@gambi97/keel-cli 0.1.1

package/templates/modules/app_stack/versions.tf

@@ -0,0 +1,7 @@
+terraform {
+  required_providers {
+    scaleway = {
+      source = "scaleway/scaleway"
+    }
+  }
+}

package/templates/outputs.tf

@@ -0,0 +1,20 @@
+output "container_url" {
+  description = "Auto-generated Scaleway URL of the deployed container (null until an image is deployed)."
+  value       = module.app_stack.container_url
+}
+
+output "registry_endpoint" {
+  description = "Container Registry endpoint to push application images to."
+  value       = module.app_stack.registry_endpoint
+}
+
+output "database_url" {
+  description = "Ready-to-use Postgres connection string (dedicated least-privilege IAM credential)."
+  value       = module.app_stack.database_url
+  sensitive   = true
+}
+
+output "container_namespace_id" {
+  description = "Scaleway Containers namespace ID."
+  value       = module.app_stack.container_namespace_id
+}

package/templates/prod.tfvars

@@ -0,0 +1,7 @@
+# Non-sensitive production configuration. Safe to commit.
+project_name      = "__PROJECT_NAME__"
+region            = "__REGION__"
+environment       = "prod"
+enable_basic_auth = false
+min_scale         = __PROD_MIN_SCALE__
+max_scale         = __PROD_MAX_SCALE__

package/templates/providers.tf

@@ -0,0 +1,16 @@
+# Scaleway credentials are read from the environment:
+#   SCW_ACCESS_KEY, SCW_SECRET_KEY, SCW_DEFAULT_PROJECT_ID, SCW_DEFAULT_ORGANIZATION_ID
+provider "scaleway" {
+  region = var.region
+}
+
+provider "infisical" {
+  host = var.infisical_host
+
+  auth = {
+    universal = {
+      client_id     = var.infisical_client_id
+      client_secret = var.infisical_client_secret
+    }
+  }
+}

package/templates/staging.tfvars

@@ -0,0 +1,7 @@
+# Non-sensitive staging configuration. Safe to commit.
+project_name      = "__PROJECT_NAME__"
+region            = "__REGION__"
+environment       = "staging"
+enable_basic_auth = true
+min_scale         = __STAGING_MIN_SCALE__
+max_scale         = __STAGING_MAX_SCALE__

package/templates/variables.tf

@@ -0,0 +1,96 @@
+variable "project_name" {
+  description = "Project name, used as prefix for every resource."
+  type        = string
+}
+
+variable "region" {
+  description = "Scaleway region."
+  type        = string
+}
+
+variable "environment" {
+  description = "Deployment environment. Must match the Terraform workspace and the Infisical environment slug."
+  type        = string
+
+  validation {
+    condition     = contains(["staging", "prod"], var.environment)
+    error_message = "environment must be either \"staging\" or \"prod\"."
+  }
+}
+
+variable "container_image" {
+  description = "Full registry image to deploy (e.g. rg.fr-par.scw.cloud/ns/app:tag). Leave empty to provision everything except the container."
+  type        = string
+  default     = ""
+}
+
+variable "container_port" {
+  description = "Port the application listens on."
+  type        = number
+  default     = 8080
+}
+
+variable "cpu_limit" {
+  description = "Container CPU limit in mvCPU."
+  type        = number
+  default     = 500
+}
+
+variable "memory_limit" {
+  description = "Container memory limit in MB."
+  type        = number
+  default     = 1024
+}
+
+variable "min_scale" {
+  description = "Minimum number of container instances."
+  type        = number
+  default     = 0
+}
+
+variable "max_scale" {
+  description = "Maximum number of container instances."
+  type        = number
+  default     = 2
+}
+
+variable "db_min_cpu" {
+  description = "Serverless SQL Database minimum CPU."
+  type        = number
+  default     = 0
+}
+
+variable "db_max_cpu" {
+  description = "Serverless SQL Database maximum CPU."
+  type        = number
+  default     = 4
+}
+
+variable "enable_basic_auth" {
+  description = "When true, the container gets BASIC_AUTH_ENABLED=true and the app is expected to enforce Basic Auth using credentials stored in Infisical."
+  type        = bool
+  default     = false
+}
+
+variable "infisical_host" {
+  description = "Infisical instance URL."
+  type        = string
+  default     = "https://app.infisical.com"
+}
+
+variable "infisical_project_id" {
+  description = "Infisical project (workspace) ID holding the application secrets."
+  type        = string
+}
+
+variable "infisical_client_id" {
+  description = "Infisical machine identity client ID (Universal Auth)."
+  type        = string
+  sensitive   = true
+}
+
+variable "infisical_client_secret" {
+  description = "Infisical machine identity client secret (Universal Auth)."
+  type        = string
+  sensitive   = true
+}

package/templates/versions.tf

@@ -0,0 +1,15 @@
+terraform {
+  # 1.10+ is required for S3-native state locking (use_lockfile).
+  required_version = ">= 1.10.0"
+
+  required_providers {
+    scaleway = {
+      source  = "scaleway/scaleway"
+      version = "~> 2.0"
+    }
+    infisical = {
+      source  = "infisical/infisical"
+      version = "~> 0.15"
+    }
+  }
+}