Questions tagged [terraform]

Terraform is a tool for building, changing, and combining infrastructure safely and efficiently.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

Deploy TBMQ into Kubernetes via terraform not by Helm

I want to deploy a TBMQ MQTT broker into a kubernetes cluster. I succeded for minikube, but can't do this via terraform to my remote cluster. TBMQ does not provide Helm chart package. What approach ...
dgad's user avatar
  • 1
0 votes
0 answers
37 views

Terraform, EKS and cluster-autoscaler

I'm trying to deploy cluster-autoscaler to an existing EKS cluster. here's my terraform code: resource "aws_iam_policy" "cluster_autoscaler" { name = "...
Alexey Kiyashkin's user avatar
1 vote
1 answer
62 views

'aws s3 ls' command was hanging until setting default region

I created setup show in the image in region Oregon (us-west-2) ,and I was sure that everything was in place correctly , then I tried to do aws s3 ls from the ec2 in the private subnet , it was ...
kaushal47's user avatar
0 votes
0 answers
25 views

How to assign Digital Ocean floating ips/reserved ips to openstack?

so for an app that is based partly on openstack, I am evaluating the deployment on Digital Ocean as a testbed. The openstack deployment using kolla-ansible also bascially worked. However, while the ...
step21's user avatar
  • 1
1 vote
1 answer
39 views

Terraform resources not getting destryoed from terminal

I wanted to destroy the DEV environment from my Kubernetes hosted on AWS EKS. There are two parts to the resources; the infrastructure part and the application part. I use Terraform/Terragrunt to ...
Summerborn Storm's user avatar
0 votes
0 answers
44 views

Seeking Expert Advice on Terraform Deployment Cleanup

I've been successfully using Terraform for various deployments, managing to create multiple environments for different clients using a single Jenkins job. However, I've hit a roadblock when it comes ...
Yousuf's user avatar
  • 37
0 votes
2 answers
51 views

S2S VPN on AWS EC2 - routing issue for VPC

I'm trying to prepare VPN setup from scratch. I used Terraform + AWS + Strongswan. Basic diagram is attached here: AWS diagram, S2S VPN So I have VPC_left: 172.32.0.0/16 with subnet_left: 172.32....
Frumbar's user avatar
1 vote
0 answers
151 views

Running Initialization Script After Setting Up Aurora Serverless Cluster v2 Using Terraform

We have successfully created an Aurora Serverless Cluster v2 using the terraform-aws-rds-aurora Terraform module. Now, we want to run an initialization script after the cluster setup to create ...
Anirvan Ray's user avatar
0 votes
1 answer
39 views

Local terraform repository, remote ec2 with assumed role

My current setup is: My local machine (actually one for each developper) A git repository containing my terraform configuration An EC2 instance which assumes an IAM role which grants it permissions ...
Camusensei's user avatar
0 votes
0 answers
52 views

How to set a pre-exiting password for an aws_db_instance resource, from a secure SSoT container while keeping it out of the state file?

I'm trying to find a solution for setting the master user password of an aws_db_instance from a pre-existing secret (which is currently in an existing Secrets Manager resource). If I use password = ...
Tar's user avatar
  • 101
0 votes
0 answers
266 views

Terraform - error while configuring s3 backend, with instance profile

First up, we use ADFS and do not have individual IAM user profiles. We use the instance profiles as per the roles/permissions we need, and do not use individual access keys etc., This issue came up ...
mgn's user avatar
  • 1
0 votes
0 answers
21 views

Setting Up Proper Routing for SQL Instance in Different GCP VPCs without Public Exposure or Gateway VM

I'm facing a networking challenge with Google Cloud VPCs and peering, and I'm hoping to get some guidance on how to resolve it. Here's my setup: I have two VPCs in Google Cloud: VPC "bastion"...
anaconda1337's user avatar
1 vote
1 answer
519 views

InvalidConfigurationRequest: A load balancer cannot be attached to multiple subnets in the same Availability Zone

I copy-paste the part of my main.tf file: resource "aws_security_group" "servers" { name = "allowservers" description = "Allow TCP:8080 inbound traffic to ...
user avatar
0 votes
0 answers
96 views

How to use separated load balancers for frontend and backend in ECS?

I have the following terraform configuration for a load balancer running in ECS AWS for my django app container deployed in ECS: resource "aws_lb" "api" { name = &...
Lucas's user avatar
  • 113
0 votes
1 answer
172 views

Terraform - for directive in JSON

I am trying to get loop over string values in an IAM policy resources block to allow rds IAM authentication. My resource definition is: resource "aws_iam_policy" "...
joebegborg07's user avatar
1 vote
0 answers
497 views

Terraform Helm set tolerations

I'm trying to set tolerations values in Terraform Helm for the occm chart in the following way: set { name = "tolerations" value = yamlencode([ { key = "node.kubernetes....
sctx's user avatar
  • 23
0 votes
0 answers
144 views

Ansible provider for Terraform roles support

I have an Ansible playbook with roles that I want to execute from Terraform. site.yaml --- - hosts: cluster gather_facts: yes become: yes roles: - role: prereq roles/prereq/tasks/main.yml ...
sctx's user avatar
  • 23
0 votes
1 answer
426 views

How To Terraform Datadog Monitors with Dynamic Thresholds

I'm attempting to create a number of resources from the DataDog provider. I'm hoping to have to define as little as possible for each resource. For many properties there is some sensible default. I am ...
Marshall Davis's user avatar
0 votes
0 answers
35 views

Will Terragrunt remove my exisitng Cognito user accounts?

When running terragrunt plan cmd after making some changes on the AWS Cognito config I get the following detail amongst the list of changes. Does it mean it will delete existing users? or is it fine ...
dnuske's user avatar
  • 131
0 votes
0 answers
291 views

RedHat 8 and cloud-init not running userdata until new VM is rebooted

I have a Terraform script that is cloning a RedHat 8 VM on vSphere V7. The VM is successfully cloned, but the user in my userdata is not created when the VM starts. If I reboot the VM after it is ...
PrestonDocks's user avatar
0 votes
1 answer
181 views

AWS instance connect decrypt password is giving error as invalid private key, how to fix it?

I have cretaed an instance using terraform code and also its key pair for windows. To get the admin password I clicked on the below decrypt button and getting as invalid decrypt key. Please suggest ...
Meghana d's user avatar
0 votes
1 answer
1k views

Terraform init error: Failed to download module (local changes would be overwritten)

I have a brand-new local Terraform project that I have just cloned from gitlab. I have not made any changes to the code, but when I run terraform init I get the following error, repeated for every ...
AstoriaBoy's user avatar
0 votes
0 answers
104 views

Azure outputs outdated public IP-address

I have a Terraform file called azure.tf which is supposed to deploy a Virtual machine to Azure and afterwards SSH to said machine to run an Ansible playbook. The problem is that everytime i run ...
brokkosnarf's user avatar
0 votes
0 answers
17 views

Terraform state/files disagrees significantly with application timestamp.games

So, I have a constellation of Terraform projects. I just built an image of a specific application, which ultimately ends-up updating the tags in the auto-vars file of the corresponding project in the ...
asdasdas's user avatar
0 votes
0 answers
104 views

Modification timestamp of Terraform state/files disagrees significantly with application timestamp

So, I have a constellation of Terraform projects. I just built an image of a specific application, which ultimately ends-up updating the tags in the auto-vars file of the corresponding project in the ...
Dustin Oprea's user avatar
0 votes
1 answer
39 views

How to import an aws_spot_instance_request into Terraform?

I'm looking for a way to import an aws_spot_instance_request into Terraform. I already made a Spot Request on AWS console, now I would like to put this request on my code. How can I do that? In the ...
Arrow Root's user avatar
0 votes
0 answers
346 views

SSH Keys not propagating correctly from instance metadata to authorized_keys: missing keys, user discrepancy, and duplicate key

I want to add eight public keys via instance metadata to avoid adding them manually (i.e.: ssh to VMs, pasting the keys to .ssh/authorized_keys, etc.). I added the keys in Terraform (four distinct ...
mångata's user avatar
  • 109
0 votes
1 answer
133 views

Upgrade azure VM basic SKU to standard using terraform

I am performing the same task, upgrading the azure VM public ip SKU from basic to standard but using terraform code. My plan is Disassociate nic from UI Include SKU = "Standard" in my ...
reshma m nair's user avatar
0 votes
0 answers
133 views

How to add username and password based uthentication to kubernetes dashboard using helm and terraform?

I have this terraform config for deploying a kubernetes dashboard to my cluster on VKE. resource "helm_release" "my-kubernetes-dashboard" { name = "my-kubernetes-dashboard&...
Dan's user avatar
  • 1
1 vote
1 answer
628 views

Provisionning a GKE cluster stuck at Deploying step

I am provisionning a simple GKE cluster thank to terraform with the more basic config and it is stuck at "Deploying" "64% - Cluster is being deployed..." And in my terminal ...
Hugo Maitre's user avatar
0 votes
1 answer
498 views

How to set a default account for multiple aws providers in terraform?

I need to create resources for multiple accounts in my terraform code. So, I have created multiple providers in aws and using the same for individual modules. Other than above, if I create any ...
Meghana d's user avatar
0 votes
1 answer
606 views

Restoring Terraform state from backend

My Terraform Git repository ended-up having some unreconciliable data error and I couldn't push a recent change. I exported my commit to a patch, recloned, applied the patch, and then realized I just ...
Dustin Oprea's user avatar
0 votes
0 answers
81 views

How to snooze all cloudwatch alarms at specific time?

I am trying to setup snooze option for all alarms in my AWS account. To accomplish this I have tried the below terraform code. I kept my account id as dummy value 12345678. resource "...
Meghana d's user avatar
0 votes
1 answer
898 views

How to correctly pass firewall rules to the google-terraform-network module?

