chore: Update the examples (#85)

Author: unfunco

examples/basic/README.md

@@ -0,0 +1,5 @@
+# Basic example
+
+The following example is the minimal configuration you can use to get started,
+this will create an OIDC provider with a single role called `GitHubActions`,
+and permissions for manage Lambda resources.

examples/basic/main.tf

@@ -0,0 +1,8 @@
+provider "aws" {}
+
+module "oidc_github" {
+  source = "../.."
+
+  attach_lambda_full_access_policy = true
+  github_repositories              = var.github_repositories
+}

examples/basic/variables.tf

@@ -0,0 +1,5 @@
+variable "github_repositories" {
+  default     = []
+  description = "GitHub organization/repository names authorized to assume the role."
+  type        = list(string)
+}

examples/complete/versions.tf renamed to examples/basic/versions.tf

@@ -2,17 +2,17 @@
 // SPDX-License-Identifier: MIT
 
 terraform {
+  required_version = "~> 1.12"
+
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = ">= 5.0"
+      version = "~> 6.0.0"
     }
 
     tls = {
       source  = "hashicorp/tls"
-      version = ">= 4.0"
+      version = "~> 4.0.0"
     }
   }
-
-  required_version = "~> 1.10"
 }

examples/complete/main.tf

@@ -0,0 +1,5 @@
+# OIDC provider with multiple roles
+
+The following example demonstrates creating the OIDC provider along with
+multiple custom roles, and attaching the assume role policy document to
+each role.

examples/complete/outputs.tf

@@ -0,0 +1,39 @@
+provider "aws" {}
+
+module "label" {
+  source  = "cloudposse/label/null"
+  version = "0.25.0"
+
+  namespace   = "unfunco"
+  environment = "test"
+  name        = "terraform-aws-oidc-github"
+}
+
+module "oidc_github" {
+  source = "../.."
+
+  create_iam_role     = false
+  github_repositories = var.github_repositories
+}
+
+resource "aws_iam_role" "network" {
+  assume_role_policy = module.oidc_github.assume_role_policy
+  description        = "Assumed by GitHub Actions to manage to network resources."
+  name               = join("-", [module.label.id, "network"])
+}
+
+resource "aws_iam_role_policy_attachment" "vpc_full_access" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonVPCFullAccess"
+  role       = aws_iam_role.network.name
+}
+
+resource "aws_iam_role" "storage" {
+  assume_role_policy = module.oidc_github.assume_role_policy
+  description        = "Assumed by GitHub Actions to manage storage resources."
+  name               = join("-", [module.label.id, "storage"])
+}
+
+resource "aws_iam_role_policy_attachment" "s3_full_access" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonS3FullAccess"
+  role       = aws_iam_role.storage.name
+}

examples/complete/variables.tf

@@ -0,0 +1,5 @@
+variable "github_repositories" {
+  default     = []
+  description = "GitHub organization/repository names authorized to assume the role."
+  type        = list(string)
+}