add README.md

.gitignore

@@ -36,3 +36,6 @@ terraform.rc
 # Ignore .env folder
 **/.env/*
 **/test/*
+
+# Ignore gomplate generated .tf files
+**/workloads/*/*.tf

aws/acb/.gomplate.yaml

@@ -0,0 +1,8 @@
+---
+inputDir: ../../tmpl/
+outputMap: '{{ .in | strings.TrimSuffix ".tmpl" | printf "%s" }}'
+datasources:
+  config:
+    url: .vars.yaml
+
+#  gomplate --config .gomplate.yaml

aws/acb/.vars.yaml

@@ -0,0 +1,6 @@
+---
+vpc:
+  version: "v5.17.0"
+  cidr: "10.80.0.0/16"
+  enable_nat_gateway: true
+  single_nat_gateway: true

aws/acb/terragrunt.hcl

@@ -0,0 +1,3 @@
+include "root" {
+  path = find_in_parent_folders()
+}

aws/terragrunt.hcl

@@ -0,0 +1,33 @@
+generate "provider" {
+  path      = "provider.tf"
+  if_exists = "overwrite"
+  contents  = <<EOF
+
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "6.0.0"
+    }
+  }
+}
+
+provider "aws" {
+    region = "${get_env("TF_VAR_aws_region")}"
+    assume_role {
+      role_arn     = "arn:aws:iam::${get_env("TF_VAR_aws_account_id")}:role/InfraAsCode"
+      session_name = "InfraAsCode"
+    }
+  }
+EOF
+}
+
+remote_state {
+  backend = "s3"
+  config = {
+    bucket         = "${path_relative_to_include()}-tofu-state"
+    key            = "${path_relative_to_include()}/tofu.tfstate"
+    region         = "${get_env("TF_VAR_aws_region")}"
+    encrypt        = true
+  }
+}

tmpl/backend.tf.tmpl

@@ -0,0 +1,5 @@
+## Generated by gomplate at {{ time.Now }}
+
+terraform {
+  backend "s3" {}
+}

tmpl/data.tf.tmpl

@@ -0,0 +1,5 @@
+## Generated by gomplate at {{ time.Now }}
+
+data "aws_caller_identity" "current" {}
+
+data "aws_availability_zones" "available" {}

tmpl/locals.tf.tmpl

@@ -0,0 +1,5 @@
+## Generated by gomplate at {{ time.Now }}
+
+locals {
+    azs = slice(data.aws_availability_zones.available.names, 0, 3)
+}

tmpl/variables.tf

@@ -0,0 +1,4 @@
+variable "aws_account_id" {
+  description = "The AWS account ID"
+  type        = string
+}

tmpl/vpc.tf.tmpl

@@ -0,0 +1,23 @@
+## Generated by gomplate at {{ time.Now }}
+
+{{ $vpc := (ds "config").vpc }}
+module "vpc" {
+  source = "github.com/terraform-aws-modules/terraform-aws-vpc?ref={{ $vpc.version }}"
+
+  azs  = local.azs
+  cidr = "{{ $vpc.cidr }}"
+
+  enable_nat_gateway = {{ $vpc.enable_nat_gateway }}
+  single_nat_gateway = {{ $vpc.single_nat_gateway }}
+
+  private_subnets = [for k in range(0, length(local.azs)) : cidrsubnet("{{ $vpc.cidr }}", 8, k + 8)]
+  public_subnets  = [for k in range(0, length(local.azs)) : cidrsubnet("{{ $vpc.cidr }}", 12, k + 8)]
+  intra_subnets   = [for k in range(0, length(local.azs)) : cidrsubnet("{{ $vpc.cidr }}", 8, k + 12)]
+
+  enable_ipv6                                   = false
+  public_subnet_assign_ipv6_address_on_creation = false
+
+  public_subnet_ipv6_prefixes  = [0, 1, 2]
+  private_subnet_ipv6_prefixes = [3, 4, 5]
+  intra_subnet_ipv6_prefixes   = [6, 7, 8]
+}