Jon Chery
4ed2542ecf
---ci--- project: acdl phase: 13 milestone: v1.2 status: verify verdict: VERIFIED requirements: covered: [REQ-31] ---/ci--- Phase 13 plan-as-execute + verify. scripts/verify_phase13.sh green. 6 ECS L1s authored + registered (l1-vpc, l1-ecs-cluster, l1-ecs-service, l1-iam-role, l1-alb, l1-ecr). Adapter generalized to table-driven TYPE_MAP (12 IR types) + INPUT_MAP + OUTPUT_MAP. S3 regression: the v1.1 spike l1-s3 produces byte-identical main.tf. Ready to ship v1.2.3.
52 lines
2.4 KiB
Markdown
52 lines
2.4 KiB
Markdown
# l1-vpc — VPC primitive (multi-resource L1)
|
|
|
|
An L1 module for a VPC with subnets and a route table. Substrate-agnostic
|
|
(the IR types are `aws:ec2:vpc`, `aws:ec2:subnet`, `aws:ec2:routetable`,
|
|
not Terraform resource types). This is a multi-resource L1: the
|
|
interface declares the group's inputs/outputs plus a `resources` array
|
|
listing the IR types it emits. The IR instance (Phase 14/15) will have
|
|
multiple `resources` entries all with `module: "l1-vpc@1.0.0"`.
|
|
|
|
## Interface (the IR-typed contract)
|
|
|
|
See `interface.json`: inputs `cidr` (string, e.g. "10.0.0.0/16"), `azs`
|
|
(string, comma-separated, e.g. "us-east-1a,us-east-1b"), `name` (string,
|
|
used for tagging), `region` (string); outputs `vpc_id` (string),
|
|
`subnet_ids` (string, comma-separated), `igw_id` (string); no NFRs.
|
|
|
|
The `resources` array lists the emitted IR types:
|
|
|
|
- `aws:ec2:vpc` — the VPC itself (cidr → cidr_block, name → tag).
|
|
- `aws:ec2:subnet` — one subnet per availability zone (`azs` split on
|
|
comma); inputs include the parent VPC id.
|
|
- `aws:ec2:routetable` — route table bound to the VPC with an internet
|
|
gateway + default route (0.0.0.0/0 → igw).
|
|
|
|
## IR → Terraform mapping (performed by the adapter)
|
|
|
|
The Terraform adapter (`adapters/terraform/adapter.py`) translates each
|
|
emitted IR resource to Terraform:
|
|
|
|
| IR | Terraform |
|
|
|----|-----------|
|
|
| `resource.type = aws:ec2:vpc` | `resource "aws_vpc" "<id>" { ... }` |
|
|
| `resource.inputs.cidr` | `cidr_block = <value>` arg |
|
|
| `resource.inputs.name` | `tags = { Name = <value> }` (emit as-is) |
|
|
| `resource.outputs.vpc_id` | `output "vpc_id" { value = aws_vpc.<id>.id }` |
|
|
| `resource.type = aws:ec2:subnet` | `resource "aws_subnet" "<id>" { ... }` |
|
|
| `resource.inputs.cidr` | `cidr_block = <value>` arg |
|
|
| `resource.inputs.az` | `availability_zone = <value>` arg |
|
|
| `resource.outputs.subnet_id` | `output "subnet_id" { value = aws_subnet.<id>.id }` |
|
|
| `resource.type = aws:ec2:routetable` | `resource "aws_route_table" "<id>" { ... }` |
|
|
| `resource.inputs.vpc_id` | `vpc_id = <value>` arg |
|
|
|
|
The internet gateway + default route are emitted as part of the route
|
|
table resource's IR (the `igw_id` output is wired via the route table's
|
|
inputs). The adapter is a thin layer (ARCHITECTURE.md §12.2); it does
|
|
not own L1 content — it only translates.
|
|
|
|
## Versioning (W3.D)
|
|
|
|
`1.0.0` — interface MAJOR, behavior MINOR, lifecycle PATCH. MAJOR bumps
|
|
require a new registry entry (immutable publication); old entries enter
|
|
a 12-month deprecation window. |