AWS RDS SubnetGroups via Terraform

Question

Hello

We have terraform cdktf processes creating RDS instances. The terraform apply works fine on existing subnet groups. However, if subnet group and db instances are called on same terraform apply, it is unable to find the subnet group(Although the subnet group has been created correctly, during the Apply).

Is there a lag or any additional permissions required to ensure both can be created on the same terraform apply?

PS: Error: DBSubnetGroupNotFoundFault: DBSubnetGroup SampleSubnetGroup not found. status code:404, request id:#####

Note, when we check AWS , the subnetgroup has been created.
Now, if we rerun the Terraform Apply(without any changes), the process succeeds, as it picks up on the newly created subnet group and creates the RDS instance.

Please also note, when running Terraform Destroy, we observe same behavior , all resources are destroyed, but we are unable to destroy subnet group with  below error, however on a rerun of Terraform destroy, the subnet group gets destroyed.

Error on destroy: Cannot delete the subnet group #name because  at least one database is still using it. 
However when checking AWS, this is not the case, as the database had been destroyed successfully.

Thank you!

Riku_Kobayashi · Accepted Answer

It is hard to say without seeing the actual error, but you may want to try using "depends_on" to specify the dependency.  
https://developer.hashicorp.com/terraform/language/resources#depends_on-explicit-resource-dependencies

Steve_M · Answer

This is a strange one as Terraform knows all about the dependency that the `aws_db_instance` resource has on the `aws_db_subnet_group`, and it knows to park the provisioing of the RDS instance until the subnet group is fully created. And RDS is not exactly some niche, obscure thing that not much attention has been given to, it would have been one of the first thing to have been done, and done properly.

This is definitely a brand new subnet group that is being created from scratch, and not a pre-existing one that's being imported?

You also don't have some setup where two (or more) apply jobs are running in parallel and are not aware of each other (this sounds daft even as I'm typing it), such that job #1 tries to create the database before job #2 has finished creating the subnet group? But then you try it again and job #1 succeeds because the old job #2 has now finished?

Depending on how big and complicated your environment is you could try running [`terraform show`](https://developer.hashicorp.com/terraform/cli/commands/show) and it will list all the dependecies that Terraform understands is present in your code. [`terraform graph`](https://developer.hashicorp.com/terraform/cli/commands/graph) will give a graphical representation of the same, although for anything more than the most basic environment this quickly becomes a big mess of lines.

Good luck, and I'm interested to know what the outcome of this is.

AWS RDS SubnetGroups via Terraform

Add your answer

Relevant content