Terraform module for public and private subnets provisioning in existing VPC
APACHE-2.0 License
Bot releases are visible (Hide)
This PR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
cloudposse/utils/aws (source) | module | minor |
1.3.0 -> 1.4.0
|
v1.4.0
Add new Tel Aviv (il-central-1) region
Provide full coverage
Rebuild github dir from the template
This PR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
cloudposse/utils/aws (source) | module | minor |
1.3.0 -> 1.4.0
|
v1.4.0
Add new Tel Aviv (il-central-1) region
Provide full coverage
Rebuild github dir from the template
This is an auto-generated PR that updates the README.md and docs
To have most recent changes of README.md and doc from origin templates
Published by github-actions[bot] over 1 year ago
Published by github-actions[bot] over 1 year ago
With this release, EIPs allocated for NAT ingress are allocated in the default domain. This most likely does not affect you, but for accounts created before 2013-12-04 (almost 10 years ago as of this writing), the default domain could be EC2-Classic rather than the current VPC. Previously this module forced the EIPs to be in the VPC domain, but the breaking changes between AWS Provider v4 and v5 make that difficult.
If you find yourself in the rare situation where the EIPs allocated by this module are in EC2-Classic but you want them in VPC, then create the EIPs outside of this module and supply them to this module via nat_elastic_ips
.
This release includes an example (examples/nacls/
) showing how to create custom NACLs in conjunction with this module. Note that by default, this module creates wide-open NACLs, and subnets can only have one NACL associated with them. If you try to add a NACL to a subnet without disabling the default NACLs, you may get a possibly confusing error like:
│ Error: creating EC2 Network ACL: creating EC2 Network ACL (acl-0376c5f12dd9d784d) Association: InvalidAssociationID.NotFound: The association ID 'aclassoc-0818d5a9e3876a2bb' does not exist
See https://github.com/hashicorp/terraform-provider-aws/issues/31888
null
as meaning "default")aws_eip
vpc = true
Published by github-actions[bot] over 1 year ago
#tfsec:ignore:AWS012
style commentsFix tflint
Maintenance
Rebuild github dir from the template
Published by cloudpossebot over 1 year ago
Published by cloudpossebot over 1 year ago
subnets_per_az_count
variable). If subnets_per_az_count
is set to 1
(default), it's backwards compatible with the previous functionality (one subnet of each type, private and public, per AZ)subnets_per_az_names
variable)tgw
subnet and firewall
subnets in each AZtgw
, firewall
, database
, services
, backend
, etc.Using the following settings:
availability_zones = ["us-east-2a", "us-east-2b"]
subnets_per_az_count = 3
subnets_per_az_names = ["services", "backend", "db"]
The outputs:
az_private_route_table_ids_map = {
"us-east-2a" = [
"rtb-05cbce79950652f38",
"rtb-03a545f25ef6ce3f9",
"rtb-0ef8d1698f424e77b",
]
"us-east-2b" = [
"rtb-076348138f550ebab",
"rtb-0bd3baf8916948c3f",
"rtb-01533922e675db6b6",
]
}
az_private_subnets_map = {
"us-east-2a" = [
"subnet-02c63d0c0c2f84bf5",
"subnet-0393680d8ea3dd70f",
"subnet-0a7c4b117b2105a69",
]
"us-east-2b" = [
"subnet-0f6d042c659cc1346",
"subnet-06764c7316567eacc",
"subnet-074fd7ad2b902bec2",
]
}
az_public_route_table_ids_map = {
"us-east-2a" = [
"rtb-0046629cc751e775d",
"rtb-0046629cc751e775d",
"rtb-0046629cc751e775d",
]
"us-east-2b" = [
"rtb-0046629cc751e775d",
"rtb-0046629cc751e775d",
"rtb-0046629cc751e775d",
]
}
az_public_subnets_map = {
"us-east-2a" = [
"subnet-05647fc1f31a30896",
"subnet-03e27e41e0b818080",
"subnet-04e5d57b1e2035c7c",
]
"us-east-2b" = [
"subnet-01cc440339718014e",
"subnet-00155e6b64925ba51",
"subnet-0a326693cfee8e68d",
]
}
named_private_route_table_ids_map = {
"backend" = tolist([
"rtb-03a545f25ef6ce3f9",
"rtb-0bd3baf8916948c3f",
])
"db" = tolist([
"rtb-0ef8d1698f424e77b",
"rtb-01533922e675db6b6",
])
"services" = tolist([
"rtb-05cbce79950652f38",
"rtb-076348138f550ebab",
])
}
named_private_subnets_map = {
"backend" = tolist([
"subnet-0393680d8ea3dd70f",
"subnet-06764c7316567eacc",
])
"db" = tolist([
"subnet-0a7c4b117b2105a69",
"subnet-074fd7ad2b902bec2",
])
"services" = tolist([
"subnet-02c63d0c0c2f84bf5",
"subnet-0f6d042c659cc1346",
])
}
named_private_subnets_stats_map = {
"backend" = [
{
"az" = "us-east-2a"
"route_table_id" = "rtb-03a545f25ef6ce3f9"
"subnet_id" = "subnet-0393680d8ea3dd70f"
},
{
"az" = "us-east-2b"
"route_table_id" = "rtb-0bd3baf8916948c3f"
"subnet_id" = "subnet-06764c7316567eacc"
},
]
"db" = [
{
"az" = "us-east-2a"
"route_table_id" = "rtb-0ef8d1698f424e77b"
"subnet_id" = "subnet-0a7c4b117b2105a69"
},
{
"az" = "us-east-2b"
"route_table_id" = "rtb-01533922e675db6b6"
"subnet_id" = "subnet-074fd7ad2b902bec2"
},
]
"services" = [
{
"az" = "us-east-2a"
"route_table_id" = "rtb-05cbce79950652f38"
"subnet_id" = "subnet-02c63d0c0c2f84bf5"
},
{
"az" = "us-east-2b"
"route_table_id" = "rtb-076348138f550ebab"
"subnet_id" = "subnet-0f6d042c659cc1346"
},
]
}
named_public_route_table_ids_map = {
"backend" = tolist([
"rtb-0046629cc751e775d",
"rtb-0046629cc751e775d",
])
"db" = tolist([
"rtb-0046629cc751e775d",
"rtb-0046629cc751e775d",
])
"services" = tolist([
"rtb-0046629cc751e775d",
"rtb-0046629cc751e775d",
])
}
named_public_subnets_map = {
"backend" = tolist([
"subnet-03e27e41e0b818080",
"subnet-00155e6b64925ba51",
])
"db" = tolist([
"subnet-04e5d57b1e2035c7c",
"subnet-0a326693cfee8e68d",
])
"services" = tolist([
"subnet-05647fc1f31a30896",
"subnet-01cc440339718014e",
])
}
named_public_subnets_stats_map = {
"backend" = [
{
"az" = "us-east-2a"
"route_table_id" = "rtb-0046629cc751e775d"
"subnet_id" = "subnet-03e27e41e0b818080"
},
{
"az" = "us-east-2b"
"route_table_id" = "rtb-0046629cc751e775d"
"subnet_id" = "subnet-00155e6b64925ba51"
},
]
"db" = [
{
"az" = "us-east-2a"
"route_table_id" = "rtb-0046629cc751e775d"
"subnet_id" = "subnet-04e5d57b1e2035c7c"
},
{
"az" = "us-east-2b"
"route_table_id" = "rtb-0046629cc751e775d"
"subnet_id" = "subnet-0a326693cfee8e68d"
},
]
"services" = [
{
"az" = "us-east-2a"
"route_table_id" = "rtb-0046629cc751e775d"
"subnet_id" = "subnet-05647fc1f31a30896"
},
{
"az" = "us-east-2b"
"route_table_id" = "rtb-0046629cc751e775d"
"subnet_id" = "subnet-01cc440339718014e"
},
]
}
private_route_table_ids = [
"rtb-05cbce79950652f38",
"rtb-03a545f25ef6ce3f9",
"rtb-0ef8d1698f424e77b",
"rtb-076348138f550ebab",
"rtb-0bd3baf8916948c3f",
"rtb-01533922e675db6b6",
]
private_subnet_cidrs = tolist([
"172.16.0.0/21",
"172.16.8.0/21",
"172.16.16.0/21",
"172.16.24.0/21",
"172.16.32.0/21",
"172.16.40.0/21",
])
public_subnet_cidrs = tolist([
"172.16.72.0/21",
"172.16.80.0/21",
"172.16.88.0/21",
"172.16.96.0/21",
"172.16.104.0/21",
"172.16.112.0/21",
])
Published by cloudpossebot about 2 years ago
This PR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
cloudposse/utils/aws (source) | module | minor |
1.0.0 -> 1.1.0
|
This PR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
cloudposse/utils/aws (source) | module | minor |
1.0.0 -> 1.1.0
|
Published by cloudpossebot about 2 years ago
ipv4_cidr_block
I tried to run make init && make readme
to generate the README, however make readme
fails with:
❯ make readme
* Package gomplate already installed
* Package terraform-docs already installed
make: gomplate: No such file or directory
make: *** [readme/build] Error 1
on my machine. (MacBook Pro, macOS Monterey 12.4)
Published by cloudpossebot over 2 years ago
This PR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
cloudposse/utils/aws (source) | module | major |
0.8.1 -> 1.0.0
|
Published by cloudpossebot over 2 years ago
To check if create public subnet when set public_subnets_enabled false
Currently, when set set public_subnets_enabled false, module still creates public subnet, according to the logic of creating private subnet, there should be a check if public_subnets_enabled is false, not creating public subnet.
