/versions.tf line 2, in terraform:
   2:   required_version = "~> 0.12.0"

Module module.eks_cluster.module.label (from
git::<https://github.com/cloudposse/terraform-null-label.git?ref=tags/0.16.0>)
does not support Terraform version 0.13.4. To proceed, either choose another
supported Terraform version or update this version constraint. Version
constraints are normally set for good reason, so updating the constraint may
lead to other errors or unexpected behavior.

# Ref: <https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearch_domain#warm_type>
variable "ultra_warm_instance_type" {
  type        = string
  description = "The instance type for the ultra warm nodes."
  default     = "ultrawarm1.medium.elasticsearch"

  validation {
    condition     = can(var.ultra_warm_instance_type == "ultrawarm1.medium.elasticsearch") || can(var.ultra_warm_instance_type == "ultrawarm1.large.elasticsearch") || can(var.ultra_warm_instance_type == "ultrawarm1.xlarge.elasticsearch")
    error_message = "Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch"
  }
}

  ultra_warm_enabled        = var.elasticsearch_configuration["ultra_warm_enabled"]
  ultra_warm_instance_count = var.elasticsearch_configuration["ultra_warm_instance_count"]
  ultra_warm_instance_type  = var.elasticsearch_configuration["ultra_warm_instance_type"]

elasticsearch_configuration = {
    ultra_warm_enabled        = true
    ultra_warm_instance_count = 2
    ultra_warm_instance_type  = "ultrawarm1.medium.elasticsearch"
  }

Error: Invalid validation error message

  on .terraform/modules/data_platform.es_application_logging/modules/elasticsearch/variables.tf line 79, in variable "ultra_warm_instance_type":
  79:     error_message = "Valid values are ultrawarm1.medium.elasticsearch, ultrawarm1.large.elasticsearch and ultrawarm1.xlarge.elasticsearch"

Validation error message must be at least one full English sentence starting
with an uppercase letter and ending with a period or question mark.

elasticsearch_configuration = {
    instance_node_count       = 3
    instance_node_type        = "i3.xlarge.elasticsearch"
    master_node_count         = 3
    master_node_type          = "c5.large.elasticsearch"
    ultra_warm_enabled        = true
    ultra_warm_instance_count = 2
    ultra_warm_instance_type  = "ultrawarm1.medium.elasticsearch"
  }

  lifecycle {
    create_before_destroy = false
    ignore_changes        = [scaling_config[0].desired_size]
  }

resource "aws_ssm_document" "this" {
...
document_format = "YAML"
content = yamlencode(templatefile(
        "${path.module}/assets/documents/blah.yaml",
        {
          organisation_name = lower(var.organisation_name)
          parameter_name    = foo
        }
      ))
}

# main.tf
module "vpc" {...}
module "subnets" {...}
module "rds_instance" {...}
module "redis" {...}
module "elastic_beanstalk_application" {...}
module "elastic_beanstalk_environment" {...}
data "aws_iam_policy_document" "minimal_s3_permissions" {...}

The Terraform configuration must be valid before initialization so that
Terraform can determine which modules and providers need to be installed.

Error: Reserved argument name in module block

  on main.tf line 129, in module "hostname":
 129:   count   = var.number_of_broker_nodes > 0 ? var.number_of_broker_nodes : 0

The name "count" is reserved for use in a future version of Terraform.

[terragrunt] 2020/10/29 14:47:58 Hit multiple errors:
exit status 1