1ed81da9a9
update ENI test for SG egress constraint
2015-05-05 16:23:26 -05:00
85b1756c27
revise tests and check for vpc_id
2015-05-05 16:23:26 -05:00
8ded3c2d1b
Move block for deleing default rule into the create method; only invoke once
2015-05-05 16:23:26 -05:00
ee65684abe
Add spec for removing default egress rule
2015-05-05 16:23:26 -05:00
b145ce88b7
Document Egress+VPC change, update link
2015-05-05 16:23:26 -05:00
1558fd1c3e
provider/aws: Remove default egress rule from Security Group on creation
2015-05-05 16:23:25 -05:00
412a2dca0b
Merge pull request #1575 from freshbooks/aws-eni-route
...
provider/aws: Add Elastic Network Interfaces as route destination
2015-05-05 13:28:48 -07:00
1c2d5fbd0a
Merge branch 'f-aws-associate-eip-to-eni' of https://github.com/jstremick/terraform into jstremick-f-aws-associate-eip-to-eni
2015-05-05 13:24:50 -07:00
18b43b78cb
Merge pull request #939 from bitglue/iam
...
Implement a subset of IAM resources
2015-05-05 15:05:05 -05:00
7b082d007e
Merge commit '33183c0'
...
* commit '33183c0':
Implement a hash function for string sets
2015-05-05 15:01:02 -05:00
7a5499d4f7
providers/aws: chain credentials
2015-05-05 10:44:19 -07:00
6ee17a8e9e
Add acceptance tests
2015-05-05 12:47:20 -04:00
b082117e92
Implement AWS IAM resources
...
- Users
- Groups
- Roles
- Inline policies for the above three
- Instance profiles
- Managed policies
- Access keys
This is most of the data types provided by IAM. There are a few things
missing, but the functionality here is probably sufficient for 95% of
the cases. Makes a dent in #28 .
2015-05-05 12:47:20 -04:00
33183c078b
Implement a hash function for string sets
...
Sets of strings are pretty common. Let's not duplicate the function
necessary to create a set of strings in so many places.
2015-05-05 12:47:18 -04:00
272415303d
provider/aws: Shorting retry timeout for Subnets to 2 minutes, from 5
2015-05-05 11:20:29 -05:00
3ce3b7c516
provider/aws: Shorting retry timeout for Security Groups to 2 minutes, from 5
2015-05-05 11:07:16 -05:00
4b160dd28e
minor cleanups
2015-05-05 10:45:30 -05:00
c50bcf2930
renaming function according to the aws struct
2015-05-05 10:39:25 -05:00
e9215c0676
move accept block to the update func
2015-05-05 10:38:20 -05:00
5658fd6122
clean code
2015-05-05 10:37:13 -05:00
11ba9b1042
add the auto_accecpt option
2015-05-05 10:37:13 -05:00
7274de3c1d
Small fix needed to be inline with the updated AWS SDK again...
...
Executed a couple of AWS ACC test as well to make sure everything works
properly again after this fix…
2015-05-05 12:26:26 +02:00
69e981c0b0
aws: Fixup structure_test to handle new expandIPPerms behavior.
2015-05-04 23:56:54 -04:00
362a6124e3
aws: Add security group acceptance tests for protocol -1 fixes.
...
These only test ingress rules as egress rules are broken by the
default "0.0.0.0/0" rule Amazon includes with every egressed security
group.
2015-05-04 23:55:32 -04:00
89bacc0b15
aws: error on expndIPPerms(...) if our ports and protocol conflict.
...
Ingress and egress rules given a "-1" protocol don't have ports when
Read out of AWS. This results in hashing problems, as a local
config file might contain port declarations AWS can't ever return.
Rather than making ports optional fields, which carries with it a huge
headache trying to distinguish between zero-value attributes (e.g.
'to_port = 0') and attributes that are simply omitted, simply force the
user to opt-in when using the "-1" protocol. If they choose to use it,
they must now specify "0" for both to_port and from_port. Any other
configuration will error.
