# yaml-language-server: $schema=https://atmos.tools/schemas/atmos/atmos-manifest/1.0/atmos-manifest.json

components:
  terraform:
    vpc:
      metadata:
        # Point to the Terraform component.
        component: vpc
      settings:
        # Validation.
        # This example demonstrates OPA (Rego) policies.
        # All validation steps must succeed to allow the component to be provisioned.
        validation:
          check-vpc-component-config-with-opa-policy:
            schema_type: opa
            # 'schema_path' can be an absolute path or a path relative to 'schemas.opa.base_path' defined in `atmos.yaml`.
            schema_path: "vpc/validate-vpc-component.rego"
            # An array of filesystem paths (folders or individual files) to the additional modules for schema validation.
            # Each path can be an absolute path or a path relative to `schemas.opa.base_path` defined in `atmos.yaml`.
            # In this example, we have the additional Rego modules in `stacks/schemas/opa/catalog/constants`.
            module_paths:
              - "catalog/constants"
            description: Check 'vpc' component configuration using OPA policy
            # Set `disabled` to `true` to skip the validation step.
            # `disabled` is set to `false` by default, the step is allowed if `disabled` is not declared.
            disabled: false
            # Validation timeout in seconds.
            timeout: 10
      vars:
        region: us-east-2
        assign_generated_ipv6_cidr_block: false
        ipv4_primary_cidr_block: 10.9.0.0/18