diff --git a/.gitattributes b/.gitattributes
index f0396ee..e69de29 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1 +0,0 @@
-example/real_world_stuff/* filter=git-crypt diff=git-crypt
diff --git a/README.md b/README.md
index ae0c33b..676430a 100644
--- a/README.md
+++ b/README.md
@@ -18,15 +18,16 @@ To run tests simply run `nix-shell --run 'tree-sitter test'`.
 
 ## Compliance
 
-The directory `example/real_world_stuff` contains a corpus of hcl files that I found with the github query `user:hashicorp language:HCL`. Just to be sure I encrypted them using `git-crypt`.
+The directory `example/real_world_stuff` contains a corpus of hcl files that I found with the github query `language:HCL` for users `coreos` and `hashicorp`
 
 Given that some language features are still missing ( see TODO ) there are some expected parse errors:
 
 ```bash
-nix-shell --run 'tree-sitter parse --quiet --stat example/real_world_stuff/*'
+nix-shell --run 'tree-sitter parse --quiet --stat example/real_world_stuff/*/*'
 ...
 ...
-Total parses: 886; successful parses: 801; failed parses: 85; success percentage: 90.41%
+Total parses: 1130; successful parses: 1053; failed parses: 77; success percentage: 93.19%
+
 ```
 
 The aim is to build unit testcases from selected failure classes and slowly get to 100%. 
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%config.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%config.tf
new file mode 100644
index 0000000..5e850d1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%config.tf
@@ -0,0 +1,358 @@
+terraform {
+  required_version = ">= 0.10.7"
+}
+
+provider "archive" {
+  version = "1.0.0"
+}
+
+provider "external" {
+  version = "1.0.0"
+}
+
+provider "ignition" {
+  version = "1.0.0"
+}
+
+provider "local" {
+  version = "1.0.0"
+}
+
+provider "null" {
+  version = "1.0.0"
+}
+
+provider "random" {
+  version = "1.0.0"
+}
+
+provider "template" {
+  version = "1.0.0"
+}
+
+provider "tls" {
+  version = "1.0.1"
+}
+
+variable "tectonic_config_version" {
+  description = <<EOF
+(internal) This declares the version of the global configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_image_re" {
+  description = <<EOF
+(internal) Regular expression used to extract repo and tag components
+EOF
+
+  type    = "string"
+  default = "/^([^/]+/[^/]+):(.*)$/"
+}
+
+variable "tectonic_container_images" {
+  description = "(internal) Container images to use"
+  type        = "map"
+
+  default = {
+    addon_resizer                        = "gcr.io/google_containers/addon-resizer:2.1"
+    awscli                               = "quay.io/coreos/awscli:025a357f05242fdad6a81e8a6b520098aa65a600"
+    gcloudsdk                            = "google/cloud-sdk:178.0.0-alpine"
+    bootkube                             = "quay.io/coreos/bootkube:v0.10.0"
+    tnc_operator                         = "quay.io/coreos/tectonic-node-controller-operator-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+    etcd_cert_signer                     = "quay.io/coreos/kube-etcd-signer-server:678cc8e6841e2121ebfdb6e2db568fce290b67d6"
+    etcd                                 = "quay.io/coreos/etcd:v3.2.14"
+    hyperkube                            = "openshift/origin-node:latest"
+    kube_core_renderer                   = "quay.io/coreos/kube-core-renderer-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+    kube_core_operator                   = "quay.io/coreos/kube-core-operator-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+    tectonic_channel_operator            = "quay.io/coreos/tectonic-channel-operator-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+    kube_addon_operator                  = "quay.io/coreos/kube-addon-operator-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+    tectonic_alm_operator                = "quay.io/coreos/tectonic-alm-operator:v0.3.1"
+    tectonic_ingress_controller_operator = "quay.io/coreos/tectonic-ingress-controller-operator-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+    tectonic_utility_operator            = "quay.io/coreos/tectonic-utility-operator-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+    tectonic_network_operator            = "quay.io/coreos/tectonic-network-operator-dev:c3cee2bc5673011e88ac7b0ab1659c2c7243a499"
+  }
+}
+
+variable "tectonic_container_base_images" {
+  description = "(internal) Base images of the components to use"
+  type        = "map"
+
+  default = {
+    tectonic_monitoring_auth = "quay.io/coreos/tectonic-monitoring-auth"
+    config_reload            = "quay.io/coreos/configmap-reload"
+    addon_resizer            = "quay.io/coreos/addon-resizer"
+    kube_state_metrics       = "quay.io/coreos/kube-state-metrics"
+    grafana                  = "quay.io/coreos/monitoring-grafana"
+    grafana_watcher          = "quay.io/coreos/grafana-watcher"
+    prometheus_operator      = "quay.io/coreos/prometheus-operator"
+    prometheus_config_reload = "quay.io/coreos/prometheus-config-reloader"
+    prometheus               = "quay.io/prometheus/prometheus"
+    alertmanager             = "quay.io/prometheus/alertmanager"
+    node_exporter            = "quay.io/prometheus/node-exporter"
+    kube_rbac_proxy          = "quay.io/coreos/kube-rbac-proxy"
+  }
+}
+
+variable "tectonic_versions" {
+  description = "(internal) Versions of the components to use"
+  type        = "map"
+
+  default = {
+    tectonic = "1.8.4-tectonic.2"
+    alm      = "0.4.0"
+  }
+}
+
+variable "tectonic_service_cidr" {
+  type = "string"
+
+  description = <<EOF
+(optional) This declares the IP range to assign Kubernetes service cluster IPs in CIDR notation.
+The maximum size of this IP range is /12
+EOF
+}
+
+variable "tectonic_cluster_cidr" {
+  type = "string"
+
+  description = "(optional) This declares the IP range to assign Kubernetes pod IPs in CIDR notation."
+}
+
+variable "tectonic_master_count" {
+  type    = "string"
+  default = "1"
+
+  description = <<EOF
+The number of master nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_worker_count" {
+  type    = "string"
+  default = "3"
+
+  description = <<EOF
+The number of worker nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_etcd_count" {
+  type    = "string"
+  default = "0"
+
+  description = <<EOF
+The number of etcd nodes to be created.
+If set to zero, the count of etcd nodes will be determined automatically.
