multi-arch-builders/tofu: Add conditional statement for networking

For rhcos we already have pre-existing networking
configurations, including VPC, subnets, and other
settings. Since we lack the permissions to create
new ones, let's use a conditional 'count' statement
to ensure tofu doesn't attempt to create additional
networking resources.

Signed-off-by: Renata <[email protected]>

Author: ravanelli

multi-arch-builders/provisioning/aarch64/main.tf

@@ -117,7 +117,7 @@ variable "rhcos_aws_subnet_internal" {
 # If we are RHCOS we'll be using an already existing VPC/subnet rather
 # than the newly created one.
 locals {
-  aws_vpc_id = var.distro == "rhcos" ? var.rhcos_aws_vpc_prod : aws_vpc.vpc.id
+  aws_vpc_id = var.distro == "rhcos" ? var.rhcos_aws_vpc_prod : aws_vpc.vpc[0].id
   aws_subnet_id = var.distro == "rhcos" ? var.rhcos_aws_subnet_internal : aws_subnet.private_subnets[0].id
 }
 

multi-arch-builders/provisioning/aarch64/networks.tf

@@ -1,12 +1,14 @@
 resource "aws_vpc" "vpc" {
+  count = var.distro == "fcos" ? 1 : 0
   cidr_block           = "172.31.0.0/16"
   tags = {
     Name = "${var.project}-vpc"
   }
 }
 
 resource "aws_internet_gateway" "gw" {
-  vpc_id   = aws_vpc.vpc.id
+  count = var.distro == "fcos" ? 1 : 0
+  vpc_id   = aws_vpc.vpc[0].id
 }
 
 data "aws_availability_zones" "azs" {
@@ -20,8 +22,8 @@ variable "private_subnet_cidrs" {
 }
 
 resource "aws_subnet" "private_subnets" {
- count      = length(data.aws_availability_zones.azs.names)
- vpc_id     = aws_vpc.vpc.id
+ count      = var.distro == "fcos" ? length(data.aws_availability_zones.azs.names) : 0
+ vpc_id     = aws_vpc.vpc[0].id
  cidr_block = element(var.private_subnet_cidrs, count.index)
  availability_zone = element(data.aws_availability_zones.azs.names, count.index)
  tags = {
@@ -31,17 +33,19 @@ resource "aws_subnet" "private_subnets" {
 
 
 resource "aws_route_table" "internet_route" {
-  vpc_id   = aws_vpc.vpc.id
+  count = var.distro == "fcos" ? 1 : 0
+  vpc_id   = aws_vpc.vpc[0].id
   route {
     cidr_block = "0.0.0.0/0"
-    gateway_id = aws_internet_gateway.gw.id
+    gateway_id = aws_internet_gateway.gw[0].id
   }
   tags = {
     Name = "${var.project}-ig"
   }
 }
 
 resource "aws_main_route_table_association" "public-set-main-default-rt-assoc" {
-  vpc_id         = aws_vpc.vpc.id
-  route_table_id = aws_route_table.internet_route.id
+  count = var.distro == "fcos" ? 1 : 0
+  vpc_id         = aws_vpc.vpc[0].id
+  route_table_id = aws_route_table.internet_route[0].id
 }