fix(aws, stack): elasticache_transit_encryption_mode (#366)

* fix(aws, stack): elasticache_transit_encryption_mode

* fix: allow null for transit encryption mode

* fix: allow null

* stack: default to null

* Update variables.tf

* make nullable

* not nullable?

* do not use buggy contains

Author: swiknaba

aws/elasticache/variables.tf

@@ -84,10 +84,11 @@ variable "transit_encryption_enabled" {
 variable "transit_encryption_mode" {
   type        = string
   default     = "required"
+  nullable    = true
   description = "when migrating from no encryption to encryption, this must be set to 'preferred', then apply changes, then set to 'required'"
 
   validation {
-    condition     = contains(["required", "preferred"], var.transit_encryption_mode)
+    condition     = var.transit_encryption_mode == null || var.transit_encryption_mode == "required" || var.transit_encryption_mode == "preferred"
     error_message = "transit_encryption_mode must be either 'required' or 'preferred'"
   }
 }
@@ -116,6 +117,7 @@ variable "maxmemory_policy" {
   type        = string
   default     = null
   description = "Only effective, when NOT passing a custom parameter group name"
+
   validation {
     condition     = var.maxmemory_policy == null || contains(["volatile-lru", "allkeys-lru", "volatile-lfu", "allkeys-lfu", "volatile-random", "allkeys-random", "volatile-ttl", "noeviction"], var.maxmemory_policy)
     error_message = "maxmemory_policy must be one of volatile-lru, allkeys-lru, volatile-lfu, allkeys-lfu, volatile-random, allkeys-random, volatile-ttl, noeviction"

aws/stack/app/elasticache.tf

@@ -29,4 +29,5 @@ module "elasticache" {
   cluster_mode               = var.elasticache_cluster_mode
   maxmemory_policy           = var.elasticache_maxmemory_policy == null ? (var.elasticache_cluster_mode ? "volatile-lru" : "noeviction") : var.elasticache_maxmemory_policy
   transit_encryption_enabled = var.elasticache_transit_encryption_enabled
+  transit_encryption_mode    = var.elasticache_transit_encryption_mode
 }

aws/stack/app/variables.tf

@@ -397,6 +397,18 @@ variable "rds_ca_cert_identifier" {
 # =============== ECS ================ #
 variable "health_check_path" { default = "/livez" }
 
+variable "elasticache_transit_encryption_mode" {
+  type        = string
+  default     = null
+  nullable    = true
+  description = "when migrating from no encryption to encryption, this must be set to 'preferred', then apply changes, then set to 'required'"
+
+  validation {
+    condition     = var.elasticache_transit_encryption_mode == null || var.elasticache_transit_encryption_mode == "required" || var.elasticache_transit_encryption_mode == "preferred"
+    error_message = "elasticache_transit_encryption_mode must be either 'required' or 'preferred'"
+  }
+}
+
 variable "enable_container_insights" {
   type    = bool
   default = null