terragrunt.hcl 2.1 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. locals {
  2. # If you want to use any of the variables in _this_ file, you have to load them here.
  3. # However, they will all be available as inputs to the module loaded in terraform.source
  4. # below.
  5. environment_vars = read_terragrunt_config(find_in_parent_folders("env.hcl"))
  6. partition_vars = read_terragrunt_config(find_in_parent_folders("partition.hcl"))
  7. region_vars = read_terragrunt_config(find_in_parent_folders("region.hcl"))
  8. account_vars = read_terragrunt_config(find_in_parent_folders("account.hcl"))
  9. global_vars = read_terragrunt_config(find_in_parent_folders("globals.hcl"))
  10. }
  11. # Terragrunt will copy the Terraform configurations specified by the source parameter, along with any files in the
  12. # working directory, into a temporary folder, and execute your Terraform commands in that folder.
  13. terraform {
  14. # Double slash is intentional and required to show root of modules
  15. source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/palo_alto/panorama?ref=v3.0.0"
  16. }
  17. dependency "security_vpc" {
  18. config_path = "../015-security-vpc"
  19. }
  20. # Include all settings from the root terragrunt.hcl file
  21. include {
  22. path = find_in_parent_folders()
  23. }
  24. # These are the variables we have to pass in to use the module specified in the terragrunt source above
  25. inputs = {
  26. # All of the inputs from the inherited hcl files are available automatically
  27. # (via the `inputs` section of the root `terragrunt.hcl`). However, modules
  28. # will be more flexible if you specify particular input values.
  29. tags = {
  30. Purpose = "Palo Alto Panorama"
  31. Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
  32. }
  33. azs = dependency.security_vpc.outputs.azs
  34. panorama_security_group_ids = [
  35. dependency.security_vpc.outputs.security_groups["allow_trusted"],
  36. dependency.security_vpc.outputs.security_groups["allow_all_intravpc"]
  37. ]
  38. subnet_id_map = dependency.security_vpc.outputs.subnet_id_map
  39. subnet_cidr_map = dependency.security_vpc.outputs.subnet_cidr_map
  40. ebs_key = dependency.security_vpc.outputs.kms_palo_key_arn
  41. }
  42. terraform_version_constraint = "= 1.1.6"
  43. terragrunt_version_constraint = "= 0.36.2"