provider/aws: Add support for updating tags in aws_emr_cluster (#11003)
Fixes: #10958 This wasn't implemented the first time around for some reason ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSEMRCluster_' 2 ↵ ✹ ✭ ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2017/01/03 15:40:09 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSEMRCluster_ -timeout 120m === RUN TestAccAWSEMRCluster_basic --- PASS: TestAccAWSEMRCluster_basic (529.36s) === RUN TestAccAWSEMRCluster_tags --- PASS: TestAccAWSEMRCluster_tags (556.81s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 1086.197s ```
This commit is contained in:
parent
1abad9ee64
commit
cb64fdeb28
|
@ -380,7 +380,10 @@ func resourceAwsEMRClusterRead(d *schema.ResourceData, meta interface{}) error {
|
||||||
func resourceAwsEMRClusterUpdate(d *schema.ResourceData, meta interface{}) error {
|
func resourceAwsEMRClusterUpdate(d *schema.ResourceData, meta interface{}) error {
|
||||||
conn := meta.(*AWSClient).emrconn
|
conn := meta.(*AWSClient).emrconn
|
||||||
|
|
||||||
|
d.Partial(true)
|
||||||
|
|
||||||
if d.HasChange("core_instance_count") {
|
if d.HasChange("core_instance_count") {
|
||||||
|
d.SetPartial("core_instance_count")
|
||||||
log.Printf("[DEBUG] Modify EMR cluster")
|
log.Printf("[DEBUG] Modify EMR cluster")
|
||||||
groups, err := fetchAllEMRInstanceGroups(meta, d.Id())
|
groups, err := fetchAllEMRInstanceGroups(meta, d.Id())
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
@ -409,24 +412,31 @@ func resourceAwsEMRClusterUpdate(d *schema.ResourceData, meta interface{}) error
|
||||||
}
|
}
|
||||||
|
|
||||||
log.Printf("[DEBUG] Modify EMR Cluster done...")
|
log.Printf("[DEBUG] Modify EMR Cluster done...")
|
||||||
|
|
||||||
|
log.Println("[INFO] Waiting for EMR Cluster to be available")
|
||||||
|
|
||||||
|
stateConf := &resource.StateChangeConf{
|
||||||
|
Pending: []string{"STARTING", "BOOTSTRAPPING"},
|
||||||
|
Target: []string{"WAITING", "RUNNING"},
|
||||||
|
Refresh: resourceAwsEMRClusterStateRefreshFunc(d, meta),
|
||||||
|
Timeout: 40 * time.Minute,
|
||||||
|
MinTimeout: 10 * time.Second,
|
||||||
|
Delay: 5 * time.Second,
|
||||||
|
}
|
||||||
|
|
||||||
|
_, err = stateConf.WaitForState()
|
||||||
|
if err != nil {
|
||||||
|
return fmt.Errorf("[WARN] Error waiting for EMR Cluster state to be \"WAITING\" or \"RUNNING\" after modification: %s", err)
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
log.Println(
|
if err := setTagsEMR(conn, d); err != nil {
|
||||||
"[INFO] Waiting for EMR Cluster to be available")
|
return err
|
||||||
|
} else {
|
||||||
stateConf := &resource.StateChangeConf{
|
d.SetPartial("tags")
|
||||||
Pending: []string{"STARTING", "BOOTSTRAPPING"},
|
|
||||||
Target: []string{"WAITING", "RUNNING"},
|
|
||||||
Refresh: resourceAwsEMRClusterStateRefreshFunc(d, meta),
|
|
||||||
Timeout: 40 * time.Minute,
|
|
||||||
MinTimeout: 10 * time.Second,
|
|
||||||
Delay: 5 * time.Second,
|
|
||||||
}
|
}
|
||||||
|
|
||||||
_, err := stateConf.WaitForState()
|
d.Partial(false)
|
||||||
if err != nil {
|
|
||||||
return fmt.Errorf("[WARN] Error waiting for EMR Cluster state to be \"WAITING\" or \"RUNNING\" after modification: %s", err)
|
|
||||||
}
|
|
||||||
|
|
||||||
return resourceAwsEMRClusterRead(d, meta)
|
return resourceAwsEMRClusterRead(d, meta)
|
||||||
}
|
}
|
||||||
|
@ -593,6 +603,64 @@ func tagsToMapEMR(ts []*emr.Tag) map[string]string {
|
||||||
return result
|
return result
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func diffTagsEMR(oldTags, newTags []*emr.Tag) ([]*emr.Tag, []*emr.Tag) {
|
||||||
|
// First, we're creating everything we have
|
||||||
|
create := make(map[string]interface{})
|
||||||
|
for _, t := range newTags {
|
||||||
|
create[*t.Key] = *t.Value
|
||||||
|
}
|
||||||
|
|
||||||
|
// Build the list of what to remove
|
||||||
|
var remove []*emr.Tag
|
||||||
|
for _, t := range oldTags {
|
||||||
|
old, ok := create[*t.Key]
|
||||||
|
if !ok || old != *t.Value {
|
||||||
|
// Delete it!
|
||||||
|
remove = append(remove, t)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return expandTags(create), remove
|
||||||
|
}
|
||||||
|
|
||||||
|
func setTagsEMR(conn *emr.EMR, d *schema.ResourceData) error {
|
||||||
|
if d.HasChange("tags") {
|
||||||
|
oraw, nraw := d.GetChange("tags")
|
||||||
|
o := oraw.(map[string]interface{})
|
||||||
|
n := nraw.(map[string]interface{})
|
||||||
|
create, remove := diffTagsEMR(expandTags(o), expandTags(n))
|
||||||
|
|
||||||
|
// Set tags
|
||||||
|
if len(remove) > 0 {
|
||||||
|
log.Printf("[DEBUG] Removing tags: %s", remove)
|
||||||
|
k := make([]*string, len(remove), len(remove))
|
||||||
|
for i, t := range remove {
|
||||||
|
k[i] = t.Key
|
||||||
|
}
|
||||||
|
|
||||||
|
_, err := conn.RemoveTags(&emr.RemoveTagsInput{
|
||||||
|
ResourceId: aws.String(d.Id()),
|
||||||
|
TagKeys: k,
|
||||||
|
})
|
||||||
|
if err != nil {
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if len(create) > 0 {
|
||||||
|
log.Printf("[DEBUG] Creating tags: %s", create)
|
||||||
|
_, err := conn.AddTags(&emr.AddTagsInput{
|
||||||
|
ResourceId: aws.String(d.Id()),
|
||||||
|
Tags: create,
|
||||||
|
})
|
||||||
|
if err != nil {
|
||||||
|
return err
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return nil
|
||||||
|
}
|
||||||
|
|
||||||
func expandBootstrapActions(bootstrapActions []interface{}) []*emr.BootstrapActionConfig {
|
func expandBootstrapActions(bootstrapActions []interface{}) []*emr.BootstrapActionConfig {
|
||||||
actionsOut := []*emr.BootstrapActionConfig{}
|
actionsOut := []*emr.BootstrapActionConfig{}
|
||||||
|
|
||||||
|
|
|
@ -29,6 +29,45 @@ func TestAccAWSEMRCluster_basic(t *testing.T) {
|
||||||
})
|
})
|
||||||
}
|
}
|
||||||
|
|
||||||
|
func TestAccAWSEMRCluster_tags(t *testing.T) {
|
||||||
|
var jobFlow emr.RunJobFlowOutput
|
||||||
|
r := acctest.RandInt()
|
||||||
|
resource.Test(t, resource.TestCase{
|
||||||
|
PreCheck: func() { testAccPreCheck(t) },
|
||||||
|
Providers: testAccProviders,
|
||||||
|
CheckDestroy: testAccCheckAWSEmrDestroy,
|
||||||
|
Steps: []resource.TestStep{
|
||||||
|
{
|
||||||
|
Config: testAccAWSEmrClusterConfig(r),
|
||||||
|
Check: resource.ComposeTestCheckFunc(
|
||||||
|
testAccCheckAWSEmrClusterExists("aws_emr_cluster.tf-test-cluster", &jobFlow),
|
||||||
|
resource.TestCheckResourceAttr("aws_emr_cluster.tf-test-cluster", "tags.%", "4"),
|
||||||
|
resource.TestCheckResourceAttr(
|
||||||
|
"aws_emr_cluster.tf-test-cluster", "tags.role", "rolename"),
|
||||||
|
resource.TestCheckResourceAttr(
|
||||||
|
"aws_emr_cluster.tf-test-cluster", "tags.dns_zone", "env_zone"),
|
||||||
|
resource.TestCheckResourceAttr(
|
||||||
|
"aws_emr_cluster.tf-test-cluster", "tags.env", "env"),
|
||||||
|
resource.TestCheckResourceAttr(
|
||||||
|
"aws_emr_cluster.tf-test-cluster", "tags.name", "name-env")),
|
||||||
|
},
|
||||||
|
{
|
||||||
|
Config: testAccAWSEmrClusterConfigUpdatedTags(r),
|
||||||
|
Check: resource.ComposeTestCheckFunc(
|
||||||
|
testAccCheckAWSEmrClusterExists("aws_emr_cluster.tf-test-cluster", &jobFlow),
|
||||||
|
resource.TestCheckResourceAttr("aws_emr_cluster.tf-test-cluster", "tags.%", "3"),
|
||||||
|
resource.TestCheckResourceAttr(
|
||||||
|
"aws_emr_cluster.tf-test-cluster", "tags.dns_zone", "new_zone"),
|
||||||
|
resource.TestCheckResourceAttr(
|
||||||
|
"aws_emr_cluster.tf-test-cluster", "tags.Env", "production"),
|
||||||
|
resource.TestCheckResourceAttr(
|
||||||
|
"aws_emr_cluster.tf-test-cluster", "tags.name", "name-env"),
|
||||||
|
),
|
||||||
|
},
|
||||||
|
},
|
||||||
|
})
|
||||||
|
}
|
||||||
|
|
||||||
func testAccCheckAWSEmrDestroy(s *terraform.State) error {
|
func testAccCheckAWSEmrDestroy(s *terraform.State) error {
|
||||||
conn := testAccProvider.Meta().(*AWSClient).emrconn
|
conn := testAccProvider.Meta().(*AWSClient).emrconn
|
||||||
|
|
||||||
|
@ -121,8 +160,290 @@ resource "aws_emr_cluster" "tf-test-cluster" {
|
||||||
name = "name-env"
|
name = "name-env"
|
||||||
}
|
}
|
||||||
|
|
||||||
keep_job_flow_alive_when_no_steps = true
|
keep_job_flow_alive_when_no_steps = true
|
||||||
termination_protection = false
|
termination_protection = false
|
||||||
|
|
||||||
|
bootstrap_action {
|
||||||
|
path = "s3://elasticmapreduce/bootstrap-actions/run-if"
|
||||||
|
name = "runif"
|
||||||
|
args = ["instance.isMaster=true", "echo running on master node"]
|
||||||
|
}
|
||||||
|
|
||||||
|
configurations = "test-fixtures/emr_configurations.json"
