#pr-reviews (2021-03)
Pull Request Reviews for Cloud Posse Projects
2021-03-01
what Added 3 variable defaults. The ecs cluster name is only required if codepipeline is enabled. The region variables don't need to be specified when the current aws region could be provided …
what Set the priority variables to null by default why If you do not set the priority, the listener rule will automatically set an unused priority for you which is a very nice default. We can ta…
Still says it needs to validate code owners. I saw the other day that someone was able to retrigger that check and it worked. Is there a gitops command for that?
Basically anytime the auto-format formats code, it causes the validate code owners to not run. We can fix it but it will require another mass update. We are trying to queue up some updates for that
In the meantime just make sure to auto format locally to avoid any issues
Thanks. I pushed an empty commit for now https://github.com/cloudposse/terraform-aws-ecs-web-app/pull/127
what Added 3 variable defaults. The ecs cluster name is only required if codepipeline is enabled. The region variables don't need to be specified when the current aws region could be provided …
2021-03-02
review plz https://github.com/cloudposse/terraform-aws-ecs-container-definition/pull/126
Run make init
make init
shell: bash -e -o pipefail {0}
env:
MAKE_INCLUDES: Makefile
BUILD_HARNESS_BRANCH: master
curl: (6) Could not resolve host: git.io
make: *** No rule to make target ‘init’. Stop.
Error: Process completed with exit code 2.
what Fixes an issue in a previous PR #123 where value was used instead of valueFrom for the secrets key why This fixes a bug in which the secrets key will break the module due to the incorrect k…
the readme
what Fixes an issue in a previous PR #123 where value was used instead of valueFrom for the secrets key why This fixes a bug in which the secrets key will break the module due to the incorrect k…
is not working for some reason
Terraform module to generate well-formed JSON documents (container definitions) that are passed to the aws_ecs_task_definition Terraform resource - cloudposse/terraform-aws-ecs-container-definition
nothing is returned from https://git.io/build-harness
DNS_PROBE_FINISHED_NXDOMAIN
$ curl -vvv <https://git.io/build-harness>
* Could not resolve host: git.io
* Closing connection 0
curl: (6) Could not resolve host: git.io
so this is what happens when git.io is down
well I guess we will have to wait
looks like it’s back @jose.amengual
i did a /rebuild-readme
but it doesnt look like it’s running. last fail was from an hour ago
the emojis are on my comment…
weird
i just ran a /test all
and i got a thumbs up emoji but tests aren’t rerunning
I’m running it manually to see
the tests look like they kicked off!
what Add additional outputs which are marked sensitive which can be used when passing on secrets (secrets) or secret maps (map_secrets). why When using secrets (or map_secrets) and without sensi…
https://github.com/cloudposse/terraform-aws-rds/pull/109 Not sure why the do not merge
label was added without any comments
what Make parameter groups create_before_destroy Make the name for parameter & option groups unique to ensure we can create new one's Add explicit dependencies why You cannot delete a pa…
2021-03-08
https://github.com/cloudposse/terraform-aws-ecs-container-definition/pull/124 Can someone please take a look at this one? Thanks!
what Add additional outputs which are marked sensitive which can be used when passing on secrets (secrets) or secret maps (map_secrets). why When using secrets (or map_secrets) and without sensi…
@Frank merged
what Add additional outputs which are marked sensitive which can be used when passing on secrets (secrets) or secret maps (map_secrets). why When using secrets (or map_secrets) and without sensi…
Thanks!
2021-03-09
https://github.com/cloudposse/terraform-aws-elasticache-redis/pull/115 <– the 0.35.0 version causes quite a few problems in existing setups. This PR should provide a way to work around that.
what Made the security group description configurable why Since v0.35.0 a description will be set which replaces the default "Managed by Terraform". Unfortunately, a change in security…
hello! looking for a review pretty please https://github.com/cloudposse/terraform-aws-elasticache-redis/pull/93
what Allow empty egress_cidr_blocks (no egress rules in default security group) why Not mandatory to have an egress rule references #90
2021-03-12
hey all, I am a bit confused what is needed for this pull request:
what I am adding dynamic object to support secindary sources why You are not supporting it right now and we need it.
comment on the PR to get more details
what I am adding dynamic object to support secindary sources why You are not supporting it right now and we need it.
hello again, here’s one adding more utility to the CDN by passing cache policy ID https://github.com/cloudposse/terraform-aws-cloudfront-cdn/pull/57
what Adding cache_policy_id to the aws_cloudfront_distribution resource. why We want to provide a cloudfront_cache_policy resource to the module. references aws_cloudfront_distribution Terraf…
this is similar, needs tests started https://github.com/cloudposse/terraform-aws-cloudfront-s3-cdn/pull/140
what AWS has a relatively new CloudFront feature named Cache Policies: https://aws.amazon.com/blogs/networking-and-content-delivery/amazon-cloudfront-announces-cache-and-origin-request-policies/ T…
2021-03-15
hey all, to proceed pull request 73, I rebased:
what Our codebuild environment needs double sources as input to build why We use code that is based on gitlab , gitlab is not supported by codebuild so we need to upload zip files to support our…
could you have a look ?
