-
Notifications
You must be signed in to change notification settings - Fork 121
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Enable vpc
selector for Route53 Zone
#456
Conversation
Follow the instuctions at https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_zone_association ``` Unless explicit association ordering is required (e.g., a separate cross-account association authorization), usage of this resource is not recommended. Use the vpc configuration blocks available within the aws_route53_zone resource instead. ``` and rely on the Zone resource for VPC association * Enable `vpc` section of `Zone` resource * It makes it compliant with community provider-aws HostedZone resource so ease the migration * Document disablement of `route53_vpc_association` resource * Remove `route53_vpc_association` related configuration Signed-off-by: Yury Tsarev <[email protected]>
We had an offline discussion with @ytsarev and decided to continue by introducing the |
@ulucinar it appeared to be a more tricky situation than we expected. I enabled It failed with
According to https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_zone_association , The next obvious question is how to make the zone private. If we look at https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_zone#private-zone the private zone is getting enabled by the inline vpc association. So we have a chicken-egg problem here and it looks like we need both inline and dedicated association styles. |
* Addition to crossplane-contrib#456 * Dedicate `ZoneAssociation` for more complex ZoneToVPC associations for a complex cases * According to investigation documented at crossplane-contrib#456 (comment) we will still need inline `vpc` field to instantiate private Zone first * crossplane-contrib#456 should be merged first so we can ehance `ZoneAssociation` example Signed-off-by: Yury Tsarev <[email protected]>
Just opened #463 for dedicated |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @ytsarev LGTM!
* Addition to crossplane-contrib#456 * Dedicate `ZoneAssociation` for more complex ZoneToVPC associations for a complex cases * According to investigation documented at crossplane-contrib#456 (comment) we will still need inline `vpc` field to instantiate private Zone first * crossplane-contrib#456 should be merged first so we can ehance `ZoneAssociation` example Signed-off-by: Yury Tsarev <[email protected]>
* Addition to crossplane-contrib#456 * Dedicate `ZoneAssociation` for more complex ZoneToVPC associations for a complex cases * According to investigation documented at crossplane-contrib#456 (comment) we will still need inline `vpc` field to instantiate private Zone first * crossplane-contrib#456 should be merged first so we can ehance `ZoneAssociation` example Signed-off-by: Yury Tsarev <[email protected]>
Description of your changes
Follow the instuctions at https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53_zone_association
and rely on the Zone resource for VPC association
vpc
section ofZone
resourceroute53_vpc_association
resourceroute53_vpc_association
related configurationSigned-off-by: Yury Tsarev [email protected]
Fixes #392
I have:
make reviewable test
to ensure this PR is ready for review.How has this code been tested