Skip to content

Instantly share code, notes, and snippets.

@ShubhamTatvamasi

ShubhamTatvamasi/orc8r-upgrade-logs-1.7

Created March 21, 2022 18:01
Show Gist options
  • Save ShubhamTatvamasi/7ad6339f38be0a374c87f298f18de483 to your computer and use it in GitHub Desktop.
Save ShubhamTatvamasi/7ad6339f38be0a374c87f298f18de483 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
orc8r-upgrade-logs-1.7
➜ magma-orc8r-upgrade-1-6-1-to-1-7 git:(master) ✗ terraform apply
module.orc8r.tls_private_key.eks_workers[0]: Refreshing state... [id=98bbe2230d4afc90c9adc16653f46548960edca7]
module.orc8r.aws_key_pair.eks_workers[0]: Refreshing state... [id=orc8r20220317054753858300000004]
module.orc8r.aws_efs_file_system.eks_pv: Refreshing state... [id=fs-0a275f26189fc1af8]
module.orc8r.module.eks.aws_cloudwatch_log_group.this[0]: Refreshing state... [id=/aws/eks/orc8r/cluster]
module.orc8r.aws_route53_zone.orc8r: Refreshing state... [id=Z0502929HEP8T9VBT5R4]
module.orc8r.aws_secretsmanager_secret.orc8r_secrets: Refreshing state... [id=arn:aws:secretsmanager:us-east-2:372544488264:secret:orc8r-secrets-TrWl56]
module.orc8r.aws_sns_topic.sns_orc8r_topic: Refreshing state... [id=arn:aws:sns:us-east-2:372544488264:orc8r-sns]
module.orc8r.module.vpc.aws_vpc.this[0]: Refreshing state... [id=vpc-065a58d2d2535754b]
module.orc8r.module.eks.aws_iam_policy.cluster_elb_sl_role_creation[0]: Refreshing state... [id=arn:aws:iam::372544488264:policy/orc8r-elb-sl-role-creation20220317054753857600000002]
module.orc8r.module.eks.aws_iam_role.cluster[0]: Refreshing state... [id=orc8r20220317054753859800000005]
module.orc8r.module.vpc.aws_eip.nat[0]: Refreshing state... [id=eipalloc-0036f77c933726b0b]
module.orc8r-app.null_resource.orc8r_seed_secrets: Refreshing state... [id=2829001675271879654]
module.orc8r.aws_sns_topic_subscription.sns_orc8r_db_subscription_email[0]: Refreshing state... [id=arn:aws:sns:us-east-2:372544488264:orc8r-sns:33e271d2-956c-49b8-860d-f1a138ee8ad4]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_AmazonEKSClusterPolicy[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756623100000007]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_AmazonEKSVPCResourceControllerPolicy[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756910400000008]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_elb_sl_role_creation[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756929500000009]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_AmazonEKSServicePolicy[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756620200000006]
module.orc8r.aws_security_group.default: Refreshing state... [id=sg-0227209a21afb946f]
module.orc8r.module.vpc.aws_subnet.public[0]: Refreshing state... [id=subnet-008c9b585df5f50f6]
module.orc8r.module.vpc.aws_subnet.public[2]: Refreshing state... [id=subnet-0cbd8fe69500dae85]
module.orc8r.module.vpc.aws_subnet.public[1]: Refreshing state... [id=subnet-0e2d992cd27f3d47e]
module.orc8r.module.eks.aws_security_group.workers[0]: Refreshing state... [id=sg-0edf50acea3e1b60b]
module.orc8r.module.vpc.aws_route_table.private[0]: Refreshing state... [id=rtb-0ed9e9c56cc10a1ce]
module.orc8r.module.eks.aws_security_group.cluster[0]: Refreshing state... [id=sg-06064b58ecc6a5362]
module.orc8r.module.vpc.aws_subnet.database[2]: Refreshing state... [id=subnet-041ffffa4abc38e40]
module.orc8r.module.vpc.aws_subnet.database[0]: Refreshing state... [id=subnet-0ab7663d1d3d46214]
module.orc8r.module.vpc.aws_subnet.database[1]: Refreshing state... [id=subnet-01f6d7decee50813b]
module.orc8r.module.vpc.aws_route_table.public[0]: Refreshing state... [id=rtb-002a6e16714265538]
module.orc8r.module.vpc.aws_subnet.private[1]: Refreshing state... [id=subnet-0014b39245dae6027]
module.orc8r.module.vpc.aws_subnet.private[0]: Refreshing state... [id=subnet-03d3e77c91bde6855]
module.orc8r.module.vpc.aws_subnet.private[2]: Refreshing state... [id=subnet-081e2be094670c4cb]
module.orc8r.module.vpc.aws_internet_gateway.this[0]: Refreshing state... [id=igw-0aa20f300098e9397]
module.orc8r.module.eks.aws_security_group_rule.workers_ingress_self[0]: Refreshing state... [id=sgrule-1326722891]
module.orc8r.module.eks.aws_security_group_rule.workers_egress_internet[0]: Refreshing state... [id=sgrule-1294554263]
module.orc8r.module.eks.aws_security_group_rule.workers_ingress_cluster[0]: Refreshing state... [id=sgrule-2590785544]
module.orc8r.module.eks.aws_security_group_rule.workers_ingress_cluster_https[0]: Refreshing state... [id=sgrule-3103687898]
module.orc8r.module.eks.aws_security_group_rule.cluster_egress_internet[0]: Refreshing state... [id=sgrule-1612402237]
module.orc8r.module.eks.aws_security_group_rule.cluster_https_worker_ingress[0]: Refreshing state... [id=sgrule-702224055]
module.orc8r.module.vpc.aws_route_table_association.database[0]: Refreshing state... [id=rtbassoc-0f02320d384945b91]
module.orc8r.module.vpc.aws_route_table_association.database[1]: Refreshing state... [id=rtbassoc-06402291bedb7c5a2]
module.orc8r.module.vpc.aws_route_table_association.database[2]: Refreshing state... [id=rtbassoc-09b7e800492a7acc1]
module.orc8r.module.vpc.aws_db_subnet_group.database[0]: Refreshing state... [id=orc8r]
module.orc8r.module.vpc.aws_route_table_association.public[2]: Refreshing state... [id=rtbassoc-0a5b3e1cfaf3766de]
module.orc8r.module.vpc.aws_route_table_association.public[0]: Refreshing state... [id=rtbassoc-07e8315da562d6616]
module.orc8r.module.vpc.aws_route_table_association.public[1]: Refreshing state... [id=rtbassoc-050f7c21c57e1125d]
module.orc8r.module.vpc.aws_route_table_association.private[1]: Refreshing state... [id=rtbassoc-0b5e0610ee55512ae]
module.orc8r.module.vpc.aws_route_table_association.private[0]: Refreshing state... [id=rtbassoc-0fc071dc149e8b32f]
module.orc8r.module.vpc.aws_route_table_association.private[2]: Refreshing state... [id=rtbassoc-094783978c5f5c491]
