Comments (3)
It looks like this happened due to the sweeping changes to providers.tf
that occurred as part of #715
Of note in this PR is that providers.tf that previously used module.iam_roles.org_role_arn
and therefore required SuperAdmin deployment (such as aws-sso
and account-settings
), subsequently use terraform_role_arn
which is not guaranteed to be the same for customers where terraform_dynamic_role_enabled
is false in account-map
.
I am unclear whether this is a separate bug or a intentional breaking change impacting legacy users, but I wonder if this, and the bug raised above, are a side-effect of components with bespoke aws provider configurations being updated to a standardised approach.
from terraform-aws-components.
We encountered this mistake internally as well, and we have this open PR to resolve the issue:
#740
We also are creating an upgrade guide to explain the why and how of that sweeping account-map
and providers.tf
change. WIll link that once available
from terraform-aws-components.
@MReggler Thank you for opening this issue. Please feel free to try our proposed fix in PR #740 and comment on it there. In particular, if you are so inclined, I would value your feedback on the Change log regarding how well it answers your questions regarding SuperAdmin vs terraform_dynamic_role_enabled
deployment.
from terraform-aws-components.
Related Issues (20)
- vpc: subnets module does not support Melbourne region
- [dns-delegated] Some options should be per-domain, not per-component
- Bastion: An argument named "tags" is not expected here HOT 2
- Various references broken (mainly to reference architecture) HOT 4
- v1.259.0 spacelift/admin-stack Error: Inconsistent conditional result types
- v1.259.0 spacelift/admin-stack: var.spacelift_stack_dependency_enabled is unused HOT 1
- first deployment of eks/cluster will never work
- Incorrect path for accessing account-map
- components_datadog-private-location-ecs Error: Missing resource instance key HOT 1
- Spacelift workers can run on ARM
- Split budgets from account-settings
- ecs-service: circuit breaker params are ignored
- Cannot add Spacelift context attachments to `spacelift/admin-stack` child stack configuration
- [Lambda] null values for var.function_name break the local.cicd_s3_key_format formatting
- tfstate-backend: var.enable_server_side_encryption is not used anymore
- aws-backups: variables unused / deprecated HOT 4
- `eks/karpenter` and `eks/karpenter-provisioner` does not support latest Karpenter HOT 1
- `eks/argocd` configuration broken with v6 helm chart or newer
- spacelift admin/stack component broken by v1.400.0 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from terraform-aws-components.