looks like is still behind master
ran a fmt through all the terraform code in the branch
and pushed
should I allow the cloudpossebot write access to my repo ?
yes
you can pull from origin/master and fix the conflicts
the cloudposse master ?
no the master branch
your code is behind so you need to rebase
ok, let me check
thx for the help, I don’t do this often
2021-03-16
Hi all, found the time to do this properly. This is a rebase of pull request 73:
What Our codebuild environment needs double sources as input to build Why We use code that is based on gitlab , gitlab is not supported by codebuild so we need to upload zip files to support our co…
I left a comment
What Our codebuild environment needs double sources as input to build Why We use code that is based on gitlab , gitlab is not supported by codebuild so we need to upload zip files to support our co…
let me check, thanks
pushed a change, is this what you mean ?
left another comment but basically you can do : for_each = var.secondary_sources
yeah that’s clear, thx
pushed
have you look at this ? https://github.com/cloudposse/terraform-aws-codebuild/pull/78
Fixes #77. what Adds an optional secondary artifact deployment to S3 why Allow the https://github.com/cloudposse/terraform-aws-ecs-web-app module to use the changes for a lightweight deployment …
yeah I saw this as well
it could go hand in hand indeed
let me check
secondary_sources is missing a description
the tests are failing on that
let me check
where should that go ?
you need a description in every variable
ha correct, let me fix it
pushed, I am not a native English speaker, so feel free to correct
me neither
what do you mean by (Optional) secondary source for the built next to the primary location defined in variable source_location
built or build?
to build
I will rephrase, second
ok
rephrased and pushed
so it is an additional source for the build
?
yes correct
so you can use two s3 buckets for example, sepparate from each other
we do use it as such
(Optional) secondary source for the codebuild project in addition to the primary location
agreed
that is more concise
agreed
please change it
done
merged
excellent !
thx man !
np
Could you have a look ?
A very big thank you to @jose.amengual for helping me with merging code ! You are one of kind !
here goes the other one:
Fixes #77. what Adds an optional secondary artifact deployment to S3 why Allow the https://github.com/cloudposse/terraform-aws-ecs-web-app module to use the changes for a lightweight deployment of …
make sure to run make init
Fixes #77. what Adds an optional secondary artifact deployment to S3 why Allow the https://github.com/cloudposse/terraform-aws-ecs-web-app module to use the changes for a lightweight deployment of …
make readme
closed in favour of #77
Hi all, since there have been a few changes on this module lately, can I get a final review of this one too? https://github.com/cloudposse/terraform-aws-codebuild/pull/78
Fixes #77. what Adds an optional secondary artifact deployment to S3 why Allow the https://github.com/cloudposse/terraform-aws-ecs-web-app module to use the changes for a lightweight deployment …
Thanks @jose.amengual!
Fixes #77. what Adds an optional secondary artifact deployment to S3 why Allow the https://github.com/cloudposse/terraform-aws-ecs-web-app module to use the changes for a lightweight deployment …
np
@Joe Hosteny have you seen this :
resource/aws_codebuild_project: The source and secondary_sources configuration block auth attributes have been deprecated to match the CodeBuild API documentation. Use the aws_codebuild_source_credential resource instead. (#17465)
NOTES: data-source/aws_vpc_endpoint_service: The service_type argument filtering has been switched from client-side to new EC2 API functionality (#17641) provider: New default_tags argument as a p…
I have not. We are only using the secondary artifact config, which I don’t think this applies to?
ohh I think it was @Bart Coddens
you both have PRs for the repo
I could help look into this one, but I will be on vacation this week
np
2021-03-17
2021-03-18
what Adds a null check for secrets and environment why For backwards compatibility cloudposse/terraform-aws-ecs-web-app#134 (comment) references N/A
2021-03-19
2021-03-21
2021-03-23
what Toggles between name and name_prefix asg arguments why To backport existing resources to use this module without recreating resources references Closes #28
2021-03-24
Can someone please take a look at this one: https://github.com/cloudposse/terraform-aws-ecs-alb-service-task/pull/112 ?
what Added the force_new_deployment flag to force new task deployment of the service Updated github configs why To make it possible to force a new deployment
what Added optional variables key_usage and customer_master_key_spec Updated GitHub configs why To be able to use the created KMS key with DNSSEC in Route53. The defaults remain unchanged. refe…
Have to get a core team member to review this one. Will start that process.
what Added optional variables key_usage and customer_master_key_spec Updated GitHub configs why To be able to use the created KMS key with DNSSEC in Route53. The defaults remain unchanged. refe…
what Toggles between name and name_prefix asg arguments Affects aws_autoscaling_group and not the aws_launch_template Followed similar https://github.com/cloudposse/terraform-aws-security-group/b…
Could i please get a review for this ^
All 5 of the open PRs for the asg module are also ready for review
https://github.com/cloudposse/terraform-aws-ec2-autoscale-group/pulls
Terraform module to provision Auto Scaling Group and Launch Template on AWS - cloudposse/terraform-aws-ec2-autoscale-group
2021-03-25
2021-03-26
could I get a review on this https://github.com/cloudposse/terraform-aws-ecs-container-definition/pull/131
what Cleaner multiple definition example using json_map why Best practices and readability references N/A
I got some quota left — particularly for small changes like that one
Though you need to post an empty commit to re-trigger some failed CI @RB
i think i messed it up
but now it’s running all the tests again lol
Haha as long as it runs that one test then you’re good.