2015-05-04 23:43:31 -04:00
81422123e8
provider/aws: Add a regression check for Route 53 records
2015-05-04 17:05:49 -05:00
9ed909c8fe
Merge pull request #1749 from nabeken/aws-proxy-protocol-policy
...
provider/aws: Add proxy protocol support in ELB
2015-05-04 14:04:53 -07:00
8633c88723
Merge pull request #1775 from TimeIncOSS/r53-alias-record
...
aws: Add support for Alias records into AWS Route 53
2015-05-04 14:03:29 -07:00
c8c0b02790
Merge pull request #1787 from koendc/f-aws-max-retries
...
aws: make MaxRetries for API calls configurable
2015-05-04 14:00:37 -07:00
2c90d3a637
Merge pull request #1793 from ctiwald/ct/add-vpn-connection-route
...
provider/aws: add support for VPN connection routes
2015-05-04 13:58:17 -07:00
9617761eb4
Merge pull request #1776 from TimeIncOSS/eip-without-igw
...
[bugfix] aws/eip: Don't save instance ID if association fails
2015-05-04 11:19:32 -07:00
cf6fa89f46
Merge pull request #1785 from koendc/f-aws-security-token
...
aws: re-introduce support for AWS_SECURITY_TOKEN
2015-05-04 11:18:28 -07:00
2c21f248ad
aws: Add acceptance tests for VPN connection routes.
2015-05-04 12:55:55 -04:00
e7f8883929
aws: Add support for VPN connection routes.
2015-05-04 12:20:42 -04:00
4727260987
aws: fix VPN connection acceptance test.
...
This corrects syntactical errors and uses distinct IP addresses for
each configuration.
2015-05-04 11:34:35 -04:00
47305c9c5d
aws: Fix customer gateway acceptance test.
...
This test contained a few syntactical errors.
2015-05-04 11:34:35 -04:00
f31466a60e
aws: Fix app cookie stickiness policy acceptance test.
...
This used the wrong AZ and contained a few syntactical errors in
configuration.
2015-05-04 11:34:35 -04:00
14ea3a33a4
aws: Fix LB cookie stickiness policy acceptance test.
...
This needs to run in us-west-2 and contained a few syntactical errors
that prevented it from working.
2015-05-04 11:34:34 -04:00
398c22adcd
aws: make MaxRetries for API calls configurable
...
- Make it configurable in the AWS provider by add an option
'max_retries'.
- Set the default from 3 to 11 retries.
2015-05-03 15:35:51 +02:00
c8f32a2711
aws: re-introduce support for AWS_SECURITY_TOKEN
2015-05-03 10:26:58 +02:00
fb37b3515d
Merge pull request #1712 from hashicorp/f-rename-elasticache-cluster
...
providers/aws: add _cluster to aws_elasticache
2015-05-01 20:07:19 -05:00
795d53e706
[bugfix] Don't save instance ID if association fails
...
- typically happens when no internet GW is available in VPC
2015-05-01 23:55:08 +01:00
3d665ddfcf
provider/aws: Add support for alias record to Route53
2015-05-01 22:43:04 +01:00
f255fd8c42
aws: Add acceptance tests for aws_vpn_connection resources.
2015-05-01 12:23:16 -04:00
814403f45c
aws: Add support for AWS VPN connections
2015-05-01 12:23:08 -04:00
bafabf17be
provider/aws: Expose zone_id from elb
2015-05-01 08:07:33 +01:00
338ae601bc
providers/aws: Implements DHCP Options Set support.
2015-04-30 17:52:04 -04:00
15b9bde1fe
providers/aws: add _cluster to aws_elasticache
...
This AWS calls the actual resources "Cache Clusters" so it seems like
this name makes more sense.
Verified all Elasticache acc tests pass.