module.orc8r.module.vpc.aws_nat_gateway.this[0]: Refreshing state... [id=nat-0c89fa7ff139e58b7]
module.orc8r.module.vpc.aws_route.public_internet_gateway[0]: Refreshing state... [id=r-rtb-002a6e167142655381080289494]
module.orc8r.aws_efs_mount_target.eks_pv_mnt[0]: Refreshing state... [id=fsmt-02dc8572a8f3a73d3]
module.orc8r.aws_efs_mount_target.eks_pv_mnt[2]: Refreshing state... [id=fsmt-0337f1413b48cf23a]
module.orc8r.aws_efs_mount_target.eks_pv_mnt[1]: Refreshing state... [id=fsmt-0857e4fc9cd933bc5]
module.orc8r.aws_elasticsearch_domain.es[0]: Refreshing state... [id=arn:aws:es:us-east-2:372544488264:domain/orc8r-es]
module.orc8r.module.eks.aws_eks_cluster.this[0]: Refreshing state... [id=orc8r]
module.orc8r.module.vpc.aws_route.private_nat_gateway[0]: Refreshing state... [id=r-rtb-0ed9e9c56cc10a1ce1080289494]
module.orc8r.aws_db_instance.default: Refreshing state... [id=orc8rdb]
module.orc8r.module.eks.aws_iam_openid_connect_provider.oidc_provider[0]: Refreshing state... [id=arn:aws:iam::372544488264:oidc-provider/oidc.eks.us-east-2.amazonaws.com/id/13499E838B1BF67EA8CAF871780EC123]
module.orc8r.module.eks.aws_iam_role.workers[0]: Refreshing state... [id=orc8r20220317061249398800000001]
module.orc8r.module.eks.local_file.kubeconfig[0]: Refreshing state... [id=6581c90b8ce3623a0da006f8cb8ea5a82bd76283]
module.orc8r.aws_db_event_subscription.default: Refreshing state... [id=orc8r-rds-events]
module.orc8r.aws_elasticsearch_domain_policy.es_management_access[0]: Refreshing state... [id=esd-policy-orc8r-es]
module.orc8r.module.eks.aws_iam_role_policy_attachment.workers_AmazonEKS_CNI_Policy[0]: Refreshing state... [id=orc8r20220317061249398800000001-20220317061252271100000005]
module.orc8r.module.eks.aws_iam_role_policy_attachment.workers_AmazonEKSWorkerNodePolicy[0]: Refreshing state... [id=orc8r20220317061249398800000001-20220317061252578400000006]
module.orc8r.module.eks.aws_iam_role_policy_attachment.workers_AmazonEC2ContainerRegistryReadOnly[0]: Refreshing state... [id=orc8r20220317061249398800000001-20220317061252885100000007]
module.orc8r.module.eks.aws_iam_instance_profile.workers[0]: Refreshing state... [id=orc8r20220317061251966600000002]
module.orc8r.aws_iam_role.efs_provisioner: Refreshing state... [id=EFSProvisionerRole20220317061252017600000004]
module.orc8r.aws_iam_role.external_dns: Refreshing state... [id=ExternalDNSRole20220317061252017600000003]
module.orc8r.module.eks.aws_launch_configuration.workers[0]: Refreshing state... [id=orc8r-wg-120220317061253784800000008]
module.orc8r.module.eks.kubernetes_config_map.aws_auth[0]: Refreshing state... [id=kube-system/aws-auth]
module.orc8r-app.kubernetes_namespace.orc8r: Refreshing state... [id=orc8r]
module.orc8r-app.kubernetes_namespace.monitoring[0]: Refreshing state... [id=monitoring]
module.orc8r-app.kubernetes_cluster_role_binding.tiller[0]: Refreshing state... [id=tiller]
module.orc8r-app.kubernetes_service_account.tiller[0]: Refreshing state... [id=kube-system/tiller]
module.orc8r.aws_iam_role_policy_attachment.efs_provisioner: Refreshing state... [id=EFSProvisionerRole20220317061252017600000004-20220317061300379300000009]
module.orc8r-app.helm_release.efs_provisioner[0]: Refreshing state... [id=efs-provisioner]
module.orc8r.aws_iam_role_policy.external_dns: Refreshing state... [id=ExternalDNSRole20220317061252017600000003:terraform-2022031706130325180000000b]
module.orc8r-app.helm_release.external_dns[0]: Refreshing state... [id=external-dns]
module.orc8r-app.helm_release.elasticsearch_curator[0]: Refreshing state... [id=elasticsearch-curator]
module.orc8r-app.kubernetes_secret.orc8r_envdir: Refreshing state... [id=orc8r/orc8r-envdir]
module.orc8r-app.kubernetes_secret.fluentd_certs: Refreshing state... [id=orc8r/fluentd-certs]
module.orc8r-app.kubernetes_secret.orc8r_configs: Refreshing state... [id=orc8r/orc8r-configs]
module.orc8r-app.kubernetes_secret.nms_certs[0]: Refreshing state... [id=orc8r/nms-certs]
module.orc8r-app.kubernetes_secret.orc8r_certs: Refreshing state... [id=orc8r/orc8r-certs]
module.orc8r-app.kubernetes_secret.artifactory: Refreshing state... [id=orc8r/artifactory]
module.orc8r.module.eks.aws_autoscaling_group.workers[0]: Refreshing state... [id=orc8r-wg-12022031706130279720000000a]
module.orc8r-app.helm_release.fluentd[0]: Refreshing state... [id=fluentd]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["promcfg"]: Refreshing state... [id=orc8r/promcfg]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanadata"]: Refreshing state... [id=orc8r/grafanadata]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["promdata"]: Refreshing state... [id=orc8r/promdata]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanadatasources"]: Refreshing state... [id=orc8r/grafanadatasources]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanadashboards"]: Refreshing state... [id=orc8r/grafanadashboards]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanaproviders"]: Refreshing state... [id=orc8r/grafanaproviders]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["openvpn"]: Refreshing state... [id=orc8r/openvpn]
module.orc8r-app.helm_release.lte-orc8r[0]: Refreshing state... [id=lte-orc8r]
Note: Objects have changed outside of Terraform
Terraform detected the following changes made outside of Terraform since the last "terraform apply":
# module.orc8r.aws_db_instance.default has been changed
~ resource "aws_db_instance" "default" {
~ engine_version = "12.8" -> "9.6.15"
id = "orc8rdb"
~ latest_restorable_time = "2022-03-17T17:54:35Z" -> "2022-03-17T18:04:36Z"
name = "orc8r"
tags = {}
# (48 unchanged attributes hidden)
}
Unless you have made equivalent changes to your configuration, or ignored the relevant attributes using ignore_changes, the following
plan may include actions to undo or respond to these changes.
