usr_unknown/terraform-provider-dokploy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

A Terraform provider for Dokploy

Browse Source 
Plugin-framework provider covering projects, environments, applications,
Compose stacks, managed databases, domains, mounts, ports, redirects,
basic auth, registries, SSH keys, certificates and backup destinations,
over Dokploy's tRPC-over-REST API.

The shim package exposes the provider to other Go modules, which is how
pulumi-dokploy bridges it.
This commit is contained in:
Max Vojtkov
2026-08-09 12:17:26 +03:00
commit a6d8aa8b52
160 changed files with 24260 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
.agents/skills/terraform-policy/examples/README.md Normal file
View File

@@ -0,0 +1,30 @@
# Sentinel to tfpolicy Conversion Examples
This folder packages representative Sentinel-to-tfpolicy conversion examples for sharing with teammates.
Each example subfolder contains:
- `<sentinel-policy-name>.sentinel` - the actual Sentinel policy file included for comparison
- `<sentinel-policy-name>.policy.hcl` - the tfpolicy version or best approximation
- `README.md` - explanation of the conversion quality, what changed, and any limitations
Converted tfpolicy examples in this bundle prefer remediation-focused diagnostics over repeating Terraform addresses from Sentinel `summary {}` output. Terraform Policy diagnostics already identify the failing object and point to the relevant location, so converted examples avoid `${meta.address}` in error messages.
Included examples:
- `dms-endpoints-should-use-ssl` - direct attribute conversion (`Perfect`)
- `elasticsearch-https-required` - nested block conversion (`Good`)
- `eventbridge-custom-event-bus-should-have-attached-policy` - cross-resource conversion via `core::getresources()` (`Limited`)
- `cloudfront-associated-with-waf` - approximation only due to missing reference metadata (`Not convertible` as an exact translation)
- `efs-access-point-should-enforce-user-identity` - direct presence check (`Perfect`)
- `elasticsearch-encrypted-at-rest` - nested encryption block check (`Good`)
- `dms-endpoint-should-be-ssl-configured` - config-derived certificate check (`Good`)
- `ec2-network-acl-should-have-subnet-ids` - association-aware approximation (`Limited`)
- `secretsmanager-auto-rotation-enabled-check` - secret-to-rotation relationship via `core::getresources()` (`Good`)
- `s3-bucket-should-have-object-lock-enabled` - object lock association approximation (`Limited`)
- `ec2-vpc-default-security-group-no-traffic` - inline-only approximation of a broader graph check (`Not convertible` as an exact translation)
- `elasticsearch-in-vpc-only` - config-to-end-state VPC placement approximation (`Limited`)
- `cloudtrail-server-side-encryption-enabled` - config-to-end-state encryption check (`Good`)
- `step-functions-state-machine-logging-enabled` - nested logging block conversion (`Good`)
- `elasticache-redis-replication-group-encryption-at-transit-enabled` - direct boolean check (`Perfect`)
- `s3-block-public-access-bucket-level` - variable and association heavy approximation (`Not convertible` as an exact translation)
Note: The Sentinel policy files in this bundle come from the locally cloned policy library so reviewers can inspect the original Sentinel and converted tfpolicy side by side in one place.