2015-04-30 16:12:08 -05:00
a9de720a4e
Merge pull request #1708 from hashicorp/f-elb-source-security-group
...
providers/aws: add source_security_group to elb
2015-04-30 16:10:02 -05:00
76e897fedb
Merge pull request #1753 from hashicorp/f-aws-db-subnet-name
...
provider/aws: Fix refresh/plan issue with DB Param. Group name
2015-04-30 13:42:06 -05:00
b99611fa44
provider/aws: allow key_pair name to be generated
...
As a module author, I'd like to be able to create a module that includes
a key_pair. I don't care about the name, I only know I don't want it to
collide with anything else in the account.
This allows my module to be used multiple times in the same account
without having to do anything funky like adding a user-specified unique
name parameter.
2015-04-30 10:33:14 -05:00
c006af9efe
provider/aws: Fix refresh/plan issue with DB Param. Group name
...
Check against AWS with lowercase, but store in state unmodified.
2015-04-30 09:25:50 -05:00
53a7da379c
provider/aws: Add acceptance tests for aws_proxy_protocol_policy
2015-04-30 17:56:46 +09:00
9df2bf68cb
providers/aws: use isLoadBalancerNotFound
2015-04-30 17:56:46 +09:00
5c1dabdb69
provider/aws: Add ProxyProtocol support via aws_proxy_protocol_policy
2015-04-30 17:56:46 +09:00
eb03f08454
aws: Add acceptance test for aws_customer_gateway.
2015-04-29 21:32:59 -04:00
2794a1c5ab
aws: Add support for aws_customer_gateway
2015-04-29 21:32:51 -04:00
daeaba5cd4
Merge pull request #1618 from hashicorp/b-aws-fix-vpc-security-id-update
...
provider/aws: Fix issue with updating VPC Security Group IDs for an Instance
2015-04-29 10:39:14 -05:00
950bd92837
Merge pull request #1633 from Banno/route53-zone-back-to-list
...
changing route53_zone.name_servers back to list
2015-04-29 10:38:59 -05:00
036d199dd6
provider/aws: Fix issue with updating VPC Security Group IDs for an Instance
...
Currently, we weren't correctly setting the ids, and are setting both
`security_groups` and `vpc_security_group_ids`. As a result, we really only use
the former.
We also don't actually update the latter in the `update` method.
This PR fixes both issues, correctly reading `security_groups` vs.
`vpc_security_group_ids` and allows users to update the latter without
destroying the Instance when in a VPC.
2015-04-29 10:03:57 -05:00
e586d05a7d
Remove some unecessary debug output I added
2015-04-29 10:21:28 -04:00
244639cf3d
Remove some domain checking duplication
2015-04-29 10:21:28 -04:00
b29e9d3b6f
Allow assocation of EIP to ENI
2015-04-29 10:21:08 -04:00
d66012969a
Merge pull request #1658 from bitglue/ebs
...
provider/aws: Implement aws_ebs_volume
2015-04-28 20:37:26 -07:00
77f6945ae7
Merge pull request #1662 from jgjay/elb-sgs-update
...
provider/aws: update elb security groups in-place
2015-04-28 20:30:00 -07:00
b45cd2830f
Merge pull request #1682 from mzupan/master
...
provider/aws: Don't re-do a ASG on a grace healthcheck grace period change
2015-04-28 20:26:00 -07:00
d354cae524
Merge pull request #1685 from ctiwald/master
...
provider/aws: Implement support for various AWS ELB cookie stickiness policies
2015-04-28 20:24:11 -07:00
57af67b314
Merge pull request #1718 from ravenac95/encrypted-ebs-volume-fix
...
provider/aws: Fix connecting encrypted ebs volumes to aws_instances
2015-04-28 20:21:12 -07:00
e8e42decc9
Added docs about m3.medium to tests
2015-04-28 15:19:31 -07:00
25ab54b4e3
Added tests to check for encrypted flag
2015-04-28 15:07:23 -07:00
4ef6d468e9
Actually sends ebs encrypted flag
2015-04-28 10:54:30 -07:00
dcebff7108
Implement aws_ebs_volume
...
This resource allows the management of EBS volumes not associated with
any EC2 instance.
2015-04-28 12:54:02 -04:00
fc26f7a119
Merge pull request #1331 from tmtk75/dev/aws_ecache
...
provider/aws: resource ElastiCache
2015-04-28 10:00:25 -05:00
e4e6ac5d91
providers/aws: add source_security_group to elb
2015-04-28 09:40:19 -05:00
c748ce9c9e
Merge pull request #1695 from aznashwan/commfix
...
Fixed/added docstrings in aws provider package.
2015-04-28 08:51:20 -05:00
120cfdce59
provider/aws: fix EIPs on new upstream sdk
...
As we've seen elsewhere, the SDK now wants nils instead of empty arrays
for collections
fixes #1696
thanks @jstremick for pointing me in the right direction
2015-04-27 19:55:26 -05:00
d64dd99d4d
Fixed/added docstrings in aws provider package.
2015-04-27 21:06:49 +03:00
99ce8cf25e
aws: Add acceptance test of aws_app_cookie_stickiness_policy.
2015-04-26 18:56:56 -04:00
0533d60195
aws: Add support for aws_app_cookie_stickiness_policy.
...
This resource represents a session stickiness policy in AWS, and can be
applied to an ELB's client-facing listeners.
2015-04-26 18:56:07 -04:00
448fb4895f
aws: Add acceptance test of aws_lb_cookie_stickiness_policy.
2015-04-26 18:05:40 -04:00
0120899f2a
aws: Add support for aws_lb_cookie_stickiness_policy.
...
This resource represents a session stickiness policy in AWS, and can be
applied to an ELB's client-facing listeners.
2015-04-26 18:05:37 -04:00
0177be2a66
need to update aws with the change if there is one
2015-04-25 20:00:04 -07:00
9fe6317348
don't need to create a new ASG for this change
...
Tested
```
aws_autoscaling_group.rabbit: Modifying...
health_check_grace_period: "200" => "3000"
aws_autoscaling_group.rabbit: Modifications complete
```
2015-04-25 19:50:33 -07:00
f3d9a287e1
support aws resource ElastiCache
2015-04-26 10:53:21 +09:00
37c693e8ce
Merge pull request #1672 from PeopleNet/vpc_peering_tags
...
Fix for #1664 . Apply AWS VPC Peering Conn. tags on create.
2015-04-25 09:37:28 -05:00
c2fa397ec8
Fix for #1664 . Apply AWS VPC Peering Conn. tags on create.
2015-04-24 16:12:20 -05:00
fe62312617
Fix comment typos.
2015-04-24 10:25:19 -07:00
c986c65238
update security groups in-place
2015-04-23 20:57:37 +01:00
769f456028
aws: add propagating_vgws to route tables
2015-04-23 15:03:45 +00:00
fe2d9ea3cc
sorting the name_server entries
2015-04-23 08:48:19 -05:00
10b73f95ae
Merge pull request #1635 from hashicorp/b-net-acls-blank-id
...
providers/aws: network_acl, remove blank filter
2015-04-23 07:32:04 -05:00
69ef012dfc
Merge pull request #1632 from hashicorp/f-generate-sg-names
...
unique identifier helper for resources / generate AWS security group names
2015-04-23 07:25:23 -05:00
6bb8947d16
providers/aws: aws_elb incr. idle_timeout to 60s
...
per docs
http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/config-idle-timeout.html
2015-04-23 12:46:52 +03:00
6401635b97
providers/aws: network_acl, remove blank filter
...
The upstream behavior here changed, and the request needs a `nil`
instead of an empty slice to indicate that we _don't_ want to filter on
Network ACL IDs.
fixes #1634
2015-04-22 14:44:31 -05:00
6b5138328f
changing route53_zone.name_servers back to list
2015-04-22 13:27:20 -05:00
079856620a
provider/aws: set default SG description
...
because requiring a SG description is annoying
2015-04-22 13:27:20 -05:00
33de319293
provider/aws: allow SG names to be generated
2015-04-22 12:56:06 -05:00
94f703692c
provider/aws: switch to helper for LC names
2015-04-22 12:53:47 -05:00
c1464b1c6d
Merge pull request #1623 from hashicorp/b-private-ip-ssh
...
