ResiLien
/
terraform
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

provider/aws: Don't fail if login profile exists 

If an IAM user already has a login profile, we bring it under management
- we will NOT modify it - but we cannot set the password.
This commit is contained in:
James Nugent 2016-10-25 13:04:55 -05:00
parent dba3ec2f5d
commit e5fb6c9b23
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
builtin/providers/aws/resource_aws_iam_user_login_profile.go
View File

@ -10,6 +10,7 @@ import (
"time" "time"
"github.com/aws/aws-sdk-go/aws" "github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/awserr"
"github.com/aws/aws-sdk-go/service/iam" "github.com/aws/aws-sdk-go/service/iam"
"github.com/hashicorp/errwrap" "github.com/hashicorp/errwrap"
"github.com/hashicorp/terraform/helper/schema" "github.com/hashicorp/terraform/helper/schema"
@ -79,7 +80,7 @@ func generatePassword(length int) string {
} }
// Use all character sets // Use all character sets
random := rand.New(rand.Source(time.Now().UTC().UnixNano())) random := rand.New(rand.NewSource(time.Now().UTC().UnixNano()))
components := make(map[int]byte, length) components := make(map[int]byte, length)
for i := 0; i < length; i++ { for i := 0; i < length; i++ {
charset := charsets[i%len(charsets)] charset := charsets[i%len(charsets)]
@ -147,6 +148,13 @@ func resourceAwsIamUserLoginProfileCreate(d *schema.ResourceData, meta interface
log.Println("[DEBUG] Create IAM User Login Profile request:", request) log.Println("[DEBUG] Create IAM User Login Profile request:", request)
createResp, err := iamconn.CreateLoginProfile(request) createResp, err := iamconn.CreateLoginProfile(request)
if err != nil { if err != nil {
if awsErr, ok := err.(awserr.Error); ok && awsErr.Code() == "EntityAlreadyExists" {
// If there is already a login profile, bring it under management (to prevent
// resource creation diffs) - we will never modify it, but obviously cannot
// set the password.
d.SetId(*createResp.LoginProfile.UserName)
return nil
}
return errwrap.Wrapf(fmt.Sprintf("Error creating IAM User Login Profile for %q: {{err}}", username), err) return errwrap.Wrapf(fmt.Sprintf("Error creating IAM User Login Profile for %q: {{err}}", username), err)
} }