initial commit

examples/basic/README.md

@@ -1,29 +0,0 @@
-<!-- BEGIN_TF_DOCS -->
-## Requirements
-
-| Name | Version |
-|------|---------|
-| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
-| <a name="requirement_aws"></a> [aws](#requirement\_aws) | >= 3.72.0 |
-| <a name="requirement_awscc"></a> [awscc](#requirement\_awscc) | >= 0.11.0 |
-
-## Providers
-
-No providers.
-
-## Modules
-
-No modules.
-
-## Resources
-
-No resources.
-
-## Inputs
-
-No inputs.
-
-## Outputs
-
-No outputs.
-<!-- END_TF_DOCS -->

examples/basic/main.tf

@@ -1,5 +0,0 @@
-#####################################################################################
-# Terraform module examples are meant to show an _example_ on how to use a module
-# per use-case. The code below should not be copied directly but referenced in order
-# to build your own root module that invokes this module
-#####################################################################################

examples/basic/providers.tf

@@ -1,21 +0,0 @@
-terraform {
-  required_version = ">= 0.14.0"
-  required_providers {
-    aws = {
-      source  = "hashicorp/aws"
-      version = ">= 3.72.0"
-    }
-    awscc = {
-      source  = "hashicorp/awscc"
-      version = ">= 0.11.0"
-    }
-  }
-}
-
-provider "awscc" {
-  user_agent = [{
-    product_name    = "terraform-awscc-"
-    product_version = "0.0.1"
-    comment         = "V1/AWS-D69B4015/<github repo id>"
-  }]
-}

examples/eks/main.tf

@@ -0,0 +1,24 @@
+#---------------------------------------------------------------
+# EKS Blueprints
+#---------------------------------------------------------------
+
+module "eks_blueprints" {
+  source = "../../.."
+
+  cluster_name    = local.name
+  cluster_version = "1.22"
+
+  vpc_id             = module.vpc.vpc_id
+  private_subnet_ids = module.vpc.private_subnets
+
+  managed_node_groups = {
+    t3_l = {
+      node_group_name = "managed-ondemand"
+      instance_types  = ["t3.large"]
+      min_size        = 2
+      subnet_ids      = module.vpc.private_subnets
+    }
+  }
+
+  tags = local.tags
+}

examples/vpc/vpc.tf

@@ -0,0 +1,35 @@
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "~> 3.0"
+
+  name = local.name
+  cidr = local.vpc_cidr
+
+  azs             = local.azs
+  public_subnets  = [for k, v in local.azs : cidrsubnet(local.vpc_cidr, 8, k)]
+  private_subnets = [for k, v in local.azs : cidrsubnet(local.vpc_cidr, 8, k + 10)]
+
+  enable_nat_gateway   = true
+  single_nat_gateway   = true
+  enable_dns_hostnames = true
+
+  # Manage so we can name
+  manage_default_network_acl    = true
+  default_network_acl_tags      = { Name = "${local.name}-default" }
+  manage_default_route_table    = true
+  default_route_table_tags      = { Name = "${local.name}-default" }
+  manage_default_security_group = true
+  default_security_group_tags   = { Name = "${local.name}-default" }
+
+  public_subnet_tags = {
+    "kubernetes.io/cluster/${local.name}" = "shared"
+    "kubernetes.io/role/elb"              = 1
+  }
+
+  private_subnet_tags = {
+    "kubernetes.io/cluster/${local.name}" = "shared"
+    "kubernetes.io/role/internal-elb"     = 1
+  }
+
+  tags = local.tags
+}

examples/workloads.tf

@@ -0,0 +1,67 @@
+
+
+module "eks_observability_accelerator" {
+  source = "aws-ia/aws-observability-accelerator/terraform/eks"
+
+  # -- or use an existing cluster
+  eks_cluster_id       = var.eks_cluster_id
+
+  # enable managed add-on for ADOT. Do we enforce this or let users
+  # have their own configs for OTEL operator
+  enable_amazon_eks_adot = true
+
+  # -- or enable opentelemetry operator
+  enable_open_telemetry_operator = true
+  open_telemetry_operator_config = map() // custom config
+
+  # deploy selected workloads by count indexing
+
+  # this creates a new AMP workspace
+  create_managed_prometheus_workspace = true
+
+  enable_haproxy = true
+  haproxy_config = {
+    amp_endpoint = module/amp.endpoint
+    grafana_endpoint = module.grafana.endpoint
+  }
+
+  enable_java = true
+  java_config = {
+    amp_endpoint = ""
+    grafana_endpoint = ""
+  }
+
+
+
+
+  # -- or use an existing one
+  # seems like https://github.com/terraform-aws-modules/terraform-aws-managed-service-prometheus
+  # supports importing
+  amp_workspace_alias = var.amp_alias
+
+  # enable rules and alerts
+  enable_alert_manager = true
+
+  # -- or provide custom alerts definition
+  prometheus_custom_alert_rule = var.prometheus_custom_alert_rule
+
+
+  # create grafana workspace, and customer to deal with authentication later
+  create_managed_grafana_workspace = true
+  grafana_auth_provider            = var.grafana_auth_provider       //SAML or AWS_SSO
+  grafana_account_access_type      = var.grafana_account_access_type // CURRENT_ACCOUNT or ORGANIZATION
+  grafana_permission_type          = var.grafana_permission_type     // SERVICE_MANAGED or CUSTOMER_MANAGED
+  grafana_permission_role_arn      = var.grafana_permission_role_arn // if CUSTOMER_MANAGED
+
+  # -- or using existing amg workspace. so we can use API for keys
+  managed_grafana_workspace_id = var.managed_grafana_workspace_id
+
+}
+
+module "amp" {
+
+}
+
+module "grafana" {
+
+}