feat: make S3 bucket for Terraform unique

README.md

@@ -2,7 +2,7 @@
   <img src="scaf-logo.png" width="250px">
 </p>
 
-**scaf-talos-template** provides DevOps engineers and infrastructure teams with a complete blueprint for deploying production-ready Talos Linux Kubernetes clusters on AWS.
+**talos-template** provides DevOps engineers and infrastructure teams with a complete blueprint for deploying production-ready Talos Linux Kubernetes clusters on AWS.
 
 This template generates infrastructure-as-code for a secure, immutable Kubernetes cluster using Talos Linux. A new project contains the following:
 
@@ -37,10 +37,10 @@ Run the following command to create a new project:
 
 ```bash
 # If you have the template checked out locally:
-scaf myproject ./scaf-talos-template
+scaf myproject ./talos-template
 
 # Or use the GitHub URL directly:
-scaf myproject https://github.com/getscaf/scaf-talos-template.git
+scaf myproject https://github.com/getscaf/talos-template.git
 ```
 
 Answer all the questions, and you'll have your new Talos cluster infrastructure project!
@@ -123,6 +123,10 @@ cd ../../bootstrap-cluster/sandbox  # or staging, production
 rm -f talosconfig kubeconfig controlplane.yaml
 
 # 3. (Optional) Remove secrets from AWS Secrets Manager
+# You can use the task command:
+task talos:delete_all_secrets
+
+# Or manually delete them:
 aws secretsmanager delete-secret --secret-id sandbox_talos_controlplane_yaml --force-delete-without-recovery
 aws secretsmanager delete-secret --secret-id sandbox_kubeconfig --force-delete-without-recovery
 aws secretsmanager delete-secret --secret-id sandbox_talosconfig_yaml --force-delete-without-recovery

copier.yml

@@ -132,6 +132,12 @@ copier__aws_account_id:
       "AWS account ID cannot be empty."
     {% endif %}
 
+copier__terraform_state_name:
+  type: str
+  default: "{{ copier__project_dash }}-tfstate-{{ copier__aws_account_id[-8:] }}"
+  help: "The name for S3 bucket and DynamoDB table for Terraform state."
+  when: false
+
 copier__talos_version:
   type: str
   default: "1.12.1"

package.json

@@ -1,5 +1,5 @@
 {
-  "name": "scaf-talos-template",
+  "name": "talos-template",
   "version": "1.11.1",
   "devDependencies": {
     "@semantic-release/changelog": "^6.0.3",

template/docs/deployment.md

@@ -521,7 +521,13 @@ rm -f talosconfig kubeconfig controlplane.yaml
 
 ### Step 3 (Optional): Remove Secrets from AWS Secrets Manager
 
-If you want to remove the stored credentials:
+If you want to remove the stored credentials, you can use the task command:
+
+```bash
+task talos:delete_all_secrets
+```
+
+Or manually delete them:
 
 ```bash
 aws secretsmanager delete-secret --secret-id sandbox_talosconfig_yaml --force-delete-without-recovery

template/terraform/bootstrap/init.tf

@@ -18,7 +18,7 @@ terraform {
 }
 
 resource "aws_s3_bucket" "terraform_state" {
-  bucket = "${module.global_variables.application}-terraform-state"
+  bucket = "{{ copier__terraform_state_name }}"
 
   # Allows deleting the bucket even if it contains objects.
   # This is useful for teardown environments.
@@ -37,7 +37,7 @@ resource "aws_s3_bucket_versioning" "tf_state_versioning" {
 }
 
 resource "aws_dynamodb_table" "terraform_state" {
-  name           = "${module.global_variables.application}-terraform-state"
+  name           = "{{ copier__terraform_state_name }}"
   read_capacity  = 5
   write_capacity = 5
   hash_key       = "LockID"

template/terraform/modules/global_variables/main.tf

@@ -29,3 +29,8 @@ output "existing_hosted_zone" {
   description = "Existing hosted zone name"
   value       = "{{ copier__existing_hosted_zone }}"
 }
+
+output "terraform_state_name" {
+  description = "Name for S3 bucket and DynamoDB table for Terraform state"
+  value       = "{{ copier__terraform_state_name }}"
+}

template/terraform/production/backend.tf

@@ -2,10 +2,10 @@ terraform {
   required_version = ">= 1.4"
   backend "s3" {
     region         = "{{ copier__aws_region }}"
-    bucket         = "{{ copier__project_dash }}-terraform-state"
+    bucket         = "{{ copier__terraform_state_name }}"
     key            = "{{ copier__project_slug }}.prod.json"
     encrypt        = true
-    dynamodb_table = "{{ copier__project_dash }}-terraform-state"
+    dynamodb_table = "{{ copier__terraform_state_name }}"
   }
 }
 

template/terraform/sandbox/backend.tf

@@ -2,10 +2,10 @@ terraform {
   required_version = ">= 1.4"
   backend "s3" {
     region         = "{{ copier__aws_region }}"
-    bucket         = "{{ copier__project_dash }}-terraform-state"
+    bucket         = "{{ copier__terraform_state_name }}"
     key            = "{{ copier__project_slug }}.sandbox.json"
     encrypt        = true
-    dynamodb_table = "{{ copier__project_dash }}-terraform-state"
+    dynamodb_table = "{{ copier__terraform_state_name }}"
   }
 }
 

template/terraform/staging/backend.tf

@@ -2,10 +2,10 @@ terraform {
   required_version = ">= 1.4"
   backend "s3" {
     region         = "{{ copier__aws_region }}"
-    bucket         = "{{ copier__project_dash }}-terraform-state"
+    bucket         = "{{ copier__terraform_state_name }}"
     key            = "{{ copier__project_dash }}.staging.json"
     encrypt        = true
-    dynamodb_table = "{{ copier__project_dash }}-terraform-state"
+    dynamodb_table = "{{ copier__terraform_state_name }}"
   }
 }