+EOF
+}
+
+variable "tectonic_base_domain" {
+  type = "string"
+
+  description = <<EOF
+The base DNS domain of the cluster. It must NOT contain a trailing period. Some
+DNS providers will automatically add this if necessary.
+
+Example: `openshift.example.com`.
+
+Note: This field MUST be set manually prior to creating the cluster.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_cluster_name" {
+  type = "string"
+
+  description = <<EOF
+The name of the cluster.
+If used in a cloud-environment, this will be prepended to `tectonic_base_domain` resulting in the URL to the Tectonic console.
+
+Note: This field MUST be set manually prior to creating the cluster.
+EOF
+}
+
+variable "tectonic_pull_secret_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path the pull secret file in JSON format.
+This is known to be a "Docker pull secret" as produced by the docker login [1] command.
+A sample JSON content is shown in [2].
+You can download the pull secret from your Account overview page at [3].
+
+[1] https://docs.docker.com/engine/reference/commandline/login/
+
+[2] https://coreos.com/os/docs/latest/registry-authentication.html#manual-registry-auth-setup
+
+[3] https://account.coreos.com/overview
+EOF
+}
+
+variable "tectonic_license_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path to the tectonic licence file.
+You can download the Tectonic license file from your Account overview page at [1].
+
+[1] https://account.coreos.com/overview
+EOF
+}
+
+variable "tectonic_container_linux_channel" {
+  type = "string"
+
+  description = <<EOF
+The Container Linux update channel.
+
+Examples: `stable`, `beta`, `alpha`
+EOF
+}
+
+variable "tectonic_container_linux_version" {
+  type = "string"
+
+  description = <<EOF
+The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+
+Examples: `latest`, `1465.6.0`
+EOF
+}
+
+variable "tectonic_update_server" {
+  type        = "string"
+  default     = "https://tectonic.update.core-os.net"
+  description = "(internal) The URL of the Tectonic Omaha update server"
+}
+
+variable "tectonic_update_channel" {
+  type        = "string"
+  default     = "tectonic-1.9-production"
+  description = "(internal) The Tectonic Omaha update channel"
+}
+
+variable "tectonic_update_app_id" {
+  type        = "string"
+  default     = "6bc7b986-4654-4a0f-94b3-84ce6feb1db4"
+  description = "(internal) The Tectonic Omaha update App ID"
+}
+
+variable "tectonic_admin_email" {
+  type = "string"
+
+  description = <<EOF
+(internal) The e-mail address used to:
+1. login as the admin user to the Tectonic Console.
+2. generate DNS zones for some providers.
+
+Note: This field MUST be in all lower-case e-mail address format and set manually prior to creating the cluster.
+EOF
+}
+
+variable "tectonic_admin_password" {
+  type = "string"
+
+  description = <<EOF
+(internal) The admin user password to login to the Tectonic Console.
+
+Note: This field MUST be set manually prior to creating the cluster. Backslashes and double quotes must
+also be escaped.
+EOF
+}
+
+variable "tectonic_ca_cert" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA certificate, used to generate all cluster certificates.
+If left blank, a CA certificate will be automatically generated.
+EOF
+}
+
+variable "tectonic_ca_key" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA key, used to generate Tectonic all cluster certificates.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_ca_key_alg" {
+  type    = "string"
+  default = "RSA"
+
+  description = <<EOF
+(optional) The algorithm used to generate tectonic_ca_key.
+The default value is currently recommended.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_stats_url" {
+  type        = "string"
+  default     = "https://stats-collector.tectonic.com"
+  description = "(internal) The Tectonic statistics collection URL to which to report."
+}
+
+variable "tectonic_networking" {
+  description = <<EOF
+(optional) Configures the network to be used in Tectonic. One of the following values can be used:
+
+- "flannel": enables overlay networking only. This is implemented by flannel using VXLAN.
+
+- "canal": enables overlay networking including network policy. Overlay is implemented by flannel using VXLAN. Network policy is implemented by Calico.
+
+- "calico-ipip": [ALPHA] enables BGP based networking. Routing and network policy is implemented by Calico. Note this has been tested on bare metal installations only.
+
+- "none": disables the installation of any Pod level networking layer provided by Tectonic. By setting this value, users are expected to deploy their own solution to enable network connectivity for Pods and Services.
+EOF
+}
+
+variable "tectonic_kubelet_debug_config" {
+  type    = "string"
+  default = ""
+
+  description = "(internal) debug flags for the kubelet (used in CI only)"
+}
+
+variable "tectonic_ignition_master" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(internal) Ignition config file path. This is automatically generated by the installer.
+EOF
+}
+
+variable "tectonic_ignition_worker" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(internal) Ignition config file path. This is automatically generated by the installer.
+EOF
+}
+
+variable "tectonic_platform" {
+  type = "string"
+
+  description = <<EOF
+(internal) The internal Terraform platform type, e.g. aws or libvirt
+EOF
+}
+
+// This variable is generated by tectonic internally. Do not modify
+variable "tectonic_cluster_id" {
+  type        = "string"
+  description = "(internal) The Tectonic cluster id."
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%config.tf-300 b/example/real_world_stuff/coreos/coreos%tectonic-installer%config.tf-300
new file mode 100644
index 0000000..1cc5aa8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%config.tf-300
@@ -0,0 +1,610 @@
+terraform {
+  required_version = ">= 0.10.7"
+}
+
+provider "archive" {
+  version = "1.0.0"
+}
+
+provider "external" {
+  version = "1.0.0"
+}
+
+provider "ignition" {
+  version = "1.0.0"
+}
+
+provider "local" {
+  version = "1.0.0"
+}
+
+provider "null" {
+  version = "1.0.0"
+}
+
+provider "random" {
+  version = "1.0.0"
+}
+
+provider "template" {
+  version = "1.0.0"
+}
+
+provider "tls" {
+  version = "1.0.1"
+}
+
+locals {
+  // The total amount of public CA certificates present in Tectonic.
+  // That is all custom CAs + kube CA + etcd CA + ingress CA
+  // This is a local constant, which needs to be dependency injected because TF cannot handle length() on computed values,
+  // see https://github.com/hashicorp/terraform/issues/10857#issuecomment-268289775.
