terragrunt.hcl 2.6 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667
  1. locals {
  2. # If you want to use any of the variables in _this_ file, you have to load them here.
  3. # However, they will all be available as inputs to the module loaded in terraform.source
  4. # below.
  5. environment_vars = read_terragrunt_config(find_in_parent_folders("env.hcl"))
  6. partition_vars = read_terragrunt_config(find_in_parent_folders("partition.hcl"))
  7. region_vars = read_terragrunt_config(find_in_parent_folders("region.hcl"))
  8. account_vars = read_terragrunt_config(find_in_parent_folders("account.hcl"))
  9. global_vars = read_terragrunt_config(find_in_parent_folders("globals.hcl"))
  10. }
  11. # Terragrunt will copy the Terraform configurations specified by the source parameter, along with any files in the
  12. # working directory, into a temporary folder, and execute your Terraform commands in that folder.
  13. terraform {
  14. # Double slash is intentional and required to show root of modules
  15. source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/mailrelay?ref=v3.5.17"
  16. }
  17. dependency "vpc-system-services" {
  18. config_path = "../010-vpc-system-services"
  19. }
  20. # Include all settings from the root terragrunt.hcl file
  21. include {
  22. path = find_in_parent_folders()
  23. }
  24. generate "provider-ses" {
  25. path = "provider-ses.tf"
  26. if_exists = "overwrite_terragrunt"
  27. contents = <<EOF
  28. provider "aws" {
  29. region = "${local.region_vars.locals.ses_region}"
  30. allowed_account_ids = [ "${local.account_vars.locals.aws_account_id}" ]
  31. profile = "govcloud"
  32. alias = "ses"
  33. assume_role {
  34. role_arn = "arn:${local.partition_vars.locals.aws_partition}:iam::${local.account_vars.locals.aws_account_id}:role/user/mdr_terraformer"
  35. session_name = "terraform-ses"
  36. }
  37. }
  38. EOF
  39. }
  40. # These are the variables we have to pass in to use the module specified in the terragrunt source above
  41. inputs = {
  42. # All of the inputs from the inherited hcl files are available automatically
  43. # (via the `inputs` section of the root `terragrunt.hcl`). However, modules
  44. # will be more flexible if you specify particular input values.
  45. tags = {
  46. Purpose = "Mail Relay - Proxy between our systems and SES"
  47. Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
  48. }
  49. instance_tags = {
  50. Reserved = true
  51. Reserved_Type = "t3a.xlarge"
  52. Reservation_Expiration = "2022-10-15"
  53. }
  54. instance_name = "mailrelay2"
  55. instance_type = local.account_vars.locals.mailrelay_instance_type
  56. vpc_id = dependency.vpc-system-services.outputs.vpc_id
  57. azs = dependency.vpc-system-services.outputs.azs
  58. subnets = dependency.vpc-system-services.outputs.private_subnets
  59. }
  60. terraform_version_constraint = "= 1.1.6"
  61. terragrunt_version_constraint = "= 0.36.2"