initial implementation

.build-harness

@@ -0,0 +1,189 @@
+#
+# This is a shim installed automatically by the build-harness
+# https://github.com/cloudposse/build-harness
+#
+
+# templates/Makefile.build-harness includes this Makefile
+# and this Makefile includes templates/Makefile.build-harness
+# to support different modes of invocation. Use a guard variable
+# to prevent infinite recursive includes
+ifeq ($(BUILD_HARNESS_TEMPLATES_MAKEFILE_GUARD),)
+BUILD_HARNESS_TEMPLATES_MAKEFILE_GUARD := included
+
+export SHELL = /bin/bash
+export PWD = $(shell pwd)
+export BUILD_HARNESS_ORG ?= cloudposse
+export BUILD_HARNESS_PROJECT ?= build-harness
+export BUILD_HARNESS_DOCKER_IMAGE ?= $(BUILD_HARNESS_ORG)/$(BUILD_HARNESS_PROJECT)
+export BUILD_HARNESS_BRANCH ?= master
+export BUILD_HARNESS_CLONE_URL ?= https://github.com/$(BUILD_HARNESS_ORG)/$(BUILD_HARNESS_PROJECT).git
+
+# Resolves BUILD_HARNESS_PATH to BUILD_HARNESS_PATH_LOCAL when BUILD_HARNESS_PATH does not exist
+BUILD_HARNESS_PATH ?= $(shell until [ -d "$(BUILD_HARNESS_PROJECT)" ] || [ "`pwd`" == '/' ]; do cd ..; done; pwd)/$(BUILD_HARNESS_PROJECT)
+BUILD_HARNESS_PATH_LOCAL := $(PWD)/$(BUILD_HARNESS_PROJECT)
+export BUILD_HARNESS_PATH := $(or $(wildcard $(BUILD_HARNESS_PATH)),$(BUILD_HARNESS_PATH_LOCAL))
+# It is kind of expensive to figure out the Docker SHA tag, so we just define the command here, and only call it when needed
+# With the ":=" syntax, it stores the current value of BUILD_HARNESS_PATH, so this has to come after that has been set with ":="
+export BUILD_HARNESS_DOCKER_SHA_TAG_CMD := git -C "$(BUILD_HARNESS_PATH)" log -n 1 --format=sha-%h 2>/dev/null || echo latest
+
+# Toggles the auto-init feature
+BUILD_HARNESS_AUTO_INIT ?= false
+
+# Macro to clone/install BUILD_HARNESS_PROJECT
+define harness_install
+curl --retry 5 --fail --silent --retry-delay 1 \
+	https://raw.githubusercontent.com/$(BUILD_HARNESS_ORG)/$(BUILD_HARNESS_PROJECT)/$(BUILD_HARNESS_BRANCH)/bin/install.sh | \
+	bash -s "$(BUILD_HARNESS_ORG)" "$(BUILD_HARNESS_PROJECT)" "$(BUILD_HARNESS_BRANCH)"
+endef
+
+# Macro to auto-init the BUILD_HARNESS_PROJECT with the `include` directive
+# Tests if BUILD_HARNESS_PROJECT does not yet exist, or if it does exist but the
+# checkout does not match BUILD_HARNESS_BRANCH
+define harness_auto_init
+if [[ \
+	-f "/build-harness/Makefile" || -f "/$(BUILD_HARNESS_PROJECT)/Makefile" \
+]]; then \
+	echo "[.build-harness]: In $(BUILD_HARNESS_PROJECT) docker container, skipping auto-init" ;\
+elif grep -q docker /proc/1/cgroup 2>/dev/null; then \
+	echo "[.build-harness]: In unknown docker container, skipping auto-init" ;\
+elif [[ \
+	"$(BUILD_HARNESS_PATH)" != "$(BUILD_HARNESS_PATH_LOCAL)" && \
+	-f "$(BUILD_HARNESS_PATH)/Makefile" \
+]]; then \
+	echo "[.build-harness]: Using external $(BUILD_HARNESS_PATH), skipping auto-init" ;\
+elif [[ \
+	"$(BUILD_HARNESS_PATH)" == "$(BUILD_HARNESS_PATH_LOCAL)" && \
+	-f "$(BUILD_HARNESS_PATH)/Makefile" && \
+	"$$(git -C '$(BUILD_HARNESS_PATH_LOCAL)' ls-remote '$(BUILD_HARNESS_CLONE_URL)' '$(BUILD_HARNESS_BRANCH)' | cut -f1)" == "$$(git -C '$(BUILD_HARNESS_PATH_LOCAL)' rev-parse HEAD)" \
+]]; then \
+	echo "[.build-harness]: Clone of $(BUILD_HARNESS_PROJECT) is up-to-date, skipping auto-init" ;\
+else \
+	$(harness_install) ;\
+fi
+endef
+
+-include $(if $(findstring true,$(BUILD_HARNESS_AUTO_INIT)),$(shell $(harness_auto_init) >&2)) $(BUILD_HARNESS_PATH)/Makefile
+
+.PHONY : init
+## Init build-harness
+init::
+	@ $(harness_install)
+
+.PHONY : clean
+## Clean build-harness
+clean::
+	@if [ -d "$(BUILD_HARNESS_PATH)" ]; then \
+		if [ -d build-harness ] && [ "$(BUILD_HARNESS_PATH)" -ef build-harness ]; then \
+			echo rm -rf build-harness; \
+			rm -rf build-harness; \
+		else \
+			echo Not removing build harness from "$(BUILD_HARNESS_PATH)" because it appears to be shared.; \
+			echo If you are sure you want to delete it, run: ; \
+			echo '   rm -rf "$(BUILD_HARNESS_PATH)"'; \
+		fi; \
+	fi
+
+.PHONY: safe-directory
+
+# Workaround for https://github.com/actions/checkout/issues/766
+safe-directory:
+	[[ -n "$$GITHUB_WORKSPACE" ]] && git config --global --add safe.directory "$$GITHUB_WORKSPACE" || git config --global --add safe.directory '*'
+
+.PHONY: build-harness/shell builder build-harness/shell/pull builder/pull builder/build builder-slim/build
+
+build-harness/shell/pull builder/pull builder/build builder-slim/build: BUILD_HARNESS_DOCKER_SHA_TAG ?= $(shell $(BUILD_HARNESS_DOCKER_SHA_TAG_CMD))
+build-harness/shell/pull builder/pull:
+	docker pull $(BUILD_HARNESS_DOCKER_IMAGE):$(BUILD_HARNESS_DOCKER_SHA_TAG)
+	@[[ "$(BUILD_HARNESS_DOCKER_SHA_TAG)" == "latest" ]] || docker pull $(BUILD_HARNESS_DOCKER_IMAGE):latest
+
+builder/build: export DOCKER_IMAGE_NAME = $(BUILD_HARNESS_DOCKER_IMAGE):$(BUILD_HARNESS_DOCKER_SHA_TAG)
+builder/build:
+	@$(MAKE) --no-print-directory docker/build
+
+builder-slim/build: export DOCKER_IMAGE_NAME = $(BUILD_HARNESS_DOCKER_IMAGE):slim-$(BUILD_HARNESS_DOCKER_SHA_TAG)
+builder-slim/build: export DOCKER_FILE := Dockerfile.slim
+builder-slim/build:
+	@$(MAKE) --no-print-directory docker/build
+
+DEFAULT_DOCKER_ENVS := AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN TERM AWS_PROFILE AWS_REGION \
+	AWS_DEFAULT_PROFILE AWS_DEFAULT_REGION
+EXTRA_DOCKER_ENVS ?= AWS_CONFIG_FILE AWS_SHARED_CREDENTIALS_FILE
+DOCKER_ENVS ?= $(DEFAULT_DOCKER_ENVS) $(EXTRA_DOCKER_ENVS)
+
+## Start a shell inside of the `build-harness` docker container with `make build-harness/shell` or `make builder`
+## Run `make` targets inside the build-harness shell by setting `TARGETS` or `TARGET`, e.g.
+##     make builder TARGETS="github/init readme"
+build-harness/shell builder tester: MOUNT_HOME ?= $(shell [ -d "$$HOME" ] && printf -- "-e HOME -v \"%s\":\"%s\"" "$$HOME" "$$HOME")
+build-harness/shell builder tester: TARGETS ?= $(TARGET)
+build-harness/shell builder tester: ARGS := $(if $(TARGETS),$(TARGETS),-l || true)
+build-harness/shell builder tester: ENTRYPOINT := $(if $(TARGETS),/usr/bin/make,/bin/bash)
+build-harness/shell builder pr/pre-commit pr/readme pr/github-update: RUNNER_DOCKER_TAG ?= $(shell $(BUILD_HARNESS_DOCKER_SHA_TAG_CMD))
