diff --git a/ibm_catalog.json b/ibm_catalog.json index a095123..160734b 100644 --- a/ibm_catalog.json +++ b/ibm_catalog.json @@ -19,35 +19,35 @@ "terraform", "solution" ], - "short_description": "Provisions and configures IBM Cloud Code Engine", - "long_description": "Creates an instance of IBM Cloud Code Engine and configures the project, applications, domain mappings, secrets, configmaps, and service bindings.", + "short_description": "Provisions and configures Serverless on IBM Cloud", + "long_description": "Creates an instance of [Serverless on IBM Cloud](https://www.ibm.com/products/code-engine) and configures the project, applications, domain mappings, secrets, configmaps, and service bindings. It enables you to manage IBM Cloud Code Engine’s fully managed, serverless platform using infrastructure as code for scalable, cloud-native workloads.\n\nℹ️ This Terraform-based automation is part of a broader suite of IBM-maintained Infrastructure as Code (IaC) assets, each following the naming pattern \"Cloud automation for *servicename*\" and focusing on single IBM Cloud service. These single-service deployable architectures can be used on their own to streamline and automate service deployments through an [IaC approach](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-understanding-projects), or assembled together into a broader [automated IaC stack](https://cloud.ibm.com/docs/secure-enterprise?topic=secure-enterprise-config-stack) to automate the deployment of an end-to-end solution architecture.", "offering_docs_url": "https://github.com/terraform-ibm-modules/terraform-ibm-code-engine/blob/main/README.md", "offering_icon_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-code-engine/main/images/code-engine.svg", "provider_name": "IBM", "features": [ { - "title": "Creates a Code Engine project", - "description": "Code Engine project group, manage, and provide access for Code Engine resources such as applications, jobs, and builds." + "title": "Project", + "description": "[A Code Engine project](https://cloud.ibm.com/docs/codeengine?topic=codeengine-manage-project) groups, manages, and provides access to Code Engine resources such as applications, jobs, and builds." }, { - "title": "Creates Code Engine applications", - "description": "Code Engine applications serve HTTP requests or WebSockets as their communications protocol. The number of running instances of an app are scaled up or down as required by the workdloads." + "title": "Applications", + "description": "[Code Engine applications](https://cloud.ibm.com/docs/codeengine?topic=codeengine-application-workloads) serve HTTP requests or WebSockets as their communications protocol. The number of running instances of an app are scaled up or down as required by the workdloads." }, { - "title": "Creates custom domain mappings", - "description": "Creates the mappings from your custom domain to your Code Engine application in a project to route requests from your custom URL to your application." + "title": "Custom domain mappings", + "description": "Creates the [mappings](https://cloud.ibm.com/docs/codeengine?topic=codeengine-domain-mappings) from your custom domain to your Code Engine application in a project to route requests from your custom URL to your application." }, { - "title": "Creates Code Engine secrets", - "description": "Code Engine secrets provide a method to include sensitive configuration information, such as passwords or SSH keys, in your deployment." + "title": "Secrets", + "description": "[Code Engine secrets](https://cloud.ibm.com/docs/codeengine?topic=codeengine-secret) provide a method to include sensitive configuration information, such as passwords or SSH keys, in your deployment." }, { - "title": "Creates Code Engine configmaps", - "description": "Configmaps provide a method to include nonsensitive data information in your deployment. By referencing values from your configmap as environment variables, you can decouple specific information from your deployment and keep your application portable." + "title": "Configmaps", + "description": "[Code Engine Configmaps](https://cloud.ibm.com/docs/codeengine?topic=codeengine-configmap) provide a method to