fix: dual-stack and load balanced access

examples/basic/main.tf

@@ -27,4 +27,5 @@ module "this" {
   security_group_type = "egress"
   load_balancer_name  = "${local.project_name}-lb"
   domain              = local.domain
+  domain_zone         = local.zone
 }

examples/cert/main.tf

@@ -27,5 +27,6 @@ module "this" {
   security_group_type = "project"
   load_balancer_name  = "${local.project_name}-lb"
   domain              = local.domain
+  domain_zone         = local.zone
   cert_use_strategy   = "create"
 }

examples/domain/main.tf

@@ -27,4 +27,5 @@ module "this" {
   security_group_type = "project"
   load_balancer_name  = "${local.project_name}-lb"
   domain              = local.domain
+  domain_zone         = local.zone
 }

examples/dualstack/main.tf

@@ -0,0 +1,32 @@
+
+provider "aws" {
+  default_tags {
+    tags = {
+      Id    = local.identifier
+      Owner = "terraform-ci@suse.com"
+    }
+  }
+}
+provider "acme" {
+  server_url = "https://acme-staging-v02.api.letsencrypt.org/directory"
+}
+locals {
+  identifier   = var.identifier
+  example      = "dualstack"
+  project_name = "tf-${substr(md5(join("-", [local.example, md5(local.identifier)])), 0, 5)}-${local.identifier}"
+  zone         = var.zone
+  domain       = "${local.identifier}.${local.zone}"
+}
+
+# AWS reserves the first four IP addresses and the last IP address in any CIDR block for its own use (cumulatively)
+# gives 256 usable addresses from .1 to .254, but AWS reserves .1 to .4 and .255, leaving .5 to .254
+module "this" {
+  source              = "../../"
+  vpc_name            = "${local.project_name}-vpc"
+  vpc_type            = "dualstack"
+  security_group_name = "${local.project_name}-sg"
+  security_group_type = "egress"
+  load_balancer_name  = "${local.project_name}-lb"
+  domain              = local.domain
+  domain_zone         = local.zone
+}

examples/dualstack/outputs.tf

@@ -0,0 +1,18 @@
+output "vpc" {
+  value = module.this.vpc
+}
+output "subnets" {
+  value = module.this.subnets
+}
+output "security_group" {
+  value = module.this.security_group
+}
+output "load_balancer" {
+  value = module.this.load_balancer
+}
+output "domain" {
+  value = module.this.domain
+}
+output "certificate" {
+  value = module.this.certificate
+}

examples/dualstack/variables.tf

@@ -0,0 +1,6 @@
+variable "identifier" {
+  type = string
+}
+variable "zone" {
+  type = string
+}

examples/dualstack/versions.tf

@@ -0,0 +1,21 @@
+terraform {
+  required_version = ">= 1.5.0, < 1.6"
+  required_providers {
+    local = {
+      source  = "hashicorp/local"
+      version = ">= 2.4"
+    }
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 5.11"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = ">= 3.1"
+    }
+    acme = {
+      source  = "vancluever/acme"
+      version = ">= 2.0"
+    }
+  }
+}

examples/ingress/main.tf

@@ -26,6 +26,7 @@ module "this" {
   security_group_name = "${local.project_name}-sg"
   security_group_type = "egress"
   domain              = local.domain
+  domain_zone         = local.zone
   load_balancer_name  = "${local.project_name}-lb"
   load_balancer_access_cidrs = {
     application = {

examples/ipv6/main.tf

@@ -0,0 +1,33 @@
+
+provider "aws" {
+  default_tags {
+    tags = {
+      Id    = local.identifier
+      Owner = "terraform-ci@suse.com"
+    }
+  }
+}
+provider "acme" {
+  server_url = "https://acme-staging-v02.api.letsencrypt.org/directory"
+}
+locals {
+  identifier   = var.identifier
+  example      = "ipv6"
+  project_name = "tf-${substr(md5(join("-", [local.example, md5(local.identifier)])), 0, 5)}-${local.identifier}"
+  zone         = var.zone
+  domain       = "${local.identifier}.${local.zone}"
+}
+
+# AWS reserves the first four IP addresses and the last IP address in any CIDR block for its own use (cumulatively)
+# gives 256 usable addresses from .1 to .254, but AWS reserves .1 to .4 and .255, leaving .5 to .254
+module "this" {
+  source              = "../../"
+  vpc_name            = "${local.project_name}-vpc"
+  vpc_type            = "ipv6"
+  subnet_use_strategy = "create"
+  security_group_name = "${local.project_name}-sg"
+  security_group_type = "egress"
+  load_balancer_name  = "${local.project_name}-lb"
+  domain              = local.domain
+  domain_zone         = local.zone
+}

examples/ipv6/outputs.tf

@@ -0,0 +1,21 @@
+output "vpc" {
+  value = module.this.vpc
+}
+output "subnets" {
+  value = module.this.subnets
+}
+output "security_group" {
+  value = module.this.security_group
+}
+output "load_balancer" {
+  value = module.this.load_balancer
+}
+output "domain" {
+  value = module.this.domain
+}
+output "certificate" {
+  value = module.this.certificate
+}
+output "subnet_map" {
+  value = module.this.subnet_map
+}

examples/ipv6/variables.tf

@@ -0,0 +1,6 @@
+variable "identifier" {
+  type = string
+}
+variable "zone" {
+  type = string
+}

examples/ipv6/versions.tf

@@ -0,0 +1,21 @@
+terraform {
+  required_version = ">= 1.5.0, < 1.6"
+  required_providers {
+    local = {
+      source  = "hashicorp/local"
+      version = ">= 2.4"
+    }
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 5.11"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = ">= 3.1"
+    }
+    acme = {
+      source  = "vancluever/acme"
+      version = ">= 2.0"
+    }
+  }
+}

examples/selectsubnets/main.tf

@@ -0,0 +1,44 @@
+
+provider "aws" {
+  default_tags {
+    tags = {
+      Id    = local.identifier
+      Owner = "terraform-ci@suse.com"
+    }
+  }
+}
+provider "acme" {
+  server_url = "https://acme-staging-v02.api.letsencrypt.org/directory"
+}
+locals {
+  identifier   = var.identifier
+  example      = "selectsubnets"
+  project_name = "tf-${substr(md5(join("-", [local.example, md5(local.identifier)])), 0, 5)}-${local.identifier}"
+  zone         = var.zone
+  domain       = "${local.identifier}.${local.zone}"
+}
+
+module "setup" {
+  source                      = "../../"
+  vpc_name                    = local.project_name
+  subnet_names                = [local.project_name]
+  security_group_use_strategy = "skip"
+}
+
+# AWS reserves the first four IP addresses and the last IP address in any CIDR block for its own use (cumulatively)
+# gives 256 usable addresses from .1 to .254, but AWS reserves .1 to .4 and .255, leaving .5 to .254
+module "this" {
+  depends_on = [
+    module.setup,
+  ]
+  source              = "../../"
+  vpc_use_strategy    = "select"
+  vpc_name            = local.project_name
+  subnet_use_strategy = "select"
+  subnet_names        = [local.project_name]
+  security_group_name = "${local.project_name}-sg"
+  security_group_type = "egress"
+  load_balancer_name  = "${local.project_name}-lb"
+  domain              = local.domain
+  domain_zone         = local.zone
+}

examples/selectsubnets/outputs.tf

@@ -0,0 +1,18 @@
+output "vpc" {
+  value = module.this.vpc
+}
+output "subnets" {
+  value = module.this.subnets
+}
+output "security_group" {
+  value = module.this.security_group
+}
+output "load_balancer" {
+  value = module.this.load_balancer
+}
+output "domain" {
+  value = module.this.domain
+}
+output "certificate" {
+  value = module.this.certificate
+}

examples/selectsubnets/variables.tf

@@ -0,0 +1,6 @@
+variable "identifier" {
+  type = string
+}
+variable "zone" {
+  type = string
+}

examples/selectsubnets/versions.tf

@@ -0,0 +1,21 @@
+terraform {
+  required_version = ">= 1.5.0, < 1.6"
+  required_providers {
+    local = {
+      source  = "hashicorp/local"
+      version = ">= 2.4"
+    }
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 5.11"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = ">= 3.1"
+    }
+    acme = {
+      source  = "vancluever/acme"
+      version = ">= 2.0"
+    }
+  }
+}

examples/selectvpc/main.tf

@@ -36,4 +36,5 @@ module "this" {
   security_group_type = "egress"
   load_balancer_name  = "${local.project_name}-lb"
   domain              = local.domain
+  domain_zone         = local.zone
 }