Merge pull request #5 from AaronForce1/4-aws-eks-module-upgrade-plus-…

…various-enhancements

4 aws eks module upgrade plus various enhancements

.gitignore

@@ -1,27 +1,80 @@
-# Kubernetes
+##################################
+#### ------------------------ ####
+####  FOSS - GITIGNORE        ####
+####  v1.0.1                  ####
+#### ------------------------ ####
+##################################
+### --
+### Logs
+### --
+logs
+*.log
+
+### --
+### Runtime
+### --
+pids
+*.pid
+*.seed
+
+### --
+### Testing Dependencies
+### --
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+# Coverage directory used by tools like istanbul
+coverage
+
+### --
+### Build Dependencies
+### --
+# node-waf configuration
+.lock-wscript
+# Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+# https://www.npmjs.org/doc/misc/npm-faq.html#should-i-check-my-node_modules-folder-into-git
+node_modules
+*.pyc
+
+
+### --
+### Compiled binary addons (http://nodejs.org/api/addons.html)
+### --
+build
+build/Release
+dist
+
+### --
+### Kubernetes
+### --
 .kubeconfig*
-values.overrides*
 
-# Terraform
+### --
+### Terraform
+### --
 *.tfvars
 *.tfstate*
+.terragrunt-cache/
 .terraform/
 .infracost/
 terraform.tfstate.d/
 
-# Language and Compiler Files
-*.pyc
-
-# IDE Files
+### --
+### Dev Dependencies
+### --
 .idea
 
-# Others
-*.log
+### --
+### Others
+### --
 *.vault*
 *.pem
 *.gpg
 .DS_Store
 
-# Environment
+### --
+### Environment
+### --
 .env*
+.env.yaml
 !.env.example

.pre-commit-config.yaml

@@ -1,9 +1,10 @@
-exclude: ^examples/
+exclude: (^examples/|archive/)
 repos:
 - repo: https://github.com/antonbabenko/pre-commit-terraform
-  rev: v1.62.3
+  rev: v1.72.1
   hooks:
     - id: terraform_fmt
     - id: terraform_docs
     - id: terraform_validate
-    - id: terraform_tflint
+    - id: terraform_tflint
+    - id: terraform_tfsec

.tfsec.yml

@@ -9,3 +9,4 @@ exclude:
   - AWS082 # FALSE POSITIVE | "Default VPC" is actually not used
   - AWS077 # FALSE POSITIVE | No need to version S3 web files
   - AWS098 # TODO:Public Access Block for S3?
+  - AWS097 ## TODO: Restrict resources to cluster-associated only.