pangea 0.0.45 → 0.0.46

data/lib/pangea/resources/aws_db_instance/types.rb

@@ -1,260 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/types'
-
-module Pangea
-  module Resources
-    module AWS
-      module Types
-      # Type-safe attributes for AWS RDS Database Instance resources
-      class DbInstanceAttributes < Dry::Struct
-        transform_keys(&:to_sym)
-
-        # Database identifier (optional, AWS will generate if not provided)
-        attribute :identifier, Resources::Types::String.optional
-
-        # Database identifier prefix (optional, alternative to identifier)
-        attribute :identifier_prefix, Resources::Types::String.optional
-
-        # Database engine
-        attribute :engine, Resources::Types::String.enum(
-          "mysql", "postgres", "mariadb", "oracle-se", "oracle-se1", "oracle-se2", 
-          "oracle-ee", "sqlserver-ee", "sqlserver-se", "sqlserver-ex", "sqlserver-web",
-          "aurora", "aurora-mysql", "aurora-postgresql"
-        )
-
-        # Engine version (optional, uses default for engine if not specified)
-        attribute :engine_version, Resources::Types::String.optional
-
-        # Instance class (e.g., "db.t3.micro", "db.r5.large")
-        attribute :instance_class, Resources::Types::String
-
-        # Allocated storage in GB (not used for Aurora)
-        attribute :allocated_storage, Resources::Types::Integer.optional.constrained(gteq: 20, lteq: 65536)
-
-        # Storage type
-        attribute :storage_type, Resources::Types::String.default("gp3").enum("standard", "gp2", "gp3", "io1", "io2")
-
-        # Storage encryption
-        attribute :storage_encrypted, Resources::Types::Bool.default(true)
-
-        # KMS key for encryption
-        attribute :kms_key_id, Resources::Types::String.optional
-
-        # IOPS (only for io1/io2 storage types)
-        attribute :iops, Resources::Types::Integer.optional.constrained(gteq: 1000, lteq: 256000)
-
-        # Database name (optional, not applicable for SQL Server)
-        attribute :db_name, Resources::Types::String.optional
-
-        # Master username
-        attribute :username, Resources::Types::String.optional
-
-        # Master password (use manage_master_user_password instead for security)
-        attribute :password, Resources::Types::String.optional
-
-        # Let AWS manage the master password
-        attribute :manage_master_user_password, Resources::Types::Bool.default(true)
-
-        # Network configuration
-        attribute :db_subnet_group_name, Resources::Types::String.optional
-        attribute :vpc_security_group_ids, Resources::Types::Array.of(Types::String).default([].freeze)
-        attribute :availability_zone, Resources::Types::String.optional
-        attribute :multi_az, Resources::Types::Bool.default(false)
-        attribute :publicly_accessible, Resources::Types::Bool.default(false)
-
-        # Backup configuration
-        attribute :backup_retention_period, Resources::Types::Integer.default(7).constrained(gteq: 0, lteq: 35)
-        attribute :backup_window, Resources::Types::String.optional  # Format: "hh24:mi-hh24:mi"
-        attribute :maintenance_window, Resources::Types::String.optional  # Format: "ddd:hh24:mi-ddd:hh24:mi"
-
-        # Performance and monitoring
-        attribute :enabled_cloudwatch_logs_exports, Resources::Types::Array.of(Types::String).default([].freeze)
-        attribute :performance_insights_enabled, Resources::Types::Bool.default(false)
-        attribute :performance_insights_retention_period, Resources::Types::Integer.default(7)
-
-        # Additional options
-        attribute :auto_minor_version_upgrade, Resources::Types::Bool.default(true)
-        attribute :deletion_protection, Resources::Types::Bool.default(false)
-        attribute :skip_final_snapshot, Resources::Types::Bool.default(true)
-        attribute :final_snapshot_identifier, Resources::Types::String.optional
-
-        # Tags to apply to the database
-        attribute :tags, Resources::Types::AwsTags.default({})
-
-        # Custom validation
-        def self.new(attributes = {})
-          attrs = super(attributes)
-          
-          # Cannot specify both identifier and identifier_prefix
-          if attrs.identifier && attrs.identifier_prefix
-            raise Dry::Struct::Error, "Cannot specify both 'identifier' and 'identifier_prefix'"
-          end
-
-          # IOPS only valid for io1/io2 storage types
-          if attrs.iops && !%w[io1 io2].include?(attrs.storage_type)
-            raise Dry::Struct::Error, "IOPS can only be specified for io1 or io2 storage types"
-          end
-
-          # Password security validation
-          if attrs.password && attrs.manage_master_user_password
-            raise Dry::Struct::Error, "Cannot specify both 'password' and 'manage_master_user_password'"
-          end
-
-          # Aurora validations
-          if attrs.engine.start_with?("aurora")
-            if attrs.allocated_storage
-              raise Dry::Struct::Error, "Aurora engines do not support 'allocated_storage' - use cluster configuration instead"
-            end
-            if attrs.multi_az
-              raise Dry::Struct::Error, "Aurora engines handle multi-AZ at the cluster level, not instance level"
-            end
-          else
-            # Non-Aurora engines require allocated_storage
-            if attrs.allocated_storage.nil?
-              raise Dry::Struct::Error, "Non-Aurora engines require 'allocated_storage' to be specified"
-            end
-          end
-
-          # SQL Server doesn't support db_name
-          if attrs.engine.start_with?("sqlserver") && attrs.db_name
-            raise Dry::Struct::Error, "SQL Server engines do not support 'db_name' parameter"
-          end
-
-          attrs
-        end
-
-        # Helper method to get engine family
-        def engine_family
-          case engine
-          when /mysql/, /aurora-mysql/
-            "mysql"
-          when /postgres/, /aurora-postgresql/
-            "postgresql"
-          when /mariadb/
-            "mariadb"
-          when /oracle/
-            "oracle"
-          when /sqlserver/
-            "sqlserver"
-          else
-            engine
-          end
-        end
-
-        # Check if this is an Aurora engine
-        def is_aurora?
-          engine.start_with?("aurora")
-        end
-
-        # Check if this is a serverless instance
-        def is_serverless?
-          instance_class.include?("serverless")
-        end
-
-        # Check if subnet group is required
-        def requires_subnet_group?
-          !publicly_accessible || vpc_security_group_ids.any?
-        end
-
-        # Check if encryption is supported
-        def supports_encryption?
-          # All modern RDS engines support encryption
-          true
-        end
-
-        # Estimate monthly cost (very rough estimate)
-        def estimated_monthly_cost
-          # Base hourly rates (simplified)
-          hourly_rate = case instance_class
-                       when /t3.micro/ then 0.017
-                       when /t3.small/ then 0.034
-                       when /t3.medium/ then 0.068
-                       when /t3.large/ then 0.136
-                       when /m5.large/ then 0.171
-                       when /m5.xlarge/ then 0.342
-                       when /r5.large/ then 0.250
-                       when /r5.xlarge/ then 0.500
-                       else 0.100  # Default estimate
-                       end
-
-          # Storage cost estimate ($0.10 per GB-month for gp3)
-          storage_cost = allocated_storage ? allocated_storage * 0.10 : 0
-
-          # Multi-AZ doubles the cost
-          if multi_az
-            hourly_rate *= 2
-          end
-
-          # Monthly cost (730 hours)
-          compute_cost = hourly_rate * 730
-          total_cost = compute_cost + storage_cost
-
-          "~$#{total_cost.round(2)}/month"
-        end
-      end
-
-      # Common RDS engine configurations
-      module RdsEngineConfigs
-        # MySQL default configuration
-        def self.mysql(version: "8.0")
-          {
-            engine: "mysql",
-            engine_version: version,
-            enabled_cloudwatch_logs_exports: ["error", "general", "slowquery"]
-          }
-        end
-
-        # PostgreSQL default configuration
-        def self.postgresql(version: "15")
-          {
-            engine: "postgres",
-            engine_version: version,
-            enabled_cloudwatch_logs_exports: ["postgresql"]
-          }
-        end
-
-        # Aurora MySQL configuration
-        def self.aurora_mysql(version: "8.0.mysql_aurora.3.02.0")
-          {
-            engine: "aurora-mysql",
-            engine_version: version
-          }
-        end
-
-        # Aurora PostgreSQL configuration
-        def self.aurora_postgresql(version: "15.2")
-          {
-            engine: "aurora-postgresql",
-            engine_version: version
-          }
-        end
-
-        # MariaDB configuration
-        def self.mariadb(version: "10.11")
-          {
-            engine: "mariadb",
-            engine_version: version,
-            enabled_cloudwatch_logs_exports: ["error", "general", "slowquery"]
-          }
-        end
-      end
-    end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws_db_parameter_group/CLAUDE.md

@@ -1,285 +0,0 @@
-# AWS DB Parameter Group Implementation
-
-## Resource Overview
-
-The `aws_db_parameter_group` resource creates and manages AWS RDS DB Parameter Groups, which define custom database engine configurations for RDS instances and Aurora clusters.
-
-## Implementation Architecture
-
-### Type Safety Structure
-```
-DbParameterGroupAttributes (Dry::Struct)
-├── name: String (required)
-├── family: String (enum - engine families, required)
-├── description: String (optional, defaults to generated)
-├── parameters: Array[DbParameter] (optional, defaults to [])
-└── tags: Hash[String, String] (optional, defaults to {})
-
-DbParameter (Dry::Struct)
-├── name: String (required)
-├── value: String (required)
-└── apply_method: String (enum: immediate/pending-reboot, optional)
-```
-
-### Core Validations
-
-1. **Parameter Group Name Validation**
-   - Must start with a letter
-   - Alphanumeric characters and hyphens only
-   - Maximum 255 characters
-   - Regex: `/^[a-zA-Z][a-zA-Z0-9-]{0,254}$/`
-
-2. **Family Validation**
-   - Comprehensive enum of all supported engine families
-   - Covers MySQL, PostgreSQL, MariaDB, Oracle, SQL Server
-   - Includes Aurora variants (aurora-mysql, aurora-postgresql)
-   - Version-specific family names (e.g., postgres15, mysql8.0)
-
-3. **Parameter Validation**
-   - Parameter name format: `/^[a-zA-Z][a-zA-Z0-9_.-]*$/`
-   - Unique parameter names within the group
-   - Engine-specific parameter validation (extensible)
-   - Apply method validation (immediate/pending-reboot)
-
-4. **Engine Compatibility Validation**
-   - `validate_parameters_for_family()` method
-   - Engine-specific parameter whitelisting
-   - Parameter value validation by engine type
-
-### Resource Function Signature
-```ruby
-def aws_db_parameter_group(name, attributes = {})
-  # Returns ResourceReference with:
-  # - All Terraform outputs
-  # - Computed properties for operational insights
-  # - Engine compatibility information
-  # - Parameter application analysis
-end
-```
-
-## Terraform Resource Mapping
-
-### Generated Terraform JSON Structure
-```json
-{
-  "resource": {
-    "aws_db_parameter_group": {
-      "resource_name": {
-        "name": "parameter-group-name",
-        "family": "postgres15",
-        "description": "Generated or provided description",
-        "parameter": [
-          {
-            "name": "shared_buffers",
-            "value": "256MB",
-            "apply_method": "pending-reboot"
-          }
-        ],
-        "tags": {
-          "key": "value"
-        }
-      }
-    }
-  }
-}
-```
-
-### Available Outputs
-- `id`: Parameter group name (identifier)
-- `arn`: Amazon Resource Name
-- `name`: Parameter group name
-- `description`: Parameter group description
-- `family`: Engine family
-
-## Design Patterns
-
-### Engine Family Abstraction
-```ruby
-def engine
-  case family
-  when /mysql/ then "mysql"
-  when /postgres/ then "postgresql"
-  when /aurora-mysql/ then "aurora-mysql"
-  when /aurora-postgresql/ then "aurora-postgresql"
-  # ... additional mappings
-  end
-end
-```
-
-### Parameter Apply Method Management
-```ruby
-def requires_reboot?
-  reboot_required_parameters.any?
-end
-
-def reboot_required_parameters
-  parameters.select(&:requires_reboot?)
-end
-```
-
-### Pre-configured Parameter Sets
-```ruby
-module DbParameterConfigs
-  def self.mysql_performance(instance_class: "db.t3.micro")
-    # Returns optimized parameter set based on instance class
-  end
-  
-  def self.postgresql_performance(instance_class: "db.t3.micro")
-    # Returns PostgreSQL-optimized parameters
-  end
-end
-```
-
-## Integration Patterns
-
-### Database Resource Integration
-- Parameter group name referenced in `parameter_group_name` attribute
-- Compatible with both RDS instances and Aurora clusters
-- Engine family must match database engine
-
-### Engine-Specific Configuration
-- MySQL/Aurora MySQL parameter validation and optimization
-- PostgreSQL/Aurora PostgreSQL parameter management
-- MariaDB parameter compatibility with MySQL patterns
-- Oracle and SQL Server enterprise parameter support
-
-### Performance Optimization Integration
-- Instance class-based parameter scaling
-- Memory-based buffer pool sizing
-- Connection limit optimization
-- Query performance tuning parameters
-
-## Operational Considerations
-
-### Parameter Application Lifecycle
-- **Immediate Parameters**: Applied without instance restart
-- **Pending Reboot Parameters**: Require instance restart
-- Operational planning for maintenance windows
-- Parameter change impact analysis
-
-### Cost Implications
-- Parameter groups have no direct AWS charges
-- Performance impact can affect compute costs
-- Memory allocation parameters affect instance requirements
-- `estimated_monthly_cost` returns "$0.00/month" with explanation
-
-### High Availability Impact
-- Multi-AZ parameter considerations
-- Replication parameter settings
-- Failover parameter compatibility
-- Cross-region parameter group management
-
-## Security and Compliance Features
-
-### Audit and Logging Parameters
-- Connection logging configuration
-- Query logging and monitoring
-- Security event tracking
-- Performance monitoring integration
-
-### Security Hardening
-- SSL/TLS enforcement parameters
-- Authentication method configuration
-- Connection limit enforcement
-- Session timeout management
-
-### Compliance Support
-- Parameter change auditing through tags
-- Environment-specific parameter isolation
-- Security baseline parameter enforcement
-
-## Error Handling
-
-### Validation Errors
-```ruby
-# Invalid parameter group name
-raise Dry::Struct::Error, "Parameter group name must start with a letter and contain only alphanumeric characters and hyphens (max 255 chars)"
-
-# Duplicate parameters
-raise Dry::Struct::Error, "Duplicate parameter names found: #{duplicates.join(', ')}"
-
-# Invalid parameter format
-raise Dry::Struct::Error, "Invalid parameter name format: #{name}"
-```
-
-### Runtime Validation
-- Engine family compatibility validated by AWS
-- Parameter existence validated by RDS service
-- Value range validation by database engine
-- Apply method compatibility checked by AWS
-
-## Testing Considerations
-
-### Unit Testing
-- Parameter validation testing
-- Engine family mapping verification
-- Apply method categorization testing
-- Pre-configured parameter set testing
-
-### Integration Testing
-- Cross-resource reference validation
-- Terraform resource generation testing
-- AWS API parameter validation testing
-- Engine compatibility testing
-
-## Performance Characteristics
-
-### Resource Creation
-- Fast parameter group creation (metadata only)
-- No compute resources provisioned
-- Parameter validation at creation time
-- Immediate availability for database assignment
-
-### Parameter Application
-- Immediate parameters: Applied without downtime
-- Pending reboot parameters: Require maintenance window
-- Parameter change tracking through AWS events
-- Impact assessment before application
-
-## Advanced Features
-
-### Dynamic Parameter Scaling
-```ruby
-def self.mysql_performance(instance_class: "db.t3.micro")
-  buffer_pool_size = calculate_buffer_pool_size(instance_class)
-  # Returns scaled parameter configuration
-end
-```
-
-### Engine-Specific Validation