+build-harness/shell builder pr/pre-commit pr/readme pr/github-update: RUNNER_DOCKER_IMAGE ?= $(BUILD_HARNESS_DOCKER_IMAGE)
+build-harness/shell builder: build-harness/runner
+	@exit 0
+
+.PHONY: build-harness/shell-slim builder-slim pr/auto-format pr/auto-format/host pr/readme pr/readme/host pr/pre-commit pr/github-update pr/github-update/host tf14-upgrade
+
+build-harness/shell-slim builder-slim pr/auto-format pr/readme tf14-upgrade: RUNNER_DOCKER_IMAGE ?= $(BUILD_HARNESS_DOCKER_IMAGE)
+
+build-harness/shell-slim builder-slim tf14-upgrade pr/auto-format pr/readme: RUNNER_DOCKER_SHA_TAG ?= $(shell $(BUILD_HARNESS_DOCKER_SHA_TAG_CMD))
+build-harness/shell-slim builder-slim tf14-upgrade pr/auto-format pr/readme: RUNNER_DOCKER_TAG ?= \
+	$(shell docker inspect --type=image $(RUNNER_DOCKER_IMAGE):$(RUNNER_DOCKER_SHA_TAG) >/dev/null 2>&1 && \
+	echo "$(RUNNER_DOCKER_SHA_TAG) " || echo "slim-$(RUNNER_DOCKER_SHA_TAG)")
+
+build-harness/shell-slim builder-slim: TARGETS ?= $(TARGET)
+build-harness/shell-slim builder-slim: ARGS := $(if $(TARGETS),$(TARGETS),-l || true)
+build-harness/shell-slim builder-slim: ENTRYPOINT := $(if $(TARGETS),/usr/bin/make,/bin/bash)
+build-harness/shell-slim builder-slim: build-harness/runner
+
+pr/auto-format pr/readme pr/pre-commit pr/github-update tf14-upgrade : ENTRYPOINT := /usr/bin/make
+
+pr/auto-format pr/auto-format/host: ARGS := github/update terraform/fmt readme
+pr/readme pr/readme/host: ARGS := readme/deps readme
+pr/github-update pr/github-update/host: ARGS := github/update
+pr/auto-format pr/readme pr/github-update: build-harness/runner
+pr/auto-format/host pr/readme/host pr/github-update/host: safe-directory
+	$(MAKE) $(ARGS)
+
+pr/pre-commit: ARGS := pre-commit/run
+pr/pre-commit: build-harness/runner
+
+tf14-upgrade: export TERRAFORM_FORCE_README := true
+tf14-upgrade: ARGS := github/init terraform/v14-rewrite
+tf14-upgrade: build-harness/runner
+
+.PHONY: tester tester/pull
+
+tester tester/pull: TEST_HARNESS_DOCKER_IMAGE ?= cloudposse/test-harness
+tester tester/pull: TEST_HARNESS_DOCKER_TAG ?= latest
+tester: RUNNER_DOCKER_IMAGE ?= $(TEST_HARNESS_DOCKER_IMAGE)
+tester: RUNNER_DOCKER_TAG ?= $(TEST_HARNESS_DOCKER_TAG)
+tester: build-harness/runner
+
+tester/pull:
+	docker pull $(TEST_HARNESS_DOCKER_IMAGE):$(TEST_HARNESS_DOCKER_TAG)
+
+
+.PHONY: build-harness/runner
+
+build-harness/runner:
+	$(info Starting $(RUNNER_DOCKER_IMAGE):$(RUNNER_DOCKER_TAG))
+	docker run --name build-harness \
+		--rm -it \
+		-e PACKAGES_PREFER_HOST=true \
+		$(addprefix -e ,$(DOCKER_ENVS)) \
+		$(MOUNT_HOME) \
+		-v $(CURDIR):/opt \
+		--workdir /opt \
+		--entrypoint $(ENTRYPOINT) \
+		$(RUNNER_DOCKER_IMAGE):$(RUNNER_DOCKER_TAG) $(ARGS)
+
+.PHONY: reset-owner
+reset-owner:
+	@if [[ -n $$(find . -xdev -user 0 -print) ]]; then \
+		printf "\n* To reset ownership on files, run:\n  sudo find . -xdev -user 0 -exec chown $$USER {} \;\n\n" ; \
+	else \
+		printf "\n* No root-owned files found\n\n" ; \
+	fi
+
+endif