what The example provided in the README.md gave an error when trying to run it since it set the attribute environment when it was probably trying set the attribute container_environment.
this guy AGAIN!!!!!!
lol
i saw your comment here https://github.com/cloudposse/terraform-aws-ecs-web-app/pull/131#issuecomment-808486904
what The example provided in the README.md gave an error when trying to run it since it set the attribute environment when it was probably trying set the attribute container_environment.
the last update on the readme was in line with the automation, no ?
he updated the yaml
mmm no, he needs to only update the yaml
the then run make readme
wouldn’t it be the same result ?
if i ran /rebuild-readme
wouldnt it be enough ?
it will fail I think
but the reason behind running the make command is that the readme itself gets updated with the latest too
that makes sense!
2021-03-27
what Removed the old data.template_file source why Use more recent providers so M1 can be used references Closes #139
this was even more of a rabbit hole! which lead to this PR #143
Describe the Bug I am getting the following error when using this module: Error: Failed getting S3 bucket: BucketRegionError: incorrect region, the bucket is not in 'eu-central-1' region at…
This is for comments to ensure this PR doesn't break backwards compatibility. what This simplifies calculating the correct bucket regional domain name using the s3 bucket's bucket_regional…
Could i get another review on the removal of the static s3 bucket hack?
Describe the Bug I am getting the following error when using this module: Error: Failed getting S3 bucket: BucketRegionError: incorrect region, the bucket is not in 'eu-central-1' region at…
This is for comments to ensure this PR doesn't break backwards compatibility. what This simplifies calculating the correct bucket regional domain name using the s3 bucket's bucket_regional…
OMG that is confusing
the workaround of the data sources is interesting
2021-03-28
Fully removes the template provider from versions.tf. i forgot about this file in my last pr
https://github.com/cloudposse/terraform-aws-cloudfront-s3-cdn/pull/146
what Removes the unused template provider why Forgot to remove the provider in this PR #141 references Fully closes #139
2021-03-29
2021-03-30
Can someone please take a look at this one? Thanks! https://github.com/cloudposse/terraform-aws-cloudfront-s3-cdn/pull/147
what Replaced the enabled flag with distribution_enabled Corrected behavior for actual enabled flag to prevent from creating any resources why The enabled input was being used to manage the dist…
another good one from Harry https://github.com/cloudposse/terraform-aws-cloudfront-cdn/pull/60 thanks in advance!
what Adds the Origin Request Policy attribute to the CloudFront distribution cache behaviours Nullifies any cache forwarded values if non-legacy cache behaviours are set. Taken from @dmattia PR. …
thank you @jose.amengual
what Adds the Origin Request Policy attribute to the CloudFront distribution cache behaviours Nullifies any cache forwarded values if non-legacy cache behaviours are set. Taken from @dmattia PR. …
can i get a review on https://github.com/cloudposse/terraform-aws-cloudfront-s3-cdn/pull/143
This is for comments to ensure this PR doesn't break backwards compatibility. what This simplifies calculating the correct bucket regional domain name using the s3 bucket's bucket_regional…
cc: @Andriy Knysh (Cloud Posse) if time permits since you left a comment on it last
This is for comments to ensure this PR doesn't break backwards compatibility. what This simplifies calculating the correct bucket regional domain name using the s3 bucket's bucket_regional…
what Set minimum protocol version to TLSv1.2_2019 why This is the most secure option as it only supports tls 1.2 and 1.3 references https://aws.amazon.com/about-aws/whats-new/2020/07/cloudfron…
Very small pr
what Set minimum protocol version to TLSv1.2_2019 why This is the most secure option as it only supports tls 1.2 and 1.3 references https://aws.amazon.com/about-aws/whats-new/2020/07/cloudfron…
One more small pr https://github.com/cloudposse/terraform-aws-cloudfront-s3-cdn/pull/142
what Provide better description for var.origin_bucket Provide an example of reusing an s3 bucket in the README why There's some confusion whether to define this value as the bucket to be cre…
2021-03-31
You folks are probably getting tired of me. Almost done with all the prs in cloudfront cdn!
https://github.com/cloudposse/terraform-aws-cloudfront-s3-cdn/pull/149
what Uses the bucket website_endpoint instead of the bucket_regional_domain_name The bucket_regional_domain_name is incorrectly documented in the hashicorp aws_cloudfront_distribution docs why F…
what Use acm module instead of awscli Kept original awscli command for posterity why Why use the CLI when you can use terraform ? references Closes #26
test failing
what Use acm module instead of awscli Kept original awscli command for posterity why Why use the CLI when you can use terraform ? references Closes #26