Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refactor AWS account setup #137

Merged
merged 10 commits into from
Jan 7, 2025
Merged

Refactor AWS account setup #137

merged 10 commits into from
Jan 7, 2025

Conversation

iuriaranda
Copy link
Contributor

@iuriaranda iuriaranda commented Dec 20, 2024

This is a full refactor of the setup for our AWS account requirements setup. Spawned from the last hackathon.

  • The setup options for both the admin and the capa controller roles have been reduced to OpenTofu / Terraform
  • Update the documentation to inform that Giant Swarm takes over the maintenance of both IAM roles (once the admin role has been initially provisioned by the customer)

Checklist

  • Update changelog in CHANGELOG.md.

AndiDog and others added 9 commits December 18, 2024 16:44
We found that importing existing resources into CF might be problematic, so migrating existing setups will be difficult

Instead we choose to use standalone TF resources with the corresponding import blocks.
Different AWS partitions use completely different AWS credentials sets, so it would make sense to separate them in different tofu runs / workspaces, so we can still apply to one partition even if we don't have credentials for the other.
Both inline and managed policies can  be added
From this warning:

╷
│ Warning: Additional provider information from registry
│
│ The remote registry returned warnings for
│ registry.opentofu.org/opentofu/aws:
│ - You are using opentofu/aws instead of hashicorp/aws. This provider is
│ maintained by HashiCorp and the OpenTofu project only builds the provider
│ binaries from the source code. Both the opentofu/ and hashicorp/ namespaces
│ in the OpenTofu Registry contain the OpenTofu-built provider binaries based
│ on the HashiCorp source code. To avoid configuration errors, we recommend
│ using the hashicorp/ namespaced providers.
╵
@iuriaranda iuriaranda marked this pull request as ready for review January 3, 2025 16:09
@iuriaranda iuriaranda requested a review from a team as a code owner January 3, 2025 16:09
Copy link
Contributor

@AndiDog AndiDog left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fine, with one minor question

@iuriaranda iuriaranda merged commit 0d3aa39 into main Jan 7, 2025
2 checks passed
@iuriaranda iuriaranda deleted the opentofu-refactor branch January 7, 2025 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants