ljwx-children/terraform/environments/prod/main.tf

# Production Environment Configuration

terraform {
  required_version = ">= 1.5.0"

  backend "s3" {
    bucket         = "gold-template-terraform-state-prod"
    key            = "prod/terraform.tfstate"
    region         = "us-west-2"
    encrypt        = true
    dynamodb_table = "gold-template-terraform-locks"
  }
}

# Local variables
locals {
  environment = "prod"
  aws_region  = "us-west-2"
  azs         = ["us-west-2a", "us-west-2b", "us-west-2c"]

  common_tags = {
    Project     = var.project_name
    Environment = local.environment
    ManagedBy   = "terraform"
    CostCenter  = "Production"
    Compliance  = "required"
  }
}

# Networking Module
module "networking" {
  source = "../../modules/networking"

  project_name       = var.project_name
  environment        = local.environment
  vpc_cidr           = "10.100.0.0/16"
  availability_zones = local.azs
  enable_nat_gateway = true  # High availability for prod
  tags               = local.common_tags
}

# Kubernetes Module
module "kubernetes" {
  source = "../../modules/kubernetes"

  project_name        = var.project_name
  environment         = local.environment
  public_subnet_ids   = module.networking.public_subnet_ids
  private_subnet_ids  = module.networking.private_subnet_ids
  kubernetes_version  = "1.28"
  enable_public_access = true

  # Production-grade node configuration
  node_instance_types = ["t3.large", "t3.xlarge"]
  capacity_type       = "ON_DEMAND"
  node_desired_size   = 3
  node_max_size       = 10
  node_min_size       = 2
  node_disk_size      = 50

  # Enable all monitoring
  cluster_log_types = ["api", "audit", "authenticator", "controllerManager", "scheduler"]

  tags = local.common_tags
}

# Database Module
module "database" {
  source = "../../modules/database"

  project_name               = var.project_name
  environment                = local.environment
  private_subnet_ids         = module.networking.private_subnet_ids
  database_security_group_id = module.networking.database_security_group_id

  # Production-grade database
  postgres_version       = "15.4"
  db_instance_class      = "db.r6g.large"
  allocated_storage      = 100
  max_allocated_storage  = 500
  storage_type           = "gp3"
  backup_retention_period = 30
  multi_az               = true
  deletion_protection    = true
  skip_final_snapshot    = false
  monitoring_interval    = 60
  enable_performance_insights = true
  auto_minor_version_upgrade = true

  alarm_actions = [var.alert_sns_topic_arn]

  tags = local.common_tags
}

# Monitoring Module
module "monitoring" {
  source = "../../modules/monitoring"

  project_name        = var.project_name
  environment         = local.environment
  aws_region          = local.aws_region
  oidc_provider_arn   = module.kubernetes.oidc_provider_arn
  oidc_provider       = module.kubernetes.oidc_provider
  availability_zones  = local.azs

  # Production monitoring configuration
  log_retention_days       = 90
  trace_retention_days     = 30
  cloudwatch_retention_days = 30
  create_prometheus_volume = true
  prometheus_volume_size   = 100
  create_sns_topic         = true
  alert_email              = var.alert_email

  tags = local.common_tags
}