-```ruby
-def validate_parameters_for_family
-  case engine
-  when "mysql", "aurora-mysql"
-    validate_mysql_parameters
-  when "postgresql", "aurora-postgresql"  
-    validate_postgresql_parameters
-  end
-end
-```
-
-### Operational Analytics
-- Parameter impact analysis
-- Performance regression detection
-- Cost optimization recommendations
-- Security compliance scoring
-
-## Future Extensibility
-
-### Enhanced Validation
-- Comprehensive parameter registry by engine version
-- Parameter value range validation
-- Performance impact prediction
-- Security compliance checking
-
-### Operational Enhancements
-- Parameter change impact simulation
-- Automated parameter optimization
-- Performance baseline comparison
-- Configuration drift detection
-
-### Integration Improvements
-- CloudWatch parameter monitoring
-- Parameter change automation
-- Blue/green parameter deployment
-- Cross-engine parameter migration tools

data/lib/pangea/resources/aws_db_parameter_group/resource.rb

@@ -1,94 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-require 'pangea/resources/aws_db_parameter_group/types'
-require 'pangea/resource_registry'
-
-module Pangea
-  module Resources
-    module AWS
-      # Create an AWS RDS DB Parameter Group with type-safe attributes
-      #
-      # @param name [Symbol] The resource name
-      # @param attributes [Hash] DB parameter group attributes
-      # @return [ResourceReference] Reference object with outputs and computed properties
-      def aws_db_parameter_group(name, attributes = {})
-        # Validate attributes using dry-struct
-        param_group_attrs = Types::DbParameterGroupAttributes.new(attributes)
-        
-        # Validate parameters for the specific engine family
-        param_group_attrs.validate_parameters_for_family
-        
-        # Generate terraform resource block via terraform-synthesizer
-        resource(:aws_db_parameter_group, name) do
-          name param_group_attrs.name
-          family param_group_attrs.family
-          description param_group_attrs.effective_description
-          
-          # Add parameters if present
-          if param_group_attrs.parameters.any?
-            param_group_attrs.parameters.each do |param|
-              parameter do
-                name param.name
-                value param.value
-                apply_method param.apply_method if param.apply_method
-              end
-            end
-          end
-          
-          # Apply tags if present
-          if param_group_attrs.tags.any?
-            tags do
-              param_group_attrs.tags.each do |key, value|
-                public_send(key, value)
-              end
-            end
-          end
-        end
-        
-        # Return resource reference with available outputs
-        ResourceReference.new(
-          type: 'aws_db_parameter_group',
-          name: name,
-          resource_attributes: param_group_attrs.to_h,
-          outputs: {
-            id: "${aws_db_parameter_group.#{name}.id}",
-            arn: "${aws_db_parameter_group.#{name}.arn}",
-            name: "${aws_db_parameter_group.#{name}.name}",
-            description: "${aws_db_parameter_group.#{name}.description}",
-            family: "${aws_db_parameter_group.#{name}.family}"
-          },
-          computed_properties: {
-            engine: param_group_attrs.engine,
-            engine_version: param_group_attrs.engine_version,
-            is_aurora: param_group_attrs.is_aurora?,
-            parameter_count: param_group_attrs.parameter_count,
-            requires_reboot: param_group_attrs.requires_reboot?,
-            reboot_required_parameters: param_group_attrs.reboot_required_parameters.map(&:name),
-            immediate_parameters: param_group_attrs.immediate_parameters.map(&:name),
-            effective_description: param_group_attrs.effective_description,
-            estimated_monthly_cost: param_group_attrs.estimated_monthly_cost
-          }
-        )
-      end
-    end
-  end
-end
-
-# Auto-register this module when it's loaded
-Pangea::ResourceRegistry.register(:aws, Pangea::Resources::AWS)