feat: additional resources during configuration

aws-ecs/outputs.tf

@@ -33,6 +33,8 @@ output "vpc" {
 
     default_security_group_id = aws_security_group.runner.id
     # default_security_group_arn = aws_security_group.runner.arn
+    db_subnet_group_name = module.vpc.database_subnet_group_name
+    db_subnet_group_id = module.vpc.database_subnet_group
   }
 }
 

aws-ecs/variables.tf

@@ -38,11 +38,6 @@ variable "tags" {
 variable "region" {
   type        = string
   description = "The region to launch the cluster in"
-
-  validation {
-    condition     = contains(["us-east-1", "us-east-2", "us-west-1", "us-west-2", ], var.region)
-    error_message = "${var.region} is currently unsupported"
-  }
 }
 
 // NOTE: if you would like to create an internal load balancer, with TLS, you will have to use the public domain.

aws-ecs/vpc.tf

@@ -30,8 +30,8 @@ module "vpc" {
   enable_nat_gateway   = true
   single_nat_gateway   = true
   enable_dns_hostnames = true
-  #TODO(jm): these might be breaking installs
-  #create_database_subnet_group = true
+
+  create_database_subnet_group = true
   #create_elasticache_subnet_group = true
 
   public_subnet_tags = {

aws-eks/artifacts/deprovision.json

@@ -11,6 +11,7 @@
         "ec2:DeleteRouteTable",
         "ec2:DeleteSubnet",
         "ec2:DeleteTags",
+        "ec2:DeleteNetworkAclEntry",
         "ec2:DescribeAddresses",
         "ec2:DescribeInternetGateways",
         "ec2:DescribeLaunchTemplateVersions",