Skip to content
This repository has been archived by the owner on Feb 10, 2021. It is now read-only.

Bump terraform-root-modules to 0.43.0 #48

Merged
merged 1 commit into from
Feb 15, 2019
Merged

Bump terraform-root-modules to 0.43.0 #48

merged 1 commit into from
Feb 15, 2019

Conversation

joshmyers
Copy link
Contributor

what

This is quite a jump but needed for some recent fixes to do with users
and iam

One of the changes to how IAM user accounts are managed is to have all IAM users centrally managed in conf/users.

vadzim + aliaksandr are not currently working on CP projects so those
users are removed and the other users are in the correct admin groups
across all accounts thanks to the admin_groups local [1], where all admin
groups across enabled accounts are read from SSM.

[1] https://github.com/cloudposse/root.cloudposse.co/blob/master/conf/users/aknysh.tf#L5

@cloudpossebot
Copy link

Ran Plan in dir: conf/users workspace: default

Plan Error

Show Output
exit status 2: running "make plan" in "/home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users": 
[terragrunt] [/home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users] 2019/02/13 17:37:27 Running command: terraform --version
[terragrunt] 2019/02/13 17:37:27 Reading Terragrunt config file at /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/terraform.tfvars
[terragrunt] 2019/02/13 17:37:27 Downloading Terraform configurations from git::https://github.com/cloudposse/terraform-root-modules.git?ref=0.43.0 into /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc using terraform init
[terragrunt] [/home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users] 2019/02/13 17:37:27 Initializing remote state for the s3 backend
[terragrunt] [/home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users] 2019/02/13 17:37:28 Running command: terraform init -backend-config=bucket=cpco-root-terraform-state -backend-config=key=users/terraform.tfstate -backend-config=region=us-west-2 -backend-config=encrypt=true -backend-config=dynamodb_table=cpco-root-terraform-state-lock -get=false -get-plugins=false -backend=false -from-module=git::https://github.com/cloudposse/terraform-root-modules.git?ref=0.43.0 -no-color /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc
Copying configuration from "git::https://github.com/cloudposse/terraform-root-modules.git?ref=0.43.0"...
Terraform initialized in an empty directory!

The directory has no Terraform configuration files. You may begin working
with Terraform immediately by creating Terraform configuration files.
[terragrunt] 2019/02/13 17:37:28 Copying files from /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users into /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc/aws/users
[terragrunt] 2019/02/13 17:37:28 Setting working directory to /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc/aws/users
[terragrunt] 2019/02/13 17:37:28 Initializing remote state for the s3 backend
[terragrunt] 2019/02/13 17:37:29 Running command: terraform init -backend-config=bucket=cpco-root-terraform-state -backend-config=key=users/terraform.tfstate -backend-config=region=us-west-2 -backend-config=encrypt=true -backend-config=dynamodb_table=cpco-root-terraform-state-lock -no-color
Initializing modules...
- module.aknysh
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"
- module.josh
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"
- module.admin_groups
  Getting source "git::https://github.com/cloudposse/terraform-aws-ssm-parameter-store?ref=tags/0.1.5"
- module.osterman
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"
- module.osterman_welcome
  Getting source "git::https://github.com/cloudposse/terraform-null-smtp-mail.git?ref=tags/0.1.0"
- module.solairerove
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.

Error: 
Terraform doesn't allow running any operations against a state
that was written by a future Terraform version. The state is
reporting it is written by Terraform '0.11.10'

Please run at least that version of Terraform to continue.



[terragrunt] 2019/02/13 17:37:32 Hit multiple errors:
exit status 1
make: *** [Makefile:4: init] Error 1

[terragrunt] [/home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users] 2019/02/13 17:37:27 Running command: terraform --version
[terragrunt] 2019/02/13 17:37:27 Reading Terragrunt config file at /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/terraform.tfvars
[terragrunt] 2019/02/13 17:37:27 Downloading Terraform configurations from git::https://github.com/cloudposse/terraform-root-modules.git?ref=0.43.0 into /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc using terraform init
[terragrunt] [/home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users] 2019/02/13 17:37:27 Initializing remote state for the s3 backend
[terragrunt] [/home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users] 2019/02/13 17:37:28 Running command: terraform init -backend-config=bucket=cpco-root-terraform-state -backend-config=key=users/terraform.tfstate -backend-config=region=us-west-2 -backend-config=encrypt=true -backend-config=dynamodb_table=cpco-root-terraform-state-lock -get=false -get-plugins=false -backend=false -from-module=git::https://github.com/cloudposse/terraform-root-modules.git?ref=0.43.0 -no-color /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc
Copying configuration from "git::https://github.com/cloudposse/terraform-root-modules.git?ref=0.43.0"...
Terraform initialized in an empty directory!

The directory has no Terraform configuration files. You may begin working
with Terraform immediately by creating Terraform configuration files.
[terragrunt] 2019/02/13 17:37:28 Copying files from /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users into /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc/aws/users
[terragrunt] 2019/02/13 17:37:28 Setting working directory to /home/atlantis/.atlantis/repos/cloudposse/root.cloudposse.co/48/default/conf/users/.terragrunt-cache/QMxW1HGAv5HWc_BN8C1oWsnRLCE/1ECxMm2XkgOwPqdOoU6_rLTn-Xc/aws/users
[terragrunt] 2019/02/13 17:37:28 Initializing remote state for the s3 backend
[terragrunt] 2019/02/13 17:37:29 Running command: terraform init -backend-config=bucket=cpco-root-terraform-state -backend-config=key=users/terraform.tfstate -backend-config=region=us-west-2 -backend-config=encrypt=true -backend-config=dynamodb_table=cpco-root-terraform-state-lock -no-color
Initializing modules...
- module.aknysh
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"
- module.josh
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"
- module.admin_groups
  Getting source "git::https://github.com/cloudposse/terraform-aws-ssm-parameter-store?ref=tags/0.1.5"
- module.osterman
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"
- module.osterman_welcome
  Getting source "git::https://github.com/cloudposse/terraform-null-smtp-mail.git?ref=tags/0.1.0"
- module.solairerove
  Getting source "git::https://github.com/cloudposse/terraform-aws-iam-user.git?ref=tags/0.1.1"

Initializing the backend...

Successfully configured the backend "s3"! Terraform will automatically
use this backend unless the backend configuration changes.

Error: 
Terraform doesn't allow running any operations against a state
that was written by a future Terraform version. The state is
reporting it is written by Terraform '0.11.10'

Please run at least that version of Terraform to continue.



[terragrunt] 2019/02/13 17:37:32 Hit multiple errors:
exit status 1
make: *** [Makefile:4: init] Error 1

aknysh
aknysh previously approved these changes Feb 13, 2019
This is quite a jump but needed for some recent fixes to do with `users`
and `iam`.

One of the changes to how IAM user accounts are managed is to have all IAM users centrally managed in `conf/users`.

vadzim + aliaksandr are not currently working on CP projects so those
users are removed and the other users are in the correct admin groups
across all accounts thanks to the `admin_groups` local, where all admin
groups across enabled accounts are read from SSM.

 are added to these groups as they are included in `admin_groups
@joshmyers joshmyers merged commit d16c697 into master Feb 15, 2019
@joshmyers joshmyers deleted the iam_group_users branch February 15, 2019 10:07
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants