AWS

[ksuderman]

Branch to launch a single EC2 instance.

[ksuderman]

/validate

[github-actions[bot]]

This plan appears to be valid.

[ksuderman]

/plan

[github-actions[bot]]

openstack_compute_floatingip_v2.ip: Refreshing state... [id=6fbaf721-997c-443a-bb27-15a8552b3d57] openstack_networking_secgroup_v2.fw: Refreshing state... [id=ed1211ea-a1bf-4c64-a0f0-1b093b519921] openstack_networking_secgroup_rule_v2.ipv4_tcp_public["8443"]: Refreshing state... [id=447ff3b2-e52a-4216-9e21-6ee4bf67b5d6] openstack_networking_secgroup_rule_v2.ipv4_tcp_public["8000"]: Refreshing state... [id=b05097e3-9025-4739-9a08-26fc5275d47f] openstack_compute_instance_v2.node: Refreshing state... [id=be141f96-0fd2-4875-b121-4e547420e8e1] openstack_networking_secgroup_rule_v2.egress_ip4: Refreshing state... [id=db27625a-ed5f-4612-99ce-df9d4fdfd38f] openstack_networking_secgroup_rule_v2.ipv4_tcp_public["8080"]: Refreshing state... [id=c8a06b71-2909-4ce4-b43f-0b8bea2dba00] openstack_networking_secgroup_rule_v2.ipv4_tcp_public["443"]: Refreshing state... [id=fc1fc164-e132-47b3-9e5c-8f91f348b71e] openstack_networking_secgroup_rule_v2.ipv4_tcp_public["22"]: Refreshing state... [id=9796b943-059c-4464-94dd-09d0b5be5176] openstack_networking_secgroup_rule_v2.ipv4_tcp_public["80"]: Refreshing state... [id=7518927c-456a-4bba-9cda-570a0b754df3] openstack_networking_secgroup_rule_v2.ipv4_tcp_public["6443"]: Refreshing state... [id=c127f7e5-3f15-4917-a286-0b9c8067ae1c] local_file.ipfile: Refreshing state... [id=eaac3c408902c7260b851339f17b995c905119d6] openstack_compute_floatingip_associate_v2.node_ips: Refreshing state... [id=149.165.156.65/be141f96-0fd2-4875-b121-4e547420e8e1/]

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the last "terraform apply":

local_file.ipfile has been deleted

• resource "local_file" "ipfile" {

  • content = <<-EOT Your instance will be available shortly at: 149.165.156.65 Use the SSH key ks-cluster that was provided to you, or ask ksuderman for the key.

    EOT -> null

  • directory_permission = "0777" -> null
  • file_permission = "0777" -> null
  • filename = "./comment.txt" -> null
  • id = "eaac3c408902c7260b851339f17b995c905119d6" -> null }

    openstack_compute_floatingip_v2.ip has been changed

    ~ resource "openstack_compute_floatingip_v2" "ip" {

  • fixed_ip = "10.0.0.7" id = "6fbaf721-997c-443a-bb27-15a8552b3d57"
  • instance_id = "be141f96-0fd2-4875-b121-4e547420e8e1"

    (3 unchanged attributes hidden)

    }

    openstack_compute_instance_v2.node has been changed

    ~ resource "openstack_compute_instance_v2" "node" { id = "be141f96-0fd2-4875-b121-4e547420e8e1" name = "ks-github-terraform-bot" ~ security_groups = [

    • "ed1211ea-a1bf-4c64-a0f0-1b093b519921",
    • "ks-github-terraform-bot-firewall",

      (1 unchanged element hidden)

      ]

  • tags = []

    (13 unchanged attributes hidden)

    (1 unchanged block hidden)

    }

    openstack_networking_secgroup_v2.fw has been changed

    ~ resource "openstack_networking_secgroup_v2" "fw" { id = "ed1211ea-a1bf-4c64-a0f0-1b093b519921" name = "ks-github-terraform-bot-firewall"

  • tags = []

    (5 unchanged attributes hidden)

    }

Unless you have made equivalent changes to your configuration, or ignored the relevant attributes using ignore_changes, the following plan may include actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:

• create ~ update in-place

Terraform will perform the following actions:

local_file.ipfile will be created

• resource "local_file" "ipfile" {

  • content = <<-EOT Your instance will be available shortly at: 149.165.156.65 Use the SSH key ks-cluster that was provided to you, or ask ksuderman for the key.

    EOT

  • directory_permission = "0777"
  • file_permission = "0777"
  • filename = "./comment.txt"
  • id = (known after apply) }

  openstack_compute_instance_v2.node will be updated in-place

  ~ resource "openstack_compute_instance_v2" "node" { id = "be141f96-0fd2-4875-b121-4e547420e8e1" name = "ks-github-terraform-bot" ~ security_groups = [

  • "ed1211ea-a1bf-4c64-a0f0-1b093b519921",

  • "ks-github-terraform-bot-firewall",

    (1 unchanged element hidden)

    ] tags = []

    (13 unchanged attributes hidden)

    (1 unchanged block hidden)

    }

Plan: 1 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.

[ksuderman]

/plan

[github-actions[bot]]

module.bootstrap.aws_s3_bucket.state_bucket: Refreshing state... [id=ks-github-tf-aws] module.bootstrap.aws_dynamodb_table.tf_lock_state: Refreshing state... [id=ks-github-tf-aws]

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:

• create

Terraform will perform the following actions:

aws_eip.frontend will be created

• resource "aws_eip" "frontend" {

  • allocation_id = (known after apply)
  • association_id = (known after apply)
  • carrier_ip = (known after apply)
  • customer_owned_ip = (known after apply)
  • domain = (known after apply)
  • id = (known after apply)
  • instance = (known after apply)
  • network_border_group = (known after apply)
  • network_interface = (known after apply)
  • private_dns = (known after apply)
  • private_ip = (known after apply)
  • public_dns = (known after apply)
  • public_ip = (known after apply)
  • public_ipv4_pool = (known after apply)
  • tags_all = (known after apply)
  • vpc = true }

  aws_instance.vm1 will be created

• resource "aws_instance" "vm1" {

  • ami = "ami-09e67e426f25ce0d7"

  • arn = (known after apply)

  • associate_public_ip_address = (known after apply)

  • availability_zone = (known after apply)

  • cpu_core_count = (known after apply)

  • cpu_threads_per_core = (known after apply)

  • disable_api_termination = (known after apply)

  • ebs_optimized = (known after apply)

  • get_password_data = false

  • host_id = (known after apply)

  • id = (known after apply)

  • instance_initiated_shutdown_behavior = (known after apply)

  • instance_state = (known after apply)

  • instance_type = "m5.2xlarge"

  • ipv6_address_count = (known after apply)

  • ipv6_addresses = (known after apply)

  • key_name = "ks-galaxy-aws"

  • monitoring = (known after apply)

  • outpost_arn = (known after apply)

  • password_data = (known after apply)

  • placement_group = (known after apply)

  • primary_network_interface_id = (known after apply)

  • private_dns = (known after apply)

  • private_ip = (known after apply)

  • public_dns = (known after apply)

  • public_ip = (known after apply)

  • secondary_private_ips = (known after apply)

  • security_groups = (known after apply)

  • subnet_id = (known after apply)

  • tags = {

    • "Name" = "BenchmarkDev"
    • "Owner" = "ks" }

  • tags_all = {

    • "Name" = "BenchmarkDev"
    • "Owner" = "ks" }

  • tenancy = (known after apply)

  • user_data = (known after apply)

  • user_data_base64 = (known after apply)

  • vpc_security_group_ids = (known after apply)

  • capacity_reservation_specification {

    • capacity_reservation_preference = (known after apply)

    • capacity_reservation_target {

      • capacity_reservation_id = (known after apply) } }

  • ebs_block_device {

    • delete_on_termination = (known after apply)
    • device_name = (known after apply)
    • encrypted = (known after apply)
    • iops = (known after apply)
    • kms_key_id = (known after apply)
    • snapshot_id = (known after apply)
    • tags = (known after apply)
    • throughput = (known after apply)
    • volume_id = (known after apply)
    • volume_size = (known after apply)
    • volume_type = (known after apply) }

  • enclave_options {

    • enabled = (known after apply) }

  • ephemeral_block_device {

    • device_name = (known after apply)
    • no_device = (known after apply)
    • virtual_name = (known after apply) }

  • metadata_options {

    • http_endpoint = (known after apply)
    • http_put_response_hop_limit = (known after apply)
    • http_tokens = (known after apply) }

  • network_interface {

    • delete_on_termination = false
    • device_index = 0
    • network_interface_id = (known after apply) }

  • root_block_device {

    • delete_on_termination = true
    • device_name = (known after apply)
    • encrypted = (known after apply)
    • iops = (known after apply)
    • kms_key_id = (known after apply)
    • throughput = (known after apply)
    • volume_id = (known after apply)
    • volume_size = 250
    • volume_type = (known after apply) } }

  aws_network_interface.gateway will be created

• resource "aws_network_interface" "gateway" {

  • id = (known after apply)

  • interface_type = (known after apply)

  • ipv6_address_count = (known after apply)

  • ipv6_addresses = (known after apply)

  • mac_address = (known after apply)

  • outpost_arn = (known after apply)

  • private_dns_name = (known after apply)

  • private_ip = (known after apply)

  • private_ips = (known after apply)

  • private_ips_count = (known after apply)

  • security_groups = [

    • "sg-01d3bb3198fb64c62", ]

  • source_dest_check = true

  • subnet_id = "subnet-082222bb425b6e856"

  • tags = {

    • "Name" = "primary_network_interface" }

  • tags_all = {

    • "Name" = "primary_network_interface" }

  • attachment {

    • attachment_id = (known after apply)
    • device_index = (known after apply)
    • instance = (known after apply) } }

  aws_route53_record.bench3 will be created

• resource "aws_route53_record" "bench3" {

  • allow_overwrite = (known after apply)
  • fqdn = (known after apply)
  • id = (known after apply)
  • name = "bench3.usegvl.org"
  • records = (known after apply)
  • ttl = 3600
  • type = "A"
  • zone_id = "Z01092892MLURSVI2K4L4" }

  local_file.ipfile will be created

• resource "local_file" "ipfile" {
  • content = (known after apply)
  • directory_permission = "0777"
  • file_permission = "0777"
  • filename = "./comment.txt"
  • id = (known after apply) }

Plan: 5 to add, 0 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.

[ksuderman]

/validate

[github-actions[bot]]

The plan for the aws-test branch appears to be valid.

[ksuderman]

/apply

[github-actions[bot]]

Your instance will be available shortly at: 34.231.202.100 Use the SSH key ks-galaxy-aws that was provided to you, or ask ksuderman for the key.

[ksuderman]

/plan

[github-actions[bot]]

module.bootstrap.aws_dynamodb_table.tf_lock_state: Refreshing state... [id=ks-github-tf-aws] aws_network_interface.gateway: Refreshing state... [id=eni-0853fea075ecf1a29] module.bootstrap.aws_s3_bucket.state_bucket: Refreshing state... [id=ks-github-tf-aws] aws_instance.vm1: Refreshing state... [id=i-00329515fbdee9bdf] aws_eip.frontend: Refreshing state... [id=eipalloc-00ecc415a8e8eed61] aws_route53_record.bench3: Refreshing state... [id=Z01092892MLURSVI2K4L4_bench3.usegvl.org_A] local_file.ipfile: Refreshing state... [id=7e8803cb3446ccd556c93eab76acdf39ea5d64c9]

Note: Objects have changed outside of Terraform

Terraform detected the following changes made outside of Terraform since the last "terraform apply":

aws_route53_record.bench3 has been changed

~ resource "aws_route53_record" "bench3" { id = "Z01092892MLURSVI2K4L4_bench3.usegvl.org_A" name = "bench3.usegvl.org"

(5 unchanged attributes hidden)

}

local_file.ipfile has been deleted

• resource "local_file" "ipfile" {

  • content = <<-EOT Your instance will be available shortly at: 34.231.202.100 Use the SSH key ks-galaxy-aws that was provided to you, or ask ksuderman for the key.

    EOT -> null

  • directory_permission = "0777" -> null

  • file_permission = "0777" -> null

  • filename = "./comment.txt" -> null

  • id = "7e8803cb3446ccd556c93eab76acdf39ea5d64c9" -> null }

    aws_eip.frontend has been changed

    ~ resource "aws_eip" "frontend" { id = "eipalloc-00ecc415a8e8eed61"

  • tags = {}

    (12 unchanged attributes hidden)

    }

    aws_instance.vm1 has been changed

    ~ resource "aws_instance" "vm1" { ~ associate_public_ip_address = false -> true id = "i-00329515fbdee9bdf"

  • public_dns = "ec2-34-231-202-100.compute-1.amazonaws.com"

  • public_ip = "34.231.202.100" ~ tags = {

    • "kubernetes.io/cluster/bench3.usegvl.org" = "owned"

      (2 unchanged elements hidden)

      } ~ tags_all = {

    • "kubernetes.io/cluster/bench3.usegvl.org" = "owned"

      (2 unchanged elements hidden)

      }

      (25 unchanged attributes hidden)

    ~ root_block_device {

    • tags = {}

      (8 unchanged attributes hidden)

      }

      (4 unchanged blocks hidden)

      }

      aws_network_interface.gateway has been changed

      ~ resource "aws_network_interface" "gateway" { id = "eni-0853fea075ecf1a29" tags = { "Name" = "primary_network_interface" }

      (12 unchanged attributes hidden)

  • attachment {

    • attachment_id = "eni-attach-0b05dd69acc5c3769"
    • device_index = 0
    • instance = "i-00329515fbdee9bdf" } }

Unless you have made equivalent changes to your configuration, or ignored the relevant attributes using ignore_changes, the following plan may include actions to undo or respond to these changes.

─────────────────────────────────────────────────────────────────────────────

Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:

• create ~ update in-place

Terraform will perform the following actions:

aws_iam_instance_profile.profile will be created

• resource "aws_iam_instance_profile" "profile" {

  • arn = (known after apply)
  • create_date = (known after apply)
  • id = (known after apply)
  • name = "profile"
  • path = "/"
  • role = "gha-role"
  • tags_all = (known after apply)
  • unique_id = (known after apply) }

  aws_iam_policy.cn will be created

• resource "aws_iam_policy" "cn" {

  • arn = (known after apply)
  • id = (known after apply)
  • name = "iam_trust_policy_cn"
  • path = "/"
  • policy = jsonencode( {
    • Statement = [
      • {
        • Action = "sts:AssumeRole"
        • Effect = "Allow"
        • Principal = {
          • Service = "ec2.amazonaws.com.cn" } }, ]
    • Version = "2012-10-17" } )
  • policy_id = (known after apply)
  • tags_all = (known after apply) }

  aws_iam_policy.policy will be created

• resource "aws_iam_policy" "policy" {

  • arn = (known after apply)
  • id = (known after apply)
  • name = "iam_policy"
  • path = "/"
  • policy = jsonencode( {
    • Statement = [
      • {
        • Action = [
          • "autoscaling:DescribeAutoScalingGroups",
          • "autoscaling:DescribeLaunchConfigurations",
          • "autoscaling:DescribeTags",
          • "ec2:DescribeInstances",
          • "ec2:DescribeRegions",
          • "ec2:DescribeRouteTables",
          • "ec2:DescribeSecurityGroups",
          • "ec2:DescribeSubnets",
          • "ec2:DescribeVolumes",
          • "ec2:CreateSecurityGroup",
          • "ec2:CreateTags",
          • "ec2:CreateVolume",
          • "ec2:ModifyInstanceAttribute",
          • "ec2:ModifyVolume",
          • "ec2:AttachVolume",
          • "ec2:AuthorizeSecurityGroupIngress",
          • "ec2:CreateRoute",
          • "ec2:DeleteRoute",
          • "ec2:DeleteSecurityGroup",
          • "ec2:DeleteVolume",
          • "ec2:DetachVolume",
          • "ec2:RevokeSecurityGroupIngress",
          • "ec2:DescribeVpcs",
          • "ec2:DescribeAvailabilityZones",
          • "ec2:DescribeInstanceTypes",
          • "ec2:DescribeInstanceTypeOfferings",
          • "elasticloadbalancing:AddTags",
          • "elasticloadbalancing:AttachLoadBalancerToSubnets",
          • "elasticloadbalancing:ApplySecurityGroupsToLoadBalancer",
          • "elasticloadbalancing:CreateLoadBalancerPolicy",
          • "elasticloadbalancing:CreateLoadBalancerListeners",
          • "elasticloadbalancing:ConfigureHealthCheck",
          • "elasticloadbalancing:DeleteLoadBalancer",
          • "elasticloadbalancing:DeleteLoadBalancerListeners",
          • "elasticloadbalancing:DescribeLoadBalancers",
          • "elasticloadbalancing:DescribeLoadBalancerAttributes",
          • "elasticloadbalancing:DetachLoadBalancerFromSubnets",
          • "elasticloadbalancing:DeregisterInstancesFromLoadBalancer",
          • "elasticloadbalancing:ModifyLoadBalancerAttributes",
          • "elasticloadbalancing:RegisterInstancesWithLoadBalancer",
          • "elasticloadbalancing:SetLoadBalancerPoliciesForBackendServer",
          • "elasticloadbalancing:AddTags",
          • "elasticloadbalancing:CreateListener",
          • "elasticloadbalancing:CreateTargetGroup",
          • "elasticloadbalancing:DeleteListener",
          • "elasticloadbalancing:DeleteTargetGroup",
          • "elasticloadbalancing:DescribeListeners",
          • "elasticloadbalancing:DescribeLoadBalancerPolicies",
          • "elasticloadbalancing:DescribeTargetGroups",
          • "elasticloadbalancing:DescribeTargetHealth",
          • "elasticloadbalancing:ModifyListener",
          • "elasticloadbalancing:ModifyTargetGroup",
          • "elasticloadbalancing:RegisterTargets",
          • "elasticloadbalancing:SetLoadBalancerPoliciesOfListener",
          • "iam:CreateServiceLinkedRole",
          • "kms:DescribeKey", ]
        • Effect = "Allow"
        • Resource = [
          • "*", ] }, ]
    • Version = "2012-10-17" } )
  • policy_id = (known after apply)
  • tags_all = (known after apply) }

  aws_iam_policy.trust will be created

• resource "aws_iam_policy" "trust" {

  • arn = (known after apply)
  • id = (known after apply)
  • name = "iam_trust_policy"
  • path = "/"
  • policy = jsonencode( {
    • Statement = [
      • {
        • Action = "sts:AssumeRole"
        • Effect = "Allow"
        • Principal = {
          • Service = "ec2.amazonaws.com" } }, ]
    • Version = "2012-10-17" } )
  • policy_id = (known after apply)
  • tags_all = (known after apply) }

  aws_iam_policy_attachment.cn-attach will be created

• resource "aws_iam_policy_attachment" "cn-attach" {

  • id = (known after apply)
  • name = "cn-attachment"
  • policy_arn = (known after apply)
  • roles = [
    • "gha-role", ] }

  aws_iam_policy_attachment.policy-attach will be created

• resource "aws_iam_policy_attachment" "policy-attach" {

  • id = (known after apply)
  • name = "policy-attachment"
  • policy_arn = (known after apply)
  • roles = [
    • "gha-role", ] }

  aws_iam_policy_attachment.trust-attach will be created

• resource "aws_iam_policy_attachment" "trust-attach" {

  • id = (known after apply)
  • name = "trust-attachment"
  • policy_arn = (known after apply)
  • roles = [
    • "gha-role", ] }

  aws_iam_role.this will be created

• resource "aws_iam_role" "this" {

  • arn = (known after apply)

  • assume_role_policy = jsonencode( {

    • Statement = [
      • {
        • Action = "sts:AssumeRole"
        • Effect = "Allow"
        • Principal = {
          • Service = "ec2.amazonaws.com" }
        • Sid = "" }, ]
    • Version = "2012-10-17" } )

  • create_date = (known after apply)

  • force_detach_policies = false

  • id = (known after apply)

  • managed_policy_arns = (known after apply)

  • max_session_duration = 3600

  • name = "gha-role"

  • name_prefix = (known after apply)

  • path = "/"

  • tags_all = (known after apply)

  • unique_id = (known after apply)

  • inline_policy {

    • name = (known after apply)
    • policy = (known after apply) } }

  aws_instance.vm1 will be updated in-place

  ~ resource "aws_instance" "vm1" {

  • iam_instance_profile = "profile" id = "i-00329515fbdee9bdf" ~ tags = {

    • "kubernetes.io/cluster/bench3.usegvl.org" = "owned" -> null

      (2 unchanged elements hidden)

      } ~ tags_all = {

    • "kubernetes.io/cluster/bench3.usegvl.org" = "owned" -> null

      (2 unchanged elements hidden)

      }

      (28 unchanged attributes hidden)

    (5 unchanged blocks hidden)

    }

  local_file.ipfile will be created

• resource "local_file" "ipfile" {

  • content = <<-EOT Your instance will be available shortly at: 34.231.202.100 Use the SSH key ks-galaxy-aws that was provided to you, or ask ksuderman for the key.

    EOT

  • directory_permission = "0777"
  • file_permission = "0777"
  • filename = "./comment.txt"
  • id = (known after apply) }

Plan: 9 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.

[ksuderman]

/apply

[ksuderman]

/apply

[github-actions[bot]]

Your instance will be available shortly.

IP : 3.81.188.204 AWS IID: i-09a3f817ef0c2c0d8 SSH Key: ks-galaxy-aws.pem

[ksuderman]

/destroy

[github-actions[bot]]

Cluster has been destroyed.

[ksuderman]

/apply

[github-actions[bot]]

Your instance will be available shortly.

public_ip: 54.82.121.214
instance_id: i-0cb1d2837b51b586c

SSH Key: ks-galaxy-aws.pem

[ksuderman]

/destroy

[github-actions[bot]]

Cluster has been destroyed.

[ksuderman]

/show

[ksuderman]

/show

[github-actions[bot]]

There are no resources provisioned.