-
-
Notifications
You must be signed in to change notification settings - Fork 23
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(remote-state): enable assume_role block in backend configuration to fix deprecation warning #93
Conversation
… to fix deprecation warning
With Terraform 1.6.0, the configuration block for the S3 backend changed. role_arn = <role to assume> changed to: assume_role = {
role_arn = <role to assume>
} (other things, moved, too.) The PR probably won't actually work. The proper fix breaks Terraform 1.5.7 and MPL licensed terraform (e.g. OpenTofu)
Confirm it works with
|
To be clear, we want to fix this - we just don't know how to given the incompatibilities between MPL licensed terraform and BSL licensed terraform (>= 1.6.x). |
Important Cloud Posse Engineering Team Review RequiredThis pull request modifies files that require Cloud Posse's review. Please be patient, and a core maintainer will review your changes. To expedite this process, reach out to us on Slack in the |
This might make this easier:
|
@kevcube I'm sorry if the labels seem harsh; they do not allow for a lot of nuance. All I mean by them is that this is not the way to fix the problem, and we are not going to go down this path. I am going to close this PR so it does not get merged. If you want to open an issue about the deprecation warning, that would be fine, and we will address it in the near (but not immediate) future. |
This feature is making it's way into OpenTofu 1.8 (I hope!) |
The issue would still be present for Terraform users though |
Fixed by #105 released in v1.8.0 |
what
Solves a deprecation warning for using
role_arn
parameter instead ofassume_role
configuration block.Doesn't use the complicated negation-of-try-contains ternary logic.. but it seems to work whether the value is present or not, being backwards compatible and not erroring if people don't have assume_role blocks in their configuration. Please test because you guys are more familiar with the usage of this module than I am.
why
I was receiving this deprecation warning and wanted to silence it.
references
https://developer.hashicorp.com/terraform/language/settings/backends/s3#role_arn-1