Sharon Katz
02/29/2024, 10:32 PMRyan Cammer
03/01/2024, 9:07 AMterraform {
required_providers {
aws = {
source = "hashicorp/aws"
version = "~> 4.0"
}
}
}
module "fleet" {
source = "<http://github.com/fleetdm/fleet//terraform?ref=main|github.com/fleetdm/fleet//terraform?ref=main>"
}
Because the "fleet" module requires certificate_arn
, which then leads to something more like this:
terraform {
required_providers {
aws = {
source = "hashicorp/aws"
version = "~> 5.39"
}
}
}
locals {
fleet_domain_name = "<http://fleet.ryancammer.com|fleet.ryancammer.com>"
fleet_image = "fleetdm/fleet:v4.46.1"
}
module "acm" {
source = "terraform-aws-modules/acm/aws"
version = "~> 5.0"
domain_name = local.fleet_domain_name
zone_id = data.aws_route53_zone.main.id
wait_for_validation = true
}
module "fleet" {
source = "<http://github.com/fleetdm/fleet//terraform?ref=main|github.com/fleetdm/fleet//terraform?ref=main>"
certificate_arn = module.acm.acm_certificate_arn
}
data "aws_route53_zone" "main" {
name = local.fleet_domain_name
private_zone = false
}
And that results in this error:
```Plan: 79 to add, 0 to change, 0 to destroy.
β·
β Error: Invalid for_each argument
β
β on .terraform/modules/fleet/terraform/byo-vpc/main.tf line 69, in data "aws_subnet" "redis":
β 69: for_each = toset(var.redis_config.subnets)
β βββββββββββββββββ
β β var.redis_config.subnets is list of string with 3 elements
β
β The "for_each" set includes values derived from resource attributes that cannot be determined until apply, and so
β Terraform cannot determine the full set of keys that will identify the instances of this resource.
β
β When working with unknown values in for_each, it's better to use a map value where the keys are defined statically in your
β configuration and where only the values contain apply-time results.
β
β Alternatively, you could use the -target planning option to first apply only the resources that the for_each value depends
β on, and then apply a second time to fully converge.```I fought with it for a bit, defining a VPC, and even setting the values for the redis subnets, to no avail. 1. Is this the right channel for this? 2. Does anyone have a working terraform file to get started with? Thank you in advance! I appreciate the help.
Zapier
03/01/2024, 3:55 PMRobert Everson
03/01/2024, 7:08 PMRequires Fleet Premium license
. Is there a way to run fleet without a redis cache?Edival Gonçalves Gomes
03/01/2024, 8:49 PMZapier
03/04/2024, 12:20 PMGeorge Karr
03/04/2024, 9:57 PMJason Lewis
03/04/2024, 11:48 PMZapier
03/05/2024, 4:04 PMMike S.
03/06/2024, 6:17 PMEvan Romasco-Kelly
03/06/2024, 8:04 PMZapier
03/07/2024, 3:52 PMaldente
03/07/2024, 10:08 PMselect * from file where path like '/Users/%/Desktop/%'
) via the fleet UI and looking for some guidance. iβve followed the osquery docs to silently push out FDA access with our MDM (JAMF)R083RT0
03/08/2024, 8:35 AMMike S.
03/08/2024, 6:52 PMZapier
03/08/2024, 6:55 PMLuke Heath
03/12/2024, 11:10 PMLijin
03/13/2024, 3:14 AMZapier
03/13/2024, 9:57 AMLayne
03/13/2024, 7:36 PMRyan Cammer
03/13/2024, 11:11 PMMatt Davidson
03/14/2024, 3:47 AMZapier
03/14/2024, 4:27 PMOliver Reardon
03/14/2024, 6:26 PMFLEET_OSQUERY_RESULT_LOG_PLUGIN = "firehose"
set and verified the correct AWS IAM role is in place yet I am not getting any scheduled query data arriving on my firehose stream and so consequently no data landing in S3. Anyone have any pointers on what i've missed before I dig deeper into this? Are there fleetdm server logs that should reflect delivery errors?
I am using all the default tf values:
output "fleet_extra_environment_variables" {
value = {
FLEET_FIREHOSE_STATUS_STREAM = aws_kinesis_firehose_delivery_stream.osquery_status.name
FLEET_FIREHOSE_RESULT_STREAM = aws_kinesis_firehose_delivery_stream.osquery_results.name
FLEET_FIREHOSE_REGION = data.aws_region.current.name
FLEET_OSQUERY_STATUS_LOG_PLUGIN = "firehose"
FLEET_OSQUERY_RESULT_LOG_PLUGIN = "firehose"
}
}
https://github.com/fleetdm/fleet/tree/main/terraform/addons/logging-destination-firehose
Appreciate the help in advance.JanRC
03/16/2024, 5:46 PMBrock Walters
03/18/2024, 12:34 PMShawn Maddock
03/18/2024, 3:30 PMwtheaker
03/18/2024, 4:58 PMLayne
03/18/2024, 5:09 PMZapier
03/18/2024, 8:40 PM