Terraform

Official GitLab Terraform Provider.

Tharsis API is a remote Terraform backend that provides state management and a full execution environment for running Terraform modules. It also includes additional capabilities to facilitate the management of Terraform workspaces within an organization.

Homelab infrastructure as code - Proxmox, Docker (dockhost), Kubernetes (kubecluster), Bastion

Reusable OpenTofu/Terraform module — AWS KMS OpenPGP encryption identity (certification primary + ECDH subkey) plus split-privilege reader/certifier roles, for receiving encrypted security reports. · https://aws-encryption-kms.iac.phpboyscout.uk

Tharsis Docs contains the documentation for the Tharsis components.

KubeLaunch is a self-service DevOps platform that I am building to help application teams deploy their applications to Kubernetes without manually setting up AWS infrastructure. It uses Terraform to provision VPC, IAM, ECR, and EKS, Docker for containerization, Helm for Kubernetes application deployment, and CI/CD to automate validation, deployment, and rollback. I am also building the monitoring and observability layer using Prometheus and Grafana, along with separate configurations for non-production and production environments.

This repository contains a collection of reusable Terraform modules designed to streamline the provisioning of infrastructure across various projects. Each module is maintained with best practices and aims to be highly reusable and customizable.

Every non-secret CI variable in the group: artifact version refs, per producer and per consumer.

Tharsis CLI is a command-line interface to the Tharsis remote Terraform backend. The CLI allows managing groups, workspaces, creating runs from Terraform modules and much more.

The purpose of this system is to demonstrably comply with the applicable laws and regulations that apply to your business operations. We achieve this by linking these regulations to a standard control set that is most suitable. We then translate the relevant control set rules into scripts for the implementation tools that best suit your system environment and use these same tools to demonstrate that the required measures are in place and active, based on reports that either confirm this or contain recommendations for improvement.

Docker image which contains the gitlab-terraform shell script

v0.1.0

Reusable OpenTofu/Terraform module — AWS KMS asymmetric signing key + GitLab-OIDC signer role for release-binary signing chains. · https://aws-signing-kms.iac.phpboyscout.uk

Opinionated AWS security baseline for OpenTofu / Terraform — account hardening, audit logging, AWS Config, threat detection, alerts, MFA-required operator role. · https://aws-security-baseline.iac.phpboyscout.uk

Minimal, opinionated AWS account bootstrap for OpenTofu / Terraform — state backend, OIDC + automation role, aws-nuke config. · https://aws-bootstrap.iac.phpboyscout.uk

Terraform module to create Secret Manager resources.

The GKE cluster every pipeline runs on: node pools, network, runners and the identities they hold, as Terraform.