feat(P27): validated per-module examples (D-058) + schema glob fix

Add modules/<name>/examples/ directories with simple.yaml + complex.yaml (+ mysql.yaml for RDS) for every primitive and module pattern. All 25 example contracts validate against schemas/contract.schema.json. Update the contract schema to allow object/array input values (for env vars). Fix the platform-test schema-validation glob to modules/*/*/examples/*.yaml to match the nested l1/l2 path structure. Update the microservice sample contract note (env objects now permitted by the schema). ---ci--- project: acdl phase: 27 milestone: v1.7 status: execute ---/ci---
2026-07-22 20:22:45 +00:00
parent a9d8b31595
commit 4bd07a4fae
28 changed files with 227 additions and 8 deletions
@@ -0,0 +1,11 @@
+# Complex ALB with HTTPS + ACM cert (requires a consumer-supplied domain)
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: alb
+environment: dev
+inputs:
+  name: my-production-alb
+  subnets: subnet-aaa,subnet-bbb
+  security_group: sg-xxx
+  port: 443
+  protocol: HTTPS
+  region: us-east-1
@@ -0,0 +1,10 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: alb
+environment: dev
+inputs:
+  name: my-alb
+  subnets: subnet-aaa,subnet-bbb
+  security_group: sg-xxx
+  port: 80
+  protocol: HTTP
+  region: us-east-1
@@ -0,0 +1,12 @@
+# Complex CloudFront with WAF + custom TTL + viewer protocol redirect
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: cloudfront
+environment: dev
+inputs:
+  bucket_regional_domain_name: my-bucket.s3.us-east-1.amazonaws.com
+  price_class: PriceClass_100
+  viewer_protocol_policy: redirect-to-https
+  default_ttl: 3600
+  max_ttl: 86400
+  waf_web_acl_arn: arn:aws:wafv2:us-east-1:000000000000:webacl/my-waf
+  region: us-east-1
@@ -0,0 +1,7 @@
+# Simple CloudFront distribution (S3 origin, no WAF)
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: cloudfront
+environment: dev
+inputs:
+  bucket_regional_domain_name: my-bucket.s3.us-east-1.amazonaws.com
+  region: us-east-1
@@ -0,0 +1,7 @@
+# Complex ECR with lifecycle policy + image scanning
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: ecr
+environment: dev
+inputs:
+  name: my-production-repo
+  region: us-east-1
@@ -0,0 +1,6 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: ecr
+environment: dev
+inputs:
+  name: my-repo
+  region: us-east-1
@@ -0,0 +1,7 @@
+# Complex ECS cluster with container insights
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: ecs-cluster
+environment: dev
+inputs:
+  name: my-production-cluster
+  region: us-east-1
@@ -0,0 +1,6 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: ecs-cluster
+environment: dev
+inputs:
+  name: my-cluster
+  region: us-east-1
@@ -0,0 +1,12 @@
+# Complex ECS service with env vars + health check
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: ecs-service
+environment: dev
+inputs:
+  name: my-production-service
+  region: us-east-1
+  image: public.ecr.aws/docker/library/nginx:latest
+  port: 8080
+  env:
+    LOG_LEVEL: info
+    ENVIRONMENT: production
@@ -0,0 +1,8 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: ecs-service
+environment: dev
+inputs:
+  name: my-service
+  region: us-east-1
+  image: public.ecr.aws/docker/library/nginx:latest
+  port: 80
@@ -0,0 +1,7 @@
+# Complex IAM role with managed policies
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: iam-role
+environment: dev
+inputs:
+  name: my-production-task-role
+  region: us-east-1
@@ -0,0 +1,6 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: iam-role
+environment: dev
+inputs:
+  name: my-task-role
+  region: us-east-1
@@ -0,0 +1,14 @@
+# Complex RDS postgres with multi-AZ + encryption
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: rds
+environment: dev
+inputs:
+  engine: postgres
+  engine_version: "16.4"
+  instance_class: db.r6g.large
+  allocated_storage: 100
+  db_name: my_production_db
+  username: db_admin
+  multi_az: true
+  storage_encrypted: true
+  region: us-east-1
@@ -0,0 +1,12 @@
+# RDS mysql variation
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: rds
+environment: dev
+inputs:
+  engine: mysql
+  engine_version: "8.4"
+  instance_class: db.t3.micro
+  allocated_storage: 20
+  db_name: my_mysql_db
+  username: db_admin
+  region: us-east-1
@@ -0,0 +1,12 @@
+# Simple RDS postgres instance
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: rds
+environment: dev
+inputs:
+  engine: postgres
+  engine_version: "16.4"
+  instance_class: db.t3.micro
+  allocated_storage: 20
+  db_name: my_app_db
+  username: db_admin
+  region: us-east-1
@@ -0,0 +1,6 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: s3
+environment: dev
+inputs:
+  bucket_name: my-production-bucket
+  region: us-east-1
@@ -0,0 +1,6 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: s3
+environment: dev
+inputs:
+  bucket_name: my-simple-bucket
+  region: us-east-1
@@ -0,0 +1,9 @@
+# Complex VPC with 3 AZs and a custom CIDR
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: vpc
+environment: dev
+inputs:
+  cidr: 10.50.0.0/16
+  azs: us-east-1a,us-east-1b,us-east-1c
+  name: my-production-vpc
+  region: us-east-1
@@ -0,0 +1,8 @@
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: vpc
+environment: dev
+inputs:
+  cidr: 10.0.0.0/16
+  azs: us-east-1a,us-east-1b
+  name: my-vpc
+  region: us-east-1
@@ -0,0 +1,9 @@
+# Complex WAF with rate limiting + geo blocking (custom rules)
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: waf
+environment: dev
+inputs:
+  name: my-production-waf
+  scope: cloudfront
+  default_action: allow
+  region: us-east-1
@@ -0,0 +1,7 @@
+# Simple WAF with managed rules only
+uses: acdl/pipelines/deploy.yaml@v1.6
+module: waf
+environment: dev
+inputs:
+  name: my-waf
+  region: us-east-1