New attempt to configure access with ssh-oidc

[sebastian-luna-valero]

Summary

This has been well tested now. It should hopefully work!

---

Related issue :

[github-actions]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Plan 📖success

Show Plan

terraform
Acquiring state lock. This may take a few moments...
openstack_networking_floatingip_v2.fip: Refreshing state... [id=1a2e1285-0a20-4582-aab9-27255607a862]
openstack_compute_secgroup_v2.motley: Refreshing state... [id=90726780-7918-4bfa-a03b-c1a723d5757b]
openstack_compute_instance_v2.dashboard: Refreshing state... [id=7b11db97-b476-48a1-940c-29b4c3784a4c]
openstack_compute_secgroup_v2.secgroup: Refreshing state... [id=47779555-2ce1-400c-ba68-d177683c7228]
openstack_compute_floatingip_associate_v2.fip: Refreshing state... [id=147.213.76.217/7b11db97-b476-48a1-940c-29b4c3784a4c/]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
  - destroy

Terraform will perform the following actions:

  # openstack_compute_instance_v2.dashboard will be updated in-place
  ~ resource "openstack_compute_instance_v2" "dashboard" {
        id                  = "7b11db97-b476-48a1-940c-29b4c3784a4c"
        name                = "dashboard"
      ~ security_groups     = [
          - "motley-cue",
          - "test",
            # (1 unchanged element hidden)
        ]
        tags                = []
        # (14 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # openstack_compute_secgroup_v2.motley will be destroyed
  # (because openstack_compute_secgroup_v2.motley is not in configuration)
  - resource "openstack_compute_secgroup_v2" "motley" {
      - description = "Open access via ssh-oidc" -> null
      - id          = "90726780-7918-4bfa-a03b-c1a723d5757b" -> null
      - name        = "motley-cue" -> null

      - rule {
          - cidr        = "0.0.0.0/0" -> null
          - from_port   = 22 -> null
          - id          = "9cbaa6ae-dd2b-44b1-b995-bbd40520dc5b" -> null
          - ip_protocol = "tcp" -> null
          - self        = false -> null
          - to_port     = 22 -> null
        }
      - rule {
          - cidr        = "0.0.0.0/0" -> null
          - from_port   = 8181 -> null
          - id          = "30baec6f-303c-467a-bde6-33cf2fd98196" -> null
          - ip_protocol = "tcp" -> null
          - self        = false -> null
          - to_port     = 8181 -> null
        }
    }

Plan: 0 to add, 1 to change, 1 to destroy.

Warning: Deprecated Resource

  with openstack_compute_secgroup_v2.secgroup,
  on main.tf line 13, in resource "openstack_compute_secgroup_v2" "secgroup":
  13: resource "openstack_compute_secgroup_v2" "secgroup" {

use openstack_networking_secgroup_v2 resource instead

(and 3 more similar warnings elsewhere)

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.
Releasing state lock. This may take a few moments...

Pusher: @sebastian-luna-valero, Action: pull_request

[github-actions]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Plan 📖success

Show Plan

terraform
Acquiring state lock. This may take a few moments...
openstack_networking_floatingip_v2.fip: Refreshing state... [id=1a2e1285-0a20-4582-aab9-27255607a862]
openstack_compute_secgroup_v2.motley: Refreshing state... [id=90726780-7918-4bfa-a03b-c1a723d5757b]
openstack_compute_secgroup_v2.secgroup: Refreshing state... [id=47779555-2ce1-400c-ba68-d177683c7228]
openstack_compute_instance_v2.dashboard: Refreshing state... [id=7b11db97-b476-48a1-940c-29b4c3784a4c]
openstack_compute_floatingip_associate_v2.fip: Refreshing state... [id=147.213.76.217/7b11db97-b476-48a1-940c-29b4c3784a4c/]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
  - destroy

Terraform will perform the following actions:

  # openstack_compute_instance_v2.dashboard will be updated in-place
  ~ resource "openstack_compute_instance_v2" "dashboard" {
        id                  = "7b11db97-b476-48a1-940c-29b4c3784a4c"
        name                = "dashboard"
      ~ security_groups     = [
          - "motley-cue",
          - "test",
            # (1 unchanged element hidden)
        ]
        tags                = []
        # (14 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

  # openstack_compute_secgroup_v2.motley will be destroyed
  # (because openstack_compute_secgroup_v2.motley is not in configuration)
  - resource "openstack_compute_secgroup_v2" "motley" {
      - description = "Open access via ssh-oidc" -> null
      - id          = "90726780-7918-4bfa-a03b-c1a723d5757b" -> null
      - name        = "motley-cue" -> null

      - rule {
          - cidr        = "0.0.0.0/0" -> null
          - from_port   = 22 -> null
          - id          = "9cbaa6ae-dd2b-44b1-b995-bbd40520dc5b" -> null
          - ip_protocol = "tcp" -> null
          - self        = false -> null
          - to_port     = 22 -> null
        }
      - rule {
          - cidr        = "0.0.0.0/0" -> null
          - from_port   = 8181 -> null
          - id          = "30baec6f-303c-467a-bde6-33cf2fd98196" -> null
          - ip_protocol = "tcp" -> null
          - self        = false -> null
          - to_port     = 8181 -> null
        }
    }

Plan: 0 to add, 1 to change, 1 to destroy.

Warning: Deprecated Resource

  with openstack_compute_secgroup_v2.secgroup,
  on main.tf line 13, in resource "openstack_compute_secgroup_v2" "secgroup":
  13: resource "openstack_compute_secgroup_v2" "secgroup" {

use openstack_networking_secgroup_v2 resource instead

(and 3 more similar warnings elsewhere)

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.
Releasing state lock. This may take a few moments...

Pusher: @sebastian-luna-valero, Action: pull_request

[github-actions]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Plan 📖success

Show Plan

terraform
Acquiring state lock. This may take a few moments...
data.openstack_images_image_v2.egi-docker: Reading...
openstack_networking_floatingip_v2.fip: Refreshing state... [id=1a2e1285-0a20-4582-aab9-27255607a862]
openstack_compute_secgroup_v2.secgroup: Refreshing state... [id=47779555-2ce1-400c-ba68-d177683c7228]
openstack_compute_secgroup_v2.motley: Refreshing state... [id=90726780-7918-4bfa-a03b-c1a723d5757b]
data.openstack_images_image_v2.egi-docker: Read complete after 3s [id=6aa64f02-660c-477f-81a2-d2363df75679]
openstack_compute_instance_v2.dashboard: Refreshing state... [id=7b11db97-b476-48a1-940c-29b4c3784a4c]
openstack_compute_floatingip_associate_v2.fip: Refreshing state... [id=147.213.76.217/7b11db97-b476-48a1-940c-29b4c3784a4c/]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # openstack_compute_instance_v2.dashboard will be updated in-place
  ~ resource "openstack_compute_instance_v2" "dashboard" {
        id                  = "7b11db97-b476-48a1-940c-29b4c3784a4c"
      ~ image_id            = "582840e6-3cc1-4133-ad20-6b302239ce19" -> "6aa64f02-660c-477f-81a2-d2363df75679"
        name                = "dashboard"
      ~ security_groups     = [
          - "test",
            # (2 unchanged elements hidden)
        ]
        tags                = []
        # (13 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

Warning: Deprecated Resource

  with openstack_compute_secgroup_v2.secgroup,
  on main.tf line 12, in resource "openstack_compute_secgroup_v2" "secgroup":
  12: resource "openstack_compute_secgroup_v2" "secgroup" {

use openstack_networking_secgroup_v2 resource instead

(and 5 more similar warnings elsewhere)

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.
Releasing state lock. This may take a few moments...

Pusher: @sebastian-luna-valero, Action: pull_request

[sebastian-luna-valero]

This has been well tested now. It should hopefully work!

[enolfc]

Go for it