{"id":11194,"date":"2022-07-19T18:59:16","date_gmt":"2022-07-19T13:29:16","guid":{"rendered":"https:\/\/opstree.com\/blog\/\/?p=11194"},"modified":"2022-07-19T19:01:54","modified_gmt":"2022-07-19T13:31:54","slug":"terraform-version-upgrade","status":"publish","type":"post","link":"https:\/\/opstree.com\/blog\/terraform-version-upgrade\/","title":{"rendered":"Terraform Version Upgrade"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

Starting the blog with the question – What is Terraform<\/strong>?<\/p>\n\n\n\n

It can be called a magic wand that creates Infrastructure on the basis of the code that you write. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

In Hashicorp\u2019s<\/strong> words, “Terraform is an open-source Infrastructure as A Code software tool that enables you to safely and predictably create, change, and improve infrastructure.<\/em>“<\/p>\n\n\n\n\n\n\n\n

Well coming to our topic, Terraform upgrade. Let\u2019s see what ways we can follow to upgrade Terraform in an environment that is running on a lower Terraform version.<\/p>\n\n\n\n

Scenario<\/strong><\/h4>\n\n\n\n

Upgrade from Terraform v0.11.11 \u2192 latest version <\/p>\n\n\n\n

My reaction when I had to perform the upgrade activity<\/strong>:<\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

There are basically 2 ways in which we can perform the upgrade, do let us know if you have come across any other ways in the comment.<\/p>\n\n\n\n

  1. Upgrade to 0.11.14<\/strong> if you are running a version lesser than that to move to 0.12.x<\/strong> version<\/li>
  2. Take the state file of the current environment, and follow the blog to know further \ud83d\ude09 <\/li><\/ol>\n\n\n\n

    GitHub link:<\/strong> https:\/\/github.com\/prakashjha08\/vpc-module<\/a><\/p>\n\n\n\n

    Module block:<\/strong><\/p>\n\n\n\n

    provider \"aws\" {\n  region  = \"ap-south-1\"\n}\n\nmodule \"vpc\" {\n  source      = \"git@github.com:prakashjha08\/vpc-module.git?ref=main\"\n  # source = \".\/vpc\"\n  vpc_cidr    = \"10.0.0.0\/16\"\n  subnet_cidr = [\"10.0.0.0\/20\", \"10.0.16.0\/20\"]\n  sg_name     = \"tf-upgrade\"\n  ingress_rules = {\n    \"tcp,443,443\" = \"10.0.0.0\/20,10.0.16.0\/20\"\n    \"tcp,1,65535\" = \"10.0.32.0\/20,10.0.48.0\/20\"\n    \"tcp,80,80\"   = \"10.0.64.0\/20,10.0.80.0\/20\"\n  }\n}<\/pre>\n\n\n\n
    Option-1:<\/strong><\/h4>\n\n\n\n
    Terraform suggests installing version 0.11.14 at first to seamlessly move to further versions.<\/p>\n\n\n\n
    Let\u2019s have a look.<\/p>\n\n\n\n
    To check the TF version \u2192 Use terraform -version<\/strong> command <\/p>\n\n\n\n
    Download version 0.11.14 from https:\/\/releases.hashicorp.com\/terraform\/0.11.14\/<\/a> <\/p>\n\n\n\n
    \"\"
    Checking TF version<\/strong><\/figcaption><\/figure>\n\n\n\n
    Terraform provides us with a command to check\/instruct how to upgrade.<\/p>\n\n\n\n
    \"\"
    terraform 0.12checklist<\/strong><\/figcaption><\/figure>\n\n\n\n
    Changes need to be made in the provider block.<\/p>\n\n\n\n
    provider \"aws\" {\n  region = \"ap-south-1\"\n  version = \"~> 4.22.0\"\n}<\/pre>\n\n\n\n
    Validation succeeds once you change the version, now we will have to download 0.12.31 as it supports AWS provider version ~> 4.22.0 and run terraform init, then terraform 0.12upgrade<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    And, you have successfully upgraded to v0.12.31<\/strong>!!<\/p>\n\n\n\n
    After upgrading to terraform 0.12.31, you will be able to see a few warnings related to interpolation as below<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    You can work on these, else, SPOILER ALERT!!, these errors will come back in the later versions.<\/p>\n\n\n\n
    Remove \u201c${,}\u201d and quoted types like \u201cstring\u201d -> string<\/p>\n\n\n\n
    Install 0.13.5 and run terraform 0.13upgrade and terraform init<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Install 0.14.0, move version constraint to required_providers<\/strong> block or remove the version argument and run terraform init and apply to update the state file.<\/p>\n\n\n\n
    You can directly upgrade to the latest version from here and run terraform init -upgrade<\/p>\n\n\n\n
    Congratulations, your infra is upgraded to the latest version.<\/p>\n\n\n\n
    That\u2019s all about a straightforward upgrade.<\/p>\n\n\n\n
    Option-2:<\/strong><\/h4>\n\n\n\n
    I was working on an Infra, where the code in v0.11.11 was out of sync, in that case, we will have to use Option 2, which seems a little tricky as we will be seeing a new command, terraform import<\/strong>.<\/p>\n\n\n\n
    \"\"<\/figure>\n\n\n\n
    Terraform import helps you to import resources to state file that were created either manually or via some other IaC tools (Cloudformation, Pulumi, boto3, etc). Once the import is done, we will be able to manage the resources using Terraform, so apply destroy commands can be used.<\/p>\n\n\n\n
    Before importing, we need to make sure that a resource block already exists in the configuration files.<\/p>\n\n\n\n
    Syntax:<\/strong> <\/p>\n\n\n\n
    1. Import module: terraform import module.<module_name>.aws_vpc.<resource_name> <resource_id><\/li>
    2. Import resource: terraform import aws_vpc.<resource_name> <resource_id><\/li><\/ol>\n\n\n\n
      Module blocks were present on a git repository and were cloned on an EC2 Instance, from where it was getting managed.<\/p>\n\n\n\n
      I followed these steps on the instance:<\/p>\n\n\n\n
      1. terraform show<\/strong> for the v0.11.11 state.<\/li>
      2. Take the ID and resource names <\/li>
      3. Copied the output of terraform show<\/strong> and cloned the git repository to local<\/li><\/ol>\n\n\n\n
        \"\"
        terraform show<\/strong><\/figcaption><\/figure>\n\n\n\n
        I had to remove the interpolations(warnings) and quoted types(errors) from variables as they are not supported in the latest version.<\/p>\n\n\n\n
        \"\"
        Backend block for v0.11.11<\/strong><\/figcaption><\/figure>\n\n\n\n
        \"\"
        Backend block for v1.2.2<\/strong><\/figcaption><\/figure>\n\n\n\n
        Once you change the backend config in a different directory, you are good to go with the importing of resources that were created with earlier versions.<\/p>\n\n\n\n
        Importing VPC:<\/strong><\/h5>\n\n\n\n
        Command:<\/strong><\/h6>\n\n\n\n
        terraform import module.vpc.aws_vpc.vpc vpc-09b279ec86986776d<\/pre>\n\n\n\n
        Output:<\/h6>\n\n\n\n
        module.vpc.aws_vpc.vpc: Importing from ID \"vpc-09b279ec86986776d\"...\nmodule.vpc.aws_vpc.vpc: Import prepared!\n  Prepared aws_vpc for import\nmodule.vpc.aws_vpc.vpc: Refreshing state... [id=vpc-09b279ec86986776d]\n\nImport successful!\n\nThe resources that were imported are shown above. These resources are now in\nyour Terraform state and will henceforth be managed by Terraform.\n<\/pre>\n\n\n\n
        Importing subnets:<\/h5>\n\n\n\n
        Command:<\/h6>\n\n\n\n
        terraform import module.vpc.aws_subnet.subnet[0] subnet-0b1829adb8d262da6\nterraform import module.vpc.aws_subnet.subnet[1] subnet-0d2d485fab98d7d6c<\/pre>\n\n\n\n
        Output:<\/h6>\n\n\n\n
        module.vpc.aws_subnet.subnet[0]: Importing from ID \"subnet-0b1829adb8d262da6\"...\nmodule.vpc.aws_subnet.subnet[0]: Import prepared!\n  Prepared aws_subnet for import\nmodule.vpc.aws_subnet.subnet[0]: Refreshing state... [id=subnet-0b1829adb8d262da6]\n\n\nmodule.vpc.aws_subnet.subnet[1]: Importing from ID \"subnet-0d2d485fab98d7d6c\"...\nmodule.vpc.aws_subnet.subnet[1]: Import prepared!\n  Prepared aws_subnet for import\nmodule.vpc.aws_subnet.subnet[1]: Refreshing state... [id=subnet-0d2d485fab98d7d6c]\n\nImport successful!\n\nThe resources that were imported are shown above. These resources are now in\nyour Terraform state and will henceforth be managed by Terraform.\n<\/pre>\n\n\n\n
        Importing security group and rules:<\/h5>\n\n\n\n
        Command:<\/h6>\n\n\n\n
        $ terraform import module.vpc.aws_security_group.sg sg-08ed5e41159e59299\n\n$ terraform import module.vpc.aws_security_group_rule.ingress[0] sg-08ed5e41159e59299_ingress_tcp_1_65535_10.0.32.0\/20_10.0.48.0\/20\n\n$ terraform import module.vpc.aws_security_group_rule.ingress[1] sg-08ed5e41159e59299_ingress_tcp_443_443_10.0.0.0\/20_10.0.16.0\/20\n\n$ terraform import module.vpc.aws_security_group_rule.ingress[2] sg-08ed5e41159e59299_ingress_tcp_80_80_10.0.64.0\/20_10.0.80.0\/20\n\n$ terraform import module.vpc.aws_security_group_rule.egress sg-08ed5e41159e59299_egress_all_0_0_0.0.0.0\/0\n<\/pre>\n\n\n\n
        Output:<\/h6>\n\n\n\n
        module.vpc.aws_security_group.sg: Importing from ID \"sg-08ed5e41159e59299\"...\nmodule.vpc.aws_security_group.sg: Import prepared!\n  Prepared aws_security_group for import\nmodule.vpc.aws_security_group.sg: Refreshing state... [id=sg-08ed5e41159e59299]\n\nmodule.vpc.aws_security_group_rule.ingress[0]: Importing from ID \"sg-08ed5e41159e59299_ingress_tcp_1_65535_10.0.32.0\/20_10.0.48.0\/20\"...\nmodule.vpc.aws_security_group_rule.ingress[0]: Import prepared!\n  Prepared aws_security_group_rule for import\nmodule.vpc.aws_security_group_rule.ingress[0]: Refreshing state... [id=sg-08ed5e41159e59299_ingress_tcp_1_65535_10.0.32.0\/20_10.0.48.0\/20]\n\nmodule.vpc.aws_security_group_rule.ingress[1]: Importing from ID \"sg-08ed5e41159e59299_ingress_tcp_443_443_10.0.0.0\/20_10.0.16.0\/20\"...\nmodule.vpc.aws_security_group_rule.ingress[1]: Import prepared!\n  Prepared aws_security_group_rule for import\nmodule.vpc.aws_security_group_rule.ingress[1]: Refreshing state... [id=sg-08ed5e41159e59299_ingress_tcp_443_443_10.0.0.0\/20_10.0.16.0\/20]\n\nmodule.vpc.aws_security_group_rule.ingress[2]: Importing from ID \"sg-08ed5e41159e59299_ingress_tcp_80_80_10.0.64.0\/20_10.0.80.0\/20\"...\nmodule.vpc.aws_security_group_rule.ingress[2]: Import prepared!\n  Prepared aws_security_group_rule for import\nmodule.vpc.aws_security_group_rule.ingress[2]: Refreshing state... [id=sg-08ed5e41159e59299_ingress_tcp_80_80_10.0.64.0\/20_10.0.80.0\/20]\n\nmodule.vpc.aws_security_group_rule.egress: Importing from ID \"sg-08ed5e41159e59299_egress_all_0_0_0.0.0.0\/0\"...\nmodule.vpc.aws_security_group_rule.egress: Import prepared!\n  Prepared aws_security_group_rule for import\nmodule.vpc.aws_security_group_rule.egress: Refreshing state... [id=sg-08ed5e41159e59299_egress_all_0_0_0.0.0.0\/0]<\/pre>\n\n\n\n
        Once all the resources are imported, run the plan command to check if anything is getting changed\/destroyed, resolve it, and apply the configuration.<\/p>\n\n\n\n
        \"\"<\/figure>\n\n\n\n
        So, Terraform upgrade is now completed with the import command.<\/p>\n\n\n\n
        Conclusion:<\/strong><\/h2>\n\n\n\n
        Key takeaways from this blog:<\/p>\n\n\n\n
        1. How to upgrade the TF version<\/li>
        2. Multiple terraform commands<\/li><\/ol>\n\n\n\n
          Both the ways seem to work fine for upgrade, Option-1<\/strong> is best suited for infrastructure that is in sync with the TF code, and Option-2<\/strong> can be used to cut the middle versions out and directly import existing resources to new code.<\/p>\n\n\n\n
          The choice is yours. Hope this blog helps.<\/p>\n\n\n\n
          Time to go!<\/p>\n\n\n\n
          \"\"<\/figure>\n\n\n\n
          If you have come this far, a big shout-out to you. Thanks for reading the whole blog. <\/p>\n\n\n\n
          Happy Learning! \ud83d\ude42 <\/p>\n\n\n\n
          Image References:<\/strong><\/p>\n\n\n\n