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following
symbols:
+ create
~ update in-place
Terraform will perform the following actions:
# module.orc8r-app.helm_release.lte-orc8r[0] will be updated in-place
~ resource "helm_release" "lte-orc8r" {
id = "lte-orc8r"
name = "lte-orc8r"
~ repository = "https://artifactory.magmacore.org/artifactory/helm" -> "https://shubhamtatvamasi.github.io/magma-charts-3-17-2022"
~ values = [
- <<-EOT
################################################################################
# Copyright 2020 The Magma Authors.
# This source code is licensed under the BSD-style license found in the
# LICENSE file in the root directory of this source tree.
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
################################################################################
imagePullSecrets:
- name: artifactory
secrets:
create: false
secret:
certs: orc8r-certs
configs:
orc8r: orc8r-configs
envdir: orc8r-envdir
nginx:
create: true
podDisruptionBudget:
enabled: true
image:
repository: docker.artifactory.magmacore.org/nginx
tag: "1.6.1"
replicas: 2
service:
enabled: true
legacyEnabled: true
annotations:
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
extraAnnotations:
proxy:
external-dns.alpha.kubernetes.io/hostname: api.orc8r.magmacore.link
bootstrapLagacy:
external-dns.alpha.kubernetes.io/hostname: bootstrapper-controller.orc8r.magmacore.link
clientcertLegacy:
external-dns.alpha.kubernetes.io/hostname: controller.orc8r.magmacore.link
name: orc8r-bootstrap-nginx
type: LoadBalancer
spec:
hostname: controller.orc8r.magmacore.link
controller:
podDisruptionBudget:
enabled: true
image:
repository: docker.artifactory.magmacore.org/controller
tag: "1.6.1"
replicas: 2
spec:
database:
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
service_registry:
mode: "k8s"
metrics:
imagePullSecrets:
- name: artifactory
metrics:
volumes:
prometheusData:
volumeSpec:
persistentVolumeClaim:
claimName: promdata
prometheusConfig:
volumeSpec:
persistentVolumeClaim:
claimName: promcfg
prometheus:
create: true
includeOrc8rAlerts: true
prometheusCacheHostname: orc8r-prometheus-cache
alertmanagerHostname: orc8r-alertmanager
alertmanager:
create: true
prometheusConfigurer:
create: true
image:
repository: docker.io/facebookincubator/prometheus-configurer
tag: 1.0.4
prometheusURL: orc8r-prometheus:9090
alertmanagerConfigurer:
create: true
image:
repository: docker.io/facebookincubator/alertmanager-configurer
tag: 1.0.4
alertmanagerURL: orc8r-alertmanager:9093
prometheusCache:
create: true
image:
repository: docker.io/facebookincubator/prometheus-edge-hub
tag: 1.1.0
limit: 500000
grafana:
create: false
userGrafana:
image:
repository: docker.io/grafana/grafana
tag: 6.6.2
create: true
volumes:
datasources:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadatasources
dashboardproviders:
volumeSpec:
persistentVolumeClaim:
claimName: grafanaproviders
dashboards:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadashboards
grafanaData:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadata
thanos:
enabled: false
compact:
nodeSelector:
{}
store:
nodeSelector:
{}
query:
nodeSelector:
compute-type: thanos
objstore:
type: S3
config:
bucket:
endpoint: s3.us-east-2.amazonaws.com
region: us-east-2
access_key:
secret_key:
insecure: false
signature_version2: false
put_user_metadata: {}
http_config:
idle_conn_timeout: 0s
response_header_timeout: 0s
insecure_skip_verify: false
trace:
enable: false
part_size: 0
nms:
enabled: true
imagePullSecrets:
- name: artifactory
secret:
certs: nms-certs
magmalte:
create: true
image:
repository: docker.artifactory.magmacore.org/magmalte
tag: "1.6.1"
env:
api_host: api.orc8r.magmacore.link
mysql_db: orc8r
mysql_dialect: postgres
mysql_host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
mysql_port: 5432
mysql_user: orc8r
mysql_pass: mypassword
grafana_address: orc8r-user-grafana:3000
nginx:
create: true
service:
type: LoadBalancer
annotations:
external-dns.alpha.kubernetes.io/hostname: "*.nms.orc8r.magmacore.link"
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
deployment:
spec:
ssl_cert_name: controller.crt
ssl_cert_key_name: controller.key
logging:
enabled: false
EOT,
+ <<-EOT
################################################################################
# Copyright 2020 The Magma Authors.
# This source code is licensed under the BSD-style license found in the
# LICENSE file in the root directory of this source tree.
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
################################################################################
imagePullSecrets:
- name: artifactory
secrets:
create: false
secret:
certs: orc8r-certs
configs:
