diff --git a/examples/full-setup-tf-upgrade/credentials.peers.tf b/examples/full-setup-tf-upgrade/credentials.peers.tf deleted file mode 100644 index b190673..0000000 --- a/examples/full-setup-tf-upgrade/credentials.peers.tf +++ /dev/null @@ -1,18 +0,0 @@ -#--- -# peer to 107.. us-gov-west-1 services -#--- -provider "aws" { - alias = "peer_main_west" - region = "us-gov-west-1" - profile = "107742151971-do2-govcloud" -} - -#--- -# peer to 107.. us-gov-east-1 services -#--- -provider "aws" { - alias = "peer_main_east" - region = "us-gov-east-1" - profile = "107742151971-do2-govcloud" -} - diff --git a/examples/full-setup-tf-upgrade/peers.tf b/examples/full-setup-tf-upgrade/peers.tf deleted file mode 100644 index e4b3602..0000000 --- a/examples/full-setup-tf-upgrade/peers.tf +++ /dev/null @@ -1,76 +0,0 @@ -#--- -# us-gov-west-1 -#--- -data "aws_vpc" "service_main_west" { - provider = aws.peer_main_west - filter { - name = "tag:Name" - # values = [local.peer_name] - values = [var.services_peer_settings["west"].peer_name] - } -} - -module "peer_services_main_west" { - source = "git@github.e.it.census.gov:terraform-modules/aws-vpc-setup.git//peer?ref=tf-upgrade" - providers = { - aws.self = aws - aws.peer = aws.peer_main_west - } - - ## self - vpc_id = local.vpc_id - vpc_name = var.vpc_name - vpc_cidr_block = var.vpc_cidr_block - vpc_index = var.vpc_index - vpc_short_name = var.vpc_short_name - vpc_full_name = var.vpc_full_name - vpc_environment = var.vpc_environment - rule_number = var.services_peer_settings["west"].rule_number + var.vpc_index - 1 - tags = {} - - ## peer - peer_vpc_id = data.aws_vpc.service_main_west.id - peer_vpc_name = "services" - peer_vpc_index = 1 - peer_vpc_short_name = "vpc1" - peer_vpc_full_name = var.services_peer_settings["west"].peer_name - peer_rule_number = var.services_peer_settings["west"].rule_number + var.vpc_index - 1 -} - -#--- -# us-gov-east-1 -#--- -data "aws_vpc" "service_main_east" { - provider = aws.peer_main_east - filter { - name = "tag:Name" - values = [var.services_peer_settings["east"].peer_name] - } -} - -module "peer_services_main_east" { - source = "git@github.e.it.census.gov:terraform-modules/aws-vpc-setup.git//peer?ref=tf-upgrade" - providers = { - aws.self = aws - aws.peer = aws.peer_main_east - } - - ## self - vpc_id = local.vpc_id - vpc_name = var.vpc_name - vpc_cidr_block = var.vpc_cidr_block - vpc_index = var.vpc_index - vpc_short_name = var.vpc_short_name - vpc_full_name = var.vpc_full_name - vpc_environment = var.vpc_environment - rule_number = var.services_peer_settings["east"].rule_number + var.vpc_index - 1 - tags = {} - - ## peer - peer_vpc_id = data.aws_vpc.service_main_east.id - peer_vpc_name = "services" - peer_vpc_index = 1 - peer_vpc_short_name = "vpc1" - peer_vpc_full_name = var.services_peer_settings["west"].peer_name - peer_rule_number = var.services_peer_settings["east"].rule_number + var.vpc_index - 1 -} diff --git a/examples/full-setup-tf-upgrade/vpc-endpoints.tf.disabled b/examples/full-setup-tf-upgrade/vpc-endpoints.tf.disabled deleted file mode 100644 index 6df0783..0000000 --- a/examples/full-setup-tf-upgrade/vpc-endpoints.tf.disabled +++ /dev/null @@ -1,63 +0,0 @@ -# dynamodb and s3 gateway endpoints defined in vpc module - -# select here where label starts with app- -# private_subnets_ids = data.terraform_remote_state.vpc_east_vpc3.outputs.private_subnets_ids -# or use data - -# some help from here: https://dev.to/danquack/private-fargate-deployment-with-vpc-endpoints-1h0p - -locals { - security_group_ids = [module.sg_web.this_security_group_id] - - # currently this list doesn't do anything, but it's mostly to track what is in place here. A future - # revision of the vpc endpoints module will allow this as a for_each (tf 0.13+) - # keep in alphabetical order in the list and the file - - # disable by setting to null - # enable by setting to "", or if it require a different service name, set that - vpc_endpoints = { - "autoscaling" = "" - "ec2" = "" - "ec2messages" = "" - "ecr.api" = "" - "ecr.dkr" = "" - "ecs" = "" - "elasticfilesystem" = "" - "elasticloadbalancing" = "" - "kms" = "" - "logs" = "" - "secretsmanager" = "" - "ssm" = "" - "ssmmessages" = "" - "sts" = "" - } -} - -data "aws_subnets" "endpoint_subnets" { - filter { - name = "vpc-id" - values = [local.vpc_id] - } - filter { - name = "tag:Name" - values = ["*-endpoints-*"] - } -} - -module "vpce" { - for_each = { for k, v in local.vpc_endpoints : k => v if v != null } - source = "git@github.e.it.census.gov:terraform-modules/aws-vpc-setup.git//vpc-interface-endpoint?ref=tf-upgrade" - - service = each.value == "" ? each.key : each.value - subnet_ids = tolist(data.aws_subnets.endpoint_subnets.ids) - security_group_ids = local.security_group_ids - - vpc_id = local.vpc_id - vpc_full_name = var.vpc_full_name - vpc_environment = var.vpc_environment - - tags = merge( - local.common_tags, - local.tags, - ) -}