generated from clouddrove/terraform-module-template
-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Feat: 🚀 use external-secret in multiple namespaces (#33)
* feat: use external-secret in multiple namespaces * fix- tf-check secret_manager_name error * fix- tf-check terraform format * fix- tf-lint warnings * feat: multiple istio-gateways on same cluster & fixed tf-lints
- Loading branch information
1 parent
8a40085
commit c549c3a
Showing
21 changed files
with
429 additions
and
230 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,113 @@ | ||
plugin "aws" { | ||
enabled = true | ||
version = "0.21.0" | ||
source = "github.com/terraform-linters/tflint-ruleset-aws" | ||
} | ||
|
||
config { | ||
#Enables module inspection | ||
module = false | ||
force = false | ||
} | ||
|
||
# Required that all AWS resources have specified tags. | ||
rule "aws_resource_missing_tags" { | ||
enabled = true | ||
tags = [ | ||
"Name", | ||
"Environment", | ||
] | ||
} | ||
|
||
# Disallow deprecated (0.11-style) interpolation | ||
rule "terraform_deprecated_interpolation" { | ||
enabled = true | ||
} | ||
|
||
# Disallow legacy dot index syntax. | ||
rule "terraform_deprecated_index" { | ||
enabled = true | ||
} | ||
|
||
# Disallow variables, data sources, and locals that are declared but never used. | ||
rule "terraform_unused_declarations" { | ||
enabled = true | ||
} | ||
|
||
# Disallow // comments in favor of #. | ||
rule "terraform_comment_syntax" { | ||
enabled = false | ||
} | ||
|
||
# Disallow output declarations without description. | ||
rule "terraform_documented_outputs" { | ||
enabled = true | ||
} | ||
|
||
# Disallow variable declarations without description. | ||
rule "terraform_documented_variables" { | ||
enabled = true | ||
} | ||
|
||
# Disallow variable declarations without type. | ||
rule "terraform_typed_variables" { | ||
enabled = true | ||
} | ||
|
||
# Disallow specifying a git or mercurial repository as a module source without pinning to a version. | ||
rule "terraform_module_pinned_source" { | ||
enabled = true | ||
} | ||
|
||
# Enforces naming conventions | ||
rule "terraform_naming_convention" { | ||
enabled = true | ||
|
||
#Require specific naming structure | ||
variable { | ||
format = "snake_case" | ||
} | ||
|
||
locals { | ||
format = "snake_case" | ||
} | ||
|
||
output { | ||
format = "snake_case" | ||
} | ||
|
||
#Allow any format | ||
resource { | ||
format = "none" | ||
} | ||
|
||
module { | ||
format = "none" | ||
} | ||
|
||
data { | ||
format = "none" | ||
} | ||
|
||
} | ||
|
||
# Disallow terraform declarations without require_version. | ||
# rule "terraform_required_version" { | ||
# enabled = true | ||
# } | ||
|
||
# Require that all providers have version constraints through required_providers. | ||
rule "terraform_required_providers" { | ||
enabled = true | ||
} | ||
|
||
# Ensure that a module complies with the Terraform Standard Module Structure | ||
rule "terraform_standard_module_structure" { | ||
enabled = true | ||
} | ||
|
||
# terraform.workspace should not be used with a "remote" backend with remote execution. | ||
rule "terraform_workspace_remote" { | ||
enabled = true | ||
} | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,17 @@ | ||
# -- Make sure to use same Namespace for Gateway, Ingress & var.istio_ingress_extra_configs["namespace"], default namespace is set to `istio-system`. | ||
apiVersion: networking.istio.io/v1alpha3 | ||
kind: Gateway | ||
metadata: | ||
name: istio-gateway-internal | ||
namespace: istio-system | ||
spec: | ||
selector: | ||
istio: ingress-internal | ||
servers: | ||
- hosts: | ||
- "*.test.clouddrove.com" | ||
- "test.clouddrove.com" | ||
port: | ||
number: 80 | ||
name: http | ||
protocol: HTTP |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -16,6 +16,6 @@ spec: | |
pathType: Prefix | ||
backend: | ||
service: | ||
name: istio-ingress | ||
name: istio-ingress-internal | ||
port: | ||
number: 80 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.