#terraform-0_12 (2019-09)

How do I change this

names = ["ecr-1", "ecr-2", "ecr-3"]

locals {
  name  = tolist([for name in var.names : "${name}"])
}

resource "aws_ecr_repository" "default" {
  for_each = toset(var.names)
  name     = local.name[0]
}

To a sort of splat / wildcard. I don’t want just the first index I want them all e.g. local.names[*] — what am I missing?

I’ve tried all sorts of combos

Oh lol got it working now

each.key is working again, I must have changed something else.

@oscarsullivan_old what are you trying to achieve with

name = tolist([for name in var.names : “${name}”])

I got it now with just a simple for_each and each.key

I think I tried so many combinations to get it working and made so many changes that I had something overly complex

ended up being a 3 liner lol

Anyone noticed how even with the Makefile below, they still end up with .terraform and .module?

 ✗ . (none) services ⨠ cat Makefile
-include ${TF_MODULE_CACHE}/Makefile

# Makefile used by Geodesic shells to operate Terraform projects

init:
	mkdir -p ${TF_MODULE_CACHE}
	terraform init

@Andriy Knysh (Cloud Posse) I know you’re familiar with this. In your previous example the Reset target does not remove .terraform — have I missed something or misconfigured and now ending up with both dirs?

Any way to have count and for_each on a resource block? So: Count for is_enabled and for_each to iterate through, say, a list of strings for ‘name’ (for example)

All I can think of is some local variable that checks if is__enabled is true and if it is the array used in the resource for_each is populated, else it is made empty as though it were ‘disabled’? But no idea if that’d just cause an unset error or make it null.. unless Null is a keyword for that

you can use something like this

for_each = { for rule in var.waf_rules : rule.name => rule if rule.enabled }

or something like this (if is_enabled is to enable/disable globally)

Oo both interesting examples. Thanks

Anyone knows a way to do in Terraform something like “fire and forget” type of operation ?

I’m creating a rds cluster and it checks for the instance to be created and it takes WAY to long

I added this :

# Make it faster by skipping some checks
  skip_get_ec2_platforms      = true
  skip_metadata_api_check     = true
  skip_region_validation      = true
  skip_credentials_validation = true
  skip_requesting_account_id  = true

but still takes a long time

and some times the connection times out

@jose.amengual I think Terraform needs the output of the API call to update the state file

You can just run the apply in the background

that is what I thought too

and it has been

ing... [48m31s elapsed]

rds is painfull

Any ETA on https://github.com/cloudposse/terraform-aws-eks-cluster/pull/20/files ?

We’re looking to use the EKS modules

(and https://github.com/cloudposse/terraform-aws-eks-workers/pull/21)

and https://github.com/cloudposse/terraform-aws-ec2-autoscale-group/pull/14

@oscar we’ll get to it soon, sorry for the delay

Dont apologise!

I’m using the guys forks for now but let me know when I can move back to Cloudposses repos

Didn’t quite work. Some sub-module issues. I’ll just slip in a use terraform0.11

terraform 0.12 still fail if data resources return nothing ?

Anyone know if it’s possible to do what amounts to an else if in 0.12?

I’m doing name = (var.branch == "master" ? "${var.namespace}-${var.stage}-${var.service}" : "${var.namespace}-${var.stage}-${var.service}-${var.branch}")

but I want to also check for var.branch == “staging” in the middle there

name = var.branch == "master" ? .... : (var.branch == "staging" ? ... : ...)

or use locals to simplify

Thanks @Andriy Knysh (Cloud Posse). I’ll check into using locals for this as well, that’s a good idea.

https://github.com/cloudposse/terraform-terraform-label/blob/master/main.tf#L6

Components for secure UI hosting in S3

• S3 — for storing the static site

• CloudFront — for serving the static site over SSL

• AWS Certificate Manager — for generating the SSL certificates Route53 — for routing the domain name to the correct location Did anyone come across any modules for this in terraform ?

Hi everyone, what module would you recomend I use to store a github access token?

I’m using TF to manage all github

hi guys i’m using cloudposse/terraform-aws-elasticsearch and i got this error

Error: Reference to undeclared resource

  on main.tf line 42, in module "elasticsearch":
  42:     rest.action.multi.allow_explicit_index = "true"

A managed resource "rest" "action" has not been declared in the root module.

[terragrunt] 2019/09/30 19:05:13 Hit multiple errors:
exit status 1

For those interested in the EKS modules, we’ve converted them to TF 0.12:

https://github.com/cloudposse/terraform-aws-ec2-autoscale-group https://github.com/cloudposse/terraform-aws-eks-workers https://github.com/cloudposse/terraform-aws-eks-cluster/releases/tag/0.5.0

New features:

1. A complete working example https://github.com/cloudposse/terraform-aws-eks-cluster/tree/master/examples/complete

2. Automatic tests (bats and terratest) to lint the code and provision the example on AWS https://github.com/cloudposse/terraform-aws-eks-cluster/tree/master/test

3. Codefresh pipeline to run the tests (it provisions the cluster on AWS test account and then checks all the outputs for validity)

https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/codefresh/test.yml

1. You can specify additional IAM Roles, Users and AWS accounts to be added to the Auth ConfigMap to allow authenticating to the EKS cluster

https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/configmap-auth.yaml.tpl#L9-L19 https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/variables.tf#L120-L148

1. The Auth ConfigMap accepts a list of worker node ARNs to allow many different worker groups using diff EC2 instances to join the same EKS cluster

https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/configmap-auth.yaml.tpl#L8 https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/variables.tf#L75 https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/examples/complete/main.tf#L89

1. To apply the Auth ConfigMap, the module does not construct kubeconfig anymore. Instead it reads kubeconfig from the cluster after it gets provisioned

https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/auth.tf#L87 (thanks to @oscar for the ideas)

1. The automatic test now waits for all worker nodes to join the EKS cluster

https://github.com/cloudposse/terraform-aws-eks-cluster/blob/master/test/src/examples_complete_test.go#L81-L122

Waiting for worker nodes to join the EKS cluster                                                                                                                 
Worker Node ip-172-16-119-111.us-east-2.compute.internal has joined the EKS cluster at 2019-10-01 00:47:51 +0000 UTC                                             
Worker Node ip-172-16-155-103.us-east-2.compute.internal has joined the EKS cluster at 2019-10-01 00:48:01 +0000 UTC                                             
All worker nodes have joined the EKS cluster

amazing job as usual @Andriy Knysh (Cloud Posse)

really like the outcome