Add Cognito to Terraform

nyarly commented 1 year ago

Overview

At least in PeopleDepot, there's a hardcoded Cognito user pool which has a machine-generated identifier. This is generally a sign that something should be pulled into Terraform, since there's an agreement between the value in Terraform and where ever it's defined. If Terraform knows about the resource, it can simply use the random machine value, instead of it having to be supplied.

Action Items

[x] Determine whether the Cognito pool is specific to PeopleDepot, or is shared by incubator projects
[x] Determine what kind of configuration in terraform-incubator/ source represent it - is it a resource, because Terraform ought to manage it? Or a data because it should know where to get values for it, but it should be properly managed by a human. Assume a resource, unless a good reason is found why it should be managed manually.
[ ] Implement the appropriate configuration either for people-depot or shared-resources, as appropriate.
[ ] Plan and apply the resulting configuration, noting that if a resource is created, it will need to be brought into the Terraform state with terraform state import commands.

Resources/Instructions

https://developer.hashicorp.com/terraform/language/state/import https://registry.terraform.io/providers/-/aws/latest/docs/resources/cognito_user_pool

robinglov commented 7 months ago

What if any responsibility will ops have for this issue?

robinglov commented 7 months ago

@chelseybeck this is the first issue I referred to at the ops meeting that looks like infrastructure--possibly an ops issue. After taking a closer look, what are your thoughts?

chelseybeck commented 7 months ago

@robinglov this should stay on incubator. anything related to projects that are in incubator should stay here. but, I self-assigned this issue b/c I can work on it.

chelseybeck commented 6 months ago

I discussed this briefly with @fyliu in Slack and it sounds like we can recreate the Cognito resources as People Depot is in testing phase.

This doesn't apply as a shared resource because each project will have its own Cognito resources

chelseybeck commented 6 months ago

This PR adds a module for creating Cognito resources and then creates example resources for People Depot (which can be customized as needed)

https://github.com/hackforla/incubator/pull/61

chelseybeck commented 6 months ago

The above PR should be good to go, but there is a state conflict when writing the plan. Discuss w/ Judson/Tyler or both

hackforla / incubator