terraform-google-modules / terraform-google-lb-http Goto Github PK

Error: Attribute redefined

  on main.tf line 94:
  94:   count         = "${length(var.backend_params)}"

The attribute "count" was already defined at main.tf:92,3-8. Each attribute may be defined only once.

      groups = [
        {
          group                        = data.google_compute_network_endpoint_group.foo.self_link
          balancing_mode               = "RATE"
          capacity_scaler              = null
          description                  = null
          max_connections              = null
          max_connections_per_instance = null
          max_connections_per_endpoint = null
          max_rate                     = null
          max_rate_per_instance        = null
          max_rate_per_endpoint        = 100
          max_utilization              = null
        }

terraform {
  required_version = "~> 0.12.0"
  required_providers {
    google      = "~> 2.7"
    google-beta = "~> 2.7"
  }
}

Error: Invalid value for module argument

  on gclb/main.tf line 35, in module "gce-lb-https":
  35:   backends = {
  36:     default = {
  37:       description                     = null
  38:       protocol                        = "HTTP"
  39:       port                            = 443
  40:       port_name                       = "default-https"
  41:       timeout_sec                     = 10
  42:       connection_draining_timeout_sec = null
  43:       enable_cdn                      = false
  45:       health_check = {
  46:         check_interval_sec  = null
  47:         timeout_sec         = null
  48:         healthy_threshold   = null
  49:         unhealthy_threshold = null
  50:         request_path        = "/"
  51:         port                = 443
  52:         host                = null
  53:       }
  55:       groups = [
  56:         {
  57:           # Each node pool instance group should be added to the backend.
  58:           group                        = var.backend
  59:           balancing_mode               = null
  60:           capacity_scaler              = null
  61:           description                  = null
  62:           max_connections              = null
  63:           max_connections_per_instance = null
  64:           max_connections_per_endpoint = null
  65:           max_rate                     = null
  66:           max_rate_per_instance        = null
  67:           max_rate_per_endpoint        = null
  68:           max_utilization              = null
  69:         },
  70:       ]
  71:     }
  72:   }

The given value is not suitable for child module variable "backends" defined
at
.terraform/modules/lb.gce-lb-https/terraform-google-modules-terraform-google-lb-http-d65708d/variables.tf:62,1-20:
element "default": attribute "protocol": string required.

element "default": attribute "protocol": string required.
element "default": attribute "enable_cdn": bool required.
element "default": attribute "timeout_sec": number required.
element "default": attribute "port": number required.

$ terraform --version
Terraform v0.12.18

Terraform will form the following actions:

-/+ module.gcp-edge-lb.google_compute_ssl_certificate.default (new resource required)
      id:                 "example-certificate" => <computed> (forces new resource)
      certificate:        <sensitive> => <sensitive> (forces new resource)
      certificate_id:     "31415926535" => <computed>
      name:               "example-certificate" => "example-certificate"
      name_prefix:        "" => <computed>
      private_key:        <sensitive> => <sensitive> (forces new resource)
      project:            "my-project" => <computed>
      self_link:          "https://www.googleapis.com/compute/v1/projects/my-project/global/sslCertificates/example-certificate" => <computed>

  ~ module.gcp-edge-lb.google_compute_target_https_proxy.default
      ssl_certificates.#: "1" => <computed>


Plan: 1 to add, 1 to change, 1 to destroy.

Do you want to perform these actions?
  Terraform will perform the actions described above.
  Only 'yes' will be accepted to approve.

  Enter a value: yes

module.gcp-edge-lb.google_compute_ssl_certificate.default: Creating...
  certificate:    "<sensitive>" => "<sensitive>"
  certificate_id: "" => "<computed>"
  name:           "" => "example-certificate"
  name_prefix:    "" => "<computed>"
  private_key:    "<sensitive>" => "<sensitive>"
  project:        "" => "<computed>"
  self_link:      "" => "<computed>"

Error: Error applying plan:

1 error(s) occurred:

* module.gcp-edge-lb.google_compute_ssl_certificate.default: 1 error(s) occurred:

* google_compute_ssl_certificate.default: Error creating ssl certificate: googleapi: Error 409: The resource 'projects/my-project/global/sslCertificates/example-certificate' already exists, alreadyExists

Error: Invalid function argument

  on .terraform/modules/gce-lb-http/terraform-google-lb-http-4.0.0/main.tf line 124, in resource "google_compute_backend_service" "default":
 124:     enable      = lookup(lookup(each.value, "log_config", {}), "enable", true)
    |----------------
    | each.value is object with 12 attributes

Invalid value for "inputMap" parameter: argument must not be null.


Error: Invalid function argument

  on .terraform/modules/gce-lb-http/terraform-google-lb-http-4.0.0/main.tf line 125, in resource "google_compute_backend_service" "default":
 125:     sample_rate = lookup(lookup(each.value, "log_config", {}), "sample_rate", "1.0")
    |----------------
    | each.value is object with 12 attributes

Invalid value for "inputMap" parameter: argument must not be null.

Terraform: v0.12.19
terraform-google-lb-http: 4.0.0

google-beta provider: 3.20

google-beta provider: 3.19

  on .terraform/modules/mig2/GoogleCloudPlatform-terraform-google-managed-instance-group-7550567/main.tf line 242, in resource "google_compute_firewall" "default-ssh":
 242:   source_ranges = ["${var.ssh_source_ranges}"]

Inappropriate value for attribute "source_ranges": element 0: string required.

  on .terraform/modules/mig2/GoogleCloudPlatform-terraform-google-managed-instance-group-7550567/main.tf line 274, in resource "google_compute_firewall" "mig-health-check":
 274:   target_tags   = ["${var.target_tags}"]

Inappropriate value for attribute "target_tags": element 0: string required.

Error: Invalid value for module argument

  on https-lb.tf line 29, in module "gce-lb-https":
  29:   backends = {
  30:     default = {
  31:       description                     = null
  32:       protocol                        = "HTTP/2"
  33:       port                            = 443
  34:       port_name                       = "http2"
  35:       timeout_sec                     = 30
  36:       connection_draining_timeout_sec = 300
  37:       enable_cdn                      = "false"
  38:       session_affinity                = null
  39:       affinity_cookie_ttl_sec         = null
  40:       security_policy                 = google_compute_security_policy.default_rules
  41:       health_check                    = google_compute_https_health_check.https_health_check.id
  43:       log_config = {
  44:         enable = true
  45:         sample_rate = 0.2
  46:       }
  48:       groups = [
  49:         {
  50:           group                        = google_compute_instance_group.my_instance_group.self_link
  51:           balancing_mode               = "UTILIZATION"
  52:           capacity_scaler              = 100
  53:           description                  = null
  54:           max_connections              = null
  55:           max_connections_per_instance = null
  56:           max_connections_per_endpoint = null
  57:           max_rate                     = null
  58:           max_rate_per_instance        = null
  59:           max_rate_per_endpoint        = null
  60:           max_utilization              = 80
  61:         },
  62:       ]
  63:     }
  64:   }

The given value is not suitable for child module variable "backends" defined
at
.terraform/modules/gce-lb-https/terraform-google-lb-http-4.0.0/variables.tf:69,1-20:
element "default": attribute "timeout_sec": number required.

element "default": attribute "port_name": string required.
element "default": attribute "port": number required.
element "default": attribute "protocol": string required.
element "default": attribute "health_check": object required.

Error: Error creating BackendService: googleapi: Error 400: Invalid value for field 'resource.backends[0].maxUtilization': '1.0'. Max utilization is not supported for Serverless network endpoint groups., invalid

module "global-loadbalancer" {
  source  = "GoogleCloudPlatform/lb-http/google"
  version = "3.0.0"
  project = var.project_id
  name    = "global-loadbalancer"

  ssl         = true
  private_key = file("key")
  certificate = file("cert")

  firewall_networks = ["c0"]
  firewall_projects = [var.host_project_id]

  target_tags = []

  url_map        = google_compute_url_map.url-map.self_link
  create_url_map = false

  // We create empty backends to populate them automatically with autoneg feature
  // https://github.com/GoogleCloudPlatform/gke-autoneg-controller
  backends = {

	"frontendapi" = {
	  description                     = null
	  protocol                        = "HTTP"
	  port                            = 8080
	  port_name                       = "http"
	  timeout_sec                     = 10
	  connection_draining_timeout_sec = null
	  enable_cdn                      = false
	  health_check                    = local.health_check
	  groups = []
	}
  }
}

      + log_config {}

# bind the bucket `lb-bucket` to a GCP backend_bucket
resource "google_compute_backend_bucket" "testlb-backend-bucket" {
  name        = "testlb-backend-bucket"
  bucket_name = "${google_storage_bucket.my_bucket.name}"
  enable_cdn  = false 
}

# the URL map points to the backend bucket, not a backend service 
resource "google_compute_url_map" "testlb-url-map" {
  name        = "testlb-url-map"
  default_service = "${google_compute_backend_bucket.testlb-backend-bucket.self_link}"
}

module "lbtest-lb" {
  name        = "lbtest-lb"

  source      = "GoogleCloudPlatform/lb-http/google"
  version     = "1.0.5"

  region      = "${var.gcp_region}"

  create_url_map = false
  url_map        = "${google_compute_url_map.testlb-url-map.self_link}"

  # no backend services
  target_tags = []
  backends = {}
  backend_params = []
}

Error: module.lbtest-lb.google_compute_firewall.default-hc: 1 error(s) occurred:

* module.lbtest-lb.google_compute_firewall.default-hc: element: element() may not be used with an empty list in:

${element(split(",", element(var.backend_params, count.index)), 2)}

module "gce-lb-http" {
  source            = "github.com/GoogleCloudPlatform/terraform-google-lb-http"
  name              = "group-http-lb"
  target_tags       = ["${var.consul_server_cluster_tag_name}"]
  backends          = {
    "0" = [
      { group = "${module.consul_servers.instance_group}" }
    ],
  }
  backend_params    = [
    # health check path, port name, port number, timeout seconds.
    "/v1/status/leader,api,8500,10"
  ]
}

module.project-ci-lb-http.module.project-factory.data.null_data_source.default_service_account: Refreshing state...
module.project-ci-lb-http.module.project-factory.google_project.main: Destroying... [id=ci-int-lb-http-ef72]
module.project-ci-lb-http.module.project-factory.google_project.main: Destruction complete after 4s
module.project-ci-lb-http.module.project-factory.google_project.main: Creating...

Error: error creating project ci-int-lb-http-ef72 (ci-int-lb-http): googleapi: Error 409: Requested entity already exists, alreadyExists. If you received a 403 error, make sure you have the `roles/resourcemanager.projectCreator` permission

docker run --rm -it -e SERVICE_ACCOUNT_JSON -e TF_VAR_org_id -e TF_VAR_folder_id -e TF_VAR_billing_account -v "$(pwd)":/workspace gcr.io/cloud-foundation-cicd/cft/developer-tools:0.4.2 bash -c 'cd test/setup; /usr/local/bin/execute_with_credentials.sh terraform destroy --target module.project-ci-lb-http.module.project-factory.random_id.random_project_id_suffix'

If you use HTTP(S) Load Balancing or SSL Proxy:

Current behavior: Proxied traffic from the load balancer and the health check probes to
your load balanced instances have source IP addresses in the range 130.211.0.0/22.

Action required: We are introducing an additional range 35.191.0.0/16 for this purpose.
You need to update your firewall rule to allow traffic from this new range (35.191.0.0/16)
in addition to the current range (130.211.0.0/22).

If you use Network Load Balancing:

Current behavior: You are not required to add firewall rules for Network LB health checks today

Action required: We are introducing three new ranges for health checking: 209.85.152.0/22,
209.85.204.0/22, and 35.191.0.0/16. You need to ensure that your firewall allows traffic
from 209.85.152.0/22, 209.85.204.0/22, and 35.191.0.0/16. The health check probes to your
backend instances will come from one of these ranges.

  backends = {
    "0" = [
      {
        # Each node pool instance group should be added to the backend.
        group = "${var.backend}"
      },
    ]
  }

  backends = {
    "0" = [
      {
        # Each node pool instance group should be added to the backend.
        group = "${var.TARGET_GROUP_URLS[0]}"
        group = "${var.TARGET_GROUP_URLS[1]}"
        group = "${var.TARGET_GROUP_URLS[2]}"
      },
    ]
  }

google      = "~> 2.15"
google-beta = "~> 2.15"

$ curl -sfkL "https://34.102.207.91/group1" | grep zones
          <td>projects/698653867196/zones/us-west1-a</td>
$ curl -sfkL "https://34.102.207.91/group3" | grep zones
          <td>projects/698653867196/zones/us-east1-d</td>
$ curl -k "https://34.102.207.91/group2/"

<html><head>
<meta http-equiv="content-type" content="text/html;charset=utf-8">
<title>502 Server Error</title>
</head>
<body text=#000000 bgcolor=#ffffff>
<h1>Error: Server Error</h1>
<h2>The server encountered a temporary error and could not complete your request.<p>Please try again in 30 seconds.</h2>
<h2></h2>
</body></html>

log_config {
  enable = false
  sample_rate = null
}

2020-03-18T12:45:50.787+0100 [DEBUG] plugin.terraform-provider-google-beta_v3.13.0_x5:   },
2020-03-18T12:45:50.787+0100 [DEBUG] plugin.terraform-provider-google-beta_v3.13.0_x5:   "logConfig": {
2020-03-18T12:45:50.787+0100 [DEBUG] plugin.terraform-provider-google-beta_v3.13.0_x5:     "enable": true,
2020-03-18T12:45:50.787+0100 [DEBUG] plugin.terraform-provider-google-beta_v3.13.0_x5:     "sampleRate": 1
2020-03-18T12:45:50.787+0100 [DEBUG] plugin.terraform-provider-google-beta_v3.13.0_x5:   },

2020/03/18 12:45:50 [WARN] Provider "registry.terraform.io/-/google-beta" produced an unexpected new value for module.app_lb.google_compute_backend_service.default["default"], but we are tolerating it because it is using the legacy plugin SDK.
    The following problems may be the cause of any confusing errors from downstream operations:
      - .log_config[0].enable: was cty.False, but now cty.True
      - .log_config[0].sample_rate: was null, but now cty.NumberIntVal(1)