Merge branch 'main' into dependabot

Author: fharper

.devcontainer/devcontainer.json

@@ -0,0 +1,11 @@
+{
+    "name": "devcontainer",
+    "image": "ghcr.io/kubefirst/devcontainers/full:latest",
+    "features": {},
+    "customizations": {
+      "vscode": {
+        "extensions": [],
+        "settings": {}
+      }
+    }
+}

.editorconfig

@@ -0,0 +1,18 @@
+# editorconfig.org
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.go]
+indent_style = tab
+indent_size = 4
+
+[Makefile]
+indent_style = tab
+indent_size = 4

.github/workflows/check-signed.md

@@ -0,0 +1,14 @@
+---
+name: Validate if commits are signed
+on: [pull_request, pull_request_target]
+
+jobs:
+  signed-commits-check:
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Check out the repository code
+        uses: actions/checkout@v4.1.4
+
+      - name: Check if the commits are signed
+        uses: 1Password/check-signed-commits-action@v1

.github/workflows/terraform.yml .github/workflows/terraform.md.github/workflows/terraform.yml renamed to .github/workflows/terraform.md

@@ -7,11 +7,11 @@ jobs:
     name: Workflow
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.6
+
       - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
-        with:
-          terraform_version: 1.3.8
+        uses: hashicorp/setup-terraform@v3.1.1
+
       - name: Terraform fmt
-        id: fmt
-        run: terraform fmt -check
+        run: |
+          terraform fmt -check -recursive .

.gitignore

@@ -1,9 +1,13 @@
 **/*.env
 **/.env
+**/.envrc
 **/.terraform/
 **/.terraform.lock.hcl
 **/terraform.tfstate
+*/**/terraform.tfstate.backup
+.plugin-cache/*
 .vscode
 .DS_Store
 deprecated-*
-kubeconfig-*
+kubeconfig-*
+kubeconfig

Makefile

@@ -0,0 +1,17 @@
+default: help
+
+.PHONY: help
+help: ## print targets and their descrptions
+	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | sort | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'
+
+.PHONY: fmt
+fmt: ## terraform fmt
+	terraform fmt -recursive -write .
+
+.PHONY: validate
+validate: ## terraform validate
+	@for dir in $(shell find . -name "*.tf" -not -path "*.terraform*" -printf '%h ' | uniq); do \
+		echo "====> $$dir"; \
+		terraform -chdir=$$dir init -backend=false || exit 1; \
+		terraform -chdir=$$dir validate || exit 1; \
+	done

README.md

@@ -9,11 +9,11 @@
 </p>
 
 <p align="center">
-  <a href="https://docs.kubefirst.io/">Install</a>&nbsp;|&nbsp;
+  <a href="https://kubefirst.konstruct.io/docs/">Install</a>&nbsp;|&nbsp;
   <a href="https://twitter.com/kubefirst">Twitter</a>&nbsp;|&nbsp;
-  <a href="https://www.linkedin.com/company/kubefirst">LinkedIn</a>&nbsp;|&nbsp;
-  <a href="https://join.slack.com/t/kubefirst/shared_invite/zt-r0r9cfts-OVnH0ooELDLm9n9p2aU7fw">Slack</a>&nbsp;|&nbsp;
-  <a href="https://kubefirst.io/blog">Blog</a>
+  <a href="https://www.linkedin.com/company/konstructio/">LinkedIn</a>&nbsp;|&nbsp;
+  <a href="https://konstruct.io/slack">Slack</a>&nbsp;|&nbsp;
+  <a href="https://blog.konstruct.io/">Blog</a>
 </p>
 
 # gitops
@@ -25,7 +25,7 @@ The `gitops` repository has 2 main sections
 
 ## kubefirst apps
 
-The [kubefirst cli](https://github.com/kubefirst/kubefirst) has established the following applications:
+The [kubefirst cli](https://github.com/konstructio/kubefirst) has established the following applications:
 
 | Application              | Namespace        | Description                                 | URL (where applicable)             |
 | ------------------------ | ---------------- | ------------------------------------------- | ---------------------------------- |

akamai-github/atlantis.yaml

@@ -0,0 +1,23 @@
+version: 3
+automerge: true
+projects:
+  - dir: terraform/<CLOUD_PROVIDER>
+    terraform_version: 1.3.8
+    autoplan:
+      enabled: true
+      when_modified: ['**/*.tf', '*.tf*']
+  - dir: terraform/<GIT_PROVIDER>
+    terraform_version: 1.3.8
+    autoplan:
+      enabled: true
+      when_modified: ['**/*.tf', '*.tf*']
+  - dir: terraform/users
+    terraform_version: 1.3.8
+    autoplan:
+      enabled: true
+      when_modified: ['**/*.tf', '**/modules/*.tf', '**/admins/*.tf', '**/developers/*.tf', '*.tf*']
+  - dir: terraform/vault
+    terraform_version: 1.3.8
+    autoplan:
+      enabled: true
+      when_modified: ['**/*.tf', '*.tf*']