providers/aws: if no public IP, use private IP for SSH by default
2015-04-22 16:02:04 +02:00
341b2ff864
Merge pull request #1625 from hashicorp/b-panic-network-acl
...
provider/aws: fix potential panic when finding network ACL
2015-04-22 16:01:57 +02:00
f77f77f9f8
provider/aws: fix potential panic when finding network ACL
2015-04-22 12:39:01 +02:00
19b3fa1a76
provider/aws: allow int for network acl entry [GH-1435]
2015-04-22 12:35:23 +02:00
ec38a65dda
providers/aws: if no public IP, use private IP for SSH by default
2015-04-22 12:25:28 +02:00
8ca42f832e
Merge pull request #1525 from Banno/route53-zone-nameservers
...
providers/aws: Expose Route53 zone nameservers for parent zone NS record
2015-04-22 12:10:27 +02:00
11e6e89f73
provider/aws: make tests public and run them
2015-04-22 08:44:24 +02:00
78f9fb164b
provider/aws: fix compilation errors
2015-04-22 08:42:44 +02:00
887f1b3d12
Merge branch 'elb-connection-settings' of https://github.com/jwaldrip/terraform into jwaldrip-elb-connection-settings
2015-04-22 08:38:19 +02:00
70a0579a12
Merge pull request #1578 from TimeIncOSS/route53-weighted-records
...
provider/aws: Add support for weighted Route53 records
2015-04-22 08:33:28 +02:00
2cecd586c2
Merge pull request #1619 from jgjay/elb-listener-update
...
provider/aws: handle changes to elb listeners after creation
2015-04-22 08:24:36 +02:00
b755459ee3
Merge pull request #1358 from rzh/placement_group
...
provider/aws: support for AWS Placement Group
2015-04-22 08:20:43 +02:00
2996a25ce0
Merge pull request #1597 from aocsolutions/fix_sg_refresh
...
provider/aws: more careful with pointers
2015-04-22 08:12:43 +02:00
3176e5b44a
Merge pull request #1595 from TimeIncOSS/aws-account-protection
...
aws: Allow defining blacklist/whitelist of account IDs
2015-04-22 08:08:01 +02:00
81079bb6ac
handle addition/update/removal of listeners after creation
2015-04-21 23:17:17 +01:00
0c5011bea4
provider/aws: Fix issue with empty IPRanges
2015-04-21 10:57:50 -05:00
c8a8f05935
Merge pull request #1601 from bitglue/sts_token
...
provider/aws: support session token in AWS credentials
2015-04-20 15:01:29 -07:00
21b0a03d70
Support for multiple providers of the same type
...
Adds an "alias" field to the provider which allows creating multiple instances
of a provider under different names. This provides support for configurations
such as multiple AWS providers for different regions. In each resource, the
provider can be set with the "provider" field.
(thanks to Cisco Cloud for their support)
2015-04-20 14:14:34 -07:00
d4c8c528e0
Support session token in AWS credentials
...
Session tokens are necessary to utilize temporary credentials.
http://docs.aws.amazon.com/STS/latest/UsingSTS/Welcome.html
2015-04-20 15:09:04 -04:00
6da242de03
fixing sg refresh
2015-04-20 11:27:58 -04:00
150fd00932
AWS account ID protection added
2015-04-20 12:07:39 +01:00
1c0f2f136c
provider/aws: fix vet error, missing fmt param
2015-04-19 18:13:04 -07:00
dda4ae6d12
Merge pull request #1555 from fatih/fix-eip-panic
...
providers/aws: check allocationId only if it's vpc, fixes #1345
2015-04-19 18:10:31 -07:00
283a3af693
Merge pull request #1576 from bitglue/s3_refresh
...
provider/aws: refresh state for deleted s3 bucket correctly
2015-04-18 16:40:12 -07:00
009514f0d3
Allow using deprecated security_groups in NI spec
2015-04-17 21:26:17 +01:00
eda987dcfb
provider/aws: Fix issue when creating ELB with no tags
2015-04-17 14:00:27 -05:00
555f9dfab3
aws: Support for weighted Route53 records added
...