include nonsensitive data information in your deployment. By referencing values from your configmap as environment variables, you can decouple specific information from your deployment and keep your application portable." }, { - "title": "Creates Code Engine service bindings", - "description": "Service bindings provide access from your application to other IBM Cloud services." + "title": "Service bindings", + "description": "[Code engine service bindings](https://cloud.ibm.com/docs/codeengine?topic=codeengine-service-binding) provide access from your application to other IBM Cloud services." } ], "support_details": "This product is in the community registry, as such support is handled through the originated repo. If you experience issues please open an issue in that repository [https://github.com/terraform-ibm-modules/terraform-ibm-code-engine/issues](https://github.com/terraform-ibm-modules/terraform-ibm-code-engine/issues). Please note this product is not supported via the IBM Cloud Support Center.", @@ -67,6 +67,13 @@ ] }, "iam_permissions": [ + { + "role_crns": [ + "crn:v1:bluemix:public:iam::::role:Viewer" + ], + "service_name": "Resource group only", + "notes": "Viewer access is required in the resource group you want to provision in." + }, { "role_crns": [ "crn:v1:bluemix:public:iam::::serviceRole:Writer" @@ -124,6 +131,7 @@ }, { "key": "provider_visibility", + "hidden": true, "options": [ { "displayname": "private", @@ -157,17 +165,48 @@ }, { "key": "region", - "type": "string", - "custom_config": { - "type": "region", - "grouping": "deployment", - "original_grouping": "deployment", - "config_constraints": { - "showKinds": [ - "region" - ] + "options": [ + { + "displayname": "Dallas (us-south)", + "value": "us-south" + }, + { + "displayname": "Frankfurt (eu-de)", + "value": "eu-de" + }, + { + "displayname": "London (eu-gb)", + "value": "eu-gb" + }, + { + "displayname": "Osaka (jp-osa)", + "value": "jp-osa" + }, + { + "displayname": "Sao Paulo (br-sao)", + "value": "br-sao" + }, + { + "displayname": "Spain (us-es)", + "value": "us-es" + }, + { + "displayname": "Sydney (au-syd)", + "value": "au-syd" + }, + { + "displayname": "Tokyo (jp-tok)", + "value": "jp-tok" + }, + { + "displayname": "Toronto (ca-tor)", + "value": "ca-tor" + }, + { + "displayname": "Washington DC (us-east)", + "value": "us-east" } - } + ] }, { "key": "project_name" @@ -185,10 +224,22 @@ "key": "image_secret" }, { - "key": "run_env_variables" + "key": "run_env_variables", + "type": "array", + "custom_config": { + "type": "textarea", + "grouping": "deployment", + "original_grouping": "deployment" + } }, { - "key": "run_volume_mounts" + "key": "run_volume_mounts", + "type": "array", + "custom_config": { + "type": "textarea", + "grouping": "deployment", + "original_grouping": "deployment" + } }, { "key": "image_port" @@ -251,7 +302,13 @@ "key": "bindings" }, { - "key": "cbr_rules" + "key": "cbr_rules", + "type": "array", + "custom_config": { + "type": "textarea", + "grouping": "deployment", + "original_grouping": "deployment" + } } ] }, @@ -261,6 +318,13 @@ "install_type": "fullstack", "working_directory": "solutions/project", "iam_permissions": [ + { + "role_crns": [ + "crn:v1:bluemix:public:iam::::role:Viewer" + ], + "service_name": "Resource group only", + "notes": "Viewer access is required in the resource group you want to provision in." + }, { "role_crns": [ "crn:v1:bluemix:public:iam::::serviceRole:Writer" @@ -298,6 +362,7 @@ }, { "key": "provider_visibility", + "hidden": true, "options": [ { "displayname": "private", @@ -334,20 +399,57 @@ }, { "key": "region", - "type": "string", - "custom_config": { - "type": "region", - "grouping": "deployment", - "original_grouping": "deployment", - "config_constraints": { - "showKinds": [ - "region" - ] + "options": [ + { + "displayname": "Dallas (us-south)", + "value": "us-south" + }, + { + "displayname": "Frankfurt (eu-de)", + "value": "eu-de" + }, + { + "displayname": "London (eu-gb)", + "value": "eu-gb" + }, + { + "displayname": "Osaka (jp-osa)", + "value": "jp-osa" + }, + { + "displayname": "Sao Paulo (br-sao)", + "value": "br-sao" + }, + { + "displayname": "Spain (us-es)", + "value": "us-es" + }, + { + "displayname": "Sydney (au-syd)", + "value": "au-syd" + }, + { + "displayname": "Tokyo (jp-tok)", + "value": "jp-tok" + }, + { + "displayname": "Toronto (ca-tor)", + "value": "ca-tor" + }, + { + "displayname": "Washington DC (us-east)", + "value": "us-east" } - } + ] }, { - "key": "cbr_rules" + "key": "cbr_rules", + "type": "array", + "custom_config": { + "type": "textarea", + "grouping": "deployment", + "original_grouping": "deployment" + } }, { "key": "builds" diff --git a/reference-architecture/ce-app-da.svg b/reference-architecture/ce-app-da.svg index bc0edc5..7da79bf 100644 --- a/reference-architecture/ce-app-da.svg +++ b/reference-architecture/ce-app-da.svg @@ -1,4 +1,4 @@ -
IBM Cloud
Region
Resource Group
IBM Cloud Code Engine Project
Apps
Secrets
Service Bindings
Domain Mappings
ConfigMaps
 \ No newline at end of file +IBM CloudRegionResource Group
IBM Cloud Code Engine Project
IBM Cloud Code Engine Project
Apps
Apps
Secrets
Secrets
Service Bindings
Service Bindings
ConfigMaps
ConfigMaps
Domain Mappings
Domain MappingsText is not SVG - cannot display \ No newline at end of file diff --git a/reference-architecture/ce-project-da.svg b/reference-architecture/ce-project-da.svg index 187bd03..8089ad9 100644 --- a/reference-architecture/ce-project-da.svg +++ b/reference-architecture/ce-project-da.svg @@ -1,241 +1,4 @@ - - - - - - - - - - - - - - - - - - - -
-
-
- IBM Cloud
-
-
- - - - - - - - - - - - - - - - - - - - - -
-
-
- Region
-
-
- - - - - - - - - - - - - - - - - - - - - -
-
-
- Resource Group
-
-
- - - - - - - - - - - - - - - - - - -
-
-
- IBM Cloud Code Engine Project
-
-
- - - - - - - - - - - - -
-
-
- Image Build
-
-
- - - - - - - - - - - - -
-
-
- Secrets
-
-
- - - - - - - - - - - - -
-
-
- Domain Mappings
-
-
- - - - - - - - - - - - -
-
-
- ConfigMaps
-
-
- - - - - - - \ No newline at end of file +IBM CloudRegionResource Group
IBM Cloud Code Engine Project
IBM Cloud Code Engine Project
Image Build
Image Build
Secrets
Secrets
ConfigMaps
ConfigMaps
Domain Mappings
Domain MappingsText is not SVG - cannot display \ No newline at end of file diff --git a/solutions/apps/DA-cbr_rules.md b/solutions/apps/DA-cbr_rules.md index 24702f9..9b09f91 100644 --- a/solutions/apps/DA-cbr_rules.md +++ b/solutions/apps/DA-cbr_rules.md @@ -34,8 +34,7 @@ The `cbr_rules` input variable allows you to provide a rule for the target servi ### Example Rule For Context-Based Restrictions Configuration ```hcl -cbr_rules = [ - { +{ description = "Code Engine can be accessed from xyz" account_id = "defc0df06b644a9cabc6e44f55b3880s" rule_contexts= [{ @@ -54,9 +53,8 @@ cbr_rules = [ enforcement_mode = "enabled" operations = [{ api_types = [{ - api_type_id = "crn:v1:bluemix:public:context-based-restrictions::::platform-api-type:" - }] + api_type_id = "crn:v1:bluemix:public:context-based-restrictions::::platform-api-type:" }] - } -] + }] +} ``` diff --git a/solutions/apps/DA-inputs.md b/solutions/apps/DA-inputs.md index 35816fb..f49c903 100644 --- a/solutions/apps/DA-inputs.md +++ b/solutions/apps/DA-inputs.md @@ -24,7 +24,7 @@ The `domain_mappings` input variable allows you to provide the URL route to your ### Example for Domain Mapping ```hcl -domain_mappings = { +{ "www.example.com" = { components = { name = "my-app-1" @@ -51,7 +51,7 @@ The `config_maps` input variable allows you to provide a method to include non-s ### Example for Config Maps ```hcl -config_maps = { +{ "your-config-name" = { data = { "key_1" : "value_1", "key_2" : "value_2" } } @@ -76,7 +76,7 @@ The `secrets` input variable allows you to provide a method to include sensitive ### Example for Secrets ```hcl -secrets = { +{ "your-secret-name" = { format = "generic" data = { "key_1" : "value_1", "key_2" : "value_2" } diff --git a/solutions/apps/README.md b/solutions/apps/README.md index 1721f18..a09cf8d 100644 --- a/solutions/apps/README.md +++ b/solutions/apps/README.md @@ -1,12 +1,3 @@ -# IBM Cloud Code Engine apps deployable architecture +# Cloud automation for Code Engine apps -This deployable architecture creates IBM Cloud Code Engine apps and supports provisioning Code Engine project apps and the following optional resources: - -- A resource group. -- A Code Engine project. -- Code Engine project secrets. -- Code Engine project configmaps. -- Code Engine project service bindings. -- Code Engine project domain mappings. - -![ce-apps-da](../../reference-architecture/ce-app-da.svg) +:exclamation: **Important:** This solution is not intended to be called by other modules because it contains a provider configuration and is not compatible with the `for_each`, `count`, and `depends_on` arguments. For more information, see [Providers Within Modules](https://developer.hashicorp.com/terraform/language/modules/develop/providers). diff --git a/solutions/apps/main.tf b/solutions/apps/main.tf index 08c7432..083f37e 100644 --- a/solutions/apps/main.tf +++ b/solutions/apps/main.tf @@ -9,7 +9,8 @@ module "resource_group" { } locals { - prefix = var.prefix != null ? trimspace(var.prefix) != "" ? "${var.prefix}-" : "" : "" + prefix = var.prefix != null ? trimspace(var.prefix) != "" ? "${var.prefix}-" : "" : "" + project_name = var.project_name != null ? "${local.prefix}${var.project_name}" : null } ######################################################################################################################## @@ -19,7 +20,7 @@ locals { module "code_engine" { source = "../.." resource_group_id = module.resource_group.resource_group_id - project_name = var.project_name != null ? "${local.prefix}${var.project_name}" : null + project_name = local.project_name existing_project_id = var.existing_project_id cbr_rules = var.cbr_rules apps = { diff --git a/solutions/apps/provider.tf b/solutions/apps/provider.tf index e669b7b..17cfc77 100644 --- a/solutions/apps/provider.tf +++ b/solutions/apps/provider.tf @@ -3,7 +3,8 @@ ######################################################################################################################## provider "ibm" { - ibmcloud_api_key = var.ibmcloud_api_key - region = var.region - visibility = var.provider_visibility + ibmcloud_api_key = var.ibmcloud_api_key + region = var.region + visibility = var.provider_visibility + private_endpoint_type = (var.provider_visibility == "private" && var.region == "ca-mon") ? "vpe" : null } diff --git a/solutions/apps/variables.tf b/solutions/apps/variables.tf index adadc79..e0a70e7 100644 --- a/solutions/apps/variables.tf +++ b/solutions/apps/variables.tf @@ -27,8 +27,29 @@ variable "region" { variable "prefix" { type = string - description = "Prefix added to the project created by this solution (e.g `prod`, `test`, `dev`). To not use any prefix value, you can set this value to `null` or an empty string." nullable = true + description = "The prefix to be added to all resources created by this solution. To skip using a prefix, set this value to null or an empty string. The prefix must begin with a lowercase letter and may contain only lowercase letters, digits, and hyphens '-'. It should not exceed 16 characters, must not end with a hyphen('-'), and can not contain consecutive hyphens ('--'). Example: prod-0205-cos. [Learn more](https://terraform-ibm-modules.github.io/documentation/#/prefix.md)." + + validation { + # - null and empty string is allowed + # - Must not contain consecutive hyphens (--): length(regexall("--", var.prefix)) == 0 + # - Starts with a lowercase letter: [a-z] + # - Contains only lowercase letters (a–z), digits (0–9), and hyphens (-) + # - Must not end with a hyphen (-): [a-z0-9] + condition = (var.prefix == null || var.prefix == "" ? true : + alltrue([ + can(regex("^[a-z][-a-z0-9]*[a-z0-9]$", var.prefix)), + length(regexall("--", var.prefix)) == 0 + ]) + ) + error_message = "Prefix must begin with a lowercase letter and may contain only lowercase letters, digits, and hyphens '-'. It must not end with a hyphen('-'), and cannot contain consecutive hyphens ('--')." + } + + validation { + # must not exceed 16 characters in length + condition = length(var.prefix) <= 16 + error_message = "Prefix must not exceed 16 characters." + } } variable "existing_resource_group_name" { @@ -38,7 +59,7 @@ variable "existing_resource_group_name" { } variable "project_name" { - description = "The name of the project to add the IBM Cloud Code Engine resources to. If the value of `var.existing_project_id` is `null`, the project name is required." + description = "The name of the project to add the IBM Cloud Code Engine resources to. If the value of `var.existing_project_id` is `null`, the project name is required. If a prefix input variable is specified, the prefix is added to the name in the `-` format." type = string default = null } @@ -50,13 +71,15 @@ variable "existing_project_id" { } variable "app_name" { - description = "The name of the app." + description = "The name of the application to be created and managed. [Learn more](https://cloud.ibm.com/docs/codeengine?topic=codeengine-application-workloads)" type = string + default = "my-ce-app" } variable "image_reference" { - description = "The name of the image that is used for the app." + description = "A container image can be identified by a container image reference with the following structure: registry / namespace / repository:tag. [Learn more](https://cloud.ibm.com/docs/codeengine?topic=codeengine-getting-started)" type = string + default = "icr.io/codeengine/helloworld" } variable "image_secret" { diff --git a/solutions/project/DA-cbr_rules.md b/solutions/project/DA-cbr_rules.md index 24702f9..1b635e6 100644 --- a/solutions/project/DA-cbr_rules.md +++ b/solutions/project/DA-cbr_rules.md @@ -34,7 +34,7 @@ The `cbr_rules` input variable allows you to provide a rule for the target servi ### Example Rule For Context-Based Restrictions Configuration ```hcl -cbr_rules = [ +[ { description = "Code Engine can be accessed from xyz" account_id = "defc0df06b644a9cabc6e44f55b3880s" diff --git a/solutions/project/DA-inputs.md b/solutions/project/DA-inputs.md index add0c93..d67b5ff 100644 --- a/solutions/project/DA-inputs.md +++ b/solutions/project/DA-inputs.md @@ -127,21 +127,25 @@ The `secrets` input variable allows you to provide a method to include sensitive } # registry secret -"registry_secret_name" = { - format = "registry" - optional("data") = { - "server" = "private.us.icr.io", - "username" = "iamapikey", - "password" = iam_api_key, # pragma: allowlist secret - } +{ + "registry_secret_name" = { + format = "registry" + optional("data") = { + "server" = "private.us.icr.io", + "username" = "iamapikey", + "password" = iam_api_key, # pragma: allowlist secret + } + } } # private repository -"private_repo" = { - format = "generic" - "data" = { - "password" = github_token, # pragma: allowlist secret - "username" = github_user - } +{ + "private_repo" = { + format = "generic" + "data" = { + "password" = github_token, # pragma: allowlist secret + "username" = github_user + } + } } ``` diff --git a/solutions/project/README.md b/solutions/project/README.md index b6596d6..c3b2586 100644 --- a/solutions/project/README.md +++ b/solutions/project/README.md @@ -1,11 +1,3 @@ -# IBM Cloud Code Engine project deployable architecture +# Cloud automation for Code Engine project -This deployable architecture creates IBM Cloud Code Engine project and the following optional resources: - -- A resource group. -- Code Engine project build. -- Code Engine project secrets. -- Code Engine project configmaps. -- Code Engine project domain mappings. - -![ce-apps-da](../../reference-architecture/ce-project-da.svg) +:exclamation: **Important:** This solution is not intended to be called by other modules because it contains a provider configuration and is not compatible with the `for_each`, `count`, and `depends_on` arguments. For more information, see [Providers Within Modules](https://developer.hashicorp.com/terraform/language/modules/develop/providers). diff --git a/solutions/project/main.tf b/solutions/project/main.tf index cc4e1e2..bbdb0f9 100644 --- a/solutions/project/main.tf +++ b/solutions/project/main.tf @@ -9,7 +9,8 @@ module "resource_group" { } locals { - prefix = var.prefix != null ? trimspace(var.prefix) != "" ? "${var.prefix}-" : "" : "" + prefix = var.prefix != null ? trimspace(var.prefix) != "" ? "${var.prefix}-" : "" : "" + project_name = "${local.prefix}${var.project_name}" } ######################################################################################################################## @@ -18,7 +19,7 @@ locals { module "project" { source = "../../modules/project" - name = "${local.prefix}${var.project_name}" + name = local.project_name resource_group_id = module.resource_group.resource_group_id cbr_rules = var.cbr_rules } diff --git a/solutions/project/provider.tf b/solutions/project/provider.tf index e669b7b..17cfc77 100644 --- a/solutions/project/provider.tf +++ b/solutions/project/provider.tf @@ -3,7 +3,8 @@ ######################################################################################################################## provider "ibm" { - ibmcloud_api_key = var.ibmcloud_api_key - region = var.region - visibility = var.provider_visibility + ibmcloud_api_key = var.ibmcloud_api_key + region = var.region + visibility = var.provider_visibility + private_endpoint_type = (var.provider_visibility == "private" && var.region == "ca-mon") ? "vpe" : null } diff --git a/solutions/project/variables.tf b/solutions/project/variables.tf index 3c980ff..b73c3b5 100644 --- a/solutions/project/variables.tf +++ b/solutions/project/variables.tf @@ -7,6 +7,7 @@ variable "ibmcloud_api_key" { description = "The IBM Cloud API key." sensitive = true } + variable "provider_visibility" { description = "Set the visibility value for the IBM terraform provider. Supported values are `public`, `private`, `public-and-private`. [Learn more](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/guides/custom-service-endpoints)." type = string @@ -17,10 +18,32 @@ variable "provider_visibility" { error_message = "Invalid visibility option. Allowed values are 'public', 'private', or 'public-and-private'." } } + variable "prefix" { type = string - description = "Prefix added to the project created by this solution (e.g `prod`, `test`, `dev`). To not use any prefix value, you can set this value to `null` or an empty string." nullable = true + description = "The prefix to be added to all resources created by this solution. To skip using a prefix, set this value to null or an empty string. The prefix must begin with a lowercase letter and may contain only lowercase letters, digits, and hyphens '-'. It should not exceed 16 characters, must not end with a hyphen('-'), and can not contain consecutive hyphens ('--'). Example: prod-0205-cos. [Learn more](https://terraform-ibm-modules.github.io/documentation/#/prefix.md)." + + validation { + # - null and empty string is allowed + # - Must not contain consecutive hyphens (--): length(regexall("--", var.prefix)) == 0 + # - Starts with a lowercase letter: [a-z] + # - Contains only lowercase letters (a–z), digits (0–9), and hyphens (-) + # - Must not end with a hyphen (-): [a-z0-9] + condition = (var.prefix == null || var.prefix == "" ? true : + alltrue([ + can(regex("^[a-z][-a-z0-9]*[a-z0-9]$", var.prefix)), + length(regexall("--", var.prefix)) == 0 + ]) + ) + error_message = "Prefix must begin with a lowercase letter and may contain only lowercase letters, digits, and hyphens '-'. It must not end with a hyphen('-'), and cannot contain consecutive hyphens ('--')." + } + + validation { + # must not exceed 16 characters in length + condition = length(var.prefix) <= 16 + error_message = "Prefix must not exceed 16 characters." + } } variable "region" { @@ -36,7 +59,7 @@ variable "existing_resource_group_name" { } variable "project_name" { - description = "The name of the project to add the IBM Cloud Code Engine." + description = "The name of the project to add the IBM Cloud Code Engine. If a prefix input variable is specified, the prefix is added to the name in the `-` format." type = string } diff --git a/tests/pr_test.go b/tests/pr_test.go index 509a03b..106c94f 100644 --- a/tests/pr_test.go +++ b/tests/pr_test.go @@ -158,7 +158,7 @@ func TestRunUpgradeAppSolution(t *testing.T) { options := testhelper.TestOptionsDefault(&testhelper.TestOptions{ Testing: t, TerraformDir: appsSolutionsDir, - Prefix: "ce-app-upg", + Prefix: "ce-app-u", ResourceGroup: resourceGroup, }) // need to ignore because of a provider issue: https://github.com/IBM-Cloud/terraform-provider-ibm/issues/4719 @@ -374,7 +374,7 @@ func TestCEProjectDABasic(t *testing.T) { options := testhelper.TestOptionsDefault(&testhelper.TestOptions{ Testing: t, TerraformDir: projectSolutionsDir, - Prefix: "ce-da-empty", + Prefix: "ce-da-b", }) options.TerraformVars = map[string]interface{}{