|
||||||
|
|
||||||
|
depends_on = ["aws_main_route_table_association.a"]
|
||||||
|
|
||||||
|
service_role = "${aws_iam_role.iam_emr_default_role.arn}"
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_security_group" "allow_all" {
|
||||||
|
name = "allow_all"
|
||||||
|
description = "Allow all inbound traffic"
|
||||||
|
vpc_id = "${aws_vpc.main.id}"
|
||||||
|
|
||||||
|
ingress {
|
||||||
|
from_port = 0
|
||||||
|
to_port = 0
|
||||||
|
protocol = "-1"
|
||||||
|
cidr_blocks = ["0.0.0.0/0"]
|
||||||
|
}
|
||||||
|
|
||||||
|
egress {
|
||||||
|
from_port = 0
|
||||||
|
to_port = 0
|
||||||
|
protocol = "-1"
|
||||||
|
cidr_blocks = ["0.0.0.0/0"]
|
||||||
|
}
|
||||||
|
|
||||||
|
depends_on = ["aws_subnet.main"]
|
||||||
|
|
||||||
|
lifecycle {
|
||||||
|
ignore_changes = ["ingress", "egress"]
|
||||||
|
}
|
||||||
|
|
||||||
|
tags {
|
||||||
|
name = "emr_test"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_vpc" "main" {
|
||||||
|
cidr_block = "168.31.0.0/16"
|
||||||
|
enable_dns_hostnames = true
|
||||||
|
|
||||||
|
tags {
|
||||||
|
name = "emr_test"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_subnet" "main" {
|
||||||
|
vpc_id = "${aws_vpc.main.id}"
|
||||||
|
cidr_block = "168.31.0.0/20"
|
||||||
|
|
||||||
|
tags {
|
||||||
|
name = "emr_test"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_internet_gateway" "gw" {
|
||||||
|
vpc_id = "${aws_vpc.main.id}"
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_route_table" "r" {
|
||||||
|
vpc_id = "${aws_vpc.main.id}"
|
||||||
|
|
||||||
|
route {
|
||||||
|
cidr_block = "0.0.0.0/0"
|
||||||
|
gateway_id = "${aws_internet_gateway.gw.id}"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_main_route_table_association" "a" {
|
||||||
|
vpc_id = "${aws_vpc.main.id}"
|
||||||
|
route_table_id = "${aws_route_table.r.id}"
|
||||||
|
}
|
||||||
|
|
||||||
|
###
|
||||||
|
|
||||||
|
# IAM things
|
||||||
|
|
||||||
|
###
|
||||||
|
|
||||||
|
# IAM role for EMR Service
|
||||||
|
resource "aws_iam_role" "iam_emr_default_role" {
|
||||||
|
name = "iam_emr_default_role_%d"
|
||||||
|
|
||||||
|
assume_role_policy = <<EOT
|
||||||
|
{
|
||||||
|
"Version": "2008-10-17",
|
||||||
|
"Statement": [
|
||||||
|
{
|
||||||
|
"Sid": "",
|
||||||
|
"Effect": "Allow",
|
||||||
|
"Principal": {
|
||||||
|
"Service": "elasticmapreduce.amazonaws.com"
|
||||||
|
},
|
||||||
|
"Action": "sts:AssumeRole"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
EOT
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_iam_role_policy_attachment" "service-attach" {
|
||||||
|
role = "${aws_iam_role.iam_emr_default_role.id}"
|
||||||
|
policy_arn = "${aws_iam_policy.iam_emr_default_policy.arn}"
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_iam_policy" "iam_emr_default_policy" {
|
||||||
|
name = "iam_emr_default_policy_%d"
|
||||||
|
|
||||||
|
policy = <<EOT
|
||||||
|
{
|
||||||
|
"Version": "2012-10-17",
|
||||||
|
"Statement": [{
|
||||||
|
"Effect": "Allow",
|
||||||
|
"Resource": "*",
|
||||||
|
"Action": [
|
||||||
|
"ec2:AuthorizeSecurityGroupEgress",
|
||||||
|
"ec2:AuthorizeSecurityGroupIngress",
|
||||||
|
"ec2:CancelSpotInstanceRequests",
|
||||||
|
"ec2:CreateNetworkInterface",
|
||||||
|
"ec2:CreateSecurityGroup",
|
||||||
|
"ec2:CreateTags",
|
||||||
|
"ec2:DeleteNetworkInterface",
|
||||||
|
"ec2:DeleteSecurityGroup",
|
||||||
|
"ec2:DeleteTags",
|
||||||
|
"ec2:DescribeAvailabilityZones",
|
||||||
|
"ec2:DescribeAccountAttributes",
|
||||||
|
"ec2:DescribeDhcpOptions",
|
||||||
|
"ec2:DescribeInstanceStatus",
|
||||||
|
"ec2:DescribeInstances",
|
||||||
|
"ec2:DescribeKeyPairs",
|
||||||
|
"ec2:DescribeNetworkAcls",
|
||||||
|
"ec2:DescribeNetworkInterfaces",
|
||||||
|
"ec2:DescribePrefixLists",
|
||||||
|
"ec2:DescribeRouteTables",
|
||||||
|
"ec2:DescribeSecurityGroups",
|
||||||
|
"ec2:DescribeSpotInstanceRequests",
|
||||||
|
"ec2:DescribeSpotPriceHistory",
|
||||||
|
"ec2:DescribeSubnets",
|
||||||
|
"ec2:DescribeVpcAttribute",
|
||||||
|
"ec2:DescribeVpcEndpoints",
|
||||||
|
"ec2:DescribeVpcEndpointServices",
|
||||||
|
"ec2:DescribeVpcs",
|
||||||
|
"ec2:DetachNetworkInterface",
|
||||||
|
"ec2:ModifyImageAttribute",
|
||||||
|
"ec2:ModifyInstanceAttribute",
|
||||||
|
"ec2:RequestSpotInstances",
|
||||||
|
"ec2:RevokeSecurityGroupEgress",
|
||||||
|
"ec2:RunInstances",
|
||||||
|
"ec2:TerminateInstances",
|
||||||
|
"ec2:DeleteVolume",
|
||||||
|
"ec2:DescribeVolumeStatus",
|
||||||
|
"ec2:DescribeVolumes",
|
||||||
|
"ec2:DetachVolume",
|
||||||
|
"iam:GetRole",
|
||||||
|
"iam:GetRolePolicy",
|
||||||
|
"iam:ListInstanceProfiles",
|
||||||
|
"iam:ListRolePolicies",
|
||||||
|
"iam:PassRole",
|
||||||
|
"s3:CreateBucket",
|
||||||
|
"s3:Get*",
|
||||||
|
"s3:List*",
|
||||||
|
"sdb:BatchPutAttributes",
|
||||||
|
"sdb:Select",
|
||||||
|
"sqs:CreateQueue",
|
||||||
|
"sqs:Delete*",
|
||||||
|
"sqs:GetQueue*",
|
||||||
|
"sqs:PurgeQueue",
|
||||||
|
"sqs:ReceiveMessage"
|
||||||
|
]
|
||||||
|
}]
|
||||||
|
}
|
||||||
|
EOT
|
||||||
|
}
|
||||||
|
|
||||||
|
# IAM Role for EC2 Instance Profile
|
||||||
|
resource "aws_iam_role" "iam_emr_profile_role" {
|
||||||
|
name = "iam_emr_profile_role_%d"
|
||||||
|
|
||||||
|
assume_role_policy = <<EOT
|
||||||
|
{
|
||||||
|
"Version": "2008-10-17",
|
||||||
|
"Statement": [
|
||||||
|
{
|
||||||
|
"Sid": "",
|
||||||
|
"Effect": "Allow",
|
||||||
|
"Principal": {
|
||||||
|
"Service": "ec2.amazonaws.com"
|
||||||
|
},
|
||||||
|
"Action": "sts:AssumeRole"
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
EOT
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_iam_instance_profile" "emr_profile" {