orc8r: orc8r-configs
envdir: orc8r-envdir
# certs sub-chart configuration.
certs:
create: false
enabled: false
domainName: orc8r.magmacore.link
nms:
customIssuer: orc8r-route53-issuer
route53:
enabled: true
region: us-east-2
nginx:
create: true
podDisruptionBudget:
enabled: true
image:
repository: shubhamtatvamasi/nginx
tag: "7bbef19"
replicas: 2
service:
enabled: true
legacyEnabled: true
annotations:
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
extraAnnotations:
proxy:
external-dns.alpha.kubernetes.io/hostname: api.orc8r.magmacore.link
bootstrapLagacy:
external-dns.alpha.kubernetes.io/hostname: bootstrapper-controller.orc8r.magmacore.link
clientcertLegacy:
external-dns.alpha.kubernetes.io/hostname: controller.orc8r.magmacore.link
name: orc8r-bootstrap-nginx
type: LoadBalancer
spec:
hostname: controller.orc8r.magmacore.link
controller:
podDisruptionBudget:
enabled: true
image:
repository: shubhamtatvamasi/controller
tag: "7bbef19"
env:
orc8r_domain_name: "orc8r.magmacore.link"
version_tag: "7bbef19"
helm_version_tag: "1.5.27"
replicas: 2
spec:
database:
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
service_registry:
mode: "k8s"
metrics:
imagePullSecrets:
- name: artifactory
metrics:
volumes:
prometheusData:
volumeSpec:
persistentVolumeClaim:
claimName: promdata
prometheusConfig:
volumeSpec:
persistentVolumeClaim:
claimName: promcfg
prometheus:
create: true
includeOrc8rAlerts: true
prometheusCacheHostname: orc8r-prometheus-cache
alertmanagerHostname: orc8r-alertmanager
alertmanager:
create: true
prometheusConfigurer:
create: true
image:
repository: docker.io/facebookincubator/prometheus-configurer
tag: 1.0.4
prometheusURL: orc8r-prometheus:9090
alertmanagerConfigurer:
create: true
image:
repository: docker.io/facebookincubator/alertmanager-configurer
tag: 1.0.4
alertmanagerURL: orc8r-alertmanager:9093
prometheusCache:
create: true
image:
repository: docker.io/facebookincubator/prometheus-edge-hub
tag: 1.1.0
limit: 500000
grafana:
create: true
userGrafana:
image:
repository: docker.io/grafana/grafana
tag: 6.6.2
create: true
volumes:
datasources:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadatasources
dashboardproviders:
volumeSpec:
persistentVolumeClaim:
claimName: grafanaproviders
dashboards:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadashboards
grafanaData:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadata
thanos:
enabled: false
compact:
nodeSelector:
{}
store:
nodeSelector:
{}
query:
nodeSelector:
compute-type: thanos
objstore:
type: S3
config:
bucket:
endpoint: s3.us-east-2.amazonaws.com
region: us-east-2
access_key:
secret_key:
insecure: false
signature_version2: false
put_user_metadata: {}
http_config:
idle_conn_timeout: 0s
response_header_timeout: 0s
insecure_skip_verify: false
trace:
enable: false
part_size: 0
nms:
enabled: true
imagePullSecrets:
- name: artifactory
secret:
certs: nms-certs
certs:
enabled: false
magmalte:
create: true
image:
repository: shubhamtatvamasi/magmalte
tag: "7bbef19"
env:
api_host: api.orc8r.magmacore.link
mysql_db: orc8r
mysql_dialect: postgres
mysql_host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
mysql_port: 5432
mysql_user: orc8r
mysql_pass: mypassword
grafana_address: orc8r-user-grafana:3000
version_tag: "7bbef19"
nginx:
create: true
service:
type: LoadBalancer
annotations:
external-dns.alpha.kubernetes.io/hostname: "*.nms.orc8r.magmacore.link"
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
deployment:
spec:
ssl_cert_name: controller.crt
ssl_cert_key_name: controller.key
logging:
enabled: true
dp:
create: false
configuration_controller:
sasEndpointUrl: ""
image:
repository: "shubhamtatvamasi/configuration-controller"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
protocol_controller:
enabled: false
image:
repository: "shubhamtatvamasi/protocol-controller"
tag: "7bbef19"
radio_controller:
image:
repository: "shubhamtatvamasi/radio-controller"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
active_mode_controller:
image:
repository: "shubhamtatvamasi/active-mode-controller"
tag: "7bbef19"
db_service:
image:
repository: "shubhamtatvamasi/db-service"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
EOT,
]
~ version = "0.2.5" -> "0.2.6"
# (26 unchanged attributes hidden)
set_sensitive {
# At least one attribute in this block is (or was) sensitive,
# so its contents will not be displayed.
}
}
# module.orc8r-app.helm_release.orc8r will be created
+ resource "helm_release" "orc8r" {
+ atomic = false
+ chart = "orc8r"
+ cleanup_on_fail = false
+ create_namespace = false
+ dependency_update = false
+ disable_crd_hooks = false
+ disable_openapi_validation = false
+ disable_webhooks = false
+ force_update = false
+ id = (known after apply)
+ keyring = ""
+ lint = false
+ max_history = 0
+ metadata = (known after apply)
+ name = "orc8r"
+ namespace = "orc8r"
+ recreate_pods = false
+ render_subchart_notes = true
+ replace = false
+ repository = "https://shubhamtatvamasi.github.io/magma-charts-3-17-2022"
+ repository_password = (sensitive value)
+ repository_username = ""
+ reset_values = false
+ reuse_values = false
+ skip_crds = false
+ status = "deployed"
+ timeout = 600
+ values = [
+ <<-EOT
################################################################################
# Copyright 2020 The Magma Authors.
# This source code is licensed under the BSD-style license found in the
# LICENSE file in the root directory of this source tree.
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
################################################################################
imagePullSecrets:
- name: artifactory
secrets:
create: false
secret:
certs: orc8r-certs
configs:
orc8r: orc8r-configs
envdir: orc8r-envdir
# certs sub-chart configuration.
certs:
create: false
enabled: false
domainName: orc8r.magmacore.link
nms:
customIssuer: orc8r-route53-issuer
route53:
enabled: true
region: us-east-2
nginx:
create: true
podDisruptionBudget:
enabled: true
image:
repository: shubhamtatvamasi/nginx
tag: "7bbef19"
replicas: 2
service:
enabled: true
legacyEnabled: true
annotations:
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
extraAnnotations:
proxy:
external-dns.alpha.kubernetes.io/hostname: api.orc8r.magmacore.link
bootstrapLagacy:
external-dns.alpha.kubernetes.io/hostname: bootstrapper-controller.orc8r.magmacore.link
