Csr/dsos 2212/fix parent values #597

robertsweetman · 2023-10-09T15:12:52Z

address issues with Terraform upgrade to 1.5.7
self-reference Windows Server 2012 R2 ami as this is no longer available from the AWS marketplace
pull 'non-Microsoft/AWS' Windows Server 2012 R2 and 2014 SQL Enterprise ami from AWS marketplace
- this may run into licensing requirements/issues on build but these can be addressed later
- this is no longer a dependency for the PlanetFM migration

github-actions · 2023-10-12T07:32:54Z

commonimages/base/windows_2012_r2 terragrunt plan on pull_request event #417

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2"
        name         = "base_windows_server_2012_r2"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:45:10.945Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
        name                             = "base_windows_server_2012_r2"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:46.416Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
        name             = "base_windows_server_2012_r2"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-03ec0ba37fcffce0f" -> "ami-089fad2fece5002f1" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.8" -> "0.1.0" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:46.207Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ name                          = "base_windows_server_2012_r2_0_0_8" -> "base_windows_server_2012_r2_0_1_0" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (5 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T07:32:59Z

commonimages/base/rhel_6_10 terragrunt plan on pull_request event #417

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_component.this["stig_rhel6_ansible.yml.tftpl"]: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-rhel-6-10-0-2-1"
        name                          = "base_rhel_6_10_0_2_1"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                               = "n/a"
            "base_rhel_6_10_stig_rhel6_ansible-version" = "0.2.1"
            "branch"                                    = "main"
            "business-unit"                             = "HMPPS"
            "image-pipeline"                            = "base_rhel_6_10"
            "image-recipe"                              = "base_rhel_6_10/0.2.1"
            "infrastructure-configuration"              = "base_rhel_6_10/0.2.1"
            "is-production"                             = "true"
            "os-version"                                = "rhel 6.10"
            "owner"                                     = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                          = "n/a"
            "source-code"                               = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_6_10"
            "update-linux-version"                      = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:33:08Z

commonimages/base/windows_2012_r2_SQL_2014 terragrunt plan on pull_request event #417

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2-sql-2014-enterprise"
        name         = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (3 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:35:40.171Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
        name                             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:50.347Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
        name             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-04acd846840e5b2a2" -> "ami-05b7b1ee752ddc19a" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.2" -> "0.0.4" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:50.298Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ instance_types                = [
          - "t3.xlarge",
          + "m4.xlarge",
        ]
      ~ name                          = "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_2" -> "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_4" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

refer to our own Server 2012 R2 ami as parent

github-actions · 2023-10-12T07:36:04Z

commonimages/base/windows_2012_r2 terragrunt plan on pull_request event #418

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2"
        name         = "base_windows_server_2012_r2"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:45:10.945Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
        name                             = "base_windows_server_2012_r2"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:46.416Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
        name             = "base_windows_server_2012_r2"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-03ec0ba37fcffce0f" -> "ami-089fad2fece5002f1" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.8" -> "0.1.0" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:46.207Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ name                          = "base_windows_server_2012_r2_0_0_8" -> "base_windows_server_2012_r2_0_1_0" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (5 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T07:36:04Z

commonimages/base/rhel_6_10 terragrunt plan on pull_request event #418

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_component.this["stig_rhel6_ansible.yml.tftpl"]: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-rhel-6-10-0-2-1"
        name                          = "base_rhel_6_10_0_2_1"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                               = "n/a"
            "base_rhel_6_10_stig_rhel6_ansible-version" = "0.2.1"
            "branch"                                    = "main"
            "business-unit"                             = "HMPPS"
            "image-pipeline"                            = "base_rhel_6_10"
            "image-recipe"                              = "base_rhel_6_10/0.2.1"
            "infrastructure-configuration"              = "base_rhel_6_10/0.2.1"
            "is-production"                             = "true"
            "os-version"                                = "rhel 6.10"
            "owner"                                     = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                          = "n/a"
            "source-code"                               = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_6_10"
            "update-linux-version"                      = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:36:08Z

commonimages/base/ol_8_5 terragrunt plan on pull_request event #418

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-ol-8-5-0-0-6"
        name                          = "base_ol_8_5_0_0_6"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                  = "n/a"
            "branch"                       = "main"
            "business-unit"                = "HMPPS"
            "image-pipeline"               = "base_ol_8_5"
            "image-recipe"                 = "base_ol_8_5/0.0.6"
            "infrastructure-configuration" = "base_ol_8_5/0.0.6"
            "is-production"                = "true"
            "os-version"                   = "ol 8.5"
            "owner"                        = "probation-webops@digital.justice.gov.uk"
            "release-or-patch"             = "n/a"
            "source-code"                  = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/ol_8_5"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:36:12Z

commonimages/base/windows_2012_r2_SQL_2014 terragrunt plan on pull_request event #418

