-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: DBTP-1089 Move to shared log resource policy #166
fix: DBTP-1089 Move to shared log resource policy #166
Conversation
] | ||
} | ||
CONFIG | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Unnecessary Log group policy that was actually shared by all environments and destroyed when any one of the environments was destroyed.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't understand how this fixes the issue. I understand that it does, but not sure how moving the module call from extensions to vpc fixes things.
|
||
application = var.args.application | ||
environment = var.environment | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
How come this has moved from extensions to vpc?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
So that we have one log resource policy per VPC instead of one per environment...
Addresses https://uktrade.atlassian.net/browse/DBTP-1089
TLDR: Will allow us to have more than 10 environments in the same account/region.
@ksugden and @WillGibson have tested this by deploying the
willg
environment from scratch, checking it's all working and the log groups have the test streams that AWS does.