ops2go / terraform-aws-openfaas-fargate

Create an OpenFaaS platform for AWS Fargate using Terraform

Overview

• Installing
• Uninstalling

Installing

1. Install terraform

Mac: brew install terraform

Linux:

wget https://releases.hashicorp.com/terraform/0.11.7/terraform_0.11.7_linux_amd64.zip
unzip terraform_0.11.7_linux_amd64.zip
sudo mv terraform /usr/local/bin
terraform --version

2. Create terraform.tfvars

You will need to create a new file in the root of this repo called terraform.tfvars which configures variables used to install faas-ecs

Name	Description
aws_region	The aws region to create the openfaas ecs cluster in
debug	1 to create an ec2 bastion in the external subnet and a test instance in the internal subnet
developer_ip	your ip address, used to whitelist incoming ssh to bastion

Example file

cat > ./terraform.tfvars <<EOF
aws_region   = "eu-west-1"
debug        = "0"
developer_ip = "217.46.68.185"
EOF

3. Create a public key for ssh

Ssh access is only required if debug = "1", however the ssh key is still required for the install to work even if debug disabled. To create the key run:

make keys

4. Run terraform

make

Known issue

If you get the following error:

Error: Error applying plan:

2 error(s) occurred:

* module.ecs_provider.aws_ecs_service.main: 1 error(s) occurred:

* aws_ecs_service.main: InvalidParameterException: Unable to assume the service linked role. Please verify that the ECS service linked role exists.
	status code: 400, request id: d967b493-82f9-11e8-9d63-f5180ba0fbef "ecs-provider"
* module.nats.aws_ecs_service.main: 1 error(s) occurred:

* aws_ecs_service.main: InvalidParameterException: Unable to assume the service linked role. Please verify that the ECS service linked role exists.
	status code: 400, request id: dab962b7-82f9-11e8-8cc5-29d47e720a04 "nats"

Terraform does not automatically rollback in the face of errors.
Instead, your Terraform state file has been partially updated with
any resources that successfully completed. Please address the error
above and apply again to incrementally change your infrastructure.

Please just re-run make, this is an eventual consistency problem see #4

Uninstalling

1. Run make uninstall
2. Patiently wait about 5-10 minutes

Known issue

1 error(s) occurred:

* aws_service_discovery_private_dns_namespace.openfaas (destroy): 1 error(s) occurred:

To resolve this problem manually delete all the service registrations

aws servicediscovery list-services | jq '.Services[].Id' -r | xargs -L 1 aws servicediscovery delete-service --id