-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathmain.tf
More file actions
141 lines (116 loc) · 5.46 KB
/
main.tf
File metadata and controls
141 lines (116 loc) · 5.46 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
resource "aws_cloudformation_stack_set" "default" {
count = var.permission_model == "SERVICE_MANAGED" ? 1 : 0
name = var.name
description = var.description
tags = var.tags
permission_model = var.permission_model
call_as = var.call_as
execution_role_name = var.execution_role_name
administration_role_arn = var.administration_role_arn
capabilities = var.capabilities
parameters = var.parameters
dynamic "auto_deployment" {
for_each = var.auto_deployment.enabled ? [1] : []
content {
retain_stacks_on_account_removal = var.auto_deployment.retain_stacks_on_account_removal
enabled = var.auto_deployment.enabled
}
}
operation_preferences {
failure_tolerance_count = try(var.operation_preferences.failure_tolerance_count, null)
failure_tolerance_percentage = try(var.operation_preferences.failure_tolerance_percentage, null)
max_concurrent_count = try(var.operation_preferences.max_concurrent_count, null)
max_concurrent_percentage = try(var.operation_preferences.max_concurrent_percentage, null)
region_concurrency_type = try(var.operation_preferences.region_concurrency_type, null)
region_order = try(var.operation_preferences.region_order, null)
}
template_body = var.template_body
template_url = var.template_url
lifecycle {
ignore_changes = [
administration_role_arn,
]
}
}
resource "aws_cloudformation_stack_set" "self_managed" {
count = var.permission_model == "SELF_MANAGED" ? 1 : 0
name = var.name
description = var.description
tags = var.tags
permission_model = var.permission_model
call_as = var.call_as
execution_role_name = var.execution_role_name
administration_role_arn = var.administration_role_arn
capabilities = var.capabilities
parameters = var.parameters
dynamic "auto_deployment" {
for_each = var.auto_deployment.enabled ? [1] : []
content {
retain_stacks_on_account_removal = var.auto_deployment.retain_stacks_on_account_removal
enabled = var.auto_deployment.enabled
}
}
operation_preferences {
failure_tolerance_count = try(var.operation_preferences.failure_tolerance_count, null)
failure_tolerance_percentage = try(var.operation_preferences.failure_tolerance_percentage, null)
max_concurrent_count = try(var.operation_preferences.max_concurrent_count, null)
max_concurrent_percentage = try(var.operation_preferences.max_concurrent_percentage, null)
region_concurrency_type = try(var.operation_preferences.region_concurrency_type, null)
region_order = try(var.operation_preferences.region_order, null)
}
template_body = var.template_body
template_url = var.template_url
lifecycle {
ignore_changes = [
administration_role_arn,
]
}
}
resource "aws_cloudformation_stack_set_instance" "this" {
for_each = var.create_instance && length(var.stackset_instance_organizational_unit_ids) > 0 ? toset(var.stackset_instance_organizational_unit_ids) : toset([])
deployment_targets {
organizational_unit_ids = [each.key]
}
operation_preferences {
failure_tolerance_count = try(var.operation_preferences.failure_tolerance_count, null)
failure_tolerance_percentage = try(var.operation_preferences.failure_tolerance_percentage, null)
max_concurrent_count = try(var.operation_preferences.max_concurrent_count, null)
max_concurrent_percentage = try(var.operation_preferences.max_concurrent_percentage, null)
concurrency_mode = try(var.operation_preferences.concurrency_mode, null)
region_concurrency_type = try(var.operation_preferences.region_concurrency_type, null)
region_order = try(var.operation_preferences.region_order, null)
}
retain_stack = var.stackset_instance_retain_stack
call_as = var.stackset_instance_call_as
region = var.stackset_instance_region
account_id = var.stackset_instance_account_id
stack_set_name = (
var.permission_model == "SERVICE_MANAGED"
? aws_cloudformation_stack_set.default[0].name
: aws_cloudformation_stack_set.self_managed[0].name
)
}
resource "aws_cloudformation_stack_set_instance" "accounts" {
count = var.create_instance == true && length(var.stackset_instance_accounts) > 0 ? 1 : 0
deployment_targets {
accounts = var.stackset_instance_accounts
}
operation_preferences {
failure_tolerance_count = try(var.operation_preferences.failure_tolerance_count, null)
failure_tolerance_percentage = try(var.operation_preferences.failure_tolerance_percentage, null)
max_concurrent_count = try(var.operation_preferences.max_concurrent_count, null)
max_concurrent_percentage = try(var.operation_preferences.max_concurrent_percentage, null)
concurrency_mode = try(var.operation_preferences.concurrency_mode, null)
region_concurrency_type = try(var.operation_preferences.region_concurrency_type, null)
region_order = try(var.operation_preferences.region_order, null)
}
retain_stack = var.stackset_instance_retain_stack
call_as = var.stackset_instance_call_as
region = var.stackset_instance_region
account_id = var.stackset_instance_account_id
stack_set_name = (
var.permission_model == "SERVICE_MANAGED"
? aws_cloudformation_stack_set.default[0].name
: aws_cloudformation_stack_set.self_managed[0].name
)
}