seems complex to implement it in TF
using this for reference https://github.com/clouddrove/terraform-aws-api-gateway and using map to get inputs into module instead of lists
Does anyone have a good example for generating a list using the templatefile function? In this case I want to take the IP addresses of my IBM Cloud VPC instances and have them end up in a list like this in the generated installer script for my consul instances:
retry_join = ["<system one IP>", "<system two IP>", "<system three IP>"]I use the following when updating the IBM private DNS service and it works:
element(ibm_is_instance.consul_instance[*].primary_network_interface[0].primary_ipv4_address, count.index)The part I am stuck on is the user_data piece:
user_data = templatefile("${path.module}/installer.sh", { consul_version = var.consul_version, acl_token = var.acl_token, zone = var.zone, encrypt_key = var.encrypt_key })I think it would be formatlist but not sure how to jam that in to the templatefile function
I'm planning to create a resource only if a key in variable map has a object ==
AWS_PROXYhow to achieve it using for?
resources = {
resource1 = {
method = {
}
integration = {
type = "HTTP"
integration_http_method = "POST"
}
},
resource2 = {
method = {
}
integration = {
integration_http_method = "POST"
type = "AWS_PROXY"
}
}pretty new using for and for_each
for_each = {
for k, v in var.resources : k => v
if contains(v.integration.type, "AWS_PROXY")
}
Hello, can someone suggest with the below error
01:02:40 Error: Error refreshing state: 1 error occurred:
[2020-07-08T08:02:40.922Z] * data.aws_ssm_parameter.windows_admin_password: 1 error occurred:
[2020-07-08T08:02:40.922Z] * data.aws_ssm_parameter.windows_admin_password: data.aws_ssm_parameter.windows_admin_password: Error describing SSM parameter: ParameterNotFound:Code :
data "aws_ssm_parameter" "windows_admin_password" {
name = "/unix/sbx/windows/unix-win-admin-creds"
}
// User data
data "template_file" "win_user_data" {
template = "${file("library/resources/cloud-init/windows_user_data")}"
vars {
windows_admin_password = '${data.aws_ssm_parameter.windows_admin_password.value}'
}
}I am able to call the parameter value using the aws cli. The value is getting on AWSCLI but fails with error "Error describing SSM parameter: ParameterNotFound:" using with terraform.
Thanks in advance.
resource "aws_instance" "test" {
connection {
type = "winrm"
user = "Administrator"
password = '${data.aws_ssm_parameter.windows_admin_password.value}'
timeout = "10m"
}
jlj > <@gitter_kalyan088_twitter:matrix.org> its a nested map and it worked for creating resources based on key but not able to get it work using value
for_each = { for k, r in var.resources : k => r if contains(keys(r), "method_response") }
That syntax looks correct, apart from Tj Vanderpoel (Gitter)
jlj * That syntax looks correct, apart from Tj Vanderpoel (Gitter)'s point: that's my understanding too, about contains being exclusively for lists (and sets). As asked, what error(s) are you getting?
Hi! I'm trying to follow this demo https://www.hashicorp.com/resources/managing-vault-with-terraform/ to start with Vault through Terraform in a GCP project. What I'm trying to do is deploy Vault clusters on GKE with Consul as the backend. I am stuck in the GKE cluster creation part. I'm getting a bad request error as below:
Error: googleapi: Error 400: The user does not have access to service account "default". Ask a project owner to grant you the iam.serviceAccountUser role on the service account., badRequest
1 reply
jlj > <@gitter_hburak:matrix.org> Hi! I'm trying to follow this demo https://www.hashicorp.com/resources/managing-vault-with-terraform/ to start with Vault through Terraform in a GCP project. What I'm trying to do is deploy Vault clusters on GKE with Consul as the backend. I am stuck in the GKE cluster creation part. I'm getting a bad request error as below:
Error: googleapi: Error 400: The user does not have access to service account "default". Ask a project owner to grant you the iam.serviceAccountUser role on the service account., badRequest
This likely isn't a Terraform issue. Might be a GCP permissions one: as stated in the error message, if you grant your user account "service account user" permission for the associated GCP project, that should fix this problem.
resource "aws_s3_bucket" "bucket" {
bucket = "test.bucket"
lifecycle_rule {
enabled = true
prefix = "healthcheck_"
expiration {
days = 1
expired_object_delete_marker = true
}
}
}days = 1 as its an optional parameter will delete expired objects immediately?
something = var.some_var == null ? "a value" : var.some_var
hi, Im getting this error when i upgrade terraform to 0.12.28. ```
Error: Incorrect attribute value type
on security_groups.tf line 28, in resource "aws_security_group" "merl-sec-db":
28: cidr_blocks = ["x.0.0.0/8", local.subnet_cidrs]
|----------------
| local.subnet_cidrs is tuple with 10 elements
Inappropriate value for attribute "cidr_blocks": element 1: string required.
this is the resource ```resource "aws_security_group" "merl-sec-db" {
name = "merl-sec-db"
description = "Merl DB Security group"
vpc_id = data.aws_vpc.vpc_name.id
ingress {
description = "Oracle (managed by TF)"
from_port = xxxx
to_port = xxxx
protocol = "tcp"
cidr_blocks = ["x.x.x.x/8", local.subnet_cidrs]
}
ingress {
description = "SSH (managed by TF)"
from_port = 22
to_port = 22
protocol = "tcp"
cidr_blocks = ["x.0.0.0/8", "x.x.0.0/13", local.subnet_cidrs]
}locals {
subnet_cidrs = [
data.aws_subnet.subnet_us_east_1a.cidr_block,
data.aws_subnet.subnet_us_east_1b.cidr_block,
data.aws_subnet.subnet_mc_kube_e1a.cidr_block,
data.aws_subnet.subnet_mc_kube_e1b.cidr_block,
data.aws_subnet.subnet_mc_kube_e1c.cidr_block,
data.aws_subnet.subnet_mc_kube_e1a2.cidr_block,
data.aws_subnet.subnet_mc_kube_e1b2.cidr_block,
data.aws_subnet.subnet_mc_kube_e1c2.cidr_block,
"x.x.x.x/32", # OP5 polling host
"x.x.x.x/32",
]
Anyone come across this?
2 replies
I'm creating aws api gateway and using for_each and map to iterate through resources
It's working fine for normal key and values but when i'm trying to input a map which is used for request parameters, its erroring out
resource "aws_api_gateway_method" "default" {
for_each = var.resouces
authorization = lookup(each.value.method, "authorization", "NONE") #normal key value
request_parameters = lookup(each.value.method, "request_parameters", null) # expects a map input
}
variable "resources" {
resources {
authorization = "CUSTOM"
request_parameters = { "method.request.path.proxy" = true }
}
}
Error: all map elements must have the same type.
I'm completely lost when it comes to combining
clone {
template_uuid = data.vsphere_virtualmachine.template.id
}with multiple disks.
I know I can do
disk {
label = "disk0"
unit_number=0
size = data.vsphere_virtual_machine.template.disks.0.size
thin_provisioned = data.vsphere_virtual_machine.template.disks.0.thin_provisioned
}and then repeat that block for additional disks (obviously incrementing 0 to 1 and higher). But with templates with 8 disks I rather would want to be able to do a for_each; and that seems beyond me. Is there any examples for this?
dynamic "disk" {
for_each = (data.vsphere_virtual_machine.template.disks)
content = {
label = format("disk%d", each.key)
size = data.vsphere_virtual_machine.template.disks[each.key].size
}
}