+  tectonic_ca_count = "${length(var.tectonic_custom_ca_pem_list) + 3}"
+
+  tectonic_http_proxy_enabled = "${length(var.tectonic_http_proxy_address) > 0}"
+}
+
+variable "tectonic_config_version" {
+  description = <<EOF
+(internal) This declares the version of the global configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_image_re" {
+  description = <<EOF
+(internal) Regular expression used to extract repo and tag components
+EOF
+
+  type    = "string"
+  default = "/^([^/]+/[^/]+/[^/]+):(.*)$/"
+}
+
+variable "tectonic_container_images" {
+  description = "(internal) Container images to use"
+  type        = "map"
+
+  default = {
+    addon_resizer                = "gcr.io/google_containers/addon-resizer:2.1"
+    awscli                       = "quay.io/coreos/awscli:025a357f05242fdad6a81e8a6b520098aa65a600"
+    gcloudsdk                    = "google/cloud-sdk:178.0.0-alpine"
+    bootkube                     = "quay.io/coreos/bootkube:v0.8.1"
+    calico                       = "quay.io/calico/node:v2.6.1"
+    calico_cni                   = "quay.io/calico/cni:v1.11.0"
+    console                      = "quay.io/coreos/tectonic-console:v6.0.5"
+    error_server                 = "quay.io/coreos/tectonic-error-server:1.1"
+    etcd                         = "quay.io/coreos/etcd:v3.1.8"
+    etcd_operator                = "quay.io/coreos/etcd-operator:v0.5.0"
+    flannel                      = "quay.io/coreos/flannel:v0.8.0-amd64"
+    flannel_cni                  = "quay.io/coreos/flannel-cni:v0.2.0"
+    heapster                     = "gcr.io/google_containers/heapster:v1.4.1"
+    hyperkube                    = "quay.io/coreos/hyperkube:v1.9.6_coreos.0"
+    identity                     = "quay.io/coreos/dex:v2.8.1"
+    ingress_controller           = "quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.9.0-beta.17"
+    kenc                         = "quay.io/coreos/kenc:0.0.2"
+    kubedns                      = "gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.8"
+    kubednsmasq                  = "gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.8"
+    kubedns_sidecar              = "gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.8"
+    kube_version                 = "quay.io/coreos/kube-version:0.1.0"
+    kube_version_operator        = "quay.io/coreos/kube-version-operator:v1.9.6-kvo.4"
+    node_agent                   = "quay.io/coreos/node-agent:cd69b4a0f65b0d3a3b30edfce3bb184fd2a22c26"
+    pod_checkpointer             = "quay.io/coreos/pod-checkpointer:e22cc0e3714378de92f45326474874eb602ca0ac"
+    stats_emitter                = "quay.io/coreos/tectonic-stats:6e882361357fe4b773adbf279cddf48cb50164c1"
+    stats_extender               = "quay.io/coreos/tectonic-stats-extender:487b3da4e175da96dabfb44fba65cdb8b823db2e"
+    tectonic_channel_operator    = "quay.io/coreos/tectonic-channel-operator:0.6.4"
+    tectonic_etcd_operator       = "quay.io/coreos/tectonic-etcd-operator:v0.0.2"
+    tectonic_prometheus_operator = "quay.io/coreos/tectonic-prometheus-operator:v1.9.5"
+    tectonic_cluo_operator       = "quay.io/coreos/tectonic-cluo-operator:v0.3.2"
+    tectonic_torcx               = "quay.io/coreos/tectonic-torcx:v0.2.0"
+    tectonic_alm_operator        = "quay.io/coreos/tectonic-alm-operator:v0.4.0"
+  }
+}
+
+variable "tectonic_container_base_images" {
+  description = "(internal) Base images of the components to use"
+  type        = "map"
+
+  default = {
+    tectonic_monitoring_auth = "quay.io/coreos/tectonic-monitoring-auth"
+    config_reload            = "quay.io/coreos/configmap-reload"
+    addon_resizer            = "quay.io/coreos/addon-resizer"
+    kube_state_metrics       = "quay.io/coreos/kube-state-metrics"
+    grafana                  = "quay.io/coreos/monitoring-grafana"
+    grafana_watcher          = "quay.io/coreos/grafana-watcher"
+    prometheus_operator      = "quay.io/coreos/prometheus-operator"
+    prometheus_config_reload = "quay.io/coreos/prometheus-config-reloader"
+    prometheus               = "quay.io/prometheus/prometheus"
+    alertmanager             = "quay.io/prometheus/alertmanager"
+    node_exporter            = "quay.io/prometheus/node-exporter"
+    kube_rbac_proxy          = "quay.io/coreos/kube-rbac-proxy"
+  }
+}
+
+variable "tectonic_versions" {
+  description = "(internal) Versions of the components to use"
+  type        = "map"
+
+  default = {
+    etcd          = "3.1.8"
+    kubernetes    = "1.9.6+tectonic.1"
+    monitoring    = "1.9.5"
+    tectonic      = "1.9.6-tectonic.1"
+    tectonic-etcd = "0.0.1"
+    cluo          = "0.3.2"
+    alm           = "0.4.0"
+  }
+}
+
+variable "tectonic_service_cidr" {
+  type    = "string"
+  default = "10.3.0.0/16"
+
+  description = <<EOF
+(optional) This declares the IP range to assign Kubernetes service cluster IPs in CIDR notation.
+The maximum size of this IP range is /12
+EOF
+}
+
+variable "tectonic_cluster_cidr" {
+  type    = "string"
+  default = "10.2.0.0/16"
+
+  description = "(optional) This declares the IP range to assign Kubernetes pod IPs in CIDR notation."
+}
+
+variable "tectonic_master_count" {
+  type    = "string"
+  default = "1"
+
+  description = <<EOF
+The number of master nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_worker_count" {
+  type    = "string"
+  default = "3"
+
+  description = <<EOF
+The number of worker nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_etcd_count" {
+  type    = "string"
+  default = "0"
+
+  description = <<EOF
+The number of etcd nodes to be created.
+If set to zero, the count of etcd nodes will be determined automatically.
+
+Note: This is not supported on bare metal.
+EOF
+}
+
+variable "tectonic_etcd_servers" {
+  description = <<EOF
+(optional) List of external etcd v3 servers to connect with (hostnames/IPs only).
+Needs to be set if using an external etcd cluster.
+Note: If this variable is defined, the installer will not create self-signed certs.
+To provide a CA certificate to trust the etcd servers, set "tectonic_etcd_ca_cert_path".
+
+Example: `["etcd1", "etcd2", "etcd3"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_etcd_tls_enabled" {
+  default = true
+
+  description = <<EOF
+(optional) If set to `true`, all etcd endpoints will be configured to use the "https" scheme.
+
+Note: If `tectonic_experimental` is set to `true` this variable has no effect, because the experimental self-hosted etcd always uses TLS.
+EOF
+}
+
+variable "tectonic_etcd_ca_cert_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the CA certificate for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variable `tectonic_etcd_servers` must also be set.
+EOF
+}
+
+variable "tectonic_etcd_client_cert_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the client certificate for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_key_path` must also be set.
+EOF
+}
+
+variable "tectonic_etcd_client_key_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the client key for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_cert_path` must also be set.
+EOF
+}
+
+variable "tectonic_base_domain" {
+  type = "string"
+
+  description = <<EOF
+The base DNS domain of the cluster. It must NOT contain a trailing period. Some
+DNS providers will automatically add this if necessary.
+
+Example: `openstack.dev.coreos.systems`.
+
+Note: This field MUST be set manually prior to creating the cluster.
+This applies only to cloud platforms.
+
+[Azure-specific NOTE]
+To use Azure-provided DNS, `tectonic_base_domain` should be set to `""`
+If using DNS records, ensure that `tectonic_base_domain` is set to a properly configured external DNS zone.
+Instructions for configuring delegated domains for Azure DNS can be found here: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
+EOF
+}
+
+variable "tectonic_cluster_name" {
+  type = "string"
+
+  description = <<EOF
+The name of the cluster.
+If used in a cloud-environment, this will be prepended to `tectonic_base_domain` resulting in the URL to the Tectonic console.
+
+Note: This field MUST be set manually prior to creating the cluster.
+Warning: Special characters in the name like '.' may cause errors on OpenStack platforms due to resource name constraints.
+EOF
+}
+
+variable "tectonic_pull_secret_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path the pull secret file in JSON format.
+This is known to be a "Docker pull secret" as produced by the docker login [1] command.
+A sample JSON content is shown in [2].
+You can download the pull secret from your Account overview page at [3].
+
+[1] https://docs.docker.com/engine/reference/commandline/login/
+
+[2] https://coreos.com/os/docs/latest/registry-authentication.html#manual-registry-auth-setup
+
+[3] https://account.coreos.com/overview
+
+Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+EOF
+}
+
+variable "tectonic_license_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path to the tectonic licence file.
+You can download the Tectonic license file from your Account overview page at [1].
+
+[1] https://account.coreos.com/overview
+
+Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+EOF
+}
+
+variable "tectonic_container_linux_channel" {
+  type    = "string"
+  default = "stable"
+
+  description = <<EOF
+(optional) The Container Linux update channel.
+
+Examples: `stable`, `beta`, `alpha`
+EOF
+}
+
+variable "tectonic_container_linux_version" {
+  type    = "string"
+  default = "latest"
+
+  description = <<EOF
+The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+
+Examples: `latest`, `1465.6.0`
+EOF
+}
+
+variable "tectonic_update_server" {
+  type        = "string"
+  default     = "https://tectonic.update.core-os.net"
+  description = "(internal) The URL of the Tectonic Omaha update server"
+}
+
+variable "tectonic_update_channel" {
+  type        = "string"
+  default     = "tectonic-1.8-production"
+  description = "(internal) The Tectonic Omaha update channel"
+}
+
+variable "tectonic_update_app_id" {
+  type        = "string"
+  default     = "6bc7b986-4654-4a0f-94b3-84ce6feb1db4"
+  description = "(internal) The Tectonic Omaha update App ID"
+}
+
+variable "tectonic_admin_email" {
+  type = "string"
+
+  description = <<EOF
+(internal) The e-mail address used to:
+1. login as the admin user to the Tectonic Console.
+2. generate DNS zones for some providers.
+
+Note: This field MUST be in all lower-case e-mail address format and set manually prior to creating the cluster.
+EOF
+}
+
+variable "tectonic_admin_password" {
+  type = "string"
+
+  description = <<EOF
+(internal) The admin user password to login to the Tectonic Console.
+
+Note: This field MUST be set manually prior to creating the cluster. Backslashes and double quotes must
+also be escaped.
+EOF
+}
+
+variable "tectonic_ca_cert" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA certificate, used to generate Tectonic Console's server certificate.
+If left blank, a CA certificate will be automatically generated.
+EOF
+}
+
+variable "tectonic_ca_key" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA key, used to generate Tectonic Console's server certificate.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_ca_key_alg" {
+  type    = "string"
+  default = "RSA"
+
+  description = <<EOF
+(optional) The algorithm used to generate tectonic_ca_key.
+The default value is currently recommended.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_tls_validity_period" {
+  type    = "string"
+  default = "26280"
+
+  description = <<EOF
+Validity period of the self-signed certificates (in hours).
+Default is 3 years.
+This setting is ignored if user provided certificates are used.
+EOF
+}
+
+variable "tectonic_vanilla_k8s" {
+  default = false
+
+  description = <<EOF
+If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+EOF
+}
+
+variable "tectonic_stats_url" {
+  type        = "string"
+  default     = "https://stats-collector.tectonic.com"
+  description = "(internal) The Tectonic statistics collection URL to which to report."
+}
+
+variable "tectonic_ddns_server" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server IP/host to register IP addresses to.
+EOF
+}
+
+variable "tectonic_ddns_key_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key name.
+EOF
+}
+
+variable "tectonic_ddns_key_algorithm" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key algorithm.
+EOF
+}
+
+variable "tectonic_ddns_key_secret" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key secret.
+EOF
+}
+
+variable "tectonic_networking" {
+  default = "flannel"
+
+  description = <<EOF
+(optional) Configures the network to be used in Tectonic. One of the following values can be used:
+
+- "flannel": enables overlay networking only. This is implemented by flannel using VXLAN.
+
+- "canal": [ALPHA] enables overlay networking including network policy. Overlay is implemented by flannel using VXLAN. Network policy is implemented by Calico.
+
+- "calico": [ALPHA] enables BGP based networking. Routing and network policy is implemented by Calico. Note this has been tested on baremetal installations only.
+EOF
+}
+
+variable "tectonic_self_hosted_etcd" {
+  default = ""
+
+  description = <<EOF
+(internal) [ALPHA] If set to one of the following values, self-hosted etcd is deployed:
+
+- "enabled": Deploys a self-hosted etcd cluster.
+
+- "pv_backup": Deploys a self-hosted etcd cluster including backups to Persistence Volumes.
+`tectonic_etcd_backup_size` and `tectonic_etcd_backup_storage_class` must be configured when using this setting.
+EOF
+}
+
+variable "tectonic_etcd_backup_size" {
+  type        = "string"
+  description = "(optional) The size in MB of the PersistentVolume used for handling etcd backups."
+  default     = "512"
+}
+
+variable "tectonic_etcd_backup_storage_class" {
+  type        = "string"
+  default     = ""
+  description = "(optional) The name of an existing Kubernetes StorageClass that will be used for handling etcd backups."
+}
+
+variable "tectonic_bootstrap_upgrade_cl" {
+  type        = "string"
+  default     = "true"
+  description = "(internal) Whether to trigger a ContainerLinux upgrade on node bootstrap."
+}
+
+variable "tectonic_kubelet_debug_config" {
+  type    = "string"
+  default = ""
+
+  description = "(internal) debug flags for the kubelet (used in CI only)"
+}
+
+variable "tectonic_custom_ca_pem_list" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) A list of PEM encoded CA files that will be installed in /etc/ssl/certs on etcd, master, and worker nodes.
+EOF
+}
+
+variable "tectonic_iscsi_enabled" {
+  type        = "string"
+  default     = "false"
+  description = "(optional) Start iscsid.service to enable iscsi volume attachment."
+}
+
+variable "tectonic_http_proxy_address" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) HTTP proxy address.
+
+Example: `http://myproxy.example.com`
+EOF
+}
+
+variable "tectonic_https_proxy_address" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) HTTPS proxy address.
+
+Example: `http://myproxy.example.com`
+EOF
+}
+
+variable "tectonic_no_proxy" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) List of local endpoints that will not use HTTP proxy.
+
+Example: `["127.0.0.1","localhost",".example.com","10.3.0.1"]`
+EOF
+}
+
+variable "tectonic_ntp_servers" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) If left blank, the default Container Linux NTP servers will be used.
+A list of NTP servers to be used for time synchronization on the cluster nodes.
+EOF
+}
+
+variable "tectonic_nfs_config_file" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) the path to an NFS configuration file to be placed in /etc/conf.d/nfs
+file on the CL nodes.
+EOF
+}
+
+# Workaround for https://github.com/hashicorp/hil/issues/50
+locals {
+  _tectonic_nfs_config_file = "${var.tectonic_nfs_config_file != "" ? var.tectonic_nfs_config_file : "/dev/null"}"
+}
+
+variable "tectonic_proxy_exclusive_units" {
+  default = false
+
+  description = <<EOF
+(optional) When set to true, it restricts the application of proxy settings to processes started through systemd units.
+Global proxy settings will not be affected in this case.
+When set to false, the proxy settings will apply globally, including to all processes lauched by users.
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%main.tf
new file mode 100644
index 0000000..505ecfc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%main.tf
@@ -0,0 +1,161 @@
+provider "aws" {
+  region = "${var.vpc_aws_region}"
+}
+
+# Declare the data source
+data "aws_availability_zones" "available" {}
+
+resource "aws_vpc" "vpc" {
+  cidr_block           = "${var.vpc_cidr}"
+  enable_dns_support   = true
+  enable_dns_hostnames = true
+
+  tags {
+    Name = "${var.vpc_name}"
+  }
+}
+
+data "aws_ami" "coreos_ami" {
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["CoreOS-stable-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["190570271432"]
+  }
+}
+
+resource "aws_instance" "bastion" {
+  # 1st available AZ
+  availability_zone      = "${data.aws_availability_zones.available.names[0]}"
+  ami                    = "${data.aws_ami.coreos_ami.image_id}"
+  instance_type          = "${var.instance_type}"
+  subnet_id              = "${aws_subnet.pub_subnet_generic.id}"
+  vpc_security_group_ids = ["${compact(concat(list(aws_security_group.powerdns.id), list(aws_security_group.vpn_sg.id)))}"]
+  source_dest_check      = false
+  key_name               = "${var.ssh_key}"
+  user_data              = "${data.ignition_config.main.rendered}"
+
+  depends_on = ["aws_eip.ovpn_eip"]
+
+  tags {
+    Name = "${var.vpc_name}-server"
+  }
+}
+
+data "ignition_config" "main" {
+  files = ["${data.ignition_file.nginx_conf.id}"]
+
+  systemd = ["${compact(list(
+    data.ignition_systemd_unit.gateway_service.id,
+    data.ignition_systemd_unit.nginx_service.id,
+    data.ignition_systemd_unit.openvpn_service.id,
+    data.ignition_systemd_unit.powerdns_service.id,
+    data.ignition_systemd_unit.update-engine.id,
+    data.ignition_systemd_unit.locksmithd.id,
+   ))}"]
+}
+
+data "ignition_systemd_unit" "update-engine" {
+  name = "update-engine.service"
+  mask = true
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  name = "locksmithd.service"
+  mask = true
+}
+
+# IGW
+resource "aws_internet_gateway" "igw" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  tags {
+    Name = "${var.vpc_name}-igw"
+  }
+}
+
+# General purpose public subnet. used for OVPN access and IGW/NAT attachment.
+resource "aws_subnet" "pub_subnet_generic" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  # 1st available AZ
+  availability_zone       = "${data.aws_availability_zones.available.names[0]}"
+  cidr_block              = "10.0.255.0/24"
+  map_public_ip_on_launch = true
+
+  tags {
+    Name = "${var.vpc_name}-vpn"
+  }
+}
+
+resource "aws_route_table_association" "pub_subnet_generic" {
+  subnet_id      = "${aws_subnet.pub_subnet_generic.id}"
+  route_table_id = "${aws_route_table.pub_rt.id}"
+}
+
+# public subnet route table
+resource "aws_route_table" "pub_rt" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  route {
+    cidr_block = "0.0.0.0/0"
+    gateway_id = "${aws_internet_gateway.igw.id}"
+  }
+
+  tags {
+    Name = "${var.vpc_name}-public"
+  }
+}
+
+# private subnets
+resource "aws_subnet" "priv_subnet" {
+  count             = "${var.subnet_count}"
+  vpc_id            = "${aws_vpc.vpc.id}"
+  availability_zone = "${element(data.aws_availability_zones.available.names, count.index)}"
+  cidr_block        = "${cidrsubnet(var.vpc_cidr, 8, count.index + 100)}"
+
+  tags {
+    Name = "${var.vpc_name}-${count.index}"
+  }
+}
+
+resource "aws_route_table_association" "priv_subnet" {
+  count          = "${var.subnet_count}"
+  subnet_id      = "${aws_subnet.priv_subnet.*.id[count.index]}"
+  route_table_id = "${aws_route_table.priv_rt.id}"
+}
+
+# private subnet route table
+resource "aws_route_table" "priv_rt" {
+  vpc_id           = "${aws_vpc.vpc.id}"
+  propagating_vgws = ["${aws_vpn_gateway.vpg.id}"]
+
+  route {
+    cidr_block  = "0.0.0.0/0"
+    instance_id = "${aws_instance.bastion.id}"
+  }
+
+  route {
+    cidr_block = "${var.local_network_cidr}"
+    gateway_id = "${aws_vpn_gateway.vpg.id}"
+  }
+
+  tags {
+    Name = "${var.vpc_name}-private"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%powerdns.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%powerdns.tf
new file mode 100644
index 0000000..d651a67
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%powerdns.tf
@@ -0,0 +1,74 @@
+# Security Group
+resource "aws_security_group" "powerdns" {
+  vpc_id = "${aws_vpc.vpc.id}"
+}
+
+resource "aws_security_group_rule" "powerdns_egress" {
+  type              = "egress"
+  security_group_id = "${aws_security_group.powerdns.id}"
+
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+}
+
+resource "aws_security_group_rule" "powerdns_ingress_ssh" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.powerdns.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 22
+  to_port     = 22
+}
+
+resource "aws_security_group_rule" "powerdns_ingress_http" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.powerdns.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 80
+  to_port     = 80
+}
+
+resource "aws_security_group_rule" "powerdns_ingress_https" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.powerdns.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 443
+  to_port     = 443
+}
+
+resource "aws_security_group_rule" "powerdns_ingress_api" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.powerdns.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 8081
+  to_port     = 8081
+}
+
+resource "aws_security_group_rule" "powerdns_ingress_dns" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.powerdns.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 53
+  to_port     = 53
+}
+
+resource "aws_security_group_rule" "powerdns_ingress_dns_udp" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.powerdns.id}"
+
+  protocol    = "udp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 53
+  to_port     = 53
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%services.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%services.tf
new file mode 100644
index 0000000..183b846
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%services.tf
@@ -0,0 +1,76 @@
+data "template_file" "gateway_service" {
+  template = "${file("${path.module}/resources/gateway.service")}"
+
+  vars {
+    private_cidr = "${cidrsubnet(var.vpc_cidr, 6, 25)}"
+  }
+}
+
+data "ignition_systemd_unit" "gateway_service" {
+  name    = "gateway.service"
+  enabled = true
+  content = "${data.template_file.gateway_service.rendered}"
+}
+
+data "template_file" "nginx_service" {
+  template = "${file("${path.module}/resources/nginx.service")}"
+
+  vars {
+    username    = "${var.nginx_username}"
+    password    = "${var.nginx_password}"
+    nginx_image = "${var.container_images["nginx"]}"
+  }
+}
+
+data "ignition_systemd_unit" "nginx_service" {
+  name    = "nginx.service"
+  enabled = true
+  content = "${data.template_file.nginx_service.rendered}"
+}
+
+data "template_file" "nginx_conf" {
+  template = "${file("${path.module}/resources/nginx.conf")}"
+}
+
+data "ignition_file" "nginx_conf" {
+  filesystem = "root"
+  path       = "/home/core/nginx-config/default.conf"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.nginx_conf.rendered}"
+  }
+}
+
+data "template_file" "openvpn_service" {
+  template = "${file("${path.module}/resources/openvpn.service")}"
+
+  vars {
+    ip            = "${aws_eip.ovpn_eip.public_ip}"
+    openvpn_image = "${var.container_images["openvpn"]}"
+  }
+}
+
+data "ignition_systemd_unit" "openvpn_service" {
+  name    = "openvpn.service"
+  enabled = true
+  content = "${data.template_file.openvpn_service.rendered}"
+}
+
+data "template_file" "powerdns_service" {
+  template = "${file("${path.module}/resources/powerdns.service")}"
+
+  vars {
+    dns_zone       = "${var.base_domain}"
+    pdns_api_key   = "${var.pdns_api_key}"
+    mysql_password = "${var.mysql_password}"
+    powerdns_image = "${var.container_images["powerdns"]}"
+    mysql_image    = "${var.container_images["mysql"]}"
+  }
+}
+
+data "ignition_systemd_unit" "powerdns_service" {
+  name    = "powerdns.service"
+  enabled = true
+  content = "${data.template_file.powerdns_service.rendered}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%vars.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%vars.tf
new file mode 100644
index 0000000..78c86ae
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%vars.tf
@@ -0,0 +1,95 @@
+# placeholders for access_key / secret_key
+# should be fed through env var or variable file
+# https://www.terraform.io/docs/configuration/variables.html
+
+variable "vpc_name" {
+  description = "The name of the VPC to identify created resources."
+  default     = "bastion"
+}
+
+variable "instance_type" {
+  description = "The type of the ec2 machine."
+  default     = "t2.micro"
+}
+
+variable "base_domain" {
+  default     = "tectonic-ci.de"
+  description = "The base domain for this cluster's FQDN"
+}
+
+variable "vpc_aws_region" {
+  description = "The target AWS region for the cluster"
+  default     = "us-gov-west-1"
+}
+
+variable "vpc_cidr" {
+  default     = "10.0.0.0/16"
+  description = "The CIDR range used for your entire VPC"
+}
+
+variable "subnet_count" {
+  default     = 4
+  description = "Number of private subnets to pre-create"
+}
+
+variable "local_network_cidr" {
+  default     = "10.7.0.0/16"
+  description = "IP range in the network your laptop is on (dosn't actually matter unless your instances need to connect to the local network your laptop is on)"
+}
+
+variable "ssh_key" {
+  description = "Name of an SSH key located within the AWS region. Example: coreos-user."
