mldevpants
commented
2 years ago Upon looking at the debug output, it's skipping a lot of values, those I see that terraform.go:72: [INFO] TF_WORKSPACE environment variable found: prod is set; is it possible that locals are not parsed by tflint correctly, most of the debug output looks like this:
runner_eval.go:40: [INFO] unevaluable expression found in .terraform/modules/alb/main.tf:161. TFLint ignores unevaluable expressions.
This is my locals with some reductions for sensitive info:
locals {
env = {
prod = {
vpc_cidr_block = cidrsubnet(var.vpc_cidr, 2, 0)
rds_instance_class = var.rds_instance_class_prod
rds_allocated_storage = var.rds_allocated_storage_prod
rds_max_allocated_storage = var.rds_max_allocated_storage_prod
rds_multi_az = var.rds_multi_az_prod
rds_parameters = var.rds_parameters_prod
rds_create_cloudwatch_log_group = var.rds_create_cloudwatch_log_group_prod
rds_performance_insights_enabled = true
rds_create_monitoring_role = true
ec2_create_spot_instance = false
ec2_instance_type = "m6i.large"
ec2_ebs_block_volume_size = 100
}
qa = {
vpc_cidr_block = cidrsubnet(var.vpc_cidr, 2, 2)
rds_instance_class = var.rds_instance_class_qa
rds_allocated_storage = var.rds_allocated_storage_qa
rds_max_allocated_storage = var.rds_max_allocated_storage_qa
rds_multi_az = var.rds_multi_az_qa
rds_parameters = var.rds_parameters_qa
}
dev = {
vpc_cidr_block = cidrsubnet(var.vpc_cidr, 2, 3)
rds_instance_class = var.rds_instance_class_dev
rds_allocated_storage = var.rds_allocated_storage_dev
rds_max_allocated_storage = var.rds_max_allocated_storage_dev
rds_multi_az = var.rds_multi_az_dev
rds_parameters = var.rds_parameters_dev
}
default = {
project = var.project
app = var.app
sub_count = 2
ca_domain_name = var.ca_domain_name
rds_create_kms_key = true
rds_publicly_accessible = true
rds_create_random_password = false
rds_port = var.rds_port
rds_backup_retention_period = 7
rds_create_cloudwatch_log_group = false
rds_performance_insights_enabled = false
rds_create_monitoring_role = false
rds_performance_insights_retention_period = 7
rds_monitoring_interval = 60
rds_monitoring_role_name = "${var.project}-${var.app}-${lower(terraform.workspace)}-rds-monitoring-role"
rds_monitoring_role_description = "${var.project}-${var.app}-${lower(terraform.workspace)} RDS Monitoring role"
rds_auto_minor_version_upgrade = true
ec2_aws_eip = true
ec2_instance_type = "t4i.medium"
rds_create_db_subnet_group = true
ec2_associate_public_ip_address = true
ec2_root_block_device_encrypted = true
ec2_root_block_volume_type = "gp3"
ec2_root_block_throughput = 200
ec2_root_block_volume_size = 20
ec2_ebs_block_device_encrypted = true
ec2_ebs_block_volume_type = "gp3"
ec2_ebs_block_throughput = 200
ec2_ebs_block_volume_size = 40
ec2_create_spot_instance = true
ec2_filter_architecture_type = "x86_64" # Supports arm64 or x86_64
ec2_spot_price = null
ec2_spot_wait_for_fulfillment = null
ec2_spot_type = null # i.e. persistent
ec2_spot_instance_interruption_behavior = null # i.e. stop / terminate
alb_load_balancer_type = "application"
alb_ssl_policy = "ELBSecurityPolicy-TLS-1-2-Ext-2018-06" # Execute aws elbv2 describe-ssl-policies to list all available ssl policies, go to to compare: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies
alb_drop_invalid_header_fields = true
}
}
environmentvars = "${contains(keys(local.env), terraform.workspace)}" ? terraform.workspace : "default"
workspace = merge(local.env["default"], local.env[local.environmentvars])
environment = lower(terraform.workspace)
project = local.workspace["project"]
app_id = "${local.project}-${local.workspace["app"]}"
vpc_name = "${local.app_id}-vpc-${local.environment}"
rds_name = "${local.app_id}-rds-${local.environment}"
ec2_name = local.workspace["ec2_create_spot_instance"] ? "${local.app_id}-${local.environment}-ec2-spot" : "${local.app_id}-${local.environment}-ec2"
public_subnets = cidrsubnets(cidrsubnet(local.workspace["vpc_cidr_block"], 1, 0), 1, 1)
private_subnets = cidrsubnet(local.workspace["vpc_cidr_block"], 2, 2)
db_subnets = cidrsubnet(local.workspace["vpc_cidr_block"], 2, 3)
rds_multi_az = local.workspace["sub_count"] > 1 ? true : false
# aws_profile = "${local.app_id}-${lower(terraform.workspace)}"
# rds_snapshot = var.rds_use_snapshot ? (lower(terraform.workspace) == "lt" ? data.aws_db_snapshot.db_snapshot_dev[0].id : data.aws_db_snapshot.db_snapshot[0].id) : null
tags = {
project = local.app_id
Owner = "Some Name"
Environment = lower(terraform.workspace)
managed_by = "terraform"
}
user_data = <<-EOT
#!/bin/bash
### Create and Mount volume
set -x
mkfs -t xfs /dev/nvme1n1
mkdir -p /var/lib/docker
mount /dev/nvme1n1 /var/lib/docker
BLK_ID=$(sudo blkid /dev/nvme1n1 | cut -f2 -d" ")
if [[ -z $BLK_ID ]]; then
echo "Hmm ... no block ID found ... "
exit 1
fi
echo "$BLK_ID /var/lib/docker xfs defaults 0 2" | sudo tee --append /etc/fstab
mount -a
### Install Docker
yum update -y
amazon-linux-extras install -y docker
# systemctl enable docker
chkconfig docker on
usermod -a -G docker ec2-user
systemctl start docker
# install docker-compose
curl -L \
https://github.com/docker/compose/releases/download/v2.5.1/docker-compose-`uname -s`-`uname -m` \
-o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose
### Install git
yum -y install git
echo "Bootstrapping Complete!"
EOT
}
wata727
bendrucker
I use workspaces to define various configurations per given stage level: dev, lt, qa, staging, prod. in ci for terraform I use TF_WORKSPACE env variable to set the desired workspace which is defined per given stage name accordingly. How do I let tflint know what workspace name to use per given test? I couldn't find anywhere anything about it (it is not for remote) I tried to use the same env var, I tried --var='terraform.workspace=prod' I set some of the ec2 instances types with wrong names and nothing. I use docker bundle for it after terraform init;
docker run --rm -v $(pwd):/data -e TF_WORKSPACE=prod -t ghcr.io/terraform-linters/tflint-bundle --module --enable-plugin=aws --var='terraform.workspace=prod'Thanks