specweave 0.21.2 → 0.22.0

package/plugins/specweave/iac-templates/azure-functions/main.tf.hbs

@@ -0,0 +1,247 @@
+# Azure Functions with Cosmos DB and Storage
+# Generated by SpecWeave Serverless Intelligence
+# Platform: Azure Functions
+# Project: {{projectName}}
+# Environment: {{environment}}
+
+terraform {
+  required_version = ">= 1.0"
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "~> 3.0"
+    }
+  }
+}
+
+###############################
+# Resource Group
+###############################
+
+resource "azurerm_resource_group" "{{snakeCase projectName}}" {
+  name     = "rg-{{kebabCase projectName}}-{{environment}}"
+  location = var.location
+
+  tags = {
+    Name        = "{{projectName}}-{{environment}}"
+    Environment = var.environment
+    Project     = var.project_name
+    ManagedBy   = "Terraform"
+  }
+}
+
+###############################
+# Storage Account
+###############################
+
+resource "azurerm_storage_account" "{{snakeCase functionName}}" {
+  name                     = "{{snakeCase projectName}}{{environment}}"
+  resource_group_name      = azurerm_resource_group.{{snakeCase projectName}}.name
+  location                 = azurerm_resource_group.{{snakeCase projectName}}.location
+  account_tier             = "Standard"
+  account_replication_type = {{#if (eq environment "prod")}}"GRS"{{else}}"LRS"{{/if}}
+  min_tls_version          = "TLS1_2"
+
+  # HTTPS only enforcement
+  enable_https_traffic_only = true
+
+  # Blob properties
+  blob_properties {
+    versioning_enabled = {{#if (eq environment "prod")}}true{{else}}false{{/if}}
+    delete_retention_policy {
+      days = {{#if (eq environment "prod")}}30{{else}}7{{/if}}
+    }
+  }
+
+  tags = {
+    Name        = "{{functionName}}-storage"
+    Environment = var.environment
+    Project     = var.project_name
+  }
+}
+
+resource "azurerm_storage_container" "deployments" {
+  name                  = "function-deployments"
+  storage_account_name  = azurerm_storage_account.{{snakeCase functionName}}.name
+  container_access_type = "private"
+}
+
+###############################
+# Service Plan
+###############################
+
+resource "azurerm_service_plan" "{{snakeCase functionName}}" {
+  name                = "asp-{{kebabCase functionName}}-{{environment}}"
+  resource_group_name = azurerm_resource_group.{{snakeCase projectName}}.name
+  location            = azurerm_resource_group.{{snakeCase projectName}}.location
+  os_type             = "Linux"
+
+  # Consumption for dev, Premium for prod
+  sku_name = {{#if (eq environment "prod")}}"EP1"{{else if (eq environment "staging")}}"B1"{{else}}"Y1"{{/if}}
+
+  tags = {
+    Name        = "{{functionName}}-plan"
+    Environment = var.environment
+    Project     = var.project_name
+  }
+}
+
+###############################
+# Application Insights
+###############################
+
+resource "azurerm_application_insights" "{{snakeCase functionName}}" {
+  name                = "appi-{{kebabCase functionName}}-{{environment}}"
+  resource_group_name = azurerm_resource_group.{{snakeCase projectName}}.name
+  location            = azurerm_resource_group.{{snakeCase projectName}}.location
+  application_type    = "web"
+  retention_in_days   = {{#if (eq environment "prod")}}90{{else}}30{{/if}}
+
+  tags = {
+    Name        = "{{functionName}}-insights"
+    Environment = var.environment
+    Project     = var.project_name
+  }
+}
+
+###############################
+# Function App
+###############################
+
+resource "azurerm_linux_function_app" "{{snakeCase functionName}}" {
+  name                       = "func-{{kebabCase functionName}}-{{environment}}"
+  resource_group_name        = azurerm_resource_group.{{snakeCase projectName}}.name
+  location                   = azurerm_resource_group.{{snakeCase projectName}}.location
+  service_plan_id            = azurerm_service_plan.{{snakeCase functionName}}.id
+  storage_account_name       = azurerm_storage_account.{{snakeCase functionName}}.name
+  storage_account_access_key = azurerm_storage_account.{{snakeCase functionName}}.primary_access_key
