agentic-dev 0.2.11 → 0.2.13

package/infra/terraform/aws/data/main.tf

@@ -1,147 +0,0 @@
-provider "aws" {
-  region = var.aws_region
-}
-
-data "aws_caller_identity" "current" {}
-
-locals {
-  phase       = lower(var.phase)
-  bucket_name = trimspace(var.bucket_name) != "" ? trimspace(var.bucket_name) : "${var.bucket_prefix}-${local.phase}-${data.aws_caller_identity.current.account_id}"
-}
-
-resource "aws_dynamodb_table" "app" {
-  name         = var.table_name
-  billing_mode = "PAY_PER_REQUEST"
-  hash_key     = "PK"
-  range_key    = "SK"
-
-  attribute {
-    name = "PK"
-    type = "S"
-  }
-
-  attribute {
-    name = "SK"
-    type = "S"
-  }
-
-  attribute {
-    name = "GSI1PK"
-    type = "S"
-  }
-
-  attribute {
-    name = "GSI1SK"
-    type = "S"
-  }
-
-  attribute {
-    name = "GSI2PK"
-    type = "S"
-  }
-
-  attribute {
-    name = "GSI2SK"
-    type = "S"
-  }
-
-  global_secondary_index {
-    name            = "GSI1"
-    hash_key        = "GSI1PK"
-    range_key       = "GSI1SK"
-    projection_type = "ALL"
-  }
-
-  global_secondary_index {
-    name            = "GSI2"
-    hash_key        = "GSI2PK"
-    range_key       = "GSI2SK"
-    projection_type = "ALL"
-  }
-
-  point_in_time_recovery {
-    enabled = local.phase == "prod"
-  }
-
-  tags = {
-    Name        = var.table_name
-    Project     = var.project_name
-    Phase       = local.phase
-    ManagedBy   = "terraform"
-    ManagedVia  = "aws"
-    DataSurface = "dynamodb"
-  }
-}
-
-resource "aws_s3_bucket" "assets" {
-  bucket        = local.bucket_name
-  force_destroy = var.force_destroy
-
-  tags = {
-    Name        = local.bucket_name
-    Project     = var.project_name
-    Phase       = local.phase
-    ManagedBy   = "terraform"
-    ManagedVia  = "aws"
-    DataSurface = "s3"
-  }
-}
-
-resource "aws_s3_bucket_versioning" "assets" {
-  bucket = aws_s3_bucket.assets.id
-
-  versioning_configuration {
-    status = local.phase == "prod" ? "Enabled" : "Suspended"
-  }
-}
-
-resource "aws_s3_bucket_server_side_encryption_configuration" "assets" {
-  bucket = aws_s3_bucket.assets.id
-
-  rule {
-    apply_server_side_encryption_by_default {
-      sse_algorithm = "AES256"
-    }
-  }
-}
-
-resource "aws_s3_bucket_public_access_block" "assets" {
-  bucket = aws_s3_bucket.assets.id
-
-  block_public_acls       = true
-  ignore_public_acls      = true
-  block_public_policy     = var.public_read_enabled ? false : true
-  restrict_public_buckets = var.public_read_enabled ? false : true
-}
-
-resource "aws_s3_bucket_cors_configuration" "assets" {
-  bucket = aws_s3_bucket.assets.id
-
-  cors_rule {
-    allowed_headers = ["*"]
-    allowed_methods = ["GET", "PUT", "POST", "DELETE"]
-    allowed_origins = var.cors_allowed_origins
-    expose_headers  = ["ETag"]
-    max_age_seconds = 3600
-  }
-}
-
-resource "aws_s3_bucket_policy" "public_read" {
-  count  = var.public_read_enabled ? 1 : 0
-  bucket = aws_s3_bucket.assets.id
-
-  policy = jsonencode({
-    Version = "2012-10-17"
-    Statement = [
-      {
-        Sid       = "PublicReadGetObject"
-        Effect    = "Allow"
-        Principal = "*"
-        Action    = ["s3:GetObject"]
-        Resource  = ["${aws_s3_bucket.assets.arn}/*"]
-      }
-    ]
-  })
-
-  depends_on = [aws_s3_bucket_public_access_block.assets]
-}

