Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Update provider deprecations #117

Merged
merged 8 commits into from
Aug 14, 2023
Merged

feat: Update provider deprecations #117

merged 8 commits into from
Aug 14, 2023

Conversation

gls4
Copy link
Contributor

@gls4 gls4 commented Aug 3, 2023

This update addresses:

  • deprecated attributes in the app_eks, redis, and secure_storage modules
  • inline s3 bucket policies have been replaced with corresponding resource attachments, namely aws_s3_bucket_acl, aws_s3_bucket_cors_configuration, aws_s3_bucket_ownership_controls, aws_s3_bucket_public_access_block, and aws_s3_bucket_server_side_encryption_configuration
  • outdated README: the required AWS provider version has been upgraded; section on upgrading kubernetes version in EKS has been expanded
  • the default version of EKS has been set to 1.25 in both the repository root and in the app_eks module. neither sets a default or allows a null value, which relegates the definition of the kubernetes version used in the EKS cluster explicitly to the invocation of the module. (For example, look at the invocation of the wandb_infra module in examples/public-dns-external/main.tf.)
  • the inline_policies attribute has been removed from the IAM role policies in the app_eks module. the effect here is that terraform will not delete any in-line policies it finds attached to the role. this shouldn't be a problem, since we moved from inline policies to the resource-attachment style prior to the v2.0 release. Again, it's critical that upgrades to this version be executed serially to make sure that these changes are affected. if inline policies remain defined, there will be a confilct, and the result is that the policies defined in the app_eks module.

@gls4 gls4 requested a review from a team August 3, 2023 21:58
Copy link
Contributor

@nfoucha nfoucha left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A few questions but nothing blocking

condition = contains(["5.7", "8.0.mysql_aurora.3.01.0", "8.0.mysql_aurora.3.02.0"], var.database_engine_version)
error_message = "We only support MySQL: \"5.7\"; \"8.0.mysql_aurora.3.01.0\"; \"8.0.mysql_aurora.3.02.0\"."
}
default = "8.0.mysql_aurora.3.02.2"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd think we still want validation here that it's 5.7 or 8.

@@ -27,8 +27,8 @@ variable "cluster_endpoint_public_access_cidrs" {

variable "cluster_version" {
description = "Indicates AWS EKS cluster version"
nullable = false
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we have a sane minimum here?

resource "aws_s3_bucket" "file_storage" {
bucket = "${var.namespace}-file-storage-${random_pet.file_storage.id}"

force_destroy = !var.deletion_protection
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this also apply to object_lock_enabled?

@gls4 gls4 merged commit e210dc6 into main Aug 14, 2023
3 checks passed
@gls4 gls4 deleted the update-provider-deprecations branch August 14, 2023 17:50
jsbroks pushed a commit that referenced this pull request Aug 14, 2023
## [2.1.0](v2.0.0...v2.1.0) (2023-08-14)

### Features

* Update provider deprecations ([#117](#117)) ([e210dc6](e210dc6))
@jsbroks
Copy link
Member

jsbroks commented Aug 14, 2023

This PR is included in version 2.1.0 🎉

gls4 pushed a commit that referenced this pull request Aug 31, 2023
* elasticache, tgt group

* rm sid from iam policy docs (reduce churn)

* updates + readme

* fmt + default eks var

* order

* eks cluster version

* remove "inline_policies" from iam roles

* removed extren comments
gls4 pushed a commit that referenced this pull request Aug 31, 2023
## [2.1.0](v2.0.0...v2.1.0) (2023-08-14)

### Features

* Update provider deprecations ([#117](#117)) ([e210dc6](e210dc6))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants