Org:infraprints on jrbeverly

terraform-aws-iam-ci-role

Mon, 04 Nov 2019 00:24:25 +0000

AWS IAM External Role

Terraform module for a continuous integration user-role pairing.

These types of resources are supported:

IAM Role

Usage

module "cicd_setup" {
 source = "git::https://gitlab.com/infraprints/modules/aws/iam-ci-role"

 username = "infraprints-iam-ci-role-basic"
 role_name = "infraprints-iam-ci-role-basic"

 environment_variable = {
 s3_bucket = "infraprints-bucket-example"
 hello_world = "hello world"
 }
}

Examples

Basic Example

Notes

Environment variables are prefixed with ENV_ to prevent them

Inputs

Name	Description	Type	Default	Required
environment_variable	Times	map	`<map>`	no
labels		map	`<map>`	no
length	The length of the external id desired.	string	`"16"`	no
path		string	`"ci"`	no
period		string	`"32400"`	no
role_name	The name of the role.	string	n/a	yes
service		string	`"GitLab"`	no
tags	Key-value mapping of tags for the IAM role.	map	`<map>`	no
username	The name of the user.	string	n/a	yes

Outputs

Name	Description
arn	The Amazon Resource Name (ARN) specifying the role.
create_date	The Amazon Resource Name (ARN) specifying the role.
unique_id	The Amazon Resource Name (ARN) specifying the role.

terraform-aws-terraform-state-output

Mon, 04 Nov 2019 00:23:12 +0000

AWS S3 Terraform State Output

Terraform module which creates an S3 Object containing terraform outputs.

These types of resources are supported:

Usage

locals {
 topics = ["aws", "s3", "terraform"]
 tags = {
 name = "infraprints",
 description = "Infrastructure as Code."
 }
}

module "output_resources" {
 source = "git::https://gitlab.com/infraprints/modules/aws/terraform-state-output"

 bucket = "infraprints-terraform-state-output"
 key = "aws/infraprints/project/outputs.tf"

 terraform_output = [
 {
 key = "aws_account_id"
 value = "123412341234"
 },
 {
 key = "topics"
 value = jsonencode(local.topics)
 },
 {
 key = "tags"
 value = jsonencode(local.tags)
 },
 ]
}

With using the output of this module here:

terraform-aws-route53-subdomains

Mon, 04 Nov 2019 00:21:10 +0000

terraform-aws-acm-certificate

terraform-aws-terraform-remote-state

Mon, 04 Nov 2019 00:20:48 +0000

AWS Terraform Remote State with Lock Table

Terraform module which creates a terraform remote state storage in S3 with a DynamoDB lock table.

These types of resources are supported:

Usage

module "remote_state" {
 source = "git::https://gitlab.com/infraprints/modules/aws/terraform-remote-state"

 bucket = "infraprints-terraform-remote-state"
 table = "infraprints-terraform-lock-table"
}


resource "aws_iam_role" "terraform" {
 name = "infraprints-terraform"
 assume_role_policy = <<EOF
{
 "Version": "2012-10-17",
 "Statement": [
 {
 "Action": "sts:AssumeRole",
 "Principal": {
 "Service": "ec2.amazonaws.com"
 },
 "Effect": "Allow",
 "Sid": ""
 }
 ]
}
EOF
}


resource "aws_iam_role_policy" "terraform_policy" {
 name = "TerraformRemoteState"
 role = aws_iam_role.terraform.id
 policy = module.remote_state.write_policy
}

Examples

Basic Example

Notes

Only SSL access is permitted to the remote state storage
Only encrypted objects can be uploaded to the remote state storage
The lock table is not encrypted

Inputs

Placeholder.

terraform-aws-s3-artifacts

Mon, 04 Nov 2019 00:18:24 +0000

AWS S3 Terraform State Output

Terraform module for an tiered storage S3 bucket with eventual object expiration. Primary use key is for a build artifacts storage.