package/infra/terraform/aws/data/outputs.tf

@@ -1,14 +0,0 @@
-output "table_name" {
-  value       = aws_dynamodb_table.app.name
-  description = "Active application DynamoDB table."
-}
-
-output "bucket_name" {
-  value       = aws_s3_bucket.assets.bucket
-  description = "Active application S3 bucket."
-}
-
-output "bucket_public_url" {
-  value       = "https://s3.${var.aws_region}.amazonaws.com"
-  description = "Public S3 endpoint base used by the current backend."
-}

package/infra/terraform/aws/data/variables.tf

@@ -1,57 +0,0 @@
-variable "aws_region" {
-  type        = string
-  description = "AWS region."
-  default     = "ap-northeast-2"
-}
-
-variable "phase" {
-  type        = string
-  description = "Deployment phase."
-  default     = "prod"
-}
-
-variable "table_name" {
-  type        = string
-  description = "Application DynamoDB table name."
-  default     = "template-service"
-}
-
-variable "project_name" {
-  type        = string
-  description = "Project tag used across resources."
-  default     = "template-service"
-}
-
-variable "bucket_name" {
-  type        = string
-  description = "Optional explicit bucket name."
-  default     = ""
-}
-
-variable "bucket_prefix" {
-  type        = string
-  description = "Bucket prefix used when bucket_name is empty."
-  default     = "template-assets"
-}
-
-variable "cors_allowed_origins" {
-  type        = list(string)
-  description = "Allowed origins for browser asset access."
-  default = [
-    "https://app.example.com",
-    "https://admin.example.com",
-    "https://dev.example.com"
-  ]
-}
-
-variable "public_read_enabled" {
-  type        = bool
-  description = "Allow public read access for uploaded image objects."
-  default     = true
-}
-
-variable "force_destroy" {
-  type        = bool
-  description = "Allow bucket destroy with objects."
-  default     = false
-}

package/infra/terraform/aws/data/versions.tf

@@ -1,10 +0,0 @@
-terraform {
-  required_version = ">= 1.6.0"
-
-  required_providers {
-    aws = {
-      source  = "hashicorp/aws"
-      version = "~> 5.0"
-    }
-  }
-}

package/infra/terraform/aws/domain/.terraform.lock.hcl

@@ -1,25 +0,0 @@
-# This file is maintained automatically by "terraform init".
-# Manual edits may be lost in future updates.
-
-provider "registry.terraform.io/hashicorp/aws" {
-  version     = "5.100.0"
-  constraints = "~> 5.0"
-  hashes = [
-    "h1:edXOJWE4ORX8Fm+dpVpICzMZJat4AX0VRCAy/xkcOc0=",
-    "zh:054b8dd49f0549c9a7cc27d159e45327b7b65cf404da5e5a20da154b90b8a644",
-    "zh:0b97bf8d5e03d15d83cc40b0530a1f84b459354939ba6f135a0086c20ebbe6b2",
-    "zh:1589a2266af699cbd5d80737a0fe02e54ec9cf2ca54e7e00ac51c7359056f274",
-    "zh:6330766f1d85f01ae6ea90d1b214b8b74cc8c1badc4696b165b36ddd4cc15f7b",
-    "zh:7c8c2e30d8e55291b86fcb64bdf6c25489d538688545eb48fd74ad622e5d3862",
-    "zh:99b1003bd9bd32ee323544da897148f46a527f622dc3971af63ea3e251596342",
-    "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425",
-    "zh:9f8b909d3ec50ade83c8062290378b1ec553edef6a447c56dadc01a99f4eaa93",
-    "zh:aaef921ff9aabaf8b1869a86d692ebd24fbd4e12c21205034bb679b9caf883a2",
-    "zh:ac882313207aba00dd5a76dbd572a0ddc818bb9cbf5c9d61b28fe30efaec951e",
-    "zh:bb64e8aff37becab373a1a0cc1080990785304141af42ed6aa3dd4913b000421",
-    "zh:dfe495f6621df5540d9c92ad40b8067376350b005c637ea6efac5dc15028add4",
-    "zh:f0ddf0eaf052766cfe09dea8200a946519f653c384ab4336e2a4a64fdd6310e9",
-    "zh:f1b7e684f4c7ae1eed272b6de7d2049bb87a0275cb04dbb7cda6636f600699c9",
-    "zh:ff461571e3f233699bf690db319dfe46aec75e58726636a0d97dd9ac6e32fb70",
-  ]
-}

