This repository is a comprehensive Terraform module for provisioning and managing AWS EKS (Elastic Kubernetes Service) clusters. It provides a modular, production-grade interface to create clusters with all supporting resources: IAM roles, security groups, VPC networking, encryption (KMS), logging, addons, identity providers (OIDC/IRSA), and access entries. The root module orchestrates multiple sub-modules for compute resources including EKS managed node groups, self-managed node groups (autoscaling groups), Fargate profiles, Karpenter integration, hybrid node roles, and EKS capabilities (ACK, ArgoCD, KRO). The architecture follows standard Terraform module patterns with extensive use of `for_each`, `dynamic` blocks, and conditional creation. The codebase demonstrates high craftsmanship through its modular design, comprehensive test infrastructure, and detailed upgrade guides that document breaking changes across major versions (v17 through v21). It includes an internal user data rendering sub-module that supports AL2, AL2023, Bottlerocket, and Windows AMIs, with both cloud-init and custom template support.
This is a Terraform module, published on the Terraform Registry as `terraform-google-modules/project-factory/google`, that automates the creation and configuration of Google Cloud Platform (GCP) projects. It follows a modular architecture with a root module orchestrating several submodules such as `core_project_factory`, `project_services`, `shared_vpc_access`, `budget`, `quota_manager`, `essential_contacts`, `gsuite_enabled`, and `svpc_service_project`. The module handles project creation, billing association, IAM policy management, Shared VPC attachment, API enablement with service identities, budget alerts, consumer quota overrides, essential contacts, and G Suite group integration (via the third-party `DeviaVir/gsuite` provider). Entry points are the root `main.tf` and the submodule directories; usage is through standard Terraform workflow (`terraform init`, `plan`, `apply`). External dependencies include the `hashicorp/google`, `hashicorp/google-beta`, and optionally `DeviaVir/gsuite` Terraform providers. The repository also provides helper scripts for seed service account setup (`helpers/setup-sa.sh`), state migration (`helpers/migrate.py`, `helpers/migrate4.py`), and prerequisite validation (`helpers/preconditions/preconditions.py`). The codebase is well-structured with extensive use of locals, `for_each` loops, and separation of concerns, making individual submodules reusable across different projects. Despite being infrastructure-as-code, it exhibits strong software engineering practices including semantic versioning, automated testing (Go, InSpec, Python), and CI/CD pipelines.
This Terraform module provisions an AWS SNS topic and a Lambda function (Python 3.13) that forwards SNS notifications to a Slack channel via webhook. The Lambda function parses and formats various AWS event types—CloudWatch alarms, GuardDuty findings, Security Hub findings, AWS Health events, AWS Backup notifications, and generic messages—into structured Slack attachments. It supports encrypted webhook URLs via KMS, custom Lambda functions, VPC configuration, and SNS subscription filtering. The module is part of the terraform-aws-modules ecosystem and follows standard Terraform module conventions with comprehensive CI/CD, pre-commit hooks, and semantic release. The Python code includes unit tests with snapshot testing, linting, and type checking, demonstrating solid engineering practices.
This is a comprehensive Terraform module library for provisioning Google Cloud networking infrastructure. It provides building blocks for VPCs, subnets, routes, firewall rules (classic and policy-based), network peering, Private Service Connect (consumer, producer, endpoints), Network Connectivity Center hubs/spokes, and higher-level foundation patterns (shared VPC, hub-and-spoke). The architecture is modular: the root module orchestrates core resources while 30+ submodules handle specific concerns (e.g., firewall-rules, subnets-beta, network-firewall-policy). Each submodule has its own variables, outputs, and version constraints, making them independently consumable. Extensive integration tests in Go (using cloud-foundation-toolkit) validate correct behavior against real GCP projects. The module is actively maintained with frequent releases (v18.3.0) and follows Google Cloud Foundation Toolkit conventions, but exhibits some technical drift: deprecated variables remain, beta submodules may lag behind GA, and many examples pin older Terraform/provider versions.