+
+  # HTTPS only
+  https_only = true
+
+  # Managed Identity
+  identity {
+    type = "SystemAssigned"
+  }
+
+  site_config {
+    application_stack {
+      {{#if (eq runtime "node")}}
+      node_version = "{{#if nodeVersion}}{{nodeVersion}}{{else}}18{{/if}}"
+      {{else if (eq runtime "python")}}
+      python_version = "{{#if pythonVersion}}{{pythonVersion}}{{else}}3.11{{/if}}"
+      {{else if (eq runtime "dotnet")}}
+      dotnet_version = "{{#if dotnetVersion}}{{dotnetVersion}}{{else}}7.0{{/if}}"
+      {{else}}
+      node_version = "18"
+      {{/if}}
+    }
+
+    # CORS configuration
+    cors {
+      allowed_origins = {{#if (eq environment "prod")}}["https://{{projectName}}.com"]{{else}}["*"]{{/if}}
+    }
+
+    # Always On for non-consumption plans
+    {{#if (eq environment "prod")}}
+    always_on = true
+    {{/if}}
+
+    application_insights_connection_string = azurerm_application_insights.{{snakeCase functionName}}.connection_string
+    application_insights_key              = azurerm_application_insights.{{snakeCase functionName}}.instrumentation_key
+  }
+
+  app_settings = {
+    "ENVIRONMENT" = var.environment
+    {{#if databaseName}}
+    "COSMOSDB_ENDPOINT" = azurerm_cosmosdb_account.{{snakeCase databaseName}}.endpoint
+    "COSMOSDB_DATABASE" = azurerm_cosmosdb_sql_database.{{snakeCase databaseName}}.name
+    {{/if}}
+    "FUNCTIONS_WORKER_RUNTIME" = "{{#if runtime}}{{runtime}}{{else}}node{{/if}}"
+    "WEBSITE_RUN_FROM_PACKAGE" = "1"
+  }
+
+  tags = {
+    Name        = "{{functionName}}-{{environment}}"
+    Environment = var.environment
+    Project     = var.project_name
+    ManagedBy   = "Terraform"
+  }
+}
+
+{{#if databaseName}}
+###############################
+# Cosmos DB
+###############################
+
+resource "azurerm_cosmosdb_account" "{{snakeCase databaseName}}" {
+  name                = "cosmos-{{kebabCase databaseName}}-{{environment}}"
+  resource_group_name = azurerm_resource_group.{{snakeCase projectName}}.name
+  location            = azurerm_resource_group.{{snakeCase projectName}}.location
+  offer_type          = "Standard"
+  kind                = "GlobalDocumentDB"
+
+  # Consistency
+  consistency_policy {
+    consistency_level = {{#if (eq environment "prod")}}"Session"{{else}}"Eventual"{{/if}}
+  }
+
+  # Geo-replication
+  geo_location {
+    location          = azurerm_resource_group.{{snakeCase projectName}}.location
+    failover_priority = 0
+  }
+
+  {{#if (eq environment "prod")}}
+  # Secondary region for production
+  geo_location {
+    location          = var.secondary_location
+    failover_priority = 1
+  }
+  {{/if}}
+
+  # Backup
+  backup {
+    type                = {{#if (eq environment "prod")}}"Continuous"{{else}}"Periodic"{{/if}}
+    {{#unless (eq environment "prod")}}
+    interval_in_minutes = 240
+    retention_in_hours  = 8
+    {{/unless}}
+  }
+
+  tags = {
+    Name        = "{{databaseName}}-{{environment}}"
+    Environment = var.environment
+    Project     = var.project_name
+  }
+}
+
+resource "azurerm_cosmosdb_sql_database" "{{snakeCase databaseName}}" {
+  name                = "{{databaseName}}"
+  resource_group_name = azurerm_cosmosdb_account.{{snakeCase databaseName}}.resource_group_name
+  account_name        = azurerm_cosmosdb_account.{{snakeCase databaseName}}.name
+
+  # Serverless for dev, provisioned for prod
+  {{#if (eq environment "prod")}}
+  throughput = 400
+  {{else}}
+  # Serverless (pay-per-request)
+  {{/if}}
+}
+
+resource "azurerm_cosmosdb_sql_container" "{{snakeCase databaseName}}" {
+  name                = "items"
+  resource_group_name = azurerm_cosmosdb_account.{{snakeCase databaseName}}.resource_group_name
+  account_name        = azurerm_cosmosdb_account.{{snakeCase databaseName}}.name
+  database_name       = azurerm_cosmosdb_sql_database.{{snakeCase databaseName}}.name
+  partition_key_path  = "/id"
+
+  indexing_policy {
+    indexing_mode = "consistent"
+
+    included_path {
+      path = "/*"
+    }
+  }
+}
+{{/if}}

