chore: add the tags propagation and var.tags to additional resources (#41)

* chore: add the tags propagation and var.tags to additional resources that support it

* [Boldlinksig]: Pre-commit auto updated files on 28-05-2024 10:20:21.

---------

Co-authored-by: boldlinksig <boldlinksig@boldlink.io>

Author: hugoalmeida264

CHANGELOG.md

@@ -28,6 +28,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - feat: expand volume block of the task definition as it has more configuration
 - feat: Add example for service security group using a security group id for `service_ingress_sg`
 
+## [1.12.0] - 2024-05-28
+### Changes
+- feat: Add progate tags to the ecs service
+- feat: Add tags to additional resources that support it
+
 ## [1.11.0] - 2024-05-28
 ### Changes
 - feat: Add Step Scaling Policy to ECS Service

README.md

@@ -277,6 +277,7 @@ No modules.
 | <a name="input_network_configuration"></a> [network\_configuration](#input\_network\_configuration) | (Optional) Network configuration for the service. This parameter is required for task definitions that use the awsvpc network mode to receive their own Elastic Network Interface, and it is not supported for other network modes. | `any` | `{}` | no |
 | <a name="input_network_mode"></a> [network\_mode](#input\_network\_mode) | Docker networking mode to use for the containers in the task. Valid values are none, bridge, awsvpc, and host. | `string` | `"none"` | no |
 | <a name="input_path"></a> [path](#input\_path) | (May be required) Destination for the health check request. Required for HTTP/HTTPS ALB and HTTP NLB. Only applies to HTTP/HTTPS. | `string` | `"/"` | no |
+| <a name="input_propagate_tags"></a> [propagate\_tags](#input\_propagate\_tags) | (Optional) Whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK\_DEFINITION | `string` | `"TASK_DEFINITION"` | no |
 | <a name="input_requires_compatibilities"></a> [requires\_compatibilities](#input\_requires\_compatibilities) | Set of launch types required by the task. The valid values are EC2 and FARGATE. | `list(string)` | `[]` | no |
 | <a name="input_retention_in_days"></a> [retention\_in\_days](#input\_retention\_in\_days) | Specifies the number of days you want to retain log events in the specified log group. Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1827, 3653, and 0. If you select 0, the events in the log group are always retained and never expire. | `number` | `3653` | no |
 | <a name="input_scalable_dimension"></a> [scalable\_dimension](#input\_scalable\_dimension) | (Required) The scalable dimension of the scalable target. | `string` | `""` | no |

examples/complete/main.tf

@@ -40,6 +40,7 @@ module "ecs_service_alb" {
   path                              = var.path
   tasks_minimum_healthy_percent     = 80
   tasks_maximum_percent             = 150
+  propagate_tags                    = "SERVICE"
   tags                              = local.tags
 
   load_balancer = [{

main.tf

@@ -10,6 +10,7 @@ resource "aws_ecs_service" "service" {
   enable_execute_command             = var.enable_execute_command
   force_new_deployment               = var.force_new_deployment
   triggers                           = var.triggers
+  propagate_tags                     = var.propagate_tags
   tags                               = var.tags
 
   deployment_controller {
@@ -49,13 +50,15 @@ resource "aws_ecs_task_definition" "this" {
     name = var.volume_name
   }
   container_definitions = var.container_definitions
+  tags                  = var.tags
 }
 
 # IAM Roles
 resource "aws_iam_role" "task_role" {
   count              = local.create_task_definition && var.task_assume_role_policy != "" ? 1 : 0
   name               = "${var.name}-ecs-task-role"
   assume_role_policy = var.task_assume_role_policy
+  tags               = var.tags
 }
 
 resource "aws_iam_role_policy" "task_role_policy" {
@@ -70,6 +73,7 @@ resource "aws_iam_role" "task_execution_role" {
   description        = "${var.name} task execution role"
   name               = "${var.name}-task-execution-role"
   assume_role_policy = var.task_execution_assume_role_policy
+  tags               = var.tags
 }
 
 resource "aws_iam_role_policy" "task_execution_role_policy" {
@@ -86,6 +90,7 @@ resource "aws_kms_key" "cloudwatch_log_group" {
   enable_key_rotation     = var.enable_key_rotation
   policy                  = local.kms_policy
   deletion_window_in_days = var.key_deletion_window_in_days
+  tags                    = var.tags
 }
 
 resource "aws_cloudwatch_log_group" "main" {
@@ -148,6 +153,7 @@ resource "aws_lb_target_group" "main_alb" {
   }
 
   depends_on = [aws_lb.main]
+  tags       = var.tags
 }
 
 resource "aws_lb_target_group" "main_nlb" {
@@ -162,7 +168,7 @@ resource "aws_lb_target_group" "main_nlb" {
     healthy_threshold = var.healthy_threshold
     interval          = var.interval
   }
-
+  tags       = var.tags
   depends_on = [aws_lb.main]
 }
 
@@ -182,6 +188,7 @@ resource "aws_lb_listener" "http_redirect" {
       status_code = "HTTP_301"
     }
   }
+  tags = var.tags
   lifecycle {
     create_before_destroy = true
   }
@@ -200,6 +207,7 @@ resource "aws_lb_listener" "https" {
     type             = var.default_type
     target_group_arn = aws_lb_target_group.main_alb[0].arn
   }
+  tags = var.tags
   lifecycle {
     create_before_destroy = true
   }
@@ -216,6 +224,7 @@ resource "aws_lb_listener" "nlb" {
     type             = var.default_type
     target_group_arn = aws_lb_target_group.main_nlb[0].arn
   }
+  tags = var.tags
   lifecycle {
     create_before_destroy = true
   }
@@ -255,6 +264,7 @@ resource "aws_acm_certificate" "main" {
   lifecycle {
     create_before_destroy = true
   }
+  tags = var.tags
 }
 
 # Alb Security group
@@ -366,6 +376,7 @@ resource "aws_appautoscaling_target" "this" {
   depends_on = [
     aws_ecs_service.service
   ]
+  tags = var.tags
 }
 
 resource "aws_appautoscaling_policy" "stepscaling" {
@@ -393,7 +404,6 @@ resource "aws_appautoscaling_policy" "stepscaling" {
       }
     }
   }
-
   depends_on = [
     aws_appautoscaling_target.this
   ]

variables.tf

@@ -514,3 +514,10 @@ variable "service_ingress_rules_sg" {
   type        = list(any)
   default     = []
 }
+
+variable "propagate_tags" {
+  description = "(Optional) Whether to propagate the tags from the task definition or the service to the tasks. The valid values are SERVICE and TASK_DEFINITION"
+  type        = string
+  default     = "TASK_DEFINITION"
+
+}