desired_size = "${each.value.desired_size}"
max_size = "${each.value.max_size}"
min_size = "${each.value.min_size}"
}
update_config {
max_unavailable_percentage = 10
}
}
https://stackoverflow.com/questions/68987563/how-do-i-use-count-from-one-resource-to-another-resource-in-terraform
lambda_action {
function_arn = module.lambda_function.aws_lambda_function.this[0].lambda_function_arn
invocation_type = "Event"
position = 2
}
hi, i am a little confused about how one can use the google_billing_budget resource https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/billing_budget
I am getting the error present in the warning, but I am not really sure how to properly fix it. Does anyone have a working example that I could leech on? :D
gcloud auth activate-service-account, but it didn't help. The full error I am getting is:Error creating Budget: googleapi: Error 403: Your application has authenticated using end user credentials from the Google Cloud SDK or Google Cloud Shell which are not supported by the billingbudgets.googleapis.com. We recommend configuring the billing/quota_project setting in gcloud or using a service account through the auth/impersonate_service_account setting. For more information about service accounts and how to use them in your application, see https://cloud.google.com/docs/authentication/. If you are getting this error with curl or similar tools, you may need to specify 'X-Goog-User-Project' HTTP header for quota and billing purposes. For more information regarding 'X-Goog-User-Project' header, please check https://cloud.google.com/apis/docs/system-parameters.
1 reply
Good afternoon all. I'm creating a user_data in resource "aws_launch_template". It will be a unix shell script. Am I right I will have to use "filebase64()" function? I got that function from this link - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/launch_template#user_data
However, I got confused with examples I saw in Hashicorp community forum. They used base64encode() to wrap the connect
https://discuss.hashicorp.com/t/user-data-and-aws-launch-template/14590
So which is right for assigning a value to "user_data"?
1 reply
Need a sftp with username and password using aws sftp using terraform module.
Potentially stupid question here that probably implies I'm missing the boat on how terraform works, but here goes. I have a few terraform modules that allow us to create virtual machines on our environment. We are using backend storage with locking to ensure safe multi-user synchronized state. I can easily modify my main.tf / terraform.tfvars to add/remove virtual machines. My understanding is that the tfstate reflects the actual state, and the .tf files reflect the desired state. Terraform will apply changes to turn the actual state into the desired state.
While the actual state is shared (via the backend) I think this also implies that the desired state needs to be shared in something like a git repo. That is, if fred and mark have copies of the same terraform scripts to create vms, and we have something like this: (assume we have a list of vm's in our tf variables somewhere)
- fred sets vm_list = ["fred-vm"] and runs terraform init (which pulls the tfstate), terraform apply, and we get fred-vm
- mark sets vm_list = ["mark-vm"] and runs terraform init, terraform apply, mark-vm gets created AND fred-vm gets deleted
I don't want fred-vm to be deleted, i want mark-vm to be added.
The obvious solution here is to share the terraform scripts via dvcs repo such as a git repo, but what I'm trying to do is a little nefarious. I'm trying to obfuscate terraform away from the users by wrapping things up in a jenkins job. Run the 'Create-VM' job w/ the vm-name parameter and it creates the VM, run the 'Destroy-VM' job w/ the vm-name parameter and it deletes the VM (by doing some work to figure out the resource names)
Is this a reasonable workflow, or do I have to bite the bullet and have people work on a git module containing the terraform code?
Need a sftp with username and password using aws sftp using terraform module.
So whats the proper way to reference resources created in another file?
I a folder
/folder/roles
in that folder i create roles and and some policies so.
/folder/roles/servera.tf
/folder/roles/serverb.tf
/folder/roles/instance_permission.tf
I create policies in /folder/roles/instance_permission.tf and i need to reference roles in that policy as well as add the policy to those role files.. Rather than put the ARN manually how do i reference like local.roles.instance_permission_policy.. etc.
When writing a provider is there any way to unit test that the terraform hcl is mapped into the expected resource you want to create. So if you had a resource
resource "foo_resource" "bar" {
name = "baz"
enabled= true
favorite_color = "yellow"
}will get turned into a struct that is
foo.Foo {
Name: baz,
enabled: true,
favoriteColor: yellow
}
Hey guys, just wondering how do you avoid trailing commas in
templatefile?For example:
resource "something" "test" { ... values = [ templatefile( "somepath", { list_of_something = var.list_of_something } ) ] }And the template:
environment = [ %{ for something in list_of_something ~} ${something}, %{ endfor ~} ]Is there a graceful way to control the last element in a similar manner like in Jinja
if loop.last?
Anyone?
3 replies
Hi, does anyone have a working example of authentication for google_billing_budget https://registry.terraform.io/providers/hashicorp/google-beta/latest/docs/resources/billing_budget ?
I am confused by this warning
If you are using User ADCs (Application Default Credentials) with this resource, you must specify a billing_project and set user_project_override to true in the provider configuration. Otherwise the Billing Budgets API will return a 403 error. Your account must have the serviceusage.services.use permission on the billing_project you defined.
Hi. I'm a newbie to terraform. I'm trying to add cloudwatch alarms for ec2. Here's the snippet. So, when I try to add other instances, it says it will replace the last line with just another line.
I want the "dimensions" to be applicable where Environment = Prod. So, how do I do that ?
resource "aws_cloudwatch_metric_alarm" "instance-health-check" {
alarm_name = "instance-health-check"
comparison_operator = "GreaterThanOrEqualToThreshold"
evaluation_periods = "1"
metric_name = "StatusCheckFailed"
namespace = "AWS/EC2"
period = "120"
statistic = "Average"
threshold = "2"
alarm_description = "This metric monitors ec2 health status"
alarm_actions = ["arn:aws:sns:us-east-1:123:abc-pagerduty-integration"]
dimensions = {
instance_id = "i-123"
instance_id = "i-456"
}
}
azurerm_cosmosdb_cassandra_table has been changed, it complains Code="NotFound" Message="Message: {\"code\":\"NotFound\",\"message\":\"Message: {\\"Errors\\":[\\"Resource Not Found. Learn more: https:\\/\\/aka.ms\\/cosmosdb-tsg-not-found\\"]}
Hey Guys, I'm trying to make use of count to skip modules when we try to apply the changes in us-east region.
module "mod1" {
count = var.aws_region == "us-east-1" ? 0 : 1
source = "./modules/mod1" }
module "mod2" {
count = var.aws_region == "us-east-1" ? 0 : 1
source = "./modules/mod2"
Infra-tg = module.mod1.infra-tg
Infra-sg = module.mod1.infra-sg
}In here both modules are skipping, but mod2 still expects output values from mod1. Which is throwing an error " Error: Unsupported attribute -- This value does not have any attributes."
Any suggestion is appreciated .
google_monitoring_notification_channel resource for setting up a slack notification channel? Can this be done automatically (programatically?) From where should I ideally fetch the referenced auth_token ?