package/infra/terraform/aws/domain/README.md

@@ -1,20 +0,0 @@
-# Terraform Domain (template)
-
-이 스택은 template repo의 AWS 도메인/엣지 skeleton을 제공한다.
-Route53 hosted zone은 `root_domain` 기준으로 조회하고, 서비스 FQDN은 기본적으로 `dev.<root_domain>` 또는 `<root_domain>` 규칙으로 계산한다.
-
-## Domain Policy
-
-- DEV(개발계): `dev.<root_domain>`
-- PROD: `<root_domain>`
-- clone 후 `root_domain`, `service_fqdn`, `target_ip`는 현재 서비스에 맞게 바로 교체한다.
-
-## Manual
-
-```bash
-terraform -chdir=infra/terraform/aws/domain init
-terraform -chdir=infra/terraform/aws/domain plan \
-  -var "phase=dev" \
-  -var "root_domain=example.com" \
-  -var "target_ip=203.0.113.10"
-```

package/infra/terraform/aws/domain/env/dev.tfvars.example

@@ -1,6 +0,0 @@
-phase       = "dev"
-root_domain = "example.com"
-aws_region  = "ap-northeast-2"
-target_ip   = "203.0.113.10"
-ttl         = 60
-enabled     = true

package/infra/terraform/aws/domain/env/prod.tfvars.example

@@ -1,7 +0,0 @@
-phase        = "prod"
-root_domain  = "example.com"
-service_fqdn = "app.example.com"
-aws_region   = "ap-northeast-2"
-target_ip    = "203.0.113.20"
-ttl          = 60
-enabled      = true