+  default     = ""
+}
+
+variable "nginx_username" {
+  description = "Used for retrieving the OpenVPN client config file."
+}
+
+variable "nginx_password" {
+  description = "Used for retrieving the OpenVPN client config file."
+}
+
+variable "mysql_password" {
+  description = "Used as PowerDNS backend."
+}
+
+variable "pdns_api_key" {
+  description = "Used by clients to communicate with the PowerDNS API."
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+
+  default = {
+    powerdns = "quay.io/coreos/pdns:20678f8bffc316579367d885ca4fcb229b1dbc1d"
+    mysql    = "quay.io/coreos/mysql:5.7.21"
+    openvpn  = "quay.io/coreos/openvpn:2.4"
+    nginx    = "quay.io/coreos/nginx:1.13.7-alpine"
+  }
+}
+
+output "ovpn_url" {
+  value = "http://${aws_eip.ovpn_eip.public_ip}"
+}
+
+output "base_domain" {
+  value = "${var.base_domain}"
+}
+
+output "vpc_id" {
+  value = "${aws_vpc.vpc.id}"
+}
+
+output "vpc_dns_ip" {
+  value = "${aws_instance.bastion.private_ip}"
+}
+
+output "dns_api_url" {
+  value = "http://${aws_instance.bastion.private_ip}:8081"
+}
+
+output "subnets" {
+  value = "${aws_subnet.priv_subnet.*.id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%vpn.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%vpn.tf
new file mode 100644
index 0000000..16238c7
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%govcloud%vpn.tf
@@ -0,0 +1,108 @@
+resource "aws_vpn_gateway" "vpg" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  # 1st available AZ
+  availability_zone = "${data.aws_availability_zones.available.names[0]}"
+
+  tags {
+    Name = "${var.vpc_name}-vpg"
+  }
+}
+
+resource "aws_eip" "ovpn_eip" {
+  vpc = true
+}
+
+resource "aws_eip_association" "vpn_eip_assoc" {
+  instance_id   = "${aws_instance.bastion.id}"
+  allocation_id = "${aws_eip.ovpn_eip.id}"
+}
+
+resource "aws_security_group" "vpn_sg" {
+  name        = "ovpn-server-sg"
+  description = "Allow all inbound traffic"
+  vpc_id      = "${aws_vpc.vpc.id}"
+
+  ingress {
+    from_port   = 0
+    to_port     = 65535
+    protocol    = "tcp"
+    cidr_blocks = ["${cidrsubnet(var.vpc_cidr, 6, 25)}"]
+  }
+
+  ingress {
+    from_port   = 943
+    to_port     = 943
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 22
+    to_port     = 22
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 80
+    to_port     = 80
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 443
+    to_port     = 443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 943
+    to_port     = 943
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 1194
+    to_port     = 1194
+    protocol    = "udp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port = 0
+    to_port   = 0
+
+    # all
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  tags {
+    Name = "${var.vpc_name}-ovpn-sg"
+  }
+}
+
+resource "aws_customer_gateway" "customer_gateway" {
+  bgp_asn    = 65000
+  ip_address = "${aws_eip.ovpn_eip.public_ip}"
+  type       = "ipsec.1"
+
+  tags {
+    Name = "${var.vpc_name}-customer-gateway"
+  }
+}
+
+resource "aws_vpn_connection" "main" {
+  vpn_gateway_id      = "${aws_vpn_gateway.vpg.id}"
+  customer_gateway_id = "${aws_customer_gateway.customer_gateway.id}"
+  type                = "ipsec.1"
+  static_routes_only  = true
+
+  tags {
+    Name = "${var.vpc_name}-vpn-conn"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%main.tf
new file mode 100644
index 0000000..91c5d80
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%main.tf
@@ -0,0 +1,118 @@
+provider "aws" {
+  region = "${var.vpc_aws_region}"
+}
+
+# Declare the data source
+data "aws_availability_zones" "available" {}
+
+resource "aws_vpc" "vpc" {
+  cidr_block           = "${var.vpc_cidr}"
+  enable_dns_support   = true
+  enable_dns_hostnames = true
+
+  tags {
+    Name = "${var.vpc_name}"
+  }
+}
+
+# Private DNS zone
+resource "aws_route53_zone" "priv_zone" {
+  name    = "${var.base_domain}"
+  vpc_id  = "${aws_vpc.vpc.id}"
+  comment = "Managed by Terraform"
+
+  tags {
+    Name = "${var.vpc_name}"
+  }
+}
+
+# IGW
+resource "aws_internet_gateway" "igw" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  tags {
+    Name = "${var.vpc_name}-igw"
+  }
+}
+
+# NAT Gateway
+resource "aws_eip" "natgw" {
+  vpc = true
+}
+
+resource "aws_nat_gateway" "natgw" {
+  allocation_id = "${aws_eip.natgw.id}"
+  subnet_id     = "${aws_subnet.pub_subnet_generic.id}"
+  depends_on    = ["aws_internet_gateway.igw"]
+}
+
+# General purpose public subnet. used for OVPN access and IGW/NAT attachment.