Slack thread: https://sweetops.slack.com/archives/CCT1E7JJY/p1652862041154429
Published by cloudpossebot over 2 years ago
Version v2.0.0 has breaking changes, documented here.
The highlights:
subnet_type_tag_key
deprecated.Known issues:
private_subnets_enabled
is false
tuple
to list
, causing plans to contain confusing output like:Changes to Outputs:
~ private_subnet_cidrs = [
- "172.16.0.0/19",
- "172.16.32.0/19",
] -> [
+ "172.16.0.0/19",
+ "172.16.32.0/19",
]
See https://github.com/hashicorp/terraform/issues/31102 for details.
Details:
Changes from v1.0.0: https://github.com/cloudposse/terraform-aws-dynamic-subnets/compare/1.0.0...2.0.0
Published by Nuru over 2 years ago
This is candidate code for the v2.0.0 release. It has breaking changes, documented here. If you want to use try it out, please do, and add comments to PR #159 if you find problems.
The highlights:
subnet_type_tag_key
deprecated.Changes from v2.0.0-rc4: https://github.com/cloudposse/terraform-aws-dynamic-subnets/compare/2.0.0-rc4...2.0.0-rc5
Published by Nuru over 2 years ago
This is candidate code for the v2.0.0 release. It has breaking changes, documented here. If you want to use try it out, please do, and add comments to PR #159 if you find problems.
The highlights:
subnet_type_tag_key
deprecated.Published by Nuru over 2 years ago
This is candidate code for the v2.0.0 release. It has breaking changes, documented here. If you want to use try it out, please do, and add comments to PR #159 if you find problems.
The highlights:
subnet_type_tag_key
deprecated.Published by Nuru over 2 years ago
This is candidate code for the v2.0.0 release. It has breaking changes, and is missing the migration documentation on how to upgrade from v1.0. Nevertheless, if you want to use try it out, please do, and add comments to PR #159 if you find problems.
The highlights:
subnet_type_tag_key
deprecated.Published by cloudpossebot over 2 years ago
Initial release with production Semantic Versioning, part of Cloud Posse's general policy to convert to production versioning as we make updates to relatively mature modules, especially those where we see breaking changes coming in the near future.
git.io
-> cloudposse.tools
git.io
Published by cloudpossebot over 2 years ago
Using the current version you get a deprecated warning:
│ Warning: Argument is deprecated
│
│ with module.dynamic-subnets.aws_route.nat_instance,
│ on .terraform/modules/dynamic-subnets/nat-instance.tf line 130, in resource "aws_route" "nat_instance":
│ 130: instance_id = element(aws_instance.nat_instance.*.id, count.index)
│
│ Use network_interface_id instead
I have updated the code to use the recommended network_interface_id
, as a result I have also had to point it to primary_network_interface_id
.
Published by cloudpossebot over 2 years ago
standard
, unilimited
, or the default credit specification for NAT instancesPublished by cloudpossebot almost 3 years ago
Published by cloudpossebot about 3 years ago
This PR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
cloudposse/utils/aws (source) | module | patch |
0.8.0 -> 0.8.1
|
v0.8.1
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.