clientcertLegacy:
external-dns.alpha.kubernetes.io/hostname: controller.orc8r.magmacore.link
name: orc8r-bootstrap-nginx
type: LoadBalancer
spec:
hostname: controller.orc8r.magmacore.link
controller:
podDisruptionBudget:
enabled: true
image:
repository: shubhamtatvamasi/controller
tag: "7bbef19"
env:
orc8r_domain_name: "orc8r.magmacore.link"
version_tag: "7bbef19"
helm_version_tag: "1.5.27"
replicas: 2
spec:
database:
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
service_registry:
mode: "k8s"
metrics:
imagePullSecrets:
- name: artifactory
metrics:
volumes:
prometheusData:
volumeSpec:
persistentVolumeClaim:
claimName: promdata
prometheusConfig:
volumeSpec:
persistentVolumeClaim:
claimName: promcfg
prometheus:
create: true
includeOrc8rAlerts: true
prometheusCacheHostname: orc8r-prometheus-cache
alertmanagerHostname: orc8r-alertmanager
alertmanager:
create: true
prometheusConfigurer:
create: true
image:
repository: docker.io/facebookincubator/prometheus-configurer
tag: 1.0.4
prometheusURL: orc8r-prometheus:9090
alertmanagerConfigurer:
create: true
image:
repository: docker.io/facebookincubator/alertmanager-configurer
tag: 1.0.4
alertmanagerURL: orc8r-alertmanager:9093
prometheusCache:
create: true
image:
repository: docker.io/facebookincubator/prometheus-edge-hub
tag: 1.1.0
limit: 500000
grafana:
create: true
userGrafana:
image:
repository: docker.io/grafana/grafana
tag: 6.6.2
create: true
volumes:
datasources:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadatasources
dashboardproviders:
volumeSpec:
persistentVolumeClaim:
claimName: grafanaproviders
dashboards:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadashboards
grafanaData:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadata
thanos:
enabled: false
compact:
nodeSelector:
{}
store:
nodeSelector:
{}
query:
nodeSelector:
compute-type: thanos
objstore:
type: S3
config:
bucket:
endpoint: s3.us-east-2.amazonaws.com
region: us-east-2
access_key:
secret_key:
insecure: false
signature_version2: false
put_user_metadata: {}
http_config:
idle_conn_timeout: 0s
response_header_timeout: 0s
insecure_skip_verify: false
trace:
enable: false
part_size: 0
nms:
enabled: true
imagePullSecrets:
- name: artifactory
secret:
certs: nms-certs
certs:
enabled: false
magmalte:
create: true
image:
repository: shubhamtatvamasi/magmalte
tag: "7bbef19"
env:
api_host: api.orc8r.magmacore.link
mysql_db: orc8r
mysql_dialect: postgres
mysql_host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
mysql_port: 5432
mysql_user: orc8r
mysql_pass: mypassword
grafana_address: orc8r-user-grafana:3000
version_tag: "7bbef19"
nginx:
create: true
service:
type: LoadBalancer
annotations:
external-dns.alpha.kubernetes.io/hostname: "*.nms.orc8r.magmacore.link"
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
deployment:
spec:
ssl_cert_name: controller.crt
ssl_cert_key_name: controller.key
logging:
enabled: true
dp:
create: false
configuration_controller:
sasEndpointUrl: ""
image:
repository: "shubhamtatvamasi/configuration-controller"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
protocol_controller:
enabled: false
image:
repository: "shubhamtatvamasi/protocol-controller"
tag: "7bbef19"
radio_controller:
image:
repository: "shubhamtatvamasi/radio-controller"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
active_mode_controller:
image:
repository: "shubhamtatvamasi/active-mode-controller"
tag: "7bbef19"
db_service:
image:
repository: "shubhamtatvamasi/db-service"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
EOT,
]
+ verify = false
+ version = "1.5.27"
+ wait = true
+ set_sensitive {
# At least one attribute in this block is (or was) sensitive,
# so its contents will not be displayed.
}
}
Plan: 1 to add, 1 to change, 0 to destroy.
╷
│ Warning: Argument is deprecated
│
│ with module.orc8r.aws_db_instance.default,
│ on .terraform/modules/orc8r/orc8r/cloud/deploy/terraform/orc8r-aws/db.tf line 21, in resource "aws_db_instance" "default":
│ 21: name = var.orc8r_db_name
│
│ Use db_name instead
│
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Version constraints inside provider configuration blocks are deprecated
│
│ on .terraform/modules/orc8r/orc8r/cloud/deploy/terraform/orc8r-aws/providers.tf line 19, in provider "random":
│ 19: version = "~> 2.1"
│
│ Terraform 0.13 and earlier allowed provider version constraints inside the provider configuration block, but that is now deprecated
│ and will be removed in a future version of Terraform. To silence this warning, move the provider version constraint into the
│ required_providers block.
╵
Do you want to perform these actions?
Terraform will perform the actions described above.
Only 'yes' will be accepted to approve.
Enter a value: yes
module.orc8r-app.helm_release.orc8r: Creating...
module.orc8r-app.helm_release.lte-orc8r[0]: Modifying... [id=lte-orc8r]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 10s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 20s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 30s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 40s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 50s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 1m0s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 1m10s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 1m20s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Still modifying... [id=lte-orc8r, 1m30s elapsed]
module.orc8r-app.helm_release.lte-orc8r[0]: Modifications complete after 1m38s [id=lte-orc8r]
╷
│ Error: cannot re-use a name that is still in use
│
│ with module.orc8r-app.helm_release.orc8r,
│ on .terraform/modules/orc8r-app/orc8r/cloud/deploy/terraform/orc8r-helm-aws/main.tf line 27, in resource "helm_release" "orc8r":
│ 27: resource "helm_release" "orc8r" {
│
╵
➜ magma-orc8r-upgrade-1-6-1-to-1-7 git:(master) ✗ export KUBECONFIG=$PWD/magmaindia
➜ magma-orc8r-upgrade-1-6-1-to-1-7 git:(master) ✗ terraform apply -auto-approve
module.orc8r.tls_private_key.eks_workers[0]: Refreshing state... [id=98bbe2230d4afc90c9adc16653f46548960edca7]
module.orc8r.aws_key_pair.eks_workers[0]: Refreshing state... [id=orc8r20220317054753858300000004]
module.orc8r.aws_route53_zone.orc8r: Refreshing state... [id=Z0502929HEP8T9VBT5R4]
module.orc8r.module.vpc.aws_vpc.this[0]: Refreshing state... [id=vpc-065a58d2d2535754b]
