Skip to content

Switch to EKS #50

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
Weastie merged 1 commit into from
Jan 12, 2026
Merged

Switch to EKS #50

Weastie merged 1 commit into from
Jan 12, 2026

Conversation

@Weastie
Copy link
Collaborator

@Weastie Weastie commented Jan 12, 2026

No description provided.

@github-actions
Copy link

github-actions bot commented Jan 12, 2026

Terraform plan output for ./terraform/common

Contains changes: no

Show Plan 
data.secretsmanager_login.keeper: Reading...
data.secretsmanager_login.keeper: Read complete after 1s [id=l4pqeAaAA7HGzEXaNdKVWQ]
data.aws_caller_identity.current: Reading...
data.aws_caller_identity.current: Read complete after 0s [id=975050025792]
aws_kms_key.common: Refreshing state... [id=fbcb8b62-b2f3-4832-99d0-0f163b0260ed]
aws_kms_alias.common: Refreshing state... [id=alias/grafana]
aws_ssm_parameter.kms_arn: Refreshing state... [id=/grafana/common/kms_arn]
aws_ssm_parameter.kms_id: Refreshing state... [id=/grafana/common/kms_id]
aws_ssm_parameter.ksm_config: Refreshing state... [id=/grafana/common/ksm_config]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

Pusher: @Weastie

@github-actions
Copy link

github-actions bot commented Jan 12, 2026

Terraform plan output for ./terraform/env/prod

Contains changes: yes

Show Plan 
module.grafana.data.secretsmanager_login.prometheus_basic: Reading...
module.grafana.data.secretsmanager_login.loki_basic: Reading...
module.grafana.data.secretsmanager_login.db: Reading...
module.grafana.data.secretsmanager_login.loki_basic: Read complete after 0s [id=TVNsnRso_U7J_raing91Dw]
module.grafana.data.secretsmanager_login.prometheus_basic: Read complete after 0s [id=9edLxyQsbIoU5lw7K3m36w]
module.grafana.aws_ec2_tag.eks_subnets_karpenter["subnet-00eb4cfd73abefd2e"]: Refreshing state... [id=subnet-00eb4cfd73abefd2e,karpenter.sh/discovery-grafana-prd]
module.grafana.aws_iam_policy.sts: Refreshing state... [id=arn:aws:iam::975050025792:policy/grafana-prd-sts-assume-role]
module.grafana.aws_iam_role.ec2: Refreshing state... [id=grafana-prd-ec2]
module.grafana.module.aws_load_balancer_controller_policy.aws_iam_policy.alb_controller: Refreshing state... [id=arn:aws:iam::975050025792:policy/grafana-prd-eks-alb-controller]
module.grafana.aws_ec2_tag.eks_subnets_karpenter["subnet-0d0d5a4bdbaf916d1"]: Refreshing state... [id=subnet-0d0d5a4bdbaf916d1,karpenter.sh/discovery-grafana-prd]
module.grafana.aws_lb_target_group.loki: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:targetgroup/grafana-prd-loki/c9c82dfdaea7a39d]
module.grafana.aws_s3_bucket.main: Refreshing state... [id=phl-citygeo-grafana-prd]
module.grafana.aws_db_subnet_group.postgres: Refreshing state... [id=grafana-prd]
module.grafana.aws_s3_bucket.eks: Refreshing state... [id=phl-citygeo-grafana-prd-eks]
module.grafana.aws_security_group.ec2: Refreshing state... [id=sg-01d5ff819e2be4c9b]
module.grafana.aws_iam_policy.ssm: Refreshing state... [id=arn:aws:iam::975050025792:policy/grafana-prd-ssm]
module.grafana.aws_iam_role.eks_fargate: Refreshing state... [id=grafana-prd-eks-fargate]
module.grafana.module.karpenter.data.aws_service_principal.ec2[0]: Reading...
module.grafana.module.karpenter.data.aws_service_principal.ec2[0]: Read complete after 0s [id=ec2.us-east-1.amazonaws.com]
module.grafana.aws_ssm_parameter.domain_name: Refreshing state... [id=/grafana/prd/domain_name]
module.grafana.aws_security_group.rds: Refreshing state... [id=sg-05a87fe0acd31972d]
module.grafana.aws_lb_target_group.grafana: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:targetgroup/grafana-prd-http/e3b106f61dfc1bdc]
module.grafana.aws_lb_target_group.prometheus: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:targetgroup/grafana-prd-prometheus/efbd12c473371e48]
module.grafana.module.karpenter.data.aws_caller_identity.current[0]: Reading...
module.grafana.module.karpenter.data.aws_caller_identity.current[0]: Read complete after 0s [id=975050025792]
module.grafana.data.aws_ssm_parameter.kms_id: Reading...
module.grafana.aws_security_group.alb: Refreshing state... [id=sg-00ec47708efc3cf95]
module.grafana.aws_security_group.eks_control: Refreshing state... [id=sg-06e7128cd92771b98]
module.grafana.aws_security_group.eks_node: Refreshing state... [id=sg-00f90be2a44ec92e1]
module.grafana.data.aws_ssm_parameter.kms_id: Read complete after 0s [id=/grafana/common/kms_id]
module.grafana.data.aws_ssm_parameter.kms_arn: Reading...
module.grafana.module.karpenter.data.aws_region.current[0]: Reading...
module.grafana.module.karpenter.data.aws_region.current[0]: Read complete after 0s [id=us-east-1]
module.grafana.module.karpenter.data.aws_partition.current[0]: Reading...
module.grafana.module.karpenter.data.aws_partition.current[0]: Read complete after 0s [id=aws]
module.grafana.aws_security_group.kafka: Refreshing state... [id=sg-08dfa8278246436ed]
module.grafana.aws_iam_role.eks: Refreshing state... [id=grafana-prd-eks]
module.grafana.aws_vpc_security_group_ingress_rule.ec2_inbound_mimir_from_ec2: Refreshing state... [id=sgr-096fbc6d16cbbc870]
module.grafana.aws_vpc_security_group_egress_rule.ec2_outbound_all_to_everywhere: Refreshing state... [id=sgr-01ba63cb7bd090a79]
module.grafana.data.aws_ssm_parameter.kms_arn: Read complete after 1s [id=/grafana/common/kms_arn]
module.grafana.aws_iam_instance_profile.ec2: Refreshing state... [id=grafana-prd-ec2]
module.grafana.aws_vpc_security_group_ingress_rule.rds_from_app: Refreshing state... [id=sgr-02f695ccf00c8f305]
module.grafana.aws_ssm_parameter.prometheus_pw: Refreshing state... [id=/grafana/prd/prometheus_pw]
module.grafana.aws_ssm_parameter.loki_user: Refreshing state... [id=/grafana/prd/loki_user]
module.grafana.aws_ssm_parameter.loki_pw: Refreshing state... [id=/grafana/prd/loki_pw]
module.grafana.aws_ssm_parameter.prometheus_user: Refreshing state... [id=/grafana/prd/prometheus_user]
module.grafana.aws_vpc_security_group_ingress_rule.eks_control_https_from_phl: Refreshing state... [id=sgr-07e8feffac6da2299]
module.grafana.module.karpenter.data.aws_iam_policy_document.node_assume_role[0]: Reading...
module.grafana.aws_vpc_security_group_egress_rule.eks_control_all_to_outbound: Refreshing state... [id=sgr-069ab1c692133cdf4]
module.grafana.module.karpenter.data.aws_iam_policy_document.node_assume_role[0]: Read complete after 0s [id=2560088296]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_https_from_anywhere: Refreshing state... [id=sgr-0a312930b901a3a33]
module.grafana.aws_vpc_security_group_ingress_rule.ec2_inbound_http_from_alb: Refreshing state... [id=sgr-040f28c6154e147c7]
module.grafana.aws_lb.main: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:loadbalancer/app/grafana-prd/3cd196f222693cb7]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_prometheus_from_cidr["citygeotestvpc"]: Refreshing state... [id=sgr-01dd4e26fa512da51]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_http_from_anywhere: Refreshing state... [id=sgr-092201db4cd9e3c8e]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_prometheus_from_cidr["airflowprodvpc"]: Refreshing state... [id=sgr-070df7d2899d00458]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_prometheus_from_cidr["airflowtestvpc"]: Refreshing state... [id=sgr-084ce6bc658b57f25]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_prometheus_from_cidr["citygeoprodvpc"]: Refreshing state... [id=sgr-079749f6bcd2a9fe2]
module.grafana.aws_vpc_security_group_ingress_rule.ec2_inbound_loki_from_alb: Refreshing state... [id=sgr-0590dcc16ba04d862]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_prometheus_from_cidr["mulesoftprodvpc"]: Refreshing state... [id=sgr-0226a8bf3112c57d3]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_prometheus_from_cidr["mulesofttestvpc"]: Refreshing state... [id=sgr-0964516bf57a61377]
module.grafana.aws_vpc_security_group_egress_rule.alb_all_to_outbound: Refreshing state... [id=sgr-0b589ae3d23e10824]
module.grafana.aws_vpc_security_group_ingress_rule.ec2_inbound_prometheus_from_alb: Refreshing state... [id=sgr-0c3e4e567e273dd73]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_loki_from_cidr["citygeotestvpc"]: Refreshing state... [id=sgr-0c02eed6fbacd61b1]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_loki_from_cidr["mulesoftprodvpc"]: Refreshing state... [id=sgr-077619cc59540dcb6]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_loki_from_cidr["mulesofttestvpc"]: Refreshing state... [id=sgr-0feae3466b25be383]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_loki_from_cidr["airflowprodvpc"]: Refreshing state... [id=sgr-0273ed4c7c38efcfb]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_loki_from_cidr["airflowtestvpc"]: Refreshing state... [id=sgr-0d164f5cb119cec20]
module.grafana.aws_vpc_security_group_ingress_rule.alb_inbound_loki_from_cidr["citygeoprodvpc"]: Refreshing state... [id=sgr-03a7ce3aefaf0b24d]
module.grafana.aws_iam_policy.kms: Refreshing state... [id=arn:aws:iam::975050025792:policy/grafana-prd-kms]
module.grafana.aws_vpc_security_group_egress_rule.eks_node_all_to_outbound: Refreshing state... [id=sgr-061d69dd5fecdf39d]
module.grafana.aws_vpc_security_group_ingress_rule.eks_node_all_from_self: Refreshing state... [id=sgr-062711fbbc99b2d6d]
module.grafana.aws_vpc_security_group_ingress_rule.eks_node_inbound_grafana_from_alb: Refreshing state... [id=sgr-0fc0033745ba6905d]
module.grafana.aws_vpc_security_group_ingress_rule.eks_control_all_from_node: Refreshing state... [id=sgr-0183b4d3b42310fa5]
module.grafana.aws_vpc_security_group_ingress_rule.rds_from_eks: Refreshing state... [id=sgr-023ab67c1d5e3147a]
module.grafana.aws_vpc_security_group_ingress_rule.eks_node_all_from_control: Refreshing state... [id=sgr-041c65f8175a9fa3a]
module.grafana.aws_vpc_security_group_ingress_rule.eks_node_inbound_gateway_from_alb: Refreshing state... [id=sgr-06b9e67a689fd165c]
module.grafana.aws_vpc_security_group_ingress_rule.kafka_from_eks: Refreshing state... [id=sgr-0303cebccf72470c8]
module.grafana.aws_launch_template.main: Refreshing state... [id=lt-090109bfef90613d9]
module.grafana.aws_s3_bucket_server_side_encryption_configuration.eks: Refreshing state... [id=phl-citygeo-grafana-prd-eks]
module.grafana.aws_s3_bucket_public_access_block.eks: Refreshing state... [id=phl-citygeo-grafana-prd-eks]
module.grafana.aws_iam_policy.s3_eks: Refreshing state... [id=arn:aws:iam::975050025792:policy/grafana-prd-s3-eks]
module.grafana.aws_ssm_parameter.grafana_s3_name: Refreshing state... [id=/grafana/prd/grafana_s3_name]
module.grafana.aws_s3_bucket_public_access_block.main: Refreshing state... [id=phl-citygeo-grafana-prd]
module.grafana.aws_iam_policy.s3: Refreshing state... [id=arn:aws:iam::975050025792:policy/grafana-prd-s3]
module.grafana.aws_s3_bucket_server_side_encryption_configuration.main: Refreshing state... [id=phl-citygeo-grafana-prd]
module.grafana.aws_lb_listener.http_redirect: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:listener/app/grafana-prd/3cd196f222693cb7/41eff09f7708dc3d]
module.grafana.aws_lb_listener.grafana: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:listener/app/grafana-prd/3cd196f222693cb7/5d94e3e805e095e4]
module.grafana.aws_lb_listener.prometheus: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:listener/app/grafana-prd/3cd196f222693cb7/c201a76b1dcdd59b]
module.grafana.aws_lb_listener.loki: Refreshing state... [id=arn:aws:elasticloadbalancing:us-east-1:975050025792:listener/app/grafana-prd/3cd196f222693cb7/799b6d35b9b368f4]
module.grafana.aws_iam_role_policy_attachments_exclusive.eks: Refreshing state...
module.grafana.aws_iam_role_policy_attachments_exclusive.eks_fargate: Refreshing state...
module.grafana.aws_autoscaling_group.main: Refreshing state... [id=grafana-prd]
module.grafana.aws_eks_cluster.main: Refreshing state... [id=grafana-prd]
module.grafana.aws_iam_role_policy_attachments_exclusive.ec2: Refreshing state...
module.grafana.aws_autoscaling_attachment.grafana: Refreshing state... [id=grafana-prd-20250822170243951700000001]
module.grafana.aws_autoscaling_attachment.prometheus: Refreshing state... [id=grafana-prd-20250822170225180900000002]
module.grafana.aws_autoscaling_attachment.loki: Refreshing state... [id=grafana-prd-20250822170224946900000001]
module.grafana.data.tls_certificate.main: Reading...
module.grafana.aws_vpc_security_group_ingress_rule.eks_default_sg_all_from_node: Refreshing state... [id=sgr-0d9f2824d41e29a83]
module.grafana.aws_eks_addon.coredns: Refreshing state... [id=grafana-prd:coredns]
module.grafana.data.aws_ssm_parameter.eks_ami_release_version: Reading...
module.grafana.module.karpenter.aws_cloudwatch_event_rule.this["spot_interrupt"]: Refreshing state... [id=grafan-prd-karp-SpotInterrupt-20251209193710291700000007]
module.grafana.module.karpenter.aws_cloudwatch_event_rule.this["health_event"]: Refreshing state... [id=grafan-prd-karp-HealthEvent-20251209193709942400000005]
module.grafana.aws_eks_fargate_profile.karpenter: Refreshing state... [id=grafana-prd:grafana-prd-karpenter]
module.grafana.module.karpenter.aws_cloudwatch_event_rule.this["instance_rebalance"]: Refreshing state... [id=grafan-prd-karp-InstanceRebalance-20251209193710368900000008]
module.grafana.data.aws_ssm_parameter.eks_ami_release_version: Read complete after 0s [id=/aws/service/eks/optimized-ami/1.34/amazon-linux-2023/x86_64/standard/recommended/release_version]
module.grafana.module.karpenter.aws_cloudwatch_event_rule.this["instance_state_change"]: Refreshing state... [id=grafan-prd-karp-InstanceStateChange-20251209193710026200000006]
module.grafana.aws_eks_access_entry.admins["arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-devs_128f50c8d80a23d4"]: Refreshing state... [id=grafana-prd:arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-devs_128f50c8d80a23d4]
module.grafana.module.karpenter.aws_iam_role.node[0]: Refreshing state... [id=grafana-prd-karpenter-node]
module.grafana.data.tls_certificate.main: Read complete after 1s [id=0c37bb608751c2a14704338d4b14c14e6dbe88ac]
module.grafana.aws_eks_access_entry.admins["arn:aws:iam::975050025792:role/TFRole"]: Refreshing state... [id=grafana-prd:arn:aws:iam::975050025792:role/TFRole]
module.grafana.aws_eks_access_entry.admins["arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-admins_a23294be18f9f843"]: Refreshing state... [id=grafana-prd:arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-admins_a23294be18f9f843]
module.grafana.aws_eks_access_policy_association.admins["arn:aws:iam::975050025792:role/TFRole"]: Refreshing state... [id=grafana-prd#arn:aws:iam::975050025792:role/TFRole#arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy]
module.grafana.aws_eks_addon.kube-proxy: Refreshing state... [id=grafana-prd:kube-proxy]
module.grafana.aws_eks_access_policy_association.admins["arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-admins_a23294be18f9f843"]: Refreshing state... [id=grafana-prd#arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-admins_a23294be18f9f843#arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy]
module.grafana.aws_eks_access_policy_association.admins["arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-devs_128f50c8d80a23d4"]: Refreshing state... [id=grafana-prd#arn:aws:iam::975050025792:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AWS-mulesoft-infra-devs_128f50c8d80a23d4#arn:aws:eks::aws:cluster-access-policy/AmazonEKSClusterAdminPolicy]
module.grafana.module.karpenter.aws_sqs_queue.this[0]: Refreshing state... [id=https://sqs.us-east-1.amazonaws.com/975050025792/grafana-prd-karpenter]
module.grafana.aws_iam_openid_connect_provider.main: Refreshing state... [id=arn:aws:iam::975050025792:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/86CD053CFB5302E2A52E6D64473076CF]
module.grafana.module.karpenter.aws_iam_role_policy_attachment.node["AmazonEC2ContainerRegistryPullOnly"]: Refreshing state... [id=grafana-prd-karpenter-node/arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly]
module.grafana.data.secretsmanager_login.db: Read complete after 2s [id=yUO3Wbl52b8g9LukZgZ5uA]
module.grafana.module.karpenter.aws_iam_role_policy_attachment.node["AmazonEKSWorkerNodePolicy"]: Refreshing state... [id=grafana-prd-karpenter-node/arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy]
module.grafana.module.karpenter.aws_iam_role_policy_attachment.node["AmazonEKS_CNI_Policy"]: Refreshing state... [id=grafana-prd-karpenter-node/arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy]
module.grafana.module.karpenter.aws_iam_role_policy_attachment.node_additional["KMS"]: Refreshing state... [id=grafana-prd-karpenter-node/arn:aws:iam::975050025792:policy/grafana-prd-kms]
module.grafana.aws_iam_role.loki: Refreshing state... [id=grafana-prd-loki-irsa]
module.grafana.aws_iam_role.eks_ebs_csi_driver: Refreshing state... [id=grafana-prd-eks-ebs-csi-driver]
module.grafana.aws_iam_role.eks_alb_controller: Refreshing state... [id=grafana-prd-eks-alb-controller]
module.grafana.aws_iam_role.external_secrets: Refreshing state... [id=grafana-prd-external-secrets-irsa]
module.grafana.aws_iam_role.mimir: Refreshing state... [id=grafana-prd-mimir-irsa]
module.grafana.aws_iam_role.grafana: Refreshing state... [id=grafana-prd-grafana-irsa]
module.grafana.aws_iam_role.eks_addon_vpc_cni: Refreshing state... [id=grafana-prd-eks-addon-vpc-cni]
module.grafana.aws_ssm_parameter.rds_user: Refreshing state... [id=/grafana/prd/rds_user]
module.grafana.aws_db_instance.postgres: Refreshing state... [id=db-27VB6O47UQUCWIL3F3OSD5R474]
module.grafana.module.karpenter.data.aws_iam_policy_document.controller_assume_role[0]: Reading...
module.grafana.aws_ssm_parameter.rds_pw: Refreshing state... [id=/grafana/prd/rds_pw]
module.grafana.module.karpenter.data.aws_iam_policy_document.controller_assume_role[0]: Read complete after 0s [id=3283606561]
module.grafana.module.karpenter.aws_cloudwatch_event_target.this["instance_rebalance"]: Refreshing state... [id=grafan-prd-karp-InstanceRebalance-20251209193710368900000008-KarpenterInterruptionQueueTarget]
