UNCLASSIFIED - NO CUI

Skip to content

Main

Alexander Blackwell requested to merge jasonkrause/template:main into main

This merge request Fixes deprecated Terraform syntax and adds features for IAM role and policy creation.

Terraform would print warning messages when deploying RKE2 in AWS. Terraform would also fail to deploy unless "InstanceOpsRole" already existed with the correct IAM policy. BigBang Core services would also have some logging services fail to fully run if the role did not have the correct permissions in the attached policy.

I fixed the deprecated syntax in the Terragrunt module files. Additionally, two separate modules for creating an IAM role and IAM policy were added to the modules directory. At deployment, the region is appended to both the role and policy name to deploy RKE2 in different regions within the same account without first needing to import the existing role/policy; this would cause the Terraform deployment to fail, stating that the role already existed and would first need to be imported.

The "InstanceOpsPolicy-" permissions were pared down as much as possible, and RKE2/BigBang core services were deployed multiple times to ensure continued successful deployments and BigBang functionality.

One deprecated message will still appear due to a module being called in from a separate repo during deployment from https://repo1.dso.mil/platform-one/distros/rancher-federal/rke2/rke2-aws-terraform. I also have a fix for this and have tested it by pulling it into the modules directory and pointing the Terragrunt HCL file that calls it to the modules directory instead of Repo1. Either a different fix will need to be merged into that source, or the module at that location can be sourced from the local modules directory in the future with the deprecated syntax corrected locally.

Edited by Alexander Blackwell

Merge request reports