diff --git a/lab/us-gov-east-1/vpc/_mcmCluster/eks-cert-manager/terragrunt.hcl b/lab/us-gov-east-1/vpc/_mcmCluster/eks-cert-manager/terragrunt.hcl index 252a962..5484229 100644 --- a/lab/us-gov-east-1/vpc/_mcmCluster/eks-cert-manager/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/_mcmCluster/eks-cert-manager/terragrunt.hcl @@ -19,9 +19,11 @@ dependency "eks-istio" { } inputs = { - cluster_name = dependency.eks.inputs.cluster_name - profile = dependency.eks.inputs.profile - contact_email = dependency.eks.inputs.creator + cluster_name = dependency.eks.inputs.cluster_name + profile = dependency.eks.inputs.profile + contact_email = dependency.eks.inputs.creator + region = dependency.eks.inputs.region + oidc_provider_arn = dependency.eks.outputs.oidc_provider_arn } generate "provider-eks" { diff --git a/lab/us-gov-east-1/vpc/_mcmCluster/eks-config/terragrunt.hcl b/lab/us-gov-east-1/vpc/_mcmCluster/eks-config/terragrunt.hcl index 3d352dc..7dc0e9b 100644 --- a/lab/us-gov-east-1/vpc/_mcmCluster/eks-config/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/_mcmCluster/eks-config/terragrunt.hcl @@ -2,15 +2,15 @@ include "root" { path = find_in_parent_folders() } -locals { - tag_costallocation = "census:csvd:platformbaseline" - tags = { - "eks-cluster-name" = ependency.eks.inputs.cluster_name - "CostAllocation" = "census:csvd:platformbaseline" - "boc:tf_module_version" = "1.0.0" - "boc:created_by" = "terraform" - } -} +# locals { +# tag_costallocation = "census:csvd:platformbaseline" +# tags = { +# "eks-cluster-name" = "platform-eng-eks-mcm" +# "CostAllocation" = "census:csvd:platformbaseline" +# "boc:tf_module_version" = "1.0.0" +# "boc:created_by" = "terraform" +# } +# } terraform { source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-eks-configuration.git" diff --git a/lab/us-gov-east-1/vpc/_mcmCluster/eks-grafana/terragrunt.hcl b/lab/us-gov-east-1/vpc/_mcmCluster/eks-grafana/terragrunt.hcl index 62744b0..ea0af1d 100644 --- a/lab/us-gov-east-1/vpc/_mcmCluster/eks-grafana/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/_mcmCluster/eks-grafana/terragrunt.hcl @@ -1,5 +1,5 @@ terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-grafana.git" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-grafana.git" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -20,13 +20,13 @@ dependency "eks-loki" { } inputs = { - profile = dependency.eks.inputs.profile - cluster_name = dependency.eks.inputs.cluster_name - region = dependency.eks.inputs.region - cluster_domain = dependency.eks.inputs.domain - certificate_issuer = dependency.eks-cert-manager.outputs.certificate_issuer - datasources = dependency.eks-loki.outputs.gateway_internal_endpoint - rwo_storage_class = + profile = dependency.eks.inputs.profile + cluster_name = dependency.eks.inputs.cluster_name + region = dependency.eks.inputs.region + cluster_domain = dependency.eks.inputs.domain + certificate_issuer = dependency.eks-cert-manager.outputs.certificate_issuer + datasources = dependency.eks-loki.outputs.gateway_internal_endpoint + rwo_storage_class = dependency.eks-loki.outputs.rwo_storage_class } generate "provider-eks" { diff --git a/lab/us-gov-east-1/vpc/_mcmCluster/eks-istio/terragrunt.hcl b/lab/us-gov-east-1/vpc/_mcmCluster/eks-istio/terragrunt.hcl index 20f76b3..7541125 100644 --- a/lab/us-gov-east-1/vpc/_mcmCluster/eks-istio/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/_mcmCluster/eks-istio/terragrunt.hcl @@ -1,5 +1,5 @@ include "root" { - path = find_in_parent_folders() + path = find_in_parent_folders() expose = true } diff --git a/lab/us-gov-east-1/vpc/_mcmCluster/eks-promethus/terragrunt.hcl b/lab/us-gov-east-1/vpc/_mcmCluster/eks-promethus/terragrunt.hcl index 1b7788c..b2bf5cf 100644 --- a/lab/us-gov-east-1/vpc/_mcmCluster/eks-promethus/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/_mcmCluster/eks-promethus/terragrunt.hcl @@ -3,7 +3,7 @@ include "root" { } terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-prometheus.git" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-prometheus.git" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -15,9 +15,9 @@ dependency "eks" { } inputs = { - profile = dependency.eks.inputs.profile - cluster_name = dependency.eks.inputs.cluster_name - region = dependency.eks.inputs.region + profile = dependency.eks.inputs.profile + cluster_name = dependency.eks.inputs.cluster_name + region = dependency.eks.inputs.region } generate "provider-eks" { diff --git a/lab/us-gov-east-1/vpc/cluster/eks-cert-manager/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/eks-cert-manager/terragrunt.hcl index c0c10db..f7c9de9 100644 --- a/lab/us-gov-east-1/vpc/cluster/eks-cert-manager/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/eks-cert-manager/terragrunt.hcl @@ -1,15 +1,15 @@ terraform { -# source = "git@github.e.it.census.gov:terraform-modules/aws-certificates//acmpca-eks-cert-manager" + # source = "git@github.e.it.census.gov:terraform-modules/aws-certificates//acmpca-eks-cert-manager" # source = "./cert-mgr.tf" source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-cert-mgr.git" - -# cluster_name = var.cluster_name -# contact_email = var.cluster_mailing_list -# tags = merge( -# local.base_tags, -# local.common_tags -# ) + # cluster_name = var.cluster_name + # contact_email = var.cluster_mailing_list + + # tags = merge( + # local.base_tags, + # local.common_tags + # ) } dependency "eks" { @@ -17,7 +17,7 @@ dependency "eks" { } inputs = { - cluster_name = dependency.eks.inputs.cluster_name - profile = dependency.eks.inputs.profile - contact_email = "srinivasa.nangunuri@census.gov" + cluster_name = dependency.eks.inputs.cluster_name + profile = dependency.eks.inputs.profile + contact_email = "srinivasa.nangunuri@census.gov" } diff --git a/lab/us-gov-east-1/vpc/cluster/eks-config/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/eks-config/terragrunt.hcl index ae4a9c1..860e149 100644 --- a/lab/us-gov-east-1/vpc/cluster/eks-config/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/eks-config/terragrunt.hcl @@ -10,23 +10,23 @@ locals { # ] # security_group_all_worker_mgmt_id = "sg-02b62e91afdbeba6b" # eks_managed_node_groups_autoscaling_group_names = ["eks-eks-platform-eng-eks-test-nodegroup-20240501173536404400000016-3ec79a9c-f002-40c6-8358-29fbacfbb3e8"] - + # region = "us-gov-east-1" # oidc_provider_arn = "arn:aws-us-gov:iam::224384469011:oidc-provider/oidc.eks.us-gov-east-1.amazonaws.com/id/7DE08671C3526A48AD5537E814DC2828" - tag_costallocation = "census:csvd:platformbaseline" - region = "us-gov-east-1" + tag_costallocation = "census:csvd:platformbaseline" + region = "us-gov-east-1" tags = { - - "eks-cluster-name" = "platform-eng-eks-test" - "CostAllocation" = "census:csvd:platformbaseline" - "boc:tf_module_version" = "1.0.0" - "boc:created_by" = "terraform" + + "eks-cluster-name" = "platform-eng-eks-test" + "CostAllocation" = "census:csvd:platformbaseline" + "boc:tf_module_version" = "1.0.0" + "boc:created_by" = "terraform" } } terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-eks-configuration.git" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-eks-configuration.git" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -34,16 +34,16 @@ terraform { } remote_state { - backend = "s3" - generate = { + backend = "s3" + generate = { path = "backend.tf" if_exists = "overwrite_terragrunt" } config = { - bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" - key = "platform-eks-test-config/terraform.tfstate" - region = "us-gov-east-1" - encrypt = true + bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" + key = "platform-eks-test-config/terraform.tfstate" + region = "us-gov-east-1" + encrypt = true #dynamodb_table = "my-lock-table" } } diff --git a/lab/us-gov-east-1/vpc/cluster/eks-istio/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/eks-istio/terragrunt.hcl index 6e02208..e6d0eed 100644 --- a/lab/us-gov-east-1/vpc/cluster/eks-istio/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/eks-istio/terragrunt.hcl @@ -1,5 +1,5 @@ terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-istio.git?ref=1.0.4" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-istio.git?ref=1.0.4" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -7,16 +7,16 @@ terraform { } remote_state { - backend = "s3" - generate = { + backend = "s3" + generate = { path = "backend.tf" if_exists = "overwrite_terragrunt" } config = { - bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" - key = "platform-eks-test-istio/terraform.tfstate" - region = "us-gov-east-1" - encrypt = true + bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" + key = "platform-eks-test-istio/terraform.tfstate" + region = "us-gov-east-1" + encrypt = true } } @@ -25,9 +25,9 @@ dependency "eks" { } inputs = { - profile = dependency.eks.inputs.profile - cluster_name = dependency.eks.inputs.cluster_name - region = "us-gov-east-1" - istio_chart_version = "1.22.1" - istio_version = "1.22.1" + profile = dependency.eks.inputs.profile + cluster_name = dependency.eks.inputs.cluster_name + region = "us-gov-east-1" + istio_chart_version = "1.22.1" + istio_version = "1.22.1" } diff --git a/lab/us-gov-east-1/vpc/cluster/eks-loki/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/eks-loki/terragrunt.hcl index 62a03c5..ae679f0 100644 --- a/lab/us-gov-east-1/vpc/cluster/eks-loki/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/eks-loki/terragrunt.hcl @@ -1,5 +1,5 @@ terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-loki.git?ref=lokiv3" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-loki.git?ref=lokiv3" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -7,16 +7,16 @@ terraform { } remote_state { - backend = "s3" - generate = { + backend = "s3" + generate = { path = "backend.tf" if_exists = "overwrite_terragrunt" } config = { - bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" - key = "platform-eks-test-loki/terraform.tfstate" - region = "us-gov-east-1" - encrypt = true + bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" + key = "platform-eks-test-loki/terraform.tfstate" + region = "us-gov-east-1" + encrypt = true } } @@ -25,8 +25,8 @@ dependency "eks" { } inputs = { - profile = dependency.eks.inputs.profile - cluster_name = dependency.eks.inputs.cluster_name - oidc_provider_arn = dependency.eks.outputs.oidc_provider_arn - region = "us-gov-east-1" + profile = dependency.eks.inputs.profile + cluster_name = dependency.eks.inputs.cluster_name + oidc_provider_arn = dependency.eks.outputs.oidc_provider_arn + region = "us-gov-east-1" } diff --git a/lab/us-gov-east-1/vpc/cluster/eks-prometheus/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/eks-prometheus/terragrunt.hcl index 098dd53..624a2fe 100644 --- a/lab/us-gov-east-1/vpc/cluster/eks-prometheus/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/eks-prometheus/terragrunt.hcl @@ -1,5 +1,5 @@ terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-prometheus.git?ref=platform-changes" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-prometheus.git?ref=platform-changes" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -7,16 +7,16 @@ terraform { } remote_state { - backend = "s3" - generate = { + backend = "s3" + generate = { path = "backend.tf" if_exists = "overwrite_terragrunt" } config = { - bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" - key = "platform-eks-test-prometheus/terraform.tfstate" - region = "us-gov-east-1" - encrypt = true + bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" + key = "platform-eks-test-prometheus/terraform.tfstate" + region = "us-gov-east-1" + encrypt = true } } @@ -25,7 +25,7 @@ dependency "eks" { } inputs = { - profile = dependency.eks.inputs.profile - cluster_name = dependency.eks.inputs.cluster_name - region = "us-gov-east-1" + profile = dependency.eks.inputs.profile + cluster_name = dependency.eks.inputs.cluster_name + region = "us-gov-east-1" } diff --git a/lab/us-gov-east-1/vpc/cluster/eks-slim/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/eks-slim/terragrunt.hcl index 41ffdc8..fc06705 100644 --- a/lab/us-gov-east-1/vpc/cluster/eks-slim/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/eks-slim/terragrunt.hcl @@ -5,25 +5,25 @@ include "root" { locals { # In which AWS region are operations being performed - vpc_name = "vpc3-lab-dev" - cluster_name = "eks-slim-cluster" - cluster_version = 1.29 - domain = "dev.lab.csp2.census.gov" - eks_instance_disk_size = 40 - eks_vpc_name = "vpc3-lab-dev" - eks_ng_desired_size = 1 - eks_ng_max_size = 4 - eks_ng_min_size = 1 - operators_ns = "operators" + vpc_name = "vpc3-lab-dev" + cluster_name = "eks-slim-cluster" + cluster_version = 1.29 + domain = "dev.lab.csp2.census.gov" + eks_instance_disk_size = 40 + eks_vpc_name = "vpc3-lab-dev" + eks_ng_desired_size = 1 + eks_ng_max_size = 4 + eks_ng_min_size = 1 + operators_ns = "operators" enable_cluster_creator_admin_permissions = true - cluster_endpoint_public_access = true - profile = "224384469011-lab-dev-gov" - + cluster_endpoint_public_access = true + profile = "224384469011-lab-dev-gov" + # Tags applied to AWS objects created tags = { - "Environment" = "dev" - "slim:schedule" = "8:00-17:00" - "cluster:size" = "min:${local.eks_ng_min_size}-max:${local.eks_ng_max_size}-desired:${local.eks_ng_desired_size}" + "Environment" = "dev" + "slim:schedule" = "8:00-17:00" + "cluster:size" = "min:${local.eks_ng_min_size}-max:${local.eks_ng_max_size}-desired:${local.eks_ng_desired_size}" } aws_auth_roles = [ @@ -43,7 +43,7 @@ locals { } terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-eks.git" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-eks.git" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -51,35 +51,35 @@ terraform { } remote_state { - backend = "s3" + backend = "s3" generate = { path = "backend.tf" if_exists = "overwrite_terragrunt" } config = { - bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" - key = "eks-slim-cluster/terraform.tfstate" - region = "us-gov-east-1" - encrypt = true + bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" + key = "eks-slim-cluster/terraform.tfstate" + region = "us-gov-east-1" + encrypt = true #dynamodb_table = "my-lock-table" } } inputs = { profile = local.profile - vpc_name = local.eks_vpc_name + vpc_name = local.eks_vpc_name cluster_name = local.cluster_name cluster_version = local.cluster_version eks_instance_disk_size = local.eks_instance_disk_size eks_vpc_name = local.eks_vpc_name #eks_instance_types = local.eks_instance_types - eks_ng_desired_size = local.eks_ng_desired_size - eks_ng_max_size = local.eks_ng_max_size - eks_ng_min_size = local.eks_ng_min_size - operators_ns = local.operators_ns + eks_ng_desired_size = local.eks_ng_desired_size + eks_ng_max_size = local.eks_ng_max_size + eks_ng_min_size = local.eks_ng_min_size + operators_ns = local.operators_ns enable_cluster_creator_admin_permissions = local.enable_cluster_creator_admin_permissions - cluster_endpoint_public_access = local.cluster_endpoint_public_access - tags = local.tags - aws_auth_roles = local.aws_auth_roles - domain = local.domain + cluster_endpoint_public_access = local.cluster_endpoint_public_access + tags = local.tags + aws_auth_roles = local.aws_auth_roles + domain = local.domain } \ No newline at end of file diff --git a/lab/us-gov-east-1/vpc/cluster/eks/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/eks/terragrunt.hcl index f2d6f4f..2c73c5b 100644 --- a/lab/us-gov-east-1/vpc/cluster/eks/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/eks/terragrunt.hcl @@ -5,25 +5,25 @@ include "root" { locals { # In which AWS region are operations being performed - vpc_name = "vpc3-lab-dev" - cluster_name = "platform-eng-eks-test" - cluster_version = "1.30" - domain = "dev.lab.csp2.census.gov" - eks_instance_disk_size = 60 - eks_vpc_name = "vpc3-lab-dev" - eks_ng_desired_size = 1 - eks_ng_max_size = 10 - eks_ng_min_size = 1 - operators_ns = "operators" + vpc_name = "vpc3-lab-dev" + cluster_name = "platform-eng-eks-test" + cluster_version = "1.30" + domain = "dev.lab.csp2.census.gov" + eks_instance_disk_size = 60 + eks_vpc_name = "vpc3-lab-dev" + eks_ng_desired_size = 1 + eks_ng_max_size = 10 + eks_ng_min_size = 1 + operators_ns = "operators" enable_cluster_creator_admin_permissions = true - cluster_endpoint_public_access = true - profile = "224384469011-lab-dev-gov" - + cluster_endpoint_public_access = true + profile = "224384469011-lab-dev-gov" + # Tags applied to AWS objects created tags = { - "Environment" = "dev" - "slim:schedule" = "8:00-17:00" - "cluster:size" = "min:${local.eks_ng_min_size}-max:${local.eks_ng_max_size}-desired:${local.eks_ng_desired_size}" + "Environment" = "dev" + "slim:schedule" = "8:00-17:00" + "cluster:size" = "min:${local.eks_ng_min_size}-max:${local.eks_ng_max_size}-desired:${local.eks_ng_desired_size}" } aws_auth_roles = [ @@ -43,7 +43,7 @@ locals { } terraform { - source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-eks.git?ref=1.0.1" + source = "git@github.e.it.census.gov:SCT-Engineering/tfmod-eks.git?ref=1.0.1" extra_arguments "retry_lock" { commands = get_terraform_commands_that_need_locking() arguments = ["-lock-timeout=20m"] @@ -58,13 +58,13 @@ inputs = { eks_instance_disk_size = local.eks_instance_disk_size eks_vpc_name = local.eks_vpc_name #eks_instance_types = local.eks_instance_types - eks_ng_desired_size = local.eks_ng_desired_size - eks_ng_max_size = local.eks_ng_max_size - eks_ng_min_size = local.eks_ng_min_size - operators_ns = local.operators_ns + eks_ng_desired_size = local.eks_ng_desired_size + eks_ng_max_size = local.eks_ng_max_size + eks_ng_min_size = local.eks_ng_min_size + operators_ns = local.operators_ns enable_cluster_creator_admin_permissions = local.enable_cluster_creator_admin_permissions - cluster_endpoint_public_access = local.cluster_endpoint_public_access - tags = local.tags - aws_auth_roles = local.aws_auth_roles - domain = local.domain + cluster_endpoint_public_access = local.cluster_endpoint_public_access + tags = local.tags + aws_auth_roles = local.aws_auth_roles + domain = local.domain } diff --git a/lab/us-gov-east-1/vpc/cluster/terragrunt.hcl b/lab/us-gov-east-1/vpc/cluster/terragrunt.hcl index c7e9f23..94217c6 100644 --- a/lab/us-gov-east-1/vpc/cluster/terragrunt.hcl +++ b/lab/us-gov-east-1/vpc/cluster/terragrunt.hcl @@ -2,17 +2,17 @@ locals { # Automatically load _envcommon, cross account and environment common variables # common_vars = read_terragrunt_config("${dirname(find_in_parent_folders())}/_envcommon/common-variables.hcl", "skip-account-if-does-not-exist") // "${get_tfvars_dir()}/${find_in_parent_folders("account.tfvars", "skip-account-if-does-not-exist")}", - + # Automatically load account-level variables (NOTE: In our environment account = environment so there is not separate environment layer) account_vars = read_terragrunt_config(find_in_parent_folders("account.hcl")) - + # Automatically load region-level variables region_vars = read_terragrunt_config(find_in_parent_folders("region.hcl")) - + # Automatically load vpc-level variables # Not applicable in this demo, but including for reference, would be next level of variables and configurations # vpc_vars = read_terragrunt_config(find_in_parent_folders("vpc.hcl", "skip-account-if-does-not-exist")) - + # Extract the variables we need for easy access account_name = local.account_vars.locals.account_name account_id = local.account_vars.locals.aws_account_id @@ -50,16 +50,16 @@ EOF } remote_state { - backend = "s3" + backend = "s3" generate = { path = "backend.tf" if_exists = "overwrite_terragrunt" } config = { - bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" - key = "platform-eks-test/terraform.tfstate" - region = "us-gov-east-1" - encrypt = true + bucket = "tg-infrastructure-tf-state-lab-dev-ew-us-gov-east-1" + key = "platform-eks-test/terraform.tfstate" + region = "us-gov-east-1" + encrypt = true #dynamodb_table = "my-lock-table" } }