Hey all! I'm trying to get started with Fleet, and I'm following the instructions here: https://fleetdm.com/docs/deploy/deploy-on-aws-with-terraform However, this doesn't work:

terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 4.0"
    }
  }
}

module "fleet" {
  source = "<http://github.com/fleetdm/fleet//terraform?ref=main|github.com/fleetdm/fleet//terraform?ref=main>"
}

Because the "fleet" module requires

certificate_arn

, which then leads to something more like this:

terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.39"
    }
  }
}

locals {
  fleet_domain_name = "<http://fleet.ryancammer.com|fleet.ryancammer.com>"
  fleet_image = "fleetdm/fleet:v4.46.1"
}

module "acm" {
  source  = "terraform-aws-modules/acm/aws"
  version = "~> 5.0"

  domain_name = local.fleet_domain_name
  zone_id     = data.aws_route53_zone.main.id

  wait_for_validation = true
}

module "fleet" {
  source = "<http://github.com/fleetdm/fleet//terraform?ref=main|github.com/fleetdm/fleet//terraform?ref=main>"
  certificate_arn = module.acm.acm_certificate_arn
}

data "aws_route53_zone" "main" {
  name         = local.fleet_domain_name
  private_zone = false
}

And that results in this error:

```Plan: 79 to add, 0 to change, 0 to destroy.

╷

│ Error: Invalid for_each argument

│

│ on .terraform/modules/fleet/terraform/byo-vpc/main.tf line 69, in data "aws_subnet" "redis":

│ 69: for_each = toset(var.redis_config.subnets)

│ ├────────────────

│ │ var.redis_config.subnets is list of string with 3 elements

│

│ The "for_each" set includes values derived from resource attributes that cannot be determined until apply, and so

│ Terraform cannot determine the full set of keys that will identify the instances of this resource.

│

│ When working with unknown values in for_each, it's better to use a map value where the keys are defined statically in your

│ configuration and where only the values contain apply-time results.

│

│ Alternatively, you could use the -target planning option to first apply only the resources that the for_each value depends

│ on, and then apply a second time to fully converge.```

I fought with it for a bit, defining a VPC, and even setting the values for the redis subnets, to no avail. 1. Is this the right channel for this? 2. Does anyone have a working terraform file to get started with? Thank you in advance! I appreciate the help.

hey Ryan. I have seen this error if you attempt to apply terraform before the underlying resources are created. It's kinda goofy, but terraform is trying its best to give you a hint at what to do:

Alternatively, you could use the -target planning option to first apply only the resources that the for_each value depends

Try running this in the following order:

terraform apply -target module.fleet.module.vpc
terraform apply -target module.fleet
terraform apply

this will build out the VPC, then the other resources like RDS MySQL & Redis, then finally the application stack.

All right! That definitely worked. Now I just need to figure out why it's 503ing 504ing now no 503ing again on me...

Try using the migrations module mentioned in the guide:

module "migrations" {
  source                   = "<http://github.com/fleetdm/fleet//terraform/addons/migrations?ref=main|github.com/fleetdm/fleet//terraform/addons/migrations?ref=main>"
  ecs_cluster              = module.fleet.byo-vpc.byo-db.byo-ecs.service.cluster
  task_definition          = module.fleet.byo-vpc.byo-db.byo-ecs.task_definition.family
  task_definition_revision = module.fleet.byo-vpc.byo-db.byo-ecs.task_definition.revision
  subnets                  = module.fleet.byo-vpc.byo-db.byo-ecs.service.network_configuration[0].subnets
  security_groups          = module.fleet.byo-vpc.byo-db.byo-ecs.service.network_configuration[0].security_groups
}

I did, and I'm running into issues. The first is that these arguments appear to be required:

module "migrations" {
  source                   = "github.com/fleetdm/fleet//terraform/addons/migrations?ref=main"
  ecs_cluster              = module.fleet.byo-vpc.byo-db.byo-ecs.service.cluster
  task_definition          = module.fleet.byo-vpc.byo-db.byo-ecs.task_definition.family
  task_definition_revision = module.fleet.byo-vpc.byo-db.byo-ecs.task_definition.revision
  subnets                  = module.fleet.byo-vpc.byo-db.byo-ecs.service.network_configuration[0].subnets
  security_groups          = module.fleet.byo-vpc.byo-db.byo-ecs.service.network_configuration[0].security_groups
  desired_count            = 1
  ecs_service              = "dummy_service"
  min_capacity             = 1
}