package/infra/terraform/aws/domain/main.tf

@@ -1,149 +0,0 @@
-provider "aws" {
-  region = var.aws_region
-}
-
-provider "aws" {
-  alias  = "us_east_1"
-  region = "us-east-1"
-}
-
-locals {
-  phase       = lower(var.phase)
-  root_domain = lower(trimspace(var.root_domain))
-  service_fqdn = lower(
-    trimspace(var.service_fqdn) != ""
-    ? var.service_fqdn
-    : (local.phase == "prod" ? local.root_domain : "dev.${local.root_domain}")
-  )
-  origin_fqdn = "origin.${local.service_fqdn}"
-  origin_id   = replace(local.origin_fqdn, ".", "-")
-}
-
-data "aws_route53_zone" "root" {
-  name         = "${local.root_domain}."
-  private_zone = false
-}
-
-resource "aws_route53_record" "origin_a" {
-  count   = var.enabled ? 1 : 0
-  zone_id = data.aws_route53_zone.root.zone_id
-  name    = local.origin_fqdn
-  type    = "A"
-  ttl     = var.ttl
-  records = [var.target_ip]
-
-  allow_overwrite = true
-}
-
-resource "aws_acm_certificate" "service" {
-  count             = var.enabled && var.cdn_enabled ? 1 : 0
-  provider          = aws.us_east_1
-  domain_name       = local.service_fqdn
-  validation_method = "DNS"
-}
-
-resource "aws_route53_record" "cert_validation" {
-  for_each = var.enabled && var.cdn_enabled ? {
-    for dvo in aws_acm_certificate.service[0].domain_validation_options : dvo.domain_name => {
-      name   = dvo.resource_record_name
-      record = dvo.resource_record_value
-      type   = dvo.resource_record_type
-    }
-  } : {}
-
-  zone_id = data.aws_route53_zone.root.zone_id
-  name    = each.value.name
-  type    = each.value.type
-  ttl     = 60
-  records = [each.value.record]
-
-  allow_overwrite = true
-}
-
-resource "aws_acm_certificate_validation" "service" {
-  count                   = var.enabled && var.cdn_enabled ? 1 : 0
-  provider                = aws.us_east_1
-  certificate_arn         = aws_acm_certificate.service[0].arn
-  validation_record_fqdns = [for row in aws_route53_record.cert_validation : row.fqdn]
-}
-
-resource "aws_cloudfront_distribution" "service" {
-  count           = var.enabled && var.cdn_enabled ? 1 : 0
-  enabled         = true
-  is_ipv6_enabled = true
-  price_class     = var.cdn_price_class
-  comment         = "template edge for ${local.service_fqdn}"
-  aliases         = [local.service_fqdn]
-
-  origin {
-    domain_name = local.origin_fqdn
-    origin_id   = local.origin_id
-
-    custom_origin_config {
-      http_port              = var.origin_port
-      https_port             = 443
-      origin_protocol_policy = "http-only"
-      origin_ssl_protocols   = ["TLSv1.2"]
-    }
-  }
-
-  default_cache_behavior {
-    target_origin_id       = local.origin_id
-    viewer_protocol_policy = "redirect-to-https"
-    compress               = true
-    allowed_methods        = ["GET", "HEAD", "OPTIONS", "PUT", "POST", "PATCH", "DELETE"]
-    cached_methods         = ["GET", "HEAD", "OPTIONS"]
-
-    forwarded_values {
-      query_string = true
-      headers      = ["*"]
-
-      cookies {
-        forward = "all"
-      }
-    }
-  }
-
-  restrictions {
-    geo_restriction {
-      restriction_type = "none"
-    }
-  }
-
-  viewer_certificate {
-    acm_certificate_arn      = aws_acm_certificate_validation.service[0].certificate_arn
-    ssl_support_method       = "sni-only"
-    minimum_protocol_version = "TLSv1.2_2021"
-  }
-
-  depends_on = [
-    aws_route53_record.origin_a,
-    aws_acm_certificate_validation.service,
-  ]
-}
-
-resource "aws_route53_record" "service_alias" {
-  count   = var.enabled && var.cdn_enabled ? 1 : 0
-  zone_id = data.aws_route53_zone.root.zone_id
-  name    = local.service_fqdn
-  type    = "A"
-
-  alias {
-    name                   = aws_cloudfront_distribution.service[0].domain_name
-    zone_id                = aws_cloudfront_distribution.service[0].hosted_zone_id
-    evaluate_target_health = false
-  }
-
-  allow_overwrite = true
-}
-
-resource "aws_route53_record" "service_a" {
-  count   = var.enabled && !var.cdn_enabled ? 1 : 0
-  zone_id = data.aws_route53_zone.root.zone_id
-  name    = local.service_fqdn
-  type    = "A"
-  ttl     = var.ttl
-  records = [var.target_ip]
-
-  allow_overwrite = true
-}

package/infra/terraform/aws/domain/outputs.tf

@@ -1,29 +0,0 @@
-output "service_fqdn" {
-  value       = local.service_fqdn
-  description = "Managed public service domain."
-}
-
-output "origin_fqdn" {
-  value       = local.origin_fqdn
-  description = "Origin DNS name that points to the OpenStack backend."
-}
-
-output "origin_url" {
-  value       = "http://${local.origin_fqdn}:${var.origin_port}"
-  description = "Origin URL that CloudFront points to."
-}
-
-output "root_domain" {
-  value       = local.root_domain
-  description = "Resolved root domain."
-}
-
-output "cloudfront_domain_name" {
-  value       = var.cdn_enabled ? aws_cloudfront_distribution.service[0].domain_name : ""
-  description = "CloudFront distribution domain."
-}
-
-output "cloudfront_distribution_id" {
-  value       = var.cdn_enabled ? aws_cloudfront_distribution.service[0].id : ""
-  description = "CloudFront distribution id."
-}

package/infra/terraform/aws/domain/variables.tf

@@ -1,58 +0,0 @@
-variable "phase" {
-  type        = string
-  description = "Deployment phase."
-  default     = "dev"
-}
-
-variable "root_domain" {
-  type        = string
-  description = "Hosted zone root domain."
-  default     = "example.com"
-}
-
-variable "service_fqdn" {
-  type        = string
-  description = "Optional explicit final service domain."
-  default     = ""
-}
-
-variable "aws_region" {
-  type        = string
-  description = "AWS region for Route53 and general provider calls."
-  default     = "ap-northeast-2"
-}
-
-variable "target_ip" {
-  type        = string
-  description = "Origin target IPv4."
-}
-
-variable "origin_port" {
-  type        = number
-  description = "Origin backend port."
-  default     = 8080
-}
-
-variable "ttl" {
-  type        = number
-  description = "DNS TTL."
-  default     = 60
-}
-
-variable "enabled" {
-  type        = bool
-  description = "Enable record management."
-  default     = true
-}
-
-variable "cdn_enabled" {
-  type        = bool
-  description = "Enable CloudFront distribution and alias record."
-  default     = true
-}
-
-variable "cdn_price_class" {
-  type        = string
-  description = "CloudFront price class."
-  default     = "PriceClass_200"
-}

package/infra/terraform/aws/domain/versions.tf

@@ -1,10 +0,0 @@
-terraform {
-  required_version = ">= 1.6.0"
-
-  required_providers {
-    aws = {
-      source  = "hashicorp/aws"
-      version = "~> 5.0"
-    }
-  }
-}

package/infra/terraform/openstack/README.md

@@ -1,38 +0,0 @@
-# OpenStack Terraform
-
-OpenStack provider는 공용 축으로 두되, canonical compute baseline은 `server/` root를 우선한다.
-
-구조:
-
-- `modules/environment_host`: OpenStack Docker host 공통 module
-- `server/`: Aspace/OpenStack backend compute canonical root
-- `dev/`: DEV(개발계)용 Terraform root
-- `prod/`: PROD용 Terraform root
-
-원칙:
-
-- canonical delivery split에서는 `openstack/server`가 backend compute를 담당하고, `aws/domain`과 `aws/data`가 외곽 surface를 담당한다.
-- DEV(개발계)와 PROD는 state를 분리한다.
-- compose 자동 기동이 필요하면 각 환경 root의 `compose_env_content`에 대응 환경의 `.env` 전체를 넣는다.
-- 네트워크를 공유하려면 `create_network=false`와 `network_id`/`subnet_id`를 사용한다.
-
-사용:
-
-```bash
-cd infra/terraform/openstack/server
-cp zz_aspace.auto.tfvars.example.json zz_aspace.auto.tfvars.json
-terraform init -backend=false
-terraform validate
-
-cd infra/terraform/openstack/dev
-cp terraform.tfvars.example terraform.tfvars
-terraform init
-terraform validate
-terraform plan
-
-cd ../prod
-cp terraform.tfvars.example terraform.tfvars
-terraform init
-terraform validate
-terraform plan
-```

package/infra/terraform/openstack/dev/.terraform.lock.hcl

@@ -1,24 +0,0 @@
-# This file is maintained automatically by "terraform init".
-# Manual edits may be lost in future updates.
-
-provider "registry.terraform.io/terraform-provider-openstack/openstack" {
-  version     = "2.1.0"
-  constraints = "~> 2.1"
-  hashes = [
-    "h1:2TcmfEzBOGQPALErrXTaL6v+k/WAL40adao4izRYmdw=",
-    "zh:113661750398bf21c8fe36aade9fb6f5eb82b5bcd3bcd30bd37ac805d83398f4",
-    "zh:1b3c26347b9cd61e413ee93c2f422cc3278a77f55fd3516eaabb3e2a85f65281",
-    "zh:1b751bbf1e4152829a643b532fd3f5967a2e89a41fac381257e0b41665be3306",
-    "zh:1b967bbfd9b344419c0e0df0c3a15fcbd731e91f19a18955a55aace8d9ec039a",
-    "zh:1bc0fc7c0a21e568db043b654501ce668ba19bf7628d37a7d2aaa512fd6e5aeb",
-    "zh:425cbf61757d4b503e7bf0f409ea59835ca3afbd2432d56ad552c2e5d234a572",
-    "zh:67d4f059cb4d73bf6c060313ec32962c4e5bd8dc7be2542a6f2098ab32575cd9",
-    "zh:7fe841ac5b68a4f52fb3cf45070828f3845de44746679d434e4349f3c23e3ef2",
-    "zh:ac1ed4c6ef0b6a3410568a05d3f9933d184497f065988503c43da0b2f0786ab2",
-    "zh:c5c0d14c86fabd9ab6a5d555e6a8d511942665fb5fa948dd452b0d1934068344",
-    "zh:c9ae5c210192275185d6823566a9421983e8e64c2665a4cae00b92dd0706bd19",
-    "zh:ee9865ccc053e7f345e532654fb628d1cf1e81cd2e929643c1691bebffcf7b98",
-    "zh:f3416d2f666095e740522c4964e436470bb9ec17bd53aaae8169ad93297d07bd",
-    "zh:fbca85457dd49e17168989d64f7cfc4a519d55ef4e00e89cea2859e87ad87f83",
-  ]
-}

package/infra/terraform/openstack/dev/README.md

@@ -1,18 +0,0 @@
-# OpenStack DEV
-
-DEV(개발계) 전용 Terraform root다.
-
-사용:
-
-```bash
-cd infra/terraform/openstack/dev
-cp terraform.tfvars.example terraform.tfvars
-terraform init
-terraform validate
-terraform plan
-```
-
-메모:
-
-- 기본 compose 파일은 `infra/compose/dev.yml`이다.
-- cloud-init 자동 기동을 쓰려면 `compose_env_content`에 `infra/compose/.env.dev` 전체를 넣는다.

package/infra/terraform/openstack/dev/main.tf

@@ -1,49 +0,0 @@
-module "environment_host" {
-  source = "../modules/environment_host"
-
-  availability_zone      = var.availability_zone
-  create_network         = var.create_network
-  network_name           = var.network_name
-  subnet_name            = var.subnet_name
-  subnet_cidr            = var.subnet_cidr
-  create_router          = var.create_router
-  router_name            = var.router_name
-  external_network_id    = var.external_network_id
-  network_id             = var.network_id
-  subnet_id              = var.subnet_id
-  service_allowed_cidrs  = var.service_allowed_cidrs
-  ssh_allowed_cidrs      = var.ssh_allowed_cidrs
-  name                   = var.name
-  image_name             = var.image_name
-  flavor_name            = var.flavor_name
-  keypair_name           = var.keypair_name
-  assign_floating_ip     = var.assign_floating_ip
-  floating_ip_pool       = var.floating_ip_pool
-  exposed_tcp_ports      = var.exposed_tcp_ports
-  repo_clone_url         = var.repo_clone_url
-  repo_ref               = var.repo_ref
-  compose_file           = "infra/compose/dev.yml"
-  compose_env_filename   = ".env.dev"
-  compose_env_content    = var.compose_env_content
-  deploy_compose_on_boot = var.deploy_compose_on_boot
-}
-
-output "network_id" {
-  description = "Effective network id used by the DEV(개발계) host"
-  value       = module.environment_host.network_id
-}
-
-output "subnet_id" {
-  description = "Effective subnet id used by the DEV(개발계) host"
-  value       = module.environment_host.subnet_id
-}
-
-output "router_id" {
-  description = "Created router id when create_router=true"
-  value       = module.environment_host.router_id
-}
-
-output "instance" {
-  description = "DEV(개발계) host summary"
-  value       = module.environment_host.instance
-}