How to Release ASG in Multi-Account
GitHub Link:
How to Release:
- Fork & Clone the repository which want to release
- Go to the directory app services which want to release (e.g. hcndata)
- Change the AMI ID (image_id) in locals.tf
- Apply the terraform using aws google auth, please use Deployer Role to execute the terraform.
- Login terraform using aws google auth in terminal
- awsudo -u Deployer@tvlk-hcn-stg -- terraform init
- awsudo -u Deployer@tvlk-hcn-stg -- terraform plan
- awsudo -u Deployer@tvlk-hcn-stg -- terraform apply
- NOTE: Deployer@tvlk-hcn-stg is your SAML profile name in ~/.aws/config
- Wait till the terraform success to apply the changes
- Please don't forget to create the PR related to your changes
:tada:
~/.aws/config examples
# TVLK-HCN-DEV
[profile PowerUser@tvlk-hcn-dev]
source_profile = saml
role_arn = arn:aws:iam::196597192096:role/PowerUser
role_session_name = andy.fudiko@traveloka.com
region = ap-southeast-1
[profile ReadOnly@tvlk-hcn-dev]
source_profile = saml
role_arn = arn:aws:iam::196597192096:role/ReadOnly
role_session_name = andy.fudiko@traveloka.com
region = ap-southeast-1
# TVLK-HCN-STG
[profile PowerUser@tvlk-hcn-stg]
source_profile = saml
role_arn = arn:aws:iam::843160462482:role/PowerUser
role_session_name = andy.fudiko@traveloka.com
region = ap-southeast-1
[profile Deployer@tvlk-hcn-stg]
source_profile = saml
role_arn = arn:aws:iam::843160462482:role/Deployer
role_session_name = andy.fudiko@traveloka.com
region = ap-southeast-1
[profile ReadOnly@tvlk-hcn-stg]
source_profile = saml
role_arn = arn:aws:iam::843160462482:role/ReadOnly
role_session_name = andy.fudiko@traveloka.com
region = ap-southeast-1
# TVLK-HCN-PROD
[profile PowerUser@tvlk-hcn-prod]
source_profile = saml
role_arn = arn:aws:iam::961849530970:role/PowerUser
role_session_name = andy.fudiko@traveloka.com
region = ap-southeast-1
[profile ReadOnly@tvlk-hcn-prod]
source_profile = saml
role_arn = arn:aws:iam::961849530970:role/ReadOnly
role_session_name = andy.fudiko@traveloka.com
region = ap-southeast-1