- closes #1155
2015-04-17 18:53:36 +01:00
47e1ec85f1
Refresh state for deleted s3 bucket correctly
...
If reading an S3 bucket's state, and that bucket has been deleted, don't
fail with a 404 error. Instead, update the state to reflect that the
bucket does not exist. Fixes #1574 .
2015-04-17 13:30:31 -04:00
e1ac4b9f90
Add Elastic Network Interfaces as route destination
...
Fixes #938
2015-04-17 13:22:31 -04:00
c3f9c12426
Merge remote-tracking branch 'refs/remotes/origin/master' into route53-zone-nameservers
2015-04-17 10:11:53 -05:00
d27a41746c
clean up tags sdk lib
2015-04-16 15:31:40 -05:00
3e6822ce08
more cleans ups of SDK reference
2015-04-16 15:28:18 -05:00
79fc8223bb
consolidate structure.go
2015-04-16 15:18:01 -05:00
ba43b7c963
mass search-replace of ec2SDKconn
2015-04-16 15:05:55 -05:00
331f6705b8
providers/aws: cleanup of connections, upgrades network acl test
2015-04-16 15:02:04 -05:00
c59bfd0ca5
Merge branch 'f-aws-upstream-s3'
...
* f-aws-upstream-s3:
provider/aws: Conver AWS S3 to upstream sdk
2015-04-16 13:51:12 -05:00
1da9bc8f4c
fix go formatting after rebase
2015-04-16 13:42:16 -05:00
1545dbb803
provider/aws: Convert Route 53 Zone, Record to upstream
2015-04-16 13:41:38 -05:00
a5b2437dcf
provider/aws: Convert Instance to use upstream library
2015-04-16 12:01:10 -05:00
86810789c2
providers/aws: check allocationId only if it's vpc, fixes #1345
...
EIP with VPC only returns an allocationID. However, for standard we need
to lookup for PublicIP. When we use an example for standard EC2 instance
(here `t1.micro`):
```
resource "aws_instance" "example" {
ami = "ami-25773a24"
instance_type = "t1.micro"
}
resource "aws_eip" "ip" {
instance = "${aws_instance.example.id}"
}
```
then in this case, allocationID will be nil, but publicIP will be non
nil (which is used later for association the IP). So check for
allocationId only if it's of domain `VPC`.
2015-04-16 16:08:52 +03:00
7a99dd48b2
provider/aws: Convert Launch Configuration over to upstream
...
- removes extra ASG connection
2015-04-16 07:10:17 -05:00
f8b05fa05e
using a set for route53 name_servers
2015-04-15 16:10:02 -05:00
46d3ab5ccd
rename delegation_set_name_servers to name_servers
2015-04-15 16:07:50 -05:00
210b380d01
go vet updates
2015-04-15 15:32:20 -05:00
723be13f96
go fmt asg things
2015-04-15 15:30:35 -05:00
1f7d0944f1
provider/aws: Convert AWS ASG to upstream aws-sdk-go
2015-04-15 15:29:59 -05:00
e97fd27b14
Merge pull request #1539 from hashicorp/f-aws-instance-vpc-sec-ids
...
provider/aws: Add support for separate VPC Security Group IDs attribute
2015-04-15 15:25:03 -05:00
1ed2219493
don't capitalize IAM
2015-04-15 15:05:44 -05:00
df45b2cda8
go fmt db things
2015-04-15 15:02:52 -05:00
470379e7ed
connection naming cleanups
2015-04-15 14:36:08 -05:00
9187cab6ac
provider/aws: Convert remaining RDS resources to use upstream library
2015-04-15 14:31:53 -05:00
d579b4b75c
provider/aws: Convert AWS RDS to use upstream aws-sdk-go
2015-04-15 14:28:02 -05:00
Clint Shryock