.editorconfig

@@ -0,0 +1,13 @@
+# Editor configuration, see http://editorconfig.org
+root = true
+
+[*]
+charset = utf-8
+indent_style = space
+indent_size = 2
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+max_line_length = off
+trim_trailing_whitespace = false

.env.test

@@ -0,0 +1,5 @@
+AWS_REGION="us-east-1"
+GITHUB_APP_ID="217830"
+GITHUB_INSTALLATION_ID="27165764"
+GITHUB_ORG="skedrocket"
+GITHUB_PRIVATE_KEY="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"

.eslintrc.json

@@ -0,0 +1,55 @@
+{
+  "root": true,
+  "ignorePatterns": ["**/*"],
+  "plugins": ["@nrwl/nx", "import", "sort-destructure-keys"],
+  "overrides": [
+    {
+      "files": ["*.ts", "*.tsx", "*.js", "*.jsx"],
+      "rules": {
+        "@nrwl/nx/enforce-module-boundaries": [
+          "error",
+          {
+            "enforceBuildableLibDependency": true,
+            "allow": [],
+            "depConstraints": [
+              {
+                "sourceTag": "*",
+                "onlyDependOnLibsWithTags": ["*"]
+              }
+            ]
+          }
+        ],
+        "import/order": [
+          "error",
+          {
+            "alphabetize": { "order": "asc", "caseInsensitive": true },
+            "groups": [
+              "builtin",
+              "external",
+              "internal",
+              "parent",
+              "sibling",
+              "index"
+            ],
+            "newlines-between": "always"
+          }
+        ],
+        "sort-destructure-keys/sort-destructure-keys": [
+          "error",
+          { "caseSensitive": false }
+        ],
+        "sort-keys": "off"
+      }
+    },
+    {
+      "files": ["*.ts", "*.tsx"],
+      "extends": ["plugin:@nrwl/nx/typescript"],
+      "rules": {}
+    },
+    {
+      "files": ["*.js", "*.jsx"],
+      "extends": ["plugin:@nrwl/nx/javascript"],
+      "rules": {}
+    }
+  ]
+}

.github/CODEOWNERS

@@ -0,0 +1,25 @@
+# Use this file to define individuals or teams that are responsible for code in a repository.
+# Read more: <https://help.github.com/articles/about-codeowners/>
+#
+# Order is important: the last matching pattern has the highest precedence
+
+# These owners will be the default owners for everything
+*             @cloudposse/engineering @cloudposse/contributors
+
+# Cloud Posse must review any changes to Makefiles
+**/Makefile   @cloudposse/engineering
+**/Makefile.* @cloudposse/engineering
+
+# Cloud Posse must review any changes to GitHub actions
+.github/*     @cloudposse/engineering
+
+# Cloud Posse must review any changes to standard context definition,
+# but some changes can be rubber-stamped.
+**/*.tf       @cloudposse/engineering @cloudposse/contributors @cloudposse/approvers
+README.yaml   @cloudposse/engineering @cloudposse/contributors @cloudposse/approvers
+README.md     @cloudposse/engineering @cloudposse/contributors @cloudposse/approvers
+docs/*.md     @cloudposse/engineering @cloudposse/contributors @cloudposse/approvers
+
+# Cloud Posse Admins must review all changes to CODEOWNERS or the mergify configuration
+.github/mergify.yml @cloudposse/admins
+.github/CODEOWNERS  @cloudposse/admins

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,37 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: 'bug'
+assignees: ''
+
+---
+
+Found a bug? Maybe our [Slack Community](https://slack.cloudposse.com) can help. 
+
+[![Slack Community](https://slack.cloudposse.com/badge.svg)](https://slack.cloudposse.com)
+
+## Describe the Bug
+A clear and concise description of what the bug is.
+
+## Expected Behavior
+A clear and concise description of what you expected to happen.
+
+## Steps to Reproduce
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Run '....'
+3. Enter '....'
+4. See error
+
+## Screenshots
+If applicable, add screenshots or logs to help explain your problem.
+
+## Environment (please complete the following information):
+
+Anything that will help us triage the bug will help. Here are some ideas:
+ - OS: [e.g. Linux, OSX, WSL, etc]
+ - Version [e.g. 10.15]
+
+## Additional Context
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,18 @@
+blank_issues_enabled: false
+
+contact_links:
+
+  - name: Community Slack Team
+    url: https://cloudposse.com/slack/
+    about: |-
+      Please ask and answer questions here.
+
+  - name: Office Hours
+    url: https://cloudposse.com/office-hours/
+    about: |-
+      Join us every Wednesday for FREE Office Hours (lunch & learn).
+
+  - name: DevOps Accelerator Program
+    url: https://cloudposse.com/accelerate/
+    about: |-
+      Own your infrastructure in record time. We build it. You drive it. 

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,36 @@
+---
+name: Feature Request
+about: Suggest an idea for this project
+title: ''
+labels: 'feature request'
+assignees: ''
+
+---
+
+Have a question? Please checkout our [Slack Community](https://slack.cloudposse.com) or visit our [Slack Archive](https://archive.sweetops.com/). 
+
+[![Slack Community](https://slack.cloudposse.com/badge.svg)](https://slack.cloudposse.com)
+
+## Describe the Feature
+
+A clear and concise description of what the bug is. 
+
+## Expected Behavior
+
+A clear and concise description of what you expected to happen.
+
+## Use Case
+
+Is your feature request related to a problem/challenge you are trying to solve? Please provide some additional context of why this feature or capability will be valuable.
+
+## Describe Ideal Solution
+
+A clear and concise description of what you want to happen. If you don't know, that's okay.
+
+## Alternatives Considered
+
+Explain what alternative solutions or features you've considered.
+
+## Additional Context
+
+Add any other context or screenshots about the feature request here.