+resource "aws_subnet" "pub_subnet_generic" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  # 1st available AZ
+  availability_zone       = "${data.aws_availability_zones.available.names[0]}"
+  cidr_block              = "10.0.255.0/24"
+  map_public_ip_on_launch = true
+
+  tags {
+    Name = "${var.vpc_name}-vpn"
+  }
+}
+
+resource "aws_route_table_association" "pub_subnet_generic" {
+  subnet_id      = "${aws_subnet.pub_subnet_generic.id}"
+  route_table_id = "${aws_route_table.pub_rt.id}"
+}
+
+# public subnet route table
+resource "aws_route_table" "pub_rt" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  route {
+    cidr_block = "0.0.0.0/0"
+    gateway_id = "${aws_internet_gateway.igw.id}"
+  }
+
+  tags {
+    Name = "${var.vpc_name}-public"
+  }
+}
+
+# private subnets
+resource "aws_subnet" "priv_subnet" {
+  count             = "${var.subnet_count}"
+  vpc_id            = "${aws_vpc.vpc.id}"
+  availability_zone = "${element(data.aws_availability_zones.available.names, count.index)}"
+  cidr_block        = "${cidrsubnet(var.vpc_cidr, 8, count.index + 100)}"
+
+  tags {
+    Name = "${var.vpc_name}-${count.index}"
+  }
+}
+
+resource "aws_route_table_association" "priv_subnet" {
+  count          = "${var.subnet_count}"
+  subnet_id      = "${aws_subnet.priv_subnet.*.id[count.index]}"
+  route_table_id = "${aws_route_table.priv_rt.id}"
+}
+
+# private subnet route table
+resource "aws_route_table" "priv_rt" {
+  vpc_id           = "${aws_vpc.vpc.id}"
+  propagating_vgws = ["${aws_vpn_gateway.vpg.id}"]
+
+  route {
+    cidr_block     = "0.0.0.0/0"
+    nat_gateway_id = "${aws_nat_gateway.natgw.id}"
+  }
+
+  route {
+    cidr_block = "${var.local_network_cidr}"
+    gateway_id = "${aws_vpn_gateway.vpg.id}"
+  }
+
+  tags {
+    Name = "${var.vpc_name}-private"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%vars.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%vars.tf
new file mode 100644
index 0000000..05c1d16
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%vars.tf
@@ -0,0 +1,60 @@
+# placeholders for access_key / secret_key
+# should be fed through env var or variable file
+# https://www.terraform.io/docs/configuration/variables.html
+
+variable vpc_name {
+  description = "The name of the VPC to identify created resources."
+}
+
+variable base_domain {
+  default     = "tectonic-ci.de"
+  description = "The base domain for this cluster's FQDN"
+}
+
+variable vpc_aws_region {
+  description = "The target AWS region for the cluster"
+}
+
+variable vpc_cidr {
+  default     = "10.0.0.0/16"
+  description = "The CIDR range used for your entire VPC"
+}
+
+variable subnet_count {
+  default     = 4
+  description = "Number of private subnets to pre-create"
+}
+
+variable local_network_cidr {
+  default     = "10.7.0.0/16"
+  description = "IP range in the network your laptop is on (dosn't actually matter unless your instances need to connect to the local network your laptop is on)"
+}
+
+variable ovpn_password {
+  default     = "PASSWORD"
+  description = "password to use when connecting"
+}
+
+output "ovpn_url" {
+  value = "https://${aws_eip.ovpn_eip.public_ip}:443"
+}
+
+output "base_domain" {
+  value = "${var.base_domain}"
+}
+
+output "private_zone_id" {
+  value = "${aws_route53_zone.priv_zone.id}"
+}
+
+output "vpc_id" {
+  value = "${aws_vpc.vpc.id}"
+}
+
+output "vpc_dns" {
+  value = "${cidrhost(var.vpc_cidr, 2)}"
+}
+
+output "subnets" {
+  value = "${aws_subnet.priv_subnet.*.id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%vpn.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%vpn.tf
new file mode 100644
index 0000000..e7a0711
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%contrib%internal-cluster%vpn.tf
@@ -0,0 +1,142 @@
+# For details see https://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/amazon-ec2-appliance-ami-quick-start-guide
+data "aws_ami" "openvpn_ami" {
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["OpenVPN Access Server*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["679593333241"]
+  }
+}
+
+resource "aws_vpn_gateway" "vpg" {
+  vpc_id = "${aws_vpc.vpc.id}"
+
+  # 1st available AZ
+  availability_zone = "${data.aws_availability_zones.available.names[0]}"
+
+  tags {
+    Name = "${var.vpc_name}-vpg"
+  }
+}
+
+resource "aws_instance" "ovpn" {
+  # 1st available AZ
+  availability_zone      = "${data.aws_availability_zones.available.names[0]}"
+  ami                    = "${data.aws_ami.openvpn_ami.image_id}"
+  instance_type          = "t2.micro"
+  subnet_id              = "${aws_subnet.pub_subnet_generic.id}"
+  vpc_security_group_ids = ["${aws_security_group.vpn_sg.id}"]
+
+  user_data = <<EOF
+public_hostname=${aws_eip.ovpn_eip.public_ip}
+admin_user=openvpn
+admin_pw=${var.ovpn_password}
+reroute_gw=1
+reroute_dns=1
+EOF
+
+  depends_on = ["aws_eip.ovpn_eip"]
+
+  tags {
+    Name = "${var.vpc_name}-ovpn-server"
+  }
+}
+
+resource "aws_eip" "ovpn_eip" {
+  vpc = true
+}
+
+resource "aws_eip_association" "vpn_eip_assoc" {
+  instance_id   = "${aws_instance.ovpn.id}"
+  allocation_id = "${aws_eip.ovpn_eip.id}"
+}
+
+resource "aws_security_group" "vpn_sg" {
+  name        = "ovpn-server-sg"
+  description = "Allow all inbound traffic"
+  vpc_id      = "${aws_vpc.vpc.id}"
+
+  ingress {
+    from_port   = 943
+    to_port     = 943
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 22
+    to_port     = 22
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 443
+    to_port     = 443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 943
+    to_port     = 943
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 1194
+    to_port     = 1194
+    protocol    = "udp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port = 0
+    to_port   = 0
+
+    # all
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  tags {
+    Name = "${var.vpc_name}-ovpn-sg"
+  }
+}
+
+resource "aws_customer_gateway" "customer_gateway" {
+  bgp_asn    = 65000
+  ip_address = "${aws_eip.ovpn_eip.public_ip}"
+  type       = "ipsec.1"
+
+  tags {
+    Name = "${var.vpc_name}-customer-gateway"
+  }
+}
+
+resource "aws_vpn_connection" "main" {
+  vpn_gateway_id      = "${aws_vpn_gateway.vpg.id}"
+  customer_gateway_id = "${aws_customer_gateway.customer_gateway.id}"
+  type                = "ipsec.1"
+  static_routes_only  = true
+
+  tags {
+    Name = "${var.vpc_name}-vpn-conn"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%installer%frontend%ui-tests%output%aws.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%installer%frontend%ui-tests%output%aws.tfvars
new file mode 100644
index 0000000..cb59fb6
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%installer%frontend%ui-tests%output%aws.tfvars
@@ -0,0 +1,41 @@
+{
+  "tectonic_admin_email": "admin@example.com",
+  "tectonic_admin_password": "password",
+  "tectonic_aws_etcd_ec2_type": "t2.medium",
+  "tectonic_aws_etcd_root_volume_size": 30,
+  "tectonic_aws_etcd_root_volