kandi background

terraformer | CLI tool to generate terraform files | Infrastructure Automation library

by GoogleCloudPlatform Go Version: 0.8.22 License: Apache-2.0

by GoogleCloudPlatform Go Version: 0.8.22 License: Apache-2.0

kandi X-RAY | terraformer Summary

terraformer is a Go library typically used in Devops, Infrastructure Automation, Terraform applications. terraformer has no bugs, it has no vulnerabilities, it has a Permissive License and it has medium support. You can download it from GitHub.

A CLI tool that generates tf/json and tfstate files based on existing infrastructure (reverse Terraform).

Support

Support

Quality

Quality

Security

Security

License

License

Reuse

Reuse

kandi-support Support

terraformer has a medium active ecosystem.
It has 9472 star(s) with 1316 fork(s). There are 120 watchers for this library.
There were 1 major release(s) in the last 6 months.
There are 59 open issues and 592 have been closed. On average issues are closed in 96 days. There are 41 open pull requests and 0 closed requests.
It has a neutral sentiment in the developer community.
The latest version of terraformer is 0.8.22

terraformer Support

Best in #Infrastructure Automation

Average in #Infrastructure Automation

terraformer Support

Best in #Infrastructure Automation

Average in #Infrastructure Automation

quality kandi Quality

terraformer has 0 bugs and 0 code smells.

terraformer Quality

Best in #Infrastructure Automation

Average in #Infrastructure Automation

terraformer Quality

Best in #Infrastructure Automation

Average in #Infrastructure Automation

security Security

terraformer has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.
terraformer code analysis shows 0 unresolved vulnerabilities.
There are 0 security hotspots that need review.

terraformer Security

Best in #Infrastructure Automation

Average in #Infrastructure Automation

terraformer Security

Best in #Infrastructure Automation

Average in #Infrastructure Automation

license License

terraformer is licensed under the Apache-2.0 License. This license is Permissive.
Permissive licenses have the least restrictions, and you can use them in most projects.

terraformer License

Best in #Infrastructure Automation

Average in #Infrastructure Automation

terraformer License

Best in #Infrastructure Automation

Average in #Infrastructure Automation

build Reuse

terraformer releases are available to install and integrate.
Installation instructions, examples and code snippets are available.
It has 46469 lines of code, 2113 functions and 640 files.
It has medium code complexity. Code complexity directly impacts maintainability of the code.

terraformer Reuse

Best in #Infrastructure Automation

Average in #Infrastructure Automation

terraformer Reuse

Best in #Infrastructure Automation

Average in #Infrastructure Automation

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample Here

Get all kandi verified functions for this library.

Get all kandi verified functions for this library.

terraformer Key Features

Disclaimer: This is not an official Google product

Created by: Waze SRE

terraformer Examples and Code Snippets

Community Discussions

Trending Discussions on terraformer

Manually moving a state file to a different backend
How to not override AWS desired_count with Terraform?
How to use filters in Terraformer for importing AWS Lambda function
error updating CloudFront Distribution (E32RNPFGEUHQ6J): InvalidWebACLId: Web ACL is not accessible by the requester
Why does terraformer not find plugin?
Regex Filter Error in google_logging_project_sink Terraform Script
Create a new project using outputs from Terraformer
How can I import all the existing infrastructure state from aws and compare it with the generated reverse-terraformed resources?
Unable to import AWS infrastructure configurartion using terraformer
See what GCP services are enabled for a project (node js)?

Trending Discussions on terraformer

QUESTION

Manually moving a state file to a different backend

Asked 2022-Feb-09 at 18:01

I recreated a state file for an existing infrastructure using a third party tool i.e. terraformer. Now I want o move the .tfstate to another azurerm back-end and manage from there.

If I just copy the file i.e. mystate.tfstate from local to inside storage account container with the same file name/key as in the backend configurations will it work or do I need to do something else to achieve it?

I don't want to risk the state file or infrastructure by trying to do something that isnt sure to work as I expect.

ANSWER

Answered 2022-Feb-09 at 14:32

I don't want to risk the state file or infrastructure by trying to do something that isnt sure to work as I expect.

Make a backup of the state file first, and then you won't be risking the state file.

As long as you aren't running an apply command, you won't be risking the infrastructure. And even if you are running an apply command, you will be able to review the plan before proceeding.

So just (always) backup your state file, and always review a plan before applying it, and there is no risk.

Source https://stackoverflow.com/questions/71048464

QUESTION

How to not override AWS desired_count with Terraform?

Asked 2021-Jun-24 at 15:20

I'm managing an autoscaling cloud infrastructure in AWS.

Every time I run Terraform it wants to override the desired_count, i.e. the number of running instances.

I would like this to not happen. How do I do that?

Constraints: I manage multiple different microservices, each of which set up their running instances with a shared module, where desired_count is specified. I don't want to change the shared module such that desired_count is ignored for all my microservices. Rather, I want to be able to override or not on a service-by-service (i.e caller-by-caller) basis.

This rules out a straightforward use of lifecycle { ignore_changes = ... }. As far as I can tell, the list of changes to ignore cannot be given as arguments (my Terraform complains when I try; feel free to tell me how you succeed at this).

My next idea (if possible) is to read the value from the stored state, if present, and ask for a desired_count equal to its current value, or my chosen initial value if it has no current value. If there are no concurrent Terraform runs (i.e. no races), this should accomplish the same thing. Is this possible?

I'm no expert terraformer. I would appreciate it a lot if you give very detailed answers.

ANSWER

Answered 2021-Jun-24 at 15:20

The lifecycle parameters affect how the graph is built, so they can't be parameterized. The terraform team hasn't ruled out that this could be implemented, but they haven't done it with the issue reported over a couple years.

What you could do is create two aws_ecs_service resources, and switch between them:

resource "aws_ecs_service" "service" {
    count = var.use_lifecycle ? 0 : 1
    ...
}

resource "aws_ecs_service" "service_with_lifecycle" {
    count = var.use_lifecycle ? 1 : 0
    ...
    lifecycle {
        ignore_changes = ["desired_count"]
    }
}

Given that, you need a way to reference the service you created. You can do that with a local:

locals {
    service = var.use_lifecycle ? aws_ecs_service.service_with_lifecycle[0] : aws_ecs_service.service[0]
}

Source https://stackoverflow.com/questions/68116565

QUESTION

error updating CloudFront Distribution (E32RNPFGEUHQ6J): InvalidWebACLId: Web ACL is not accessible by the requester

Asked 2021-Mar-17 at 22:12

I am using terraform to create a web-acl in aws and want to associate that web-acl with CloudFront distribution.

So, here's how my code looks like:

provider "aws" {
  alias  = "east1"
  region = "us-east-1"
}

# -------------------------------------------
# -------------------------------------------
# Cloud Front
module "front_end_cloudfront" {
  source = "./modules/front-end/CF"

  # CF_ALIASES = ["terraformer-frontend.dev.effi.com.au"]  
  CF_LAMBDA_ARN = module.frontend_lambda.cf_lambda_qualified_arn
  CF_BUCKET_DOMAIN_NAME = module.front_end_bucket.website_endpoint
  CF_BUCKET_ORIGIN_ID = module.front_end_bucket.website_domain
  CF_TAGS_LIST = { "Name" : "terraformer-front-end-cloudfrontv2" }
  CF_CERTFICATE_ARN = var.CLOUDFRONT_US_EAST_1_ACM_ARN
  # WEB_ACL = module.waf.web_acl_id
  WEB_ACL = module.waf_cf.web_acl_id

  depends_on = [module.waf_cf]
}



# -------------------------------------------
# -------------------------------------------
# WAF for CF
module "waf_cf" {
  source = "./modules/waf"

  providers = {
    aws = aws.east1
  }  

  WAF_NAME  = "terraform-web-acl-cf"
  WAF_DESCRIPTION = "terraform web acl-cf"
  WAF_SCOPE = "CLOUDFRONT"
  WAF_RULE_NAME_1 = "AWSManagedRulesCommonRuleSet"
  WAF_RULE_NAME_2 = "AWSManagedRulesAmazonIpReputationList"
  WAF_RULE_NAME_3 = "AWSManagedRulesLinuxRuleSet"
  WAF_RULE_NAME_4 = "AWSManagedRulesKnownBadInputsRuleSet"
  WAF_VENDOR = "AWS"
  WAF_METRIC_1 = "aws-waf-logs-terraformer-metric"
  WAF_METRIC_2 = "aws-waf-logs-terraformer-metric"
  WAF_METRIC_3 = "aws-waf-logs-terraformer-metric"
  WAF_METRIC_4 = "aws-waf-logs-terraformer-metric"
  WAF_TAG_LIST = {
    "Tag1" : "Name"
    "Tag2" : "terraformer-rule-cf"
  }
  WAF_METRIC = "aws-waf-logs-friendly-metric-name"
  CLOUDWATCH_METRICS_ENABLED = false
  SAMPLE_REQUESTS_ENABLED = false
}

These are terraform modules I have wrote, the specific resource files for above modules are below respectively.

# CF
resource "aws_cloudfront_distribution" "aws_cloudfront_distribution" {
  # aliases = var.CF_ALIASES

  default_cache_behavior {
    allowed_methods = ["GET", "HEAD"]
    cached_methods  = ["GET", "HEAD"]
    compress        = "true"
    default_ttl     = "0"

    forwarded_values {
      cookies {
        forward = "none"
      }

      query_string = "false"
    }

    lambda_function_association {
      event_type   = "origin-response"
      include_body = "false"
      lambda_arn   = var.CF_LAMBDA_ARN
    }

    max_ttl                = "0"
    min_ttl                = "0"
    smooth_streaming       = "false"
    target_origin_id       = var.CF_BUCKET_ORIGIN_ID
    viewer_protocol_policy = "redirect-to-https"
  }

  enabled         = "true"
  http_version    = "http2"
  is_ipv6_enabled = "true"

  origin {
    custom_origin_config {
      http_port                = "80"
      https_port               = "443"
      origin_keepalive_timeout = "5"
      origin_protocol_policy   = "http-only"
      origin_read_timeout      = "30"
      origin_ssl_protocols     = ["TLSv1", "TLSv1.1", "TLSv1.2"]
    }

    domain_name = var.CF_BUCKET_DOMAIN_NAME
    origin_id   = var.CF_BUCKET_ORIGIN_ID
  }

  price_class = "PriceClass_All"

  restrictions {
    geo_restriction {
      restriction_type = "none"
    }
  }

  retain_on_delete = "false"

  tags = var.CF_TAGS_LIST

  viewer_certificate {
    acm_certificate_arn            = var.CF_CERTFICATE_ARN
    cloudfront_default_certificate = "false"
    minimum_protocol_version       = "TLSv1.2_2018"
    ssl_support_method             = "sni-only"
  }

  web_acl_id = var.WEB_ACL
}

# WAF
resource "aws_wafv2_web_acl" "aws_wafv2_web_acl" {
  name        = var.WAF_NAME
  description = var.WAF_DESCRIPTION
  scope       = var.WAF_SCOPE

  default_action {
    allow {}
  }

  rule {
    name     = var.WAF_RULE_NAME_1
    priority = 1

    override_action {
      count {}
    }

    statement {
      managed_rule_group_statement {
        name        = var.WAF_RULE_NAME_1
        vendor_name = var.WAF_VENDOR

        # excluded_rule {
        #   name = "SizeRestrictions_QUERYSTRING"
        # }

        # excluded_rule {
        #   name = "NoUserAgent_HEADER"
        # }
      }
    }

    visibility_config {
      cloudwatch_metrics_enabled = var.CLOUDWATCH_METRICS_ENABLED
      metric_name                = var.WAF_METRIC_1
      sampled_requests_enabled   = var.SAMPLE_REQUESTS_ENABLED
    }
  }



  rule {
    name     = var.WAF_RULE_NAME_2
    priority = 2

    override_action {
      count {}
    }

    statement {
      managed_rule_group_statement {
        name        = var.WAF_RULE_NAME_2
        vendor_name = var.WAF_VENDOR
      }
    }

    visibility_config {
      cloudwatch_metrics_enabled = var.CLOUDWATCH_METRICS_ENABLED
      metric_name                = var.WAF_METRIC_2
      sampled_requests_enabled   = var.SAMPLE_REQUESTS_ENABLED
    }
  }  


  rule {
    name     = var.WAF_RULE_NAME_3
    priority = 3

    override_action {
      count {}
    }

    statement {
      managed_rule_group_statement {
        name        = var.WAF_RULE_NAME_3
        vendor_name = var.WAF_VENDOR
      }
    }

    visibility_config {
      cloudwatch_metrics_enabled = var.CLOUDWATCH_METRICS_ENABLED
      metric_name                = var.WAF_METRIC_3
      sampled_requests_enabled   = var.SAMPLE_REQUESTS_ENABLED
    }
  } 

  rule {
    name     = var.WAF_RULE_NAME_4
    priority = 4

    override_action {
      count {}
    }

    statement {
      managed_rule_group_statement {
        name        = var.WAF_RULE_NAME_4
        vendor_name = var.WAF_VENDOR
      }
    }

    visibility_config {
      cloudwatch_metrics_enabled = var.CLOUDWATCH_METRICS_ENABLED
      metric_name                = var.WAF_METRIC_4
      sampled_requests_enabled   = var.SAMPLE_REQUESTS_ENABLED
    }
  } 

  tags = var.WAF_TAG_LIST

  visibility_config {
    cloudwatch_metrics_enabled = var.CLOUDWATCH_METRICS_ENABLED
    metric_name                = var.WAF_METRIC
    sampled_requests_enabled   = var.SAMPLE_REQUESTS_ENABLED
  }
}

But I am getting the below error

error updating CloudFront Distribution (E32RNPFGEUHQ6J): InvalidWebACLId: Web ACL is not accessible by the requester.

Here the cloudfront is created in ap-southeast-2 region and the waf is created in us-east-1 region.

Can someone please help me on this?

ANSWER

Answered 2021-Mar-17 at 22:12

When using WAFv2, you need to specify the the ARN not the ID to web_acl_id in aws_cloudfront_distribution.

See the note here https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfront_distribution#web_acl_id

or this GitHub issue https://github.com/hashicorp/terraform-provider-aws/issues/13902

Source https://stackoverflow.com/questions/66476009

QUESTION

Unable to import AWS infrastructure configurartion using terraformer

Asked 2020-Jun-02 at 18:54

I am trying to import existing AWS infra configuration using google's terraformer and I am unsuccessful due to AWS provider authentication problem. My AWS credentials are MFA enabled and hence i have to use session token. I failed to find options to enable terraformer to use aws session token params.

Here is the debug logs for the terraformer program. Could someone help me with this please. The below is generating empty tf files and states.

Master $ terraformer import aws --resources=vpc  --regions=eu-central-1 -c -v
2020/06/02 23:17:53 aws importing region eu-central-1
2020/06/02 23:17:53 aws importing... vpc
2020-06-02T23:17:53.525+0530 [INFO]  plugin: configuring client automatic mTLS
2020-06-02T23:17:53.593+0530 [DEBUG] plugin: starting plugin: path=.terraform/plugins/darwin_amd64/terraform-provider-aws_v2.64.0_x4 args=[.terraform/plugins/darwin_amd64/terraform-provider-aws_v2.64.0_x4]
2020-06-02T23:17:53.597+0530 [DEBUG] plugin: plugin started: path=.terraform/plugins/darwin_amd64/terraform-provider-aws_v2.64.0_x4 pid=47500
2020-06-02T23:17:53.597+0530 [DEBUG] plugin: waiting for RPC address: path=.terraform/plugins/darwin_amd64/terraform-provider-aws_v2.64.0_x4
2020-06-02T23:17:54.254+0530 [INFO]  plugin.terraform-provider-aws_v2.64.0_x4: configuring server automatic mTLS: timestamp=2020-06-02T23:17:54.253+0530
2020-06-02T23:17:54.329+0530 [DEBUG] plugin: using plugin: version=5
2020-06-02T23:17:54.329+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: plugin address: network=unix address=/var/folders/jj/2w6phyrs1fj68ks7ry714z000000gn/T/plugin871781403 timestamp=2020-06-02T23:17:54.328+0530
2020-06-02T23:17:54.586+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: 2020/06/02 23:17:54 [INFO] No assume_role block read from configuration
2020-06-02T23:17:54.586+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: 2020/06/02 23:17:54 [INFO] Building AWS auth structure
2020-06-02T23:17:54.586+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: 2020/06/02 23:17:54 [INFO] Setting AWS metadata API timeout to 100ms
2020-06-02T23:17:56.003+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: 2020/06/02 23:17:55 [INFO] Ignoring AWS metadata API endpoint at default location as it doesn't return any instance-id
2020-06-02T23:17:56.010+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: 2020/06/02 23:17:56 [INFO] AWS Auth provider used: "EnvProvider"
2020-06-02T23:17:56.013+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: 2020/06/02 23:17:56 [DEBUG] Trying to get account information via sts:GetCallerIdentity
2020-06-02T23:17:57.577+0530 [DEBUG] plugin.terraform-provider-aws_v2.64.0_x4: 2020/06/02 23:17:57 [DEBUG] Trying to get account information via sts:GetCallerIdentity
2020-06-02T23:17:59.652+0530 [DEBUG] plugin: plugin process exited: path=.terraform/plugins/darwin_amd64/terraform-provider-aws_v2.64.0_x4 pid=47500
2020-06-02T23:17:59.652+0530 [DEBUG] plugin: plugin exited
2020/06/02 23:17:59 aws Connecting.... 
2020/06/02 23:17:59 aws save vpc
2020/06/02 23:17:59 aws save tfstate for vpc

ANSWER

Answered 2020-Jun-02 at 18:54

I managed to resolve the problem by explicitily setting the environment variable AWS_SHARED_CREDENTIALS_FILE=~/.aws/credential

Without the above additional env my setup failed.

Source https://stackoverflow.com/questions/62158368

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install terraformer

If you want to use a package manager:.
Run git clone <terraformer repo> && cd terraformer/
Run go mod download
Run go build -v for all providers OR build with one provider go run build/main.go {google,aws,azure,kubernetes,etc}
Run terraform init against a versions.tf file to install the plugins required for your platform. For example, if you need plugins for the google provider, versions.tf should contain:
Copy your Terraform provider's plugin(s) to folder ~/.terraform.d/plugins/{darwin,linux}_amd64/, as appropriate.
Linux
MacOS
Windows
Install Terraform - https://www.terraform.io/downloads
Download exe file for required provider from here - https://github.com/GoogleCloudPlatform/terraformer/releases
Add the exe file path to path variable
Create a folder and initialize the terraform provider and run terraformer commands from there For AWS - refer https://learn.hashicorp.com/tutorials/terraform/aws-build?in=terraform/aws-get-started
Homebrew users can use brew install terraformer.
MacPorts users can use sudo port install terraformer.
Chocolatey users can use choco install terraformer.
Major Cloud Google Cloud provider >2.11.0 - here AWS provider >2.25.0 - here Azure provider >1.35.0 - here Alicloud provider >1.57.1 - here
Cloud DigitalOcean provider >1.9.1 - here Heroku provider >2.2.1 - here LaunchDarkly provider >=2.1.1 - here Linode provider >1.8.0 - here OpenStack provider >1.21.1 - here TencentCloud provider >1.50.0 - here Vultr provider >1.0.5 - here Yandex provider >0.42.0 - here
Infrastructure Software Kubernetes provider >=1.9.0 - here RabbitMQ provider >=1.1.0 - here
Network Cloudflare provider >1.16 - here Fastly provider >0.16.1 - here NS1 provider >1.8.3 - here PAN-OS provider >= 1.8.3 - here
VCS GitHub provider >=2.2.1 - here
Monitoring & System Management Datadog provider >2.1.0 - here New Relic provider >2.0.0 - here Mackerel provider > 0.0.6 - here Pagerduty >=1.9 - here Opsgenie >= 0.6.0 here
Community Keycloak provider >=1.19.0 - here Logz.io provider >=1.1.1 - here Commercetools provider >= 0.21.0 - here Mikrotik provider >= 0.2.2 - here Xen Orchestra provider >= 0.18.0 - here GmailFilter provider >= 1.0.1 - here Vault provider - here Auth0 provider - here

Support

If you have improvements or fixes, we would love to have your contributions. Please read CONTRIBUTING.md for more information on the process we would like contributors to follow.

Find more information at:

Reuse Trending Solutions

14 best Python Telegram Bot

21 best C# Game Development in 2023

Image Resizing using OpenCV in Python

How to Validate an Email Address in JavaScript

Age Calculator using JavaScript

28 best Python Face Recognition in 2023

Display Stopwatch in ReactJs

Google Maps Integration with Location

Disease Predictor

Resolving Gender Bias in AI

Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from
over 650 million Knowledge Items

Find more libraries

Reuse Solution Kits and Libraries Curated by Popular Use Cases

Save this library and start creating your kit

Clone

HTTPS

https://github.com/GoogleCloudPlatform/terraformer.git

CLI

gh repo clone GoogleCloudPlatform/terraformer

SSH

git@github.com:GoogleCloudPlatform/terraformer.git

Download

Share this Page

See Similar Libraries in

Infrastructure Automation

Reuse Devops Kits

15 best Ruby Server Side Scripting

13 best DevOps libraries in 2023

Hospital sanitizing robot

Online Voting System

Team Code Weebs Kit #buildwithai

See all related Kits

Consider Popular Infrastructure Automation Libraries

by hashicorp

by saltstack

by pulumi

by GoogleCloudPlatform

terraform-provider-aws

by hashicorp

See all Infrastructure Automation Libraries

Try Top Libraries by GoogleCloudPlatform

microservices-demo

by GoogleCloudPlatform Python

training-data-analyst

by GoogleCloudPlatform Jupyter Notebook

python-docs-samples

by GoogleCloudPlatform Jupyter Notebook

by GoogleCloudPlatform Go

tensorflow-without-a-phd

by GoogleCloudPlatform Jupyter Notebook

See all Libraries by this author

Compare Infrastructure Automation Libraries with Highest Support

by saltstack

by hashicorp

terraform-provider-aws

by hashicorp

by gruntwork-io

by kubevirt

See all Infrastructure Automation Libraries

Compare Infrastructure Automation Libraries with Highest Quality

by Bahmni

by baidu

aws-service-catalog-terraform-reference-architecture

by aws-samples

by onfsdn

by oVirt

See all Infrastructure Automation Libraries

Compare Infrastructure Automation Libraries with Highest Security

by Bahmni

by baidu

by onfsdn

by mediashelf

by oVirt

See all Infrastructure Automation Libraries

Compare Infrastructure Automation Libraries with Permissive License

by onfsdn

aws-service-catalog-terraform-reference-architecture

by aws-samples

aliyun-oss-uploader-plugin

by jenkinsci

by karesansui

by juergh

See all Infrastructure Automation Libraries

Compare Infrastructure Automation Libraries with Highest Reuse

by mediashelf

chef-platform_packages

by fnichol

by Theorem

by voormedia

application_ruby

by poise

See all Infrastructure Automation Libraries

Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from
over 650 million Knowledge Items

Find more libraries

Reuse Solution Kits and Libraries Curated by Popular Use Cases

Save this library and start creating your kit

Open Weaver – Develop Applications Faster with Open Source

kandi

Develop Custom Functions

Develop Projects with Kits

Explore Popular Libraries

Product Tour

Community and Support

Self Paced Certifications

Hackathons and Events

FutureSkills Prime

Company

Follow

Terms
Privacy policy
© 2023 Open Weaver Inc.

© 2023 Open Weaver Inc.