From fecb0e079e2194985d6940283809e72c67eafbe7 Mon Sep 17 00:00:00 2001
From: Tobias Babin <140624220+TobiasBabin@users.noreply.github.com>
Date: Mon, 9 Sep 2024 15:12:06 +0200
Subject: [PATCH] Update generated example library content (#75)

---
 .../namespace/short-namespace.tf              | 30 +++++++++++
 .../tls-cert/certificate-crd.tf               | 50 +++++++++++++++++++
 .../wildcard-dns/dns-template.tf              | 13 +++++
 3 files changed, 93 insertions(+)
 create mode 100644 resource-definitions/template-driver/namespace/short-namespace.tf
 create mode 100644 resource-definitions/template-driver/tls-cert/certificate-crd.tf
 create mode 100644 resource-definitions/wildcard-dns/dns-template.tf

diff --git a/resource-definitions/template-driver/namespace/short-namespace.tf b/resource-definitions/template-driver/namespace/short-namespace.tf
new file mode 100644
index 0000000..328a767
--- /dev/null
+++ b/resource-definitions/template-driver/namespace/short-namespace.tf
@@ -0,0 +1,30 @@
+resource "humanitec_resource_definition" "custom-namespace" {
+  driver_type = "humanitec/template"
+  id          = "custom-namespace"
+  name        = "custom-namespace"
+  type        = "k8s-namespace"
+  driver_inputs = {
+    values_string = jsonencode({
+      "templates" = {
+        "init"      = "name: {{ trunc 8 \"$${context.env.id}\" }}-{{ trunc 8 \"$${context.app.id}\" }}\n"
+        "manifests" = <<END_OF_TEXT
+namespace.yaml:
+  location: cluster
+  data:
+    apiVersion: v1
+    kind: Namespace
+    metadata:
+      labels:
+        pod-security.kubernetes.io/enforce: restricted
+      name: {{ .init.name }}
+END_OF_TEXT
+        "outputs"   = "namespace: {{ .init.name }}\n"
+      }
+    })
+  }
+}
+
+resource "humanitec_resource_definition_criteria" "custom-namespace_criteria_0" {
+  resource_definition_id = resource.humanitec_resource_definition.custom-namespace.id
+
+}
diff --git a/resource-definitions/template-driver/tls-cert/certificate-crd.tf b/resource-definitions/template-driver/tls-cert/certificate-crd.tf
new file mode 100644
index 0000000..4050689
--- /dev/null
+++ b/resource-definitions/template-driver/tls-cert/certificate-crd.tf
@@ -0,0 +1,50 @@
+resource "humanitec_resource_definition" "certificate-crd" {
+  driver_type = "humanitec/template"
+  id          = "certificate-crd"
+  name        = "certificate-crd"
+  type        = "tls-cert"
+  driver_inputs = {
+    values_string = jsonencode({
+      "templates" = {
+        "init"      = <<END_OF_TEXT
+tlsSecretName: {{ .id }}-tls
+hostName: $${resources.dns.outputs.host}
+certificateName: {{ .id }}-cert
+END_OF_TEXT
+        "manifests" = <<END_OF_TEXT
+certificate-crd.yml:
+  data:
+    apiVersion: cert-manager.io/v1
+    kind: Certificate
+    metadata:
+      name: {{ .init.certificateName }}
+    spec:
+      secretName: {{ .init.tlsSecretName }}
+      duration: 2160h # 90d
+      renewBefore: 720h # 30d
+      isCA: false
+      privateKey:
+        algorithm: RSA
+        encoding: PKCS1
+        size: 2048
+      usages:
+        - server auth
+        - client auth
+      dnsNames:
+        - {{ .init.hostName | toString | toRawJson }}
+      # The name of the issuerRef must point to the issuer / clusterIssuer in your cluster
+      issuerRef:
+        name: letsencrypt-prod
+        kind: ClusterIssuer
+  location: namespace
+END_OF_TEXT
+        "outputs"   = "tls_secret_name: {{ .init.tlsSecretName }}\n"
+      }
+    })
+  }
+}
+
+resource "humanitec_resource_definition_criteria" "certificate-crd_criteria_0" {
+  resource_definition_id = resource.humanitec_resource_definition.certificate-crd.id
+  class                  = "default"
+}
diff --git a/resource-definitions/wildcard-dns/dns-template.tf b/resource-definitions/wildcard-dns/dns-template.tf
new file mode 100644
index 0000000..007f2e4
--- /dev/null
+++ b/resource-definitions/wildcard-dns/dns-template.tf
@@ -0,0 +1,13 @@
+resource "humanitec_resource_definition" "dns-template" {
+  driver_type = "humanitec/dns-wildcard"
+  id          = "dns-template"
+  name        = "dns-template"
+  type        = "dns"
+  driver_inputs = {
+    values_string = jsonencode({
+      "domain"   = "my-test-domain.com"
+      "template" = "preview-$${context.app.id}-$${context.env.id}"
+    })
+  }
+}
+