Questions tagged [terraform]
Terraform is a tool for building, changing, and combining infrastructure safely and efficiently.
431
questions
0
votes
0
answers
65k
views
Terraform error: importing EC2 Key Pair (XXXX): InvalidKeyPair.Duplicate: The keypair already exists
Terraform newbie here. I am trying to add an additional node group to existing terraform stack that has already been deployed in AWS region by someone else in my organization. I have run through ...
0
votes
1
answer
33
views
ECS Dynamic Port Mapping: "port should be set when target type is instance"
I've set the following via Terraform:
Task-definition level:
network_mode = "bridge"
Container level:
portMappings = [
{
hostPort = 0,
containerPort = 8080
}
]
Terraform ...
- 580
0
votes
1
answer
41
views
Is it possible to limit changes to a GCP Organization IAM Policy?
We've experienced an incident where a user was using Terraform against GCP to edit the organization policy (https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/...
1
vote
1
answer
108
views
Terraform suddenly, regularly fails while pushing state to S3
As of a few months ago, Terraform will fail 10% of the time while, apparently, pushing state to the backend (which is in S3). I'll have to cleanup the cruft left behind, run it again, and it'll pass. ...
- 580
1
vote
2
answers
58
views
How to display all the resources present in aws using terraform command?
Terraform show command will show all the resources in the state file.
But we need to display all the resources present in AWS (or region specific), not just the one in the state file.
How to do that ...
0
votes
0
answers
37
views
How to add tags automatically to AWS Volumes with Terraform
I have the following Terraform script to deploy an EKS cluster (tags left empty to hide values)
EKS.tf
provider "aws" {
region = var.region
profile = var.profile
default_tags {
...
0
votes
0
answers
20
views
Secrets management for Azure DevOps IAC
I have an Azure Devops Infrastructure As Code (IAC) allowing users to deploy virtual machines using terraform pipelines and to access them using SSH or RDP.
For the moment, the process is the ...
0
votes
0
answers
34
views
Kubernetes is no accepting traffic from my Load Balancer when I deploy it in Terraform in DigitalOcean
When I deploy my ingress controller I get an error from digital ocean dashboard
0/1
Kubernetes nodes accepting traffic
--
First I create my kubernetes cluster named avatares_cluster
# main.tf
...
0
votes
0
answers
42
views
Using PAT to authenticate against AzureDevops Git in AzApi Terraform Provider
I am trying to use the AzApi Terraform Provider to install fluxcd on a k8s cluster running on Azure Cloud.
Fluxcd should then look for changes in a AzureDevops Git Repo.
In the AzApi Terraform Flux ...
- 103
0
votes
0
answers
24
views
How to pass output variables to new instance?
My goal is to create an HTTP balancer from 2 nodes using terraform, the problem appears when I want to add the received public IP addresses of the balancer and application server to the balancer ...
- 1
0
votes
1
answer
126
views
Can I tell Terraform to delete resource A before creating resource B?
I'm migrating some stuff in a terraform repo and replacing Resource A with Resource B, of different types. If the details are important, A is a CloudFormation stack, B is a native terraform resource ...
- 3,562
0
votes
1
answer
113
views
Best practices on managing Terraform project repositories
As part of a new job role, I have started learning Terraform recently. Before, my main orchestration/provisioning tool was Ansible, and the best practice at my previous place was to hold the state for ...
- 3
0
votes
0
answers
55
views
Terraform: Render special characters from typical query string (like '=', '&') in a variable assignment
It seems that Terraform is either rendering the intended query string value "... = ..", with =, which messes up the URL call.
I tried to escape the \= in the string assignment, and ...
- 1
0
votes
0
answers
44
views
Updating csi-driver without stopping
I'm now facing this.
# module.eks_volume_provisioning.aws_eks_addon.csi_driver will be updated in-place
~ resource "aws_eks_addon" "csi_driver" {
~ addon_version ...
- 1
0
votes
0
answers
38
views
Deploy TBMQ into Kubernetes via terraform not by Helm
I want to deploy a TBMQ MQTT broker into a kubernetes cluster.
I succeded for minikube, but can't do this via terraform to my remote cluster.
TBMQ does not provide Helm chart package.
What approach ...
- 1
0
votes
0
answers
110
views
Terraform, EKS and cluster-autoscaler
I'm trying to deploy cluster-autoscaler to an existing EKS cluster. here's my terraform code:
resource "aws_iam_policy" "cluster_autoscaler" {
name = "...
1
vote
1
answer
233
views
'aws s3 ls' command was hanging until setting default region
I created setup show in the image in region Oregon (us-west-2) ,and I was sure that everything was in place correctly , then I tried to do aws s3 ls from the ec2 in the private subnet , it was ...
- 53
0
votes
0
answers
48
views
How to assign Digital Ocean floating ips/reserved ips to openstack?
so for an app that is based partly on openstack, I am evaluating the deployment on Digital Ocean as a testbed. The openstack deployment using kolla-ansible also bascially worked. However, while the ...
- 1
1
vote
1
answer
120
views
Terraform resources not getting destryoed from terminal
I wanted to destroy the DEV environment from my Kubernetes hosted on AWS EKS. There are two parts to the resources; the infrastructure part and the application part. I use Terraform/Terragrunt to ...
0
votes
0
answers
61
views
Seeking Expert Advice on Terraform Deployment Cleanup
I've been successfully using Terraform for various deployments, managing to create multiple environments for different clients using a single Jenkins job. However, I've hit a roadblock when it comes ...
- 45
0
votes
2
answers
68
views
S2S VPN on AWS EC2 - routing issue for VPC
I'm trying to prepare VPN setup from scratch. I used Terraform + AWS + Strongswan. Basic diagram is attached here:
AWS diagram, S2S VPN
So I have VPC_left: 172.32.0.0/16 with subnet_left: 172.32....
- 1
1
vote
0
answers
171
views
Running Initialization Script After Setting Up Aurora Serverless Cluster v2 Using Terraform
We have successfully created an Aurora Serverless Cluster v2 using the terraform-aws-rds-aurora Terraform module. Now, we want to run an initialization script after the cluster setup to create ...
- 11
0
votes
1
answer
55
views
Local terraform repository, remote ec2 with assumed role
My current setup is:
My local machine (actually one for each developper)
A git repository containing my terraform configuration
An EC2 instance which assumes an IAM role which grants it permissions ...
- 101
0
votes
0
answers
72
views
How to set a pre-exiting password for an aws_db_instance resource, from a secure SSoT container while keeping it out of the state file?
I'm trying to find a solution for setting the master user password of an aws_db_instance from a pre-existing secret (which is currently in an existing Secrets Manager resource).
If I use password = ...
- 101
0
votes
0
answers
368
views
Terraform - error while configuring s3 backend, with instance profile
First up, we use ADFS and do not have individual IAM user profiles. We use the instance profiles as per the roles/permissions we need, and do not use individual access keys etc.,
This issue came up ...
- 1
0
votes
0
answers
26
views
Setting Up Proper Routing for SQL Instance in Different GCP VPCs without Public Exposure or Gateway VM
I'm facing a networking challenge with Google Cloud VPCs and peering, and I'm hoping to get some guidance on how to resolve it. Here's my setup:
I have two VPCs in Google Cloud:
VPC "bastion"...
google-cloud-platform
1
vote
1
answer
840
views
InvalidConfigurationRequest: A load balancer cannot be attached to multiple subnets in the same Availability Zone
I copy-paste the part of my main.tf file:
resource "aws_security_group" "servers" {
name = "allowservers"
description = "Allow TCP:8080 inbound traffic to ...
scene
0
votes
0
answers
121
views
How to use separated load balancers for frontend and backend in ECS?
I have the following terraform configuration for a load balancer running in ECS AWS for my django app container deployed in ECS:
resource "aws_lb" "api" {
name = &...
- 123
0
votes
1
answer
240
views
Terraform - for directive in JSON
I am trying to get loop over string values in an IAM policy resources block to allow rds IAM authentication. My resource definition is:
resource "aws_iam_policy" "...
- 901
2
votes
0
answers
743
views
Terraform Helm set tolerations
I'm trying to set tolerations values in Terraform Helm for the occm chart in the following way:
set {
name = "tolerations"
value = yamlencode([
{
key = "node.kubernetes....
- 33
Related Tags
amazon-web-services × 132
azure × 46
kubernetes × 30
amazon-ec2 × 16
amazon-ecs × 14
aws-cli × 11
linux × 8
vmware-vsphere × 8
amazon-s3 × 7
ansible × 7
amazon-eks × 7
docker × 7
gitlab × 7
packer × 7
ssh × 7
amazon-iam × 6
cloud-init × 6
load-balancing × 6
networking × 6
automation × 5
amazon-vpc × 5
amazon-alb × 5
more related tags
Hot Network Questions
- Do we always use "worsen" with something which is already bad?
- Selecting unsymbolised features in QGIS
- Does the question "will I get transplanted" make sense to your ears?
- Diminished/Half diminished
- How important is Waterdeep: Dragon Heist to the story of Waterdeep: Dungeon of the Mad Mage?
- What's to prevent us from concluding that Revelation 13:3 has been fulfilled through Trump?
- Alternative to isinglass for tarts or other desserts
- Did Arab Christians use the word "Allah" before Islam?
- How do I know if a motion is 1 dimensional or 2 dimensional?
- What kind of pressures would make a culture force its members to always wear power armour
- How to modify FLS (Read) on all Fields on all Objects in your Org with Apex
- Were ancient Greece tridents different designs from other historical examples?
- Why is the MOSFET in this fan control circuit overheating?
- Why are some elves royalty?
- Reorder for smallest largest prefix sum
- Are the hangers on these joists sized and installed properly?
- When can widening conversions cause problems?
- Why did C++ standard library name the containers map and unordered_map instead of map and ordered_map?
- Is it worth it to apply to jobs that have over 100 applicants or have been posted for few days?
- Is "farfel" an idiolectical quirk/part of a familect?
- I found a counterexample to an assumption in a proof but not to its result – can I publish this as a paper?
- Why does "They be naked" use the base form of "be"?
- Open or closed windows in a tornado?
- When Trump ex-rivals, who previously gave Trump terrible comments, now turn to praising him, what benefits could they gain?