These types of resources are supported:

terraform-aws-codepipeline-terraform

Mon, 04 Nov 2019 00:15:50 +0000

terraform-aws-acm-certificate

Mon, 04 Nov 2019 00:14:04 +0000

AWS ACM DNS Validated Certificate

Terraform module for provisioning a DNS validated certificate, along with the required validation records. The module will wait for validation to complete.

These types of resources are supported:

terraform-aws-iam-external-role

Mon, 04 Nov 2019 00:11:46 +0000

AWS IAM External Role

Terraform module for describing an IAM role responsible for delegating cross-account access.

These types of resources are supported:

IAM Role

Usage

module "example" {
 source = "git::https://gitlab.com/infraprints/modules/aws/iam-external-role"

 name = "infraprints-iam-external-role"
 external_id = "TXAiS9rfgQghzWW2"
 role_arn = ["${aws_iam_role.default.arn}"]
 count = "1"
}

resource "aws_iam_role" "default" {
 name = "infraprints-ec2-role"

 assume_role_policy = <<EOF
{
 "Version": "2012-10-17",
 "Statement": [
 {
 "Action": "sts:AssumeRole",
 "Principal": {
 "Service": "ec2.amazonaws.com"
 },
 "Effect": "Allow",
 }
 ]
}
EOF
}

Examples

Notes

The count property is required as a constant as a workaround to a Terraform issue.

Inputs

Name	Description	Type	Default	Required
count	The number of principal entities.	string	n/a	yes
description	The description of the role.	string	`""`	no
external_id	External Identifier set on the role.	string	`""`	no
force_detach_policies	Specifies to force detaching any policies the role has before destroying it. Defaults to false.	string	`"true"`	no
max_session_duration	The maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.	string	`"3600"`	no
name	The name of the role.	string	n/a	yes
path	The path to the role. See IAM Identifiers for more information.	string	`"/external/"`	no
permissions_boundary	The ARN of the policy that is used to set the permissions boundary for the role.	string	`""`	no
role_arn	The list of principal entities that is allowed to assume the role.	list	n/a	yes
tags	Key-value mapping of tags for the IAM role.	map	`<map>`	no

Outputs

Name	Description
arn	The Amazon Resource Name (ARN) specifying the role.
create_date	The Amazon Resource Name (ARN) specifying the role.
unique_id	The Amazon Resource Name (ARN) specifying the role.

readme

Mon, 04 Nov 2019 00:10:23 +0000

terraform-id

Mon, 04 Nov 2019 00:07:59 +0000

Terraform Resource ID

Construct a formatted name for a Terraform resource.

terraform-gitlab-netlify-cicd

Mon, 04 Nov 2019 00:00:28 +0000

Terraform Netlify Gitlab CI/CD

Terraform module which creates a site on Netlify with the necessary variables for GitLab CI deployments.

These types of resources are supported:

Netlify Site

Usage

module "cloudability" {
 source = "git::https://gitlab.com/infraprints/modules/netlify/gitlab-cicd.git?ref=master"

 name = "my-netlify-website"
 custom_domain = "www.example.com"
 project = "01234567"
}

Examples

Basic Example

Notes

Three GitLab CI Environment Variables (NETLIFY_SITE_ID, NETLIFY_NAME, NETLIFY_CUSTOM_DOMAIN)

Inputs

Name	Description	Type	Default	Required
name	A friendly name for the netlify site.	string	-	yes
custom_domain	FQDN built using the zone domain and name.	string	-	yes
project	The integer that uniquely identifies the project within the gitlab install.	string	-	yes

Outputs

Name	Description
id	The unique identifier.
name	Name of your site on netlify.
custom_domain	A custom domain name, must be configured using a cname in accordance with netlify’s docs .

website

Sun, 03 Nov 2019 17:48:38 +0000

Website

The work-in-progress stub for the infraprints website.

simple-terraform

Fri, 18 Jan 2019 00:04:09 +0000

Prototype CodePipeline Terraform Repository

A repository for terraform execution in a Codepipeline task. This repository is part of an original experiment

I wanted to have an terraform executor that met the following requirements: