user-auth namespace is created by auth db-script (#188)

* user-auth namespace is created by auth db-script

* prometheus exporter to depend_on prometheus

* fix external dns not creating route53 entry

Author: davidcheung

templates/kubernetes/terraform/modules/kubernetes/cert_manager.tf

@@ -161,7 +161,7 @@ data "aws_iam_policy_document" "cert_manager_policy_doc" {
       "route53:ListResourceRecordSets"
     ]
 
-    resources = [for domain in var.external_dns_zones : "arn:aws:route53:::hostedzone/${domain}"]
+    resources = [for index, domain in var.external_dns_zones : "arn:aws:route53:::hostedzone/${data.aws_route53_zone.zones[index].zone_id}"]
   }
 
   statement {

templates/kubernetes/terraform/modules/kubernetes/external_dns.tf

@@ -34,7 +34,8 @@ data "aws_iam_policy_document" "external_dns_policy_doc" {
 
     actions = ["route53:ChangeResourceRecordSets"]
 
-    resources = [for domain in var.external_dns_zones : "arn:aws:route53:::hostedzone/${domain}"]
+    // data.aws_route53_zone.zones declared in ./cert-manager.tf
+    resources = [for index, domain in var.external_dns_zones : "arn:aws:route53:::hostedzone/${data.aws_route53_zone.zones[index].zone_id}"]
   }
 }
 

templates/kubernetes/terraform/modules/kubernetes/metrics/prometheus/main.tf

@@ -221,4 +221,5 @@ resource "helm_release" "elasticsearch_prometheus_exporter" {
     name  = "serviceMonitor.enabled"
     value = "true"
   }
+  depends_on = [helm_release.prometheus_stack]
 }

templates/kubernetes/terraform/modules/kubernetes/user_auth.tf

@@ -10,10 +10,11 @@ locals {
 module "user_auth" {
   count = length(var.user_auth)
   source                      = "commitdev/zero/aws//modules/user_auth"
-  version                     = "0.1.18"
+  version                     = "0.1.19"
 
   project                     = var.user_auth[count.index].name
   auth_namespace              = var.user_auth[count.index].auth_namespace
+  create_namespace            = false
   frontend_service_domain     = var.user_auth[count.index].frontend_service_domain
   backend_service_domain      = var.user_auth[count.index].backend_service_domain
   user_auth_mail_from_address = var.user_auth[count.index].user_auth_mail_from_address