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2-sql-2014-enterprise"
        name         = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (3 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:35:40.171Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
        name                             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:50.347Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
        name             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-04acd846840e5b2a2" -> "ami-05b7b1ee752ddc19a" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.2" -> "0.0.4" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:50.298Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ instance_types                = [
          - "t3.xlarge",
          + "m4.xlarge",
        ]
      ~ name                          = "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_2" -> "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_4" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T07:36:14Z

commonimages/base/rhel_7_9 terragrunt plan on pull_request event #418

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 3s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-rhel-7-9-0-1-0"
        name                          = "base_rhel_7_9_0_1_0"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                     = "n/a"
            "branch"                          = "main"
            "business-unit"                   = "HMPPS"
            "image-pipeline"                  = "base_rhel_7_9"
            "image-recipe"                    = "base_rhel_7_9/0.1.0"
            "infrastructure-configuration"    = "base_rhel_7_9/0.1.0"
            "is-production"                   = "true"
            "os-version"                      = "rhel 7.9"
            "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                = "n/a"
            "source-code"                     = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
            "stig-build-linux-medium-version" = "2023.2.2"
            "update-linux-version"            = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:36:14Z

commonimages/base/rhel_8_5 terragrunt plan on pull_request event #418

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 3s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-rhel-8-5-0-0-8"
        name                          = "base_rhel_8_5_0_0_8"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                     = "n/a"
            "branch"                          = "main"
            "business-unit"                   = "HMPPS"
            "image-pipeline"                  = "base_rhel_8_5"
            "image-recipe"                    = "base_rhel_8_5/0.0.8"
            "infrastructure-configuration"    = "base_rhel_8_5/0.0.8"
            "is-production"                   = "true"
            "os-version"                      = "rhel 8.5"
            "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                = "n/a"
            "source-code"                     = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_8_5"
            "stig-build-linux-medium-version" = "2023.2.2"
            "update-linux-version"            = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:41:46Z

commonimages/base/rhel_8_5 terragrunt plan on pull_request event #419

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-rhel-8-5-0-0-8"
        name                          = "base_rhel_8_5_0_0_8"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                     = "n/a"
            "branch"                          = "main"
            "business-unit"                   = "HMPPS"
            "image-pipeline"                  = "base_rhel_8_5"
            "image-recipe"                    = "base_rhel_8_5/0.0.8"
            "infrastructure-configuration"    = "base_rhel_8_5/0.0.8"
            "is-production"                   = "true"
            "os-version"                      = "rhel 8.5"
            "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                = "n/a"
            "source-code"                     = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_8_5"
            "stig-build-linux-medium-version" = "2023.2.2"
            "update-linux-version"            = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:41:47Z

commonimages/base/ol_8_5 terragrunt plan on pull_request event #419

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-ol-8-5-0-0-6"
        name                          = "base_ol_8_5_0_0_6"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                  = "n/a"
            "branch"                       = "main"
            "business-unit"                = "HMPPS"
            "image-pipeline"               = "base_ol_8_5"
            "image-recipe"                 = "base_ol_8_5/0.0.6"
            "infrastructure-configuration" = "base_ol_8_5/0.0.6"
            "is-production"                = "true"
            "os-version"                   = "ol 8.5"
            "owner"                        = "probation-webops@digital.justice.gov.uk"
            "release-or-patch"             = "n/a"
            "source-code"                  = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/ol_8_5"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:41:48Z

teams/nomis-data-hub/rhel_7_9_ems terragrunt plan on pull_request event #136

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/nomis-data-hub-rhel-7-9-ems-0-0-1"
        name                          = "nomis_data_hub_rhel_7_9_ems_0_0_1"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                  = "NOMIS-DATA-HUB"
            "branch"                       = "main"
            "business-unit"                = "HMPPS"
            "image-pipeline"               = "nomis_data_hub_rhel_7_9_ems"
            "image-recipe"                 = "nomis_data_hub_rhel_7_9_ems/0.0.1"
            "infrastructure-configuration" = "nomis_data_hub_rhel_7_9_ems/0.0.1"
            "is-production"                = "true"
            "os-version"                   = "rhel 7.9"
            "owner"                        = "DSO: digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"             = "release"
            "source-code"                  = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/teams/nomis-data-hub"
            "update-linux-version"         = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:41:55Z

commonimages/base/windows_2012_r2_SQL_2014 terragrunt plan on pull_request event #419

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2-sql-2014-enterprise"
        name         = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (3 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:35:40.171Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
        name                             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:50.347Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
        name             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-04acd846840e5b2a2" -> "ami-05b7b1ee752ddc19a" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.2" -> "0.0.4" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:50.298Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ instance_types                = [
          - "t3.xlarge",
          + "m4.xlarge",
        ]
      ~ name                          = "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_2" -> "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_4" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T07:41:55Z

commonimages/base/rhel_7_9 terragrunt plan on pull_request event #419

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 3s
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-rhel-7-9-0-1-0"
        name                          = "base_rhel_7_9_0_1_0"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                     = "n/a"
            "branch"                          = "main"
            "business-unit"                   = "HMPPS"
            "image-pipeline"                  = "base_rhel_7_9"
            "image-recipe"                    = "base_rhel_7_9/0.1.0"
            "infrastructure-configuration"    = "base_rhel_7_9/0.1.0"
            "is-production"                   = "true"
            "os-version"                      = "rhel 7.9"
            "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                = "n/a"
            "source-code"                     = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
            "stig-build-linux-medium-version" = "2023.2.2"
            "update-linux-version"            = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:41:56Z

teams/nomis-data-hub/rhel_7_9_app terragrunt plan on pull_request event #136

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/nomis-data-hub-rhel-7-9-app-0-0-1"
        name                          = "nomis_data_hub_rhel_7_9_app_0_0_1"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                  = "NOMIS-DATA-HUB"
            "branch"                       = "main"
            "business-unit"                = "HMPPS"
            "image-pipeline"               = "nomis_data_hub_rhel_7_9_app"
            "image-recipe"                 = "nomis_data_hub_rhel_7_9_app/0.0.1"
            "infrastructure-configuration" = "nomis_data_hub_rhel_7_9_app/0.0.1"
            "is-production"                = "true"
            "os-version"                   = "rhel 7.9"
            "owner"                        = "DSO: digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"             = "release"
            "source-code"                  = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/teams/nomis-data-hub"
            "update-linux-version"         = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:41:57Z

commonimages/base/rhel_6_10 terragrunt plan on pull_request event #419

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 3s
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_component.this["stig_rhel6_ansible.yml.tftpl"]: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 2s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_infrastructure_configuration" "this" {
        id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-rhel-6-10-0-2-1"
        name                          = "base_rhel_6_10_0_2_1"
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
        tags                          = {
            "application"                               = "n/a"
            "base_rhel_6_10_stig_rhel6_ansible-version" = "0.2.1"
            "branch"                                    = "main"
            "business-unit"                             = "HMPPS"
            "image-pipeline"                            = "base_rhel_6_10"
            "image-recipe"                              = "base_rhel_6_10/0.2.1"
            "infrastructure-configuration"              = "base_rhel_6_10/0.2.1"
            "is-production"                             = "true"
            "os-version"                                = "rhel 6.10"
            "owner"                                     = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                          = "n/a"
            "source-code"                               = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_6_10"
            "update-linux-version"                      = "1.0.2"
        }
        # (10 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

github-actions · 2023-10-12T07:42:01Z

commonimages/base/windows_2012_r2 terragrunt plan on pull_request event #419

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 3s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2"
        name         = "base_windows_server_2012_r2"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:45:10.945Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
        name                             = "base_windows_server_2012_r2"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:46.416Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
        name             = "base_windows_server_2012_r2"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-03ec0ba37fcffce0f" -> "ami-089fad2fece5002f1" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.8" -> "0.1.0" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:46.207Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ name                          = "base_windows_server_2012_r2_0_0_8" -> "base_windows_server_2012_r2_0_1_0" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (5 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T07:45:53Z

commonimages/base/windows_2012_r2_SQL_2014 terragrunt plan on pull_request event #420

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 3s
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2-sql-2014-enterprise"
        name         = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (3 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:35:40.171Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
        name                             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:50.347Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
        name             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-04acd846840e5b2a2" -> "ami-05b7b1ee752ddc19a" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.2" -> "0.0.4" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:50.298Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ instance_types                = [
          - "t3.xlarge",
          + "m4.xlarge",
        ]
      ~ name                          = "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_2" -> "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_4" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T07:45:54Z

commonimages/base/windows_2012_r2 terragrunt plan on pull_request event #420

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2"
        name         = "base_windows_server_2012_r2"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:45:10.945Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
        name                             = "base_windows_server_2012_r2"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:46.416Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
        name             = "base_windows_server_2012_r2"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-03ec0ba37fcffce0f" -> "ami-089fad2fece5002f1" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.8" -> "0.1.0" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:46.207Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ name                          = "base_windows_server_2012_r2_0_0_8" -> "base_windows_server_2012_r2_0_1_0" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (5 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T08:24:45Z

commonimages/base/windows_2012_r2_SQL_2014 terragrunt plan on push event #421

module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2-sql-2014-enterprise"
        name         = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (3 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:35:40.171Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:51.326Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2-sql-2014-enterprise" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
        name                             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:50.347Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2-sql-2014-enterprise/0.0.2" -> (known after apply)
        name             = "base_windows_server_2012_r2_SQL_2014_enterprise"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-04acd846840e5b2a2" -> "ami-05b7b1ee752ddc19a" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.2" -> "0.0.4" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:50.298Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-sql-2014-enterprise-0-0-2" -> (known after apply)
      ~ instance_types                = [
          - "t3.xlarge",
          + "m4.xlarge",
        ]
      ~ name                          = "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_2" -> "base_windows_server_2012_r2_SQL_2014_enterprise_0_0_4" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2_SQL_2014_enterprise"
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2 with SQL 2014 Enterprise"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2_SQL_2014_enterprise"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.2" -> "base_windows_server_2012_r2_SQL_2014_enterprise/0.0.4"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T08:24:58Z

commonimages/base/windows_2012_r2 terragrunt plan on push event #421

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["amazon-cloudwatch-agent-windows"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
-/+ destroy and then create replacement
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_distribution_configuration.this will be updated in-place
  ~ resource "aws_imagebuilder_distribution_configuration" "this" {
        id           = "arn:aws:imagebuilder:eu-west-2:374269020027:distribution-configuration/base-windows-server-2012-r2"
        name         = "base_windows_server_2012_r2"
      ~ tags         = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all     = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      - distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
      + distribution {
          # At least one attribute in this block is (or was) sensitive,
          # so its contents will not be displayed.
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this must be replaced
-/+ resource "aws_imagebuilder_image_pipeline" "this" {
      ~ arn                              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ date_created                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ date_last_run                    = "2023-10-09T14:45:10.945Z" -> (known after apply)
      ~ date_next_run                    = "2023-11-01T00:00:00.000Z" -> (known after apply)
      ~ date_updated                     = "2023-10-09T14:31:47.369Z" -> (known after apply)
      ~ id                               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-pipeline/base-windows-server-2012-r2" -> (known after apply)
      ~ image_recipe_arn                 = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" # forces replacement -> (known after apply) # forces replacement
      ~ infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
        name                             = "base_windows_server_2012_r2"
      ~ platform                         = "Windows" -> (known after apply)
      ~ tags                             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (4 unchanged attributes hidden)

      ~ schedule {
          + timezone                           = (known after apply)
            # (2 unchanged attributes hidden)
        }

        # (1 unchanged block hidden)
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
      ~ date_created     = "2023-10-09T14:31:46.416Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:374269020027:image-recipe/base-windows-server-2012-r2/0.0.8" -> (known after apply)
        name             = "base_windows_server_2012_r2"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-03ec0ba37fcffce0f" -> "ami-089fad2fece5002f1" # forces replacement
      ~ platform         = "Windows" -> (known after apply)
      ~ tags             = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all         = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
      ~ version          = "0.0.8" -> "0.1.0" # forces replacement
        # (1 unchanged attribute hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 128 -> null
              - volume_type           = "gp3" -> null
            }
        }
      - block_device_mapping {
          - device_name = "/dev/sdb" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 100 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 128
              + volume_type           = "gp3"
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sdb"

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:374269020027:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 100
              + volume_type           = "gp3"
            }
        }

        # (3 unchanged blocks hidden)
    }

  # module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this must be replaced
-/+ resource "aws_imagebuilder_infrastructure_configuration" "this" {
      ~ arn                           = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ date_created                  = "2023-10-09T14:31:46.207Z" -> (known after apply)
      + date_updated                  = (known after apply)
      ~ id                            = "arn:aws:imagebuilder:eu-west-2:374269020027:infrastructure-configuration/base-windows-server-2012-r2-0-0-8" -> (known after apply)
      ~ name                          = "base_windows_server_2012_r2_0_0_8" -> "base_windows_server_2012_r2_0_1_0" # forces replacement
      ~ resource_tags                 = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
      ~ security_group_ids            = [
          - "sg-0ffaf9373765d21e9",
            # (1 unchanged element hidden)
        ]
      ~ tags                          = {
            "amazon-cloudwatch-agent-windows-version" = "1.0.0"
            "application"                             = "n/a"
            "branch"                                  = "main"
            "business-unit"                           = "HMPPS"
            "image-pipeline"                          = "base_windows_server_2012_r2"
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            "is-production"                           = "true"
            "os-version"                              = "windows server 2012 r2"
            "release-or-patch"                        = "release"
            "source-code"                             = "https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/windows_server_2012_r2"
        }
      ~ tags_all                      = {
          ~ "image-recipe"                            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
          ~ "infrastructure-configuration"            = "base_windows_server_2012_r2/0.0.8" -> "base_windows_server_2012_r2/0.1.0"
            # (9 unchanged elements hidden)
        }
        # (5 unchanged attributes hidden)

        # (1 unchanged block hidden)
    }

Plan: 3 to add, 1 to change, 3 to destroy.

github-actions · 2023-10-12T08:25:50Z

commonimages/base/windows_2012_r2 terraform apply on push event #421

module.imagebuilder.aws_imagebuilder_image_pipeline.this: Destroying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Destruction complete after 0s
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Destroying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Creating...
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Modifying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Destruction complete after 1s
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Creating...
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Modifications complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Creation complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Creation complete after 2s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Creating...
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Creation complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this (deposed object 44850a69): Destroying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Destruction complete after 1s

Apply complete! Resources: 3 added, 1 changed, 3 destroyed.

github-actions · 2023-10-12T08:25:56Z

commonimages/base/windows_2012_r2_SQL_2014 terraform apply on push event #421

module.imagebuilder.aws_imagebuilder_image_pipeline.this: Destroying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Destruction complete after 1s
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Destroying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Creating...
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Modifying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Destruction complete after 1s
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Creating...
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Modifications complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Creation complete after 0s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Creation complete after 2s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Creating...
module.imagebuilder.aws_imagebuilder_image_pipeline.this: Creation complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this (deposed object 8ad56c0e): Destroying... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Destruction complete after 1s

Apply complete! Resources: 3 added, 1 changed, 3 destroyed.

robertsweetman requested review from a team as code owners October 9, 2023 15:12

This comment has been minimized.

Sign in to view

add windows Server 2012 R2 SQL 2014 enterprise ami

19eda36

refer to our own Server 2012 R2 ami as parent

robertsweetman force-pushed the csr/DSOS-2212/fix-parent-values branch from c90978e to 19eda36 Compare October 12, 2023 07:34

remove line break

13c0bd7

robertsweetman force-pushed the csr/DSOS-2212/fix-parent-values branch from 2023bd8 to 13c0bd7 Compare October 12, 2023 07:44

SteveLinden approved these changes Oct 12, 2023

View reviewed changes

robertsweetman merged commit 8270248 into main Oct 12, 2023
23 checks passed

robertsweetman deleted the csr/DSOS-2212/fix-parent-values branch October 12, 2023 08:23

Csr/dsos 2212/fix parent values #597

Csr/dsos 2212/fix parent values #597

Conversation

robertsweetman commented Oct 9, 2023 • edited Loading

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

github-actions bot commented Oct 12, 2023

robertsweetman commented Oct 9, 2023 •

edited

Loading