module.grafana.module.karpenter.aws_cloudwatch_event_target.this["health_event"]: Refreshing state... [id=grafan-prd-karp-HealthEvent-20251209193709942400000005-KarpenterInterruptionQueueTarget]
module.grafana.module.karpenter.aws_cloudwatch_event_target.this["instance_state_change"]: Refreshing state... [id=grafan-prd-karp-InstanceStateChange-20251209193710026200000006-KarpenterInterruptionQueueTarget]
module.grafana.module.karpenter.aws_cloudwatch_event_target.this["spot_interrupt"]: Refreshing state... [id=grafan-prd-karp-SpotInterrupt-20251209193710291700000007-KarpenterInterruptionQueueTarget]
module.grafana.module.karpenter.data.aws_iam_policy_document.queue[0]: Reading...
module.grafana.module.karpenter.data.aws_iam_policy_document.queue[0]: Read complete after 0s [id=1285653589]
module.grafana.aws_iam_role_policy_attachments_exclusive.loki: Refreshing state...
module.grafana.aws_iam_role_policy_attachments_exclusive.eks_alb_controller: Refreshing state...
module.grafana.aws_iam_role_policy_attachments_exclusive.eks_ebs_csi_driver: Refreshing state...
module.grafana.module.karpenter.aws_iam_role.controller[0]: Refreshing state... [id=grafana-prd-karpenter-controller]
module.grafana.module.karpenter.data.aws_iam_policy_document.controller[0]: Reading...
module.grafana.aws_iam_role_policy_attachments_exclusive.mimir: Refreshing state...
module.grafana.module.karpenter.data.aws_iam_policy_document.controller[0]: Read complete after 0s [id=1545713303]
module.grafana.aws_iam_role_policy_attachments_exclusive.grafana: Refreshing state...
module.grafana.aws_iam_role_policy_attachments_exclusive.external_secrets: Refreshing state...
module.grafana.module.karpenter.aws_sqs_queue_policy.this[0]: Refreshing state... [id=https://sqs.us-east-1.amazonaws.com/975050025792/grafana-prd-karpenter]
module.grafana.aws_iam_role_policy_attachments_exclusive.eks_addon_vpc_cni: Refreshing state...
module.grafana.module.karpenter.aws_iam_policy.controller[0]: Refreshing state... [id=arn:aws:iam::975050025792:policy/grafana-prd-karpenter-controller]
module.grafana.aws_ssm_parameter.rds_host: Refreshing state... [id=/grafana/prd/rds_host]
module.grafana.aws_ssm_parameter.rds_db_name: Refreshing state... [id=/grafana/prd/rds_db_name]
module.grafana.module.karpenter.aws_eks_access_entry.node[0]: Refreshing state... [id=grafana-prd:arn:aws:iam::975050025792:role/grafana-prd-karpenter-node]
module.grafana.aws_eks_addon.vpc_cni: Refreshing state... [id=grafana-prd:vpc-cni]
module.grafana.module.karpenter.aws_iam_role_policy_attachment.controller_additional["KMS"]: Refreshing state... [id=grafana-prd-karpenter-controller/arn:aws:iam::975050025792:policy/grafana-prd-kms]
module.grafana.module.karpenter.aws_iam_role_policy_attachment.controller[0]: Refreshing state... [id=grafana-prd-karpenter-controller/arn:aws:iam::975050025792:policy/grafana-prd-karpenter-controller]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.grafana.aws_iam_openid_connect_provider.main will be updated in-place
  ~ resource "aws_iam_openid_connect_provider" "main" {
        id              = "arn:aws:iam::975050025792:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/86CD053CFB5302E2A52E6D64473076CF"
        tags            = {}
      ~ thumbprint_list = [
          ~ "6f2e2b0ee8be13fcf9631ec1d15f9e07e7b6eabe" -> "06b25927c42a721631c1efd9431e648fa62e1e39",
        ]
        # (4 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.

Pusher: @Weastie

@Weastie Weastie merged commit f119f5b into main Jan 12, 2026
5 checks passed
@Weastie Weastie deleted the switch-to-eks branch January 12, 2026 20:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Weastie