terraform-aws-components
terraform-aws-components copied to clipboard
Fixes and changes to spin up a brand new atmos stack
what
- remote_state invocation through the module, removing old code where remote state is pulled through data sources
- updated modules' versions in several places
- changes to providers.tf for bootstraping components with a direct assume role variable (we haven't figured out how to make it work through iam_roles module while we don't have any roles provisioned)
- missing and required variables that have references in module's code
- we'd be rather using roles instead of profiles when setting up AWS providers
- updated policies for ALB controller according to updated AWS docs
- created custom EKS IAM roles
I rejected the changes to the providers for the bootstrap components because they create or modify IAM roles and/or authentication so you cannot use the roles they create to create them (which is why they are called "bootstrap" components).
The bootstrap components can be created by any IAM role that has read/write access to the Terraform state S3 bucket and Dynamo DB table, and can assume OrganizationAccountAccessRole
in the relevant accounts.
Maybe I am mistaken, but I don think you meant to commit...
modules/tfstate-backend/gbl-root-tfstate-backend.planfile
I think this was included on accident as well gbl-root-tfstate-backend.tfplan
.
Closed this as it has become stale, most of the components referenced by this branch and PR have been superseded or updated.