|
||||||
|
name = "emr_profile_%d"
|
||||||
|
roles = ["${aws_iam_role.iam_emr_profile_role.name}"]
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_iam_role_policy_attachment" "profile-attach" {
|
||||||
|
role = "${aws_iam_role.iam_emr_profile_role.id}"
|
||||||
|
policy_arn = "${aws_iam_policy.iam_emr_profile_policy.arn}"
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_iam_policy" "iam_emr_profile_policy" {
|
||||||
|
name = "iam_emr_profile_policy_%d"
|
||||||
|
|
||||||
|
policy = <<EOT
|
||||||
|
{
|
||||||
|
"Version": "2012-10-17",
|
||||||
|
"Statement": [{
|
||||||
|
"Effect": "Allow",
|
||||||
|
"Resource": "*",
|
||||||
|
"Action": [
|
||||||
|
"cloudwatch:*",
|
||||||
|
"dynamodb:*",
|
||||||
|
"ec2:Describe*",
|
||||||
|
"elasticmapreduce:Describe*",
|
||||||
|
"elasticmapreduce:ListBootstrapActions",
|
||||||
|
"elasticmapreduce:ListClusters",
|
||||||
|
"elasticmapreduce:ListInstanceGroups",
|
||||||
|
"elasticmapreduce:ListInstances",
|
||||||
|
"elasticmapreduce:ListSteps",
|
||||||
|
"kinesis:CreateStream",
|
||||||
|
"kinesis:DeleteStream",
|
||||||
|
"kinesis:DescribeStream",
|
||||||
|
"kinesis:GetRecords",
|
||||||
|
"kinesis:GetShardIterator",
|
||||||
|
"kinesis:MergeShards",
|
||||||
|
"kinesis:PutRecord",
|
||||||
|
"kinesis:SplitShard",
|
||||||
|
"rds:Describe*",
|
||||||
|
"s3:*",
|
||||||
|
"sdb:*",
|
||||||
|
"sns:*",
|
||||||
|
"sqs:*"
|
||||||
|
]
|
||||||
|
}]
|
||||||
|
}
|
||||||
|
EOT
|
||||||
|
}
|
||||||
|
`, r, r, r, r, r, r)
|
||||||
|
}
|
||||||
|
|
||||||
|
func testAccAWSEmrClusterConfigUpdatedTags(r int) string {
|
||||||
|
return fmt.Sprintf(`
|
||||||
|
provider "aws" {
|
||||||
|
region = "us-west-2"
|
||||||
|
}
|
||||||
|
|
||||||
|
resource "aws_emr_cluster" "tf-test-cluster" {
|
||||||
|
name = "emr-test-%d"
|
||||||
|
release_label = "emr-4.6.0"
|
||||||
|
applications = ["Spark"]
|
||||||
|
|
||||||
|
ec2_attributes {
|
||||||
|
subnet_id = "${aws_subnet.main.id}"
|
||||||
|
emr_managed_master_security_group = "${aws_security_group.allow_all.id}"
|
||||||
|
emr_managed_slave_security_group = "${aws_security_group.allow_all.id}"
|
||||||
|
instance_profile = "${aws_iam_instance_profile.emr_profile.arn}"
|
||||||
|
}
|
||||||
|
|
||||||
|
master_instance_type = "m3.xlarge"
|
||||||
|
core_instance_type = "m3.xlarge"
|
||||||
|
core_instance_count = 1
|
||||||
|
|
||||||
|
tags {
|
||||||
|
dns_zone = "new_zone"
|
||||||
|
Env = "production"
|
||||||
|
name = "name-env"
|
||||||
|
}
|
||||||
|
|
||||||
|
keep_job_flow_alive_when_no_steps = true
|
||||||
|
termination_protection = false
|
||||||
|
|
||||||
bootstrap_action {
|
bootstrap_action {
|
||||||
path = "s3://elasticmapreduce/bootstrap-actions/run-if"
|
path = "s3://elasticmapreduce/bootstrap-actions/run-if"
|
||||||
|
|
Loading…
Reference in New Issue