I want to create a network using the google-terraform-network module. Additionally, I want to pass the firewall rules I made as a parameter to the module so that the created network contains these two ...
mångata's user avatar
  • 109
2 votes
0 answers
574 views

Why can't my ECS Fargate cluster write to my mounted EFS volume, all deployed with Terraform?

I've got a Terraform deployment that deploys a Docker image into ECS Fargate. It attaches an EFS volume to the container. When I SSH into the container, I see the volume mounted, but I am unable to ...
CryptoFool's user avatar
0 votes
1 answer
506 views

How do I get rid of the deprecation warnings on my aws_route_table definitions?

All of my route table definitions throw a deprecation warning during the plan/apply stages. I can't figure out how I should be defining my routes so that I stop getting these warnings. Here's an ...
Chris.B's user avatar
  • 421
0 votes
0 answers
266 views

How to escape {{ in AWS SSM?

We're using Atlantis & Terraform to set SSM values. One of the parameters contains raw {{ ... }} in the same syntax used by SSM for dynamic parameters. AWS SSM refuses the value with: Error: ...
Sebastian's user avatar
  • 101
0 votes
0 answers
94 views

alarm for direct connect is showing insufficient data with terraform, how to fix that?

I tried creating alarm for direct connect using this link. But it is showing insufficient data, so I tried creating manually from aws console and it is working. So, did a side by side comparison and ...
user2331760's user avatar
0 votes
1 answer
720 views

Is there a way to render the output of a data resource before run terraform apply?

I would like to be able to see the JSON of a data resource (like a policy document) on the plan. Currently these type of resources only "renders" during the apply. I want to know if there is ...
Arrow Root's user avatar
0 votes
0 answers
3k views

invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable

enter image description here Error: Kubernetes cluster unreachable: invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable Error: Get "http:...
gotothesky's user avatar
2 votes
1 answer
686 views

Why does Terraform want to fully delete aws_iam_policy_document?

I don't understand why Terraform wants to remove the json policy. In other cases, when the data will be read during the apply, the plan shows the json policy being removed and added in the same plan, ...
Arrow Root's user avatar
1 vote
0 answers
120 views

GitLab CI Runners faild InvalidParameterCombination: Cannot find upgrade path from 5.7.38 to 5.6 , Terraform

GitLab CI Runners faild the jbo with the following error message │ Error: Error modifying DB Instance legacy-dms: InvalidParameterCombination: Cannot find upgrade path from 5.7.38 to 5.6. │ status ...
sam23's user avatar
  • 59
0 votes
1 answer
1k views

AWS EKS Cluster : InvalidParameterException: Unsupported Kubernetes minor version update ,Terraform Gitlab CI

The following errors occur every time I run the pipeline │ Error: error updating EKS Cluster (business-staging) version: InvalidParameterException: Unsupported Kubernetes minor version update from 1....
sam23's user avatar
  • 59
0 votes
1 answer
159 views

How to fix permission error of Ebs volume using Amazon Data lifecycle manager?

I applied the terraform code in this link, which contains code to apply the specific roles and permission s to service dlm lifecycle for ebs volumes. But still I am getting access errors. Please ...
Meghana d's user avatar
0 votes
1 answer
508 views

Can't set up the GCP's external load balancer to work correctly with Terraform

Using Terraform, I want to build an infrastructure that consists of an external load balancer (LB) and a MIG with 3 VMs. Each VM within the MIG should run a server that listens on 80. Furthermore, I ...
mångata's user avatar
  • 109
0 votes
1 answer
991 views

Cloudflare API token permission to edit terraform cloudflare_list resource

Recently I had an API Token that allowed me to access Terraform cloudflare_access_rule and cloudflare_list resources. That token expired, and to my surprise, it vanished from the UI, so I cannot see ...
Nagev's user avatar
  • 600
0 votes
1 answer
61 views

How to iterative over public/private subnets in the Terraform VPC module?

I'm trying to define public and private subnets as input variables to the Terraform vpc module. How can I reference my private/public subnet variables in an iterative statement rather than hard-coding ...
Nstevens's user avatar
  • 321
2 votes
1 answer
1k views

how to generate terraform code of existing AWS EKS cluster?

I created EKS cluster on my AWS account, finished all necessary configurations, the environment is working as expected. Now I would like to generate terraform code to have a possibility to create ...
Victoria Ivanov's user avatar
2 votes
1 answer
2k views

How do i fix terraform invalid JSON policy

I am trying to use a file which contains load balancer iam policy for my AWS in terraform. However when i run the terraform script, i get an error stating: Error: "policy" contains an ...
eagercoder's user avatar
0 votes
1 answer
1k views

How do i add a security group as an inbound rule to another security group in terraform

I have a Terraform codebase which deploys a private EKS cluster, a bastion host and other AWS services. I have also added a few security groups to the in Terraform. One of the security groups allows ...
eagercoder's user avatar

1
2 3 4 5
9