{"id":28936961,"url":"https://github.com/devald/icas-demo","last_synced_at":"2026-05-04T12:32:44.645Z","repository":{"id":298599329,"uuid":"984648415","full_name":"devald/icas-demo","owner":"devald","description":"Modular Terragrunt framework for managing secure, automated, multi-env cloud infrastructure (ICAS: Infrastructure, Cloud, Automation \u0026 Security)","archived":false,"fork":false,"pushed_at":"2025-06-12T17:06:24.000Z","size":73,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-06-22T21:01:54.087Z","etag":null,"topics":["aws","github-oidc","infrastructure-as-code","kubernetes","nix-flake","terraform","terraform-modules","terragrunt"],"latest_commit_sha":null,"homepage":"https://devald.github.io/icas-demo/","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/devald.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-16T09:19:59.000Z","updated_at":"2025-06-12T17:06:27.000Z","dependencies_parsed_at":"2025-06-11T23:42:04.379Z","dependency_job_id":"e85d421e-70d0-413d-a372-c80f71761944","html_url":"https://github.com/devald/icas-demo","commit_stats":null,"previous_names":["devald/icas-demo"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/devald/icas-demo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devald%2Ficas-demo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devald%2Ficas-demo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devald%2Ficas-demo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devald%2Ficas-demo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/devald","download_url":"https://codeload.github.com/devald/icas-demo/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/devald%2Ficas-demo/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32607478,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-04T10:08:07.713Z","status":"ssl_error","status_checked_at":"2026-05-04T10:08:02.005Z","response_time":58,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","github-oidc","infrastructure-as-code","kubernetes","nix-flake","terraform","terraform-modules","terragrunt"],"created_at":"2025-06-22T21:01:25.353Z","updated_at":"2026-05-04T12:32:44.640Z","avatar_url":"https://github.com/devald.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ICAS Demo Infrastructure\n\nThis is a fully reproducible, Terragrunt-based infrastructure deployment demo managed using Nix flakes. It is configured for a demo AWS account and deploys a full stack including VPC, EKS, job modules, and S3 storage using GitHub Actions and OIDC authentication.\n\n## 🧱 Stack Components\n\nThis infrastructure includes:\n\n- **Terragrunt + Terraform Modules**:\n  - `aws-data`: AWS region/account data source\n  - `vpc-1`: Custom VPC for demo workloads\n  - `eks-1`: Kubernetes cluster (EKS)\n  - `crawler-job-1`: Sample workload running in Kubernetes\n  - `crawler-s3-1`: S3 bucket for crawler storage\n  - `github-oidc`: IAM roles for GitHub OIDC authentication\n\n- **Live Environment**: `live/demo/eu-central-1/`\n  - Organized by AWS region and account\n  - Each component has its own `terragrunt.hcl`\n\n- **Nix Flake**: Development environment and automation\n  - `nix develop`: provides pinned versions of Terraform, Terragrunt, kubectl, and AWS CLI\n  - `nix run .#validate`: validates HCL and Terraform format\n  - `nix run .#apply`: applies all Terragrunt modules\n\n## 🚀 Deployment\n\nDeployment is fully automated through GitHub Actions using OIDC:\n\n```yaml\n- uses: aws-actions/configure-aws-credentials@v4\n  with:\n    role-to-assume: arn:aws:iam::767140398543:role/github-oidc-terraform\n    aws-region: eu-central-1\n```\n\nGitHub workflow is located in:\n```\n.github/workflows/deploy.yml\n```\n\nIt:\n1. Installs Nix\n2. Authenticates with AWS via OIDC\n3. Runs `nix run .#validate`\n4. Runs `nix run .#apply`\n\n## 🧪 Validation \u0026 Formatting\n\nValidation is handled via the `validate` app:\n\n```bash\nnix run .#validate\n```\n\nWhich checks:\n- `terraform fmt -recursive -check`\n- `terragrunt hcl fmt --check`\n- `terragrunt hcl validate` (with exit code checking)\n\n## 🔧 Local Development\n\nYou can enter the development shell with:\n\n```bash\nnix develop\n```\n\nThis provides:\n- Terraform\n- Terragrunt\n- AWS CLI\n- kubectl\n\nWith the following env vars set:\n\n```bash\nAWS_PROFILE=demo-profile\nAWS_REGION=eu-central-1\nTG_PROVIDER_CACHE=1\n```\n\n## 📁 Project Structure\n\n```\n.\n├── flake.nix\n├── root.hcl\n├── live/\n│   └── demo/\n│       └── eu-central-1/\n│           ├── aws-data/\n│           ├── vpc-1/\n│           ├── eks-1/\n│           ├── crawler-job-1/\n│           ├── crawler-s3-1/\n│           └── github-oidc/\n├── modules/\n│   ├── aws-data/\n│   ├── crawler-job/\n│   └── github-oidc/\n└── .github/\n    └── workflows/\n        └── deploy.yml\n```\n\n---","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevald%2Ficas-demo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdevald%2Ficas-demo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevald%2Ficas-demo/lists"}