Aws workspaces (multi users)

urfanazad · July 7, 2020, 12:51am

hi guys, needs to help currently I have created workspaces for 1 user and I want to know what would be the code for creating the workspace and having multiple users do I use a parameter in ssm and use that as a datasource with split? or is there another way, because I am losing alot of sleep currently and help?

mikegreen · July 7, 2020, 2:07pm

Are you talking of a Terraform CLI workspace? Or is this TFE/TFC?

urfanazad · July 7, 2020, 2:42pm

TFC mate thanks for quick reply

mikegreen · July 8, 2020, 2:29pm

If you’ve created one workspace in TFC, you do the same to create more.

You can programatically create workspaces with the API endpoint as well… https://www.terraform.io/docs/cloud/api/workspaces.html#create-a-workspace

Your question is pretty vague - if you can expand on exactly what you’re trying to do, might be able to help.

urfanazad · July 10, 2020, 9:04pm

ok so this is my workspace.tf I have one name hardcoded which pre exists in the AD, i have added more names in the AD but I dont want to create another workspace.tf, how can I add multiple users?

resource “aws_workspaces_workspace” “uazad” {
directory_id = “{aws_directory_service_directory.tap-adconnector.id}" bundle_id = "{data.aws_workspaces_bundle.value_windows_10.id}”
user_name = “urfanazad”

root_volume_encryption_enabled = true
user_volume_encryption_enabled = true
volume_encryption_key = “alias/aws/workspaces”

workspace_properties {
compute_type_name = “VALUE”
user_volume_size_gib = 10
root_volume_size_gib = 80
running_mode = “AUTO_STOP”
running_mode_auto_stop_timeout_in_minutes = 60
}

mikegreen · July 10, 2020, 11:29pm

You’ll want to populate a list and then have TF iterate thru it with for_each

Here’s a random example of for_each

github.com

hixichen/terraform-perf-test/blob/master/modules/dev/auth-personnel.tf

# create group auth
locals {
  auth-group-map-temp = {
    for f in fileset("${path.module}/onboarding", "**/*personnel.users") :
    basename("${f}") => compact(split("\n", file("${path.module}/onboarding/${f}")))
  }

  // A map found by personnel group and personnel
  auth-group-map          = merge(flatten([local.auth-group-map-temp])...)
  auth-distinct-personnel = toset(distinct(flatten(values(local.auth-group-map))))
}

resource "vault_identity_entity" "personnel" {
  provider   = vault.zone
  depends_on = [vault_namespace.zone]
  for_each   = local.auth-distinct-personnel
  name       = each.value
  metadata = {
    email = each.value
  }

This file has been truncated. show original

rmgval · December 8, 2020, 6:11pm

I have a similar question. I have my code tuned up to create a workspace. But I have to create at least 16 for 16 different users. Can anyone help me accomplish this?