package/plugins/specweave/iac-templates/azure-functions/outputs.tf.hbs

@@ -0,0 +1,72 @@
+# Terraform Outputs for Azure Functions
+# Project: {{projectName}}
+
+output "function_app_name" {
+  description = "Name of the Function App"
+  value       = azurerm_linux_function_app.{{snakeCase functionName}}.name
+}
+
+output "function_app_id" {
+  description = "ID of the Function App"
+  value       = azurerm_linux_function_app.{{snakeCase functionName}}.id
+}
+
+output "function_app_default_hostname" {
+  description = "Default hostname of the Function App"
+  value       = azurerm_linux_function_app.{{snakeCase functionName}}.default_hostname
+}
+
+output "function_app_url" {
+  description = "HTTPS URL of the Function App"
+  value       = "https://${azurerm_linux_function_app.{{snakeCase functionName}}.default_hostname}"
+}
+
+output "function_identity_principal_id" {
+  description = "Principal ID of the Function App's managed identity"
+  value       = azurerm_linux_function_app.{{snakeCase functionName}}.identity[0].principal_id
+}
+
+output "resource_group_name" {
+  description = "Name of the resource group"
+  value       = azurerm_resource_group.{{snakeCase projectName}}.name
+}
+
+output "storage_account_name" {
+  description = "Name of the storage account"
+  value       = azurerm_storage_account.{{snakeCase functionName}}.name
+}
+
+output "application_insights_key" {
+  description = "Application Insights instrumentation key"
+  value       = azurerm_application_insights.{{snakeCase functionName}}.instrumentation_key
+  sensitive   = true
+}
+
+output "application_insights_connection_string" {
+  description = "Application Insights connection string"
+  value       = azurerm_application_insights.{{snakeCase functionName}}.connection_string
+  sensitive   = true
+}
+
+{{#if databaseName}}
+output "cosmosdb_endpoint" {
+  description = "Cosmos DB account endpoint"
+  value       = azurerm_cosmosdb_account.{{snakeCase databaseName}}.endpoint
+}
+
+output "cosmosdb_database_name" {
+  description = "Cosmos DB database name"
+  value       = azurerm_cosmosdb_sql_database.{{snakeCase databaseName}}.name
+}
+
+output "cosmosdb_container_name" {
+  description = "Cosmos DB container name"
+  value       = azurerm_cosmosdb_sql_container.{{snakeCase databaseName}}.name
+}
+
+output "cosmosdb_primary_key" {
+  description = "Cosmos DB primary key"
+  value       = azurerm_cosmosdb_account.{{snakeCase databaseName}}.primary_key
+  sensitive   = true
+}
+{{/if}}

package/plugins/specweave/iac-templates/azure-functions/provider.tf.hbs

@@ -0,0 +1,14 @@
+# Azure Provider Configuration
+# Project: {{projectName}}
+
+provider "azurerm" {
+  features {
+    resource_group {
+      prevent_deletion_if_contains_resources = {{#if (eq environment "prod")}}true{{else}}false{{/if}}
+    }
+
+    key_vault {
+      purge_soft_delete_on_destroy = {{#if (eq environment "prod")}}false{{else}}true{{/if}}
+    }
+  }
+}

package/plugins/specweave/iac-templates/azure-functions/variables.tf.hbs

@@ -0,0 +1,64 @@
+# Terraform Variables for Azure Functions
+# Project: {{projectName}}
+
+variable "location" {
+  description = "Azure region for deployment"
+  type        = string
+  default     = "{{#if location}}{{location}}{{else}}eastus{{/if}}"
+}
+
+variable "secondary_location" {
+  description = "Azure secondary region for geo-replication (production)"
+  type        = string
+  default     = "{{#if secondaryLocation}}{{secondaryLocation}}{{else}}westus{{/if}}"
+}
+
+variable "environment" {
+  description = "Environment name (dev, staging, prod)"
+  type        = string
+  default     = "{{environment}}"
+  validation {
+    condition     = contains(["dev", "staging", "prod"], var.environment)
+    error_message = "Environment must be dev, staging, or prod."
+  }
+}
+
+variable "project_name" {
+  description = "Project name"
+  type        = string
+  default     = "{{projectName}}"
+}
+
+variable "function_name" {
+  description = "Function App name"
+  type        = string
+  default     = "{{functionName}}"
+}
+
+variable "runtime" {
+  description = "Function runtime (node, python, dotnet)"
+  type        = string
+  default     = "{{#if runtime}}{{runtime}}{{else}}node{{/if}}"
+  validation {
+    condition     = contains(["node", "python", "dotnet"], var.runtime)
+    error_message = "Runtime must be node, python, or dotnet."
+  }
+}
+
+{{#if databaseName}}
+variable "database_name" {
+  description = "Cosmos DB database name"
+  type        = string
+  default     = "{{databaseName}}"
+}
+{{/if}}
+
+variable "tags" {
+  description = "Additional tags to apply to resources"
+  type        = map(string)
+  default     = {
+    Project     = "{{projectName}}"
+    Environment = "{{environment}}"
+    ManagedBy   = "Terraform"
+  }
+}