module.orc8r.aws_efs_file_system.eks_pv: Refreshing state... [id=fs-0a275f26189fc1af8]
module.orc8r.aws_secretsmanager_secret.orc8r_secrets: Refreshing state... [id=arn:aws:secretsmanager:us-east-2:372544488264:secret:orc8r-secrets-TrWl56]
module.orc8r.aws_sns_topic.sns_orc8r_topic: Refreshing state... [id=arn:aws:sns:us-east-2:372544488264:orc8r-sns]
module.orc8r.module.eks.aws_cloudwatch_log_group.this[0]: Refreshing state... [id=/aws/eks/orc8r/cluster]
module.orc8r.module.eks.aws_iam_policy.cluster_elb_sl_role_creation[0]: Refreshing state... [id=arn:aws:iam::372544488264:policy/orc8r-elb-sl-role-creation20220317054753857600000002]
module.orc8r.module.eks.aws_iam_role.cluster[0]: Refreshing state... [id=orc8r20220317054753859800000005]
module.orc8r.module.vpc.aws_eip.nat[0]: Refreshing state... [id=eipalloc-0036f77c933726b0b]
module.orc8r-app.null_resource.orc8r_seed_secrets: Refreshing state... [id=2829001675271879654]
module.orc8r.aws_sns_topic_subscription.sns_orc8r_db_subscription_email[0]: Refreshing state... [id=arn:aws:sns:us-east-2:372544488264:orc8r-sns:33e271d2-956c-49b8-860d-f1a138ee8ad4]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_AmazonEKSServicePolicy[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756620200000006]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_AmazonEKSVPCResourceControllerPolicy[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756910400000008]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_AmazonEKSClusterPolicy[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756623100000007]
module.orc8r.module.eks.aws_iam_role_policy_attachment.cluster_elb_sl_role_creation[0]: Refreshing state... [id=orc8r20220317054753859800000005-20220317054756929500000009]
module.orc8r.aws_security_group.default: Refreshing state... [id=sg-0227209a21afb946f]
module.orc8r.module.eks.aws_security_group.cluster[0]: Refreshing state... [id=sg-06064b58ecc6a5362]
module.orc8r.module.eks.aws_security_group.workers[0]: Refreshing state... [id=sg-0edf50acea3e1b60b]
module.orc8r.module.vpc.aws_route_table.public[0]: Refreshing state... [id=rtb-002a6e16714265538]
module.orc8r.module.vpc.aws_subnet.private[1]: Refreshing state... [id=subnet-0014b39245dae6027]
module.orc8r.module.vpc.aws_subnet.private[2]: Refreshing state... [id=subnet-081e2be094670c4cb]
module.orc8r.module.vpc.aws_subnet.private[0]: Refreshing state... [id=subnet-03d3e77c91bde6855]
module.orc8r.module.vpc.aws_subnet.public[2]: Refreshing state... [id=subnet-0cbd8fe69500dae85]
module.orc8r.module.vpc.aws_subnet.public[0]: Refreshing state... [id=subnet-008c9b585df5f50f6]
module.orc8r.module.vpc.aws_subnet.public[1]: Refreshing state... [id=subnet-0e2d992cd27f3d47e]
module.orc8r.module.vpc.aws_internet_gateway.this[0]: Refreshing state... [id=igw-0aa20f300098e9397]
module.orc8r.module.vpc.aws_route_table.private[0]: Refreshing state... [id=rtb-0ed9e9c56cc10a1ce]
module.orc8r.module.vpc.aws_subnet.database[0]: Refreshing state... [id=subnet-0ab7663d1d3d46214]
module.orc8r.module.vpc.aws_subnet.database[2]: Refreshing state... [id=subnet-041ffffa4abc38e40]
module.orc8r.module.vpc.aws_subnet.database[1]: Refreshing state... [id=subnet-01f6d7decee50813b]
module.orc8r.module.eks.aws_security_group_rule.cluster_egress_internet[0]: Refreshing state... [id=sgrule-1612402237]
module.orc8r.module.eks.aws_security_group_rule.workers_ingress_cluster[0]: Refreshing state... [id=sgrule-2590785544]
module.orc8r.module.eks.aws_security_group_rule.workers_ingress_cluster_https[0]: Refreshing state... [id=sgrule-3103687898]
module.orc8r.module.eks.aws_security_group_rule.workers_ingress_self[0]: Refreshing state... [id=sgrule-1326722891]
module.orc8r.module.eks.aws_security_group_rule.workers_egress_internet[0]: Refreshing state... [id=sgrule-1294554263]
module.orc8r.module.eks.aws_security_group_rule.cluster_https_worker_ingress[0]: Refreshing state... [id=sgrule-702224055]
module.orc8r.module.vpc.aws_route.public_internet_gateway[0]: Refreshing state... [id=r-rtb-002a6e167142655381080289494]
module.orc8r.module.vpc.aws_route_table_association.private[2]: Refreshing state... [id=rtbassoc-094783978c5f5c491]
module.orc8r.module.vpc.aws_route_table_association.private[1]: Refreshing state... [id=rtbassoc-0b5e0610ee55512ae]
module.orc8r.module.vpc.aws_route_table_association.private[0]: Refreshing state... [id=rtbassoc-0fc071dc149e8b32f]
module.orc8r.module.vpc.aws_route_table_association.public[0]: Refreshing state... [id=rtbassoc-07e8315da562d6616]
module.orc8r.module.vpc.aws_route_table_association.public[2]: Refreshing state... [id=rtbassoc-0a5b3e1cfaf3766de]
module.orc8r.module.vpc.aws_route_table_association.public[1]: Refreshing state... [id=rtbassoc-050f7c21c57e1125d]
module.orc8r.module.vpc.aws_nat_gateway.this[0]: Refreshing state... [id=nat-0c89fa7ff139e58b7]
module.orc8r.aws_efs_mount_target.eks_pv_mnt[2]: Refreshing state... [id=fsmt-0337f1413b48cf23a]
module.orc8r.aws_efs_mount_target.eks_pv_mnt[1]: Refreshing state... [id=fsmt-0857e4fc9cd933bc5]
module.orc8r.aws_efs_mount_target.eks_pv_mnt[0]: Refreshing state... [id=fsmt-02dc8572a8f3a73d3]
module.orc8r.module.vpc.aws_db_subnet_group.database[0]: Refreshing state... [id=orc8r]
module.orc8r.module.vpc.aws_route_table_association.database[2]: Refreshing state... [id=rtbassoc-09b7e800492a7acc1]
module.orc8r.module.vpc.aws_route_table_association.database[1]: Refreshing state... [id=rtbassoc-06402291bedb7c5a2]
module.orc8r.module.vpc.aws_route_table_association.database[0]: Refreshing state... [id=rtbassoc-0f02320d384945b91]
module.orc8r.module.eks.aws_eks_cluster.this[0]: Refreshing state... [id=orc8r]
module.orc8r.aws_elasticsearch_domain.es[0]: Refreshing state... [id=arn:aws:es:us-east-2:372544488264:domain/orc8r-es]
module.orc8r.module.vpc.aws_route.private_nat_gateway[0]: Refreshing state... [id=r-rtb-0ed9e9c56cc10a1ce1080289494]
module.orc8r.module.eks.aws_iam_role.workers[0]: Refreshing state... [id=orc8r20220317061249398800000001]
module.orc8r.module.eks.aws_iam_openid_connect_provider.oidc_provider[0]: Refreshing state... [id=arn:aws:iam::372544488264:oidc-provider/oidc.eks.us-east-2.amazonaws.com/id/13499E838B1BF67EA8CAF871780EC123]
module.orc8r.module.eks.local_file.kubeconfig[0]: Refreshing state... [id=6581c90b8ce3623a0da006f8cb8ea5a82bd76283]
module.orc8r.aws_db_instance.default: Refreshing state... [id=orc8rdb]
module.orc8r.aws_db_event_subscription.default: Refreshing state... [id=orc8r-rds-events]
module.orc8r.aws_elasticsearch_domain_policy.es_management_access[0]: Refreshing state... [id=esd-policy-orc8r-es]
module.orc8r.module.eks.aws_iam_role_policy_attachment.workers_AmazonEKSWorkerNodePolicy[0]: Refreshing state... [id=orc8r20220317061249398800000001-20220317061252578400000006]
module.orc8r.module.eks.aws_iam_role_policy_attachment.workers_AmazonEC2ContainerRegistryReadOnly[0]: Refreshing state... [id=orc8r20220317061249398800000001-20220317061252885100000007]
module.orc8r.module.eks.aws_iam_role_policy_attachment.workers_AmazonEKS_CNI_Policy[0]: Refreshing state... [id=orc8r20220317061249398800000001-20220317061252271100000005]
module.orc8r.module.eks.aws_iam_instance_profile.workers[0]: Refreshing state... [id=orc8r20220317061251966600000002]
module.orc8r.aws_iam_role.external_dns: Refreshing state... [id=ExternalDNSRole20220317061252017600000003]
module.orc8r.aws_iam_role.efs_provisioner: Refreshing state... [id=EFSProvisionerRole20220317061252017600000004]
module.orc8r.module.eks.aws_launch_configuration.workers[0]: Refreshing state... [id=orc8r-wg-120220317061253784800000008]
module.orc8r.module.eks.kubernetes_config_map.aws_auth[0]: Refreshing state... [id=kube-system/aws-auth]
module.orc8r-app.kubernetes_namespace.orc8r: Refreshing state... [id=orc8r]
module.orc8r-app.kubernetes_cluster_role_binding.tiller[0]: Refreshing state... [id=tiller]
module.orc8r-app.kubernetes_namespace.monitoring[0]: Refreshing state... [id=monitoring]
module.orc8r-app.kubernetes_service_account.tiller[0]: Refreshing state... [id=kube-system/tiller]
module.orc8r.aws_iam_role_policy.external_dns: Refreshing state... [id=ExternalDNSRole20220317061252017600000003:terraform-2022031706130325180000000b]
module.orc8r-app.helm_release.external_dns[0]: Refreshing state... [id=external-dns]
module.orc8r-app.kubernetes_secret.orc8r_configs: Refreshing state... [id=orc8r/orc8r-configs]
module.orc8r-app.kubernetes_secret.nms_certs[0]: Refreshing state... [id=orc8r/nms-certs]
module.orc8r-app.kubernetes_secret.artifactory: Refreshing state... [id=orc8r/artifactory]
module.orc8r-app.kubernetes_secret.fluentd_certs: Refreshing state... [id=orc8r/fluentd-certs]
module.orc8r-app.kubernetes_secret.orc8r_envdir: Refreshing state... [id=orc8r/orc8r-envdir]
module.orc8r-app.kubernetes_secret.orc8r_certs: Refreshing state... [id=orc8r/orc8r-certs]
module.orc8r-app.helm_release.elasticsearch_curator[0]: Refreshing state... [id=elasticsearch-curator]
module.orc8r.aws_iam_role_policy_attachment.efs_provisioner: Refreshing state... [id=EFSProvisionerRole20220317061252017600000004-20220317061300379300000009]
module.orc8r-app.helm_release.efs_provisioner[0]: Refreshing state... [id=efs-provisioner]
module.orc8r.module.eks.aws_autoscaling_group.workers[0]: Refreshing state... [id=orc8r-wg-12022031706130279720000000a]
module.orc8r-app.helm_release.fluentd[0]: Refreshing state... [id=fluentd]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanadashboards"]: Refreshing state... [id=orc8r/grafanadashboards]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["promdata"]: Refreshing state... [id=orc8r/promdata]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanadatasources"]: Refreshing state... [id=orc8r/grafanadatasources]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["openvpn"]: Refreshing state... [id=orc8r/openvpn]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanadata"]: Refreshing state... [id=orc8r/grafanadata]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["grafanaproviders"]: Refreshing state... [id=orc8r/grafanaproviders]
module.orc8r-app.kubernetes_persistent_volume_claim.storage["promcfg"]: Refreshing state... [id=orc8r/promcfg]
module.orc8r-app.helm_release.lte-orc8r[0]: Refreshing state... [id=lte-orc8r]
Note: Objects have changed outside of Terraform
Terraform detected the following changes made outside of Terraform since the last "terraform apply":
# module.orc8r.module.eks.aws_security_group.workers[0] has been changed
~ resource "aws_security_group" "workers" {
id = "sg-0edf50acea3e1b60b"
~ ingress = [
- {
- cidr_blocks = []
- description = ""
- from_port = 0
- ipv6_cidr_blocks = []
- prefix_list_ids = []
- protocol = "-1"
- security_groups = [
- "sg-072cd5e5824c499e0",
- "sg-09d366bbe46108f98",
- "sg-0c0e441f6913a7cee",
- "sg-0e81c5a25e313a6c5",
- "sg-0ecb0e1d9e94d5c90",
]
- self = false
- to_port = 0
},
+ {
+ cidr_blocks = []
+ description = ""
+ from_port = 0
+ ipv6_cidr_blocks = []
+ prefix_list_ids = []
+ protocol = "-1"
+ security_groups = [
+ "sg-072cd5e5824c499e0",
+ "sg-09d366bbe46108f98",
+ "sg-0ecb0e1d9e94d5c90",
]
+ self = false
+ to_port = 0
},
# (3 unchanged elements hidden)
]
name = "orc8r2022031705481162890000000a"
tags = {
"Name" = "orc8r-eks_worker_sg"
"kubernetes.io/cluster/orc8r" = "owned"
}
# (8 unchanged attributes hidden)
}
# module.orc8r.aws_db_instance.default has been changed
~ resource "aws_db_instance" "default" {
id = "orc8rdb"
~ latest_restorable_time = "2022-03-17T18:04:36Z" -> "2022-03-17T18:09:36Z"
name = "orc8r"
tags = {}
# (49 unchanged attributes hidden)
}
Unless you have made equivalent changes to your configuration, or ignored the relevant attributes using ignore_changes, the following
plan may include actions to undo or respond to these changes.
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following
symbols:
+ create
Terraform will perform the following actions:
# module.orc8r-app.helm_release.orc8r will be created
+ resource "helm_release" "orc8r" {
+ atomic = false
+ chart = "orc8r"
+ cleanup_on_fail = false
+ create_namespace = false
+ dependency_update = false
+ disable_crd_hooks = false
+ disable_openapi_validation = false
+ disable_webhooks = false
+ force_update = false
+ id = (known after apply)
+ keyring = ""
+ lint = false
+ max_history = 0
+ metadata = (known after apply)
+ name = "orc8r"
+ namespace = "orc8r"
+ recreate_pods = false
+ render_subchart_notes = true
+ replace = false
+ repository = "https://shubhamtatvamasi.github.io/magma-charts-3-17-2022"
+ repository_password = (sensitive value)
+ repository_username = ""
+ reset_values = false
+ reuse_values = false
+ skip_crds = false
+ status = "deployed"
+ timeout = 600
+ values = [
+ <<-EOT
################################################################################
# Copyright 2020 The Magma Authors.
# This source code is licensed under the BSD-style license found in the
# LICENSE file in the root directory of this source tree.
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
################################################################################
imagePullSecrets:
- name: artifactory
secrets:
create: false
secret:
certs: orc8r-certs
configs:
orc8r: orc8r-configs
envdir: orc8r-envdir
# certs sub-chart configuration.
certs:
create: false
enabled: false
domainName: orc8r.magmacore.link
nms:
customIssuer: orc8r-route53-issuer
route53:
enabled: true
region: us-east-2
nginx:
create: true
podDisruptionBudget:
enabled: true
image:
repository: shubhamtatvamasi/nginx
tag: "7bbef19"
replicas: 2
service:
enabled: true
legacyEnabled: true
annotations:
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
extraAnnotations:
proxy:
external-dns.alpha.kubernetes.io/hostname: api.orc8r.magmacore.link
bootstrapLagacy:
external-dns.alpha.kubernetes.io/hostname: bootstrapper-controller.orc8r.magmacore.link
clientcertLegacy:
external-dns.alpha.kubernetes.io/hostname: controller.orc8r.magmacore.link
name: orc8r-bootstrap-nginx
type: LoadBalancer
spec:
hostname: controller.orc8r.magmacore.link
controller:
podDisruptionBudget:
enabled: true
image:
repository: shubhamtatvamasi/controller
tag: "7bbef19"
env:
orc8r_domain_name: "orc8r.magmacore.link"
version_tag: "7bbef19"
helm_version_tag: "1.5.27"
replicas: 2
spec:
database:
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
service_registry:
mode: "k8s"
metrics:
imagePullSecrets:
- name: artifactory
metrics:
volumes:
prometheusData:
volumeSpec:
persistentVolumeClaim:
claimName: promdata
prometheusConfig:
volumeSpec:
persistentVolumeClaim:
claimName: promcfg
prometheus:
create: true
includeOrc8rAlerts: true
prometheusCacheHostname: orc8r-prometheus-cache
alertmanagerHostname: orc8r-alertmanager
alertmanager:
create: true
prometheusConfigurer:
create: true
image:
repository: docker.io/facebookincubator/prometheus-configurer
tag: 1.0.4
prometheusURL: orc8r-prometheus:9090
alertmanagerConfigurer:
create: true
image:
repository: docker.io/facebookincubator/alertmanager-configurer
tag: 1.0.4
alertmanagerURL: orc8r-alertmanager:9093
prometheusCache:
create: true
image:
repository: docker.io/facebookincubator/prometheus-edge-hub
tag: 1.1.0
limit: 500000
grafana:
create: true
userGrafana:
image:
repository: docker.io/grafana/grafana
tag: 6.6.2
create: true
volumes:
datasources:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadatasources
dashboardproviders:
volumeSpec:
persistentVolumeClaim:
claimName: grafanaproviders
dashboards:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadashboards
grafanaData:
volumeSpec:
persistentVolumeClaim:
claimName: grafanadata
thanos:
enabled: false
compact:
nodeSelector:
{}
store:
nodeSelector:
{}
query:
nodeSelector:
compute-type: thanos
objstore:
type: S3
config:
bucket:
endpoint: s3.us-east-2.amazonaws.com
region: us-east-2
access_key:
secret_key:
insecure: false
signature_version2: false
put_user_metadata: {}
http_config:
idle_conn_timeout: 0s
response_header_timeout: 0s
insecure_skip_verify: false
trace:
enable: false
part_size: 0
nms:
enabled: true
imagePullSecrets:
- name: artifactory
secret:
certs: nms-certs
certs:
enabled: false
magmalte:
create: true
image:
repository: shubhamtatvamasi/magmalte
tag: "7bbef19"
env:
api_host: api.orc8r.magmacore.link
mysql_db: orc8r
mysql_dialect: postgres
mysql_host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
mysql_port: 5432
mysql_user: orc8r
mysql_pass: mypassword
grafana_address: orc8r-user-grafana:3000
version_tag: "7bbef19"
nginx:
create: true
service:
type: LoadBalancer
annotations:
external-dns.alpha.kubernetes.io/hostname: "*.nms.orc8r.magmacore.link"
service.beta.kubernetes.io/aws-load-balancer-additional-resource-tags: "magma-uuid=default"
deployment:
spec:
ssl_cert_name: controller.crt
ssl_cert_key_name: controller.key
logging:
enabled: true
dp:
create: false
configuration_controller:
sasEndpointUrl: ""
image:
repository: "shubhamtatvamasi/configuration-controller"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
protocol_controller:
enabled: false
image:
repository: "shubhamtatvamasi/protocol-controller"
tag: "7bbef19"
radio_controller:
image:
repository: "shubhamtatvamasi/radio-controller"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
active_mode_controller:
image:
repository: "shubhamtatvamasi/active-mode-controller"
tag: "7bbef19"
db_service:
image:
repository: "shubhamtatvamasi/db-service"
tag: "7bbef19"
database:
driver: postgres
db: orc8r
host: orc8rdb.c9zfkz9zxj0h.us-east-2.rds.amazonaws.com
port: 5432
user: orc8r
pass: mypassword
EOT,
]
+ verify = false
+ version = "1.5.27"
+ wait = true
+ set_sensitive {
# At least one attribute in this block is (or was) sensitive,
# so its contents will not be displayed.
}
}
Plan: 1 to add, 0 to change, 0 to destroy.
module.orc8r-app.helm_release.orc8r: Creating...
module.orc8r-app.helm_release.orc8r: Still creating... [10s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [20s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [30s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [40s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [50s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [1m0s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [1m10s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [1m20s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [1m30s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [1m40s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [1m50s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [2m0s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [2m10s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [2m20s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [2m30s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [2m40s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [2m50s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [3m0s elapsed]
module.orc8r-app.helm_release.orc8r: Still creating... [3m10s elapsed]
module.orc8r-app.helm_release.orc8r: Creation complete after 3m14s [id=orc8r]
╷
│ Warning: Argument is deprecated
│
│ with module.orc8r.aws_db_instance.default,
│ on .terraform/modules/orc8r/orc8r/cloud/deploy/terraform/orc8r-aws/db.tf line 21, in resource "aws_db_instance" "default":
│ 21: name = var.orc8r_db_name
│
│ Use db_name instead
│
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Version constraints inside provider configuration blocks are deprecated
│
│ on .terraform/modules/orc8r/orc8r/cloud/deploy/terraform/orc8r-aws/providers.tf line 19, in provider "random":
│ 19: version = "~> 2.1"
│
│ Terraform 0.13 and earlier allowed provider version constraints inside the provider configuration block, but that is now deprecated
│ and will be removed in a future version of Terraform. To silence this warning, move the provider version constraint into the
│ required_providers block.
╵
Apply complete! Resources: 1 added, 0 changed, 0 destroyed.
Outputs:
nameservers = tolist([
"ns-1001.awsdns-61.net",
"ns-1164.awsdns-17.org",
"ns-131.awsdns-16.com",
"ns-1741.awsdns-25.co.uk",
])
➜ magma-orc8r-upgrade-1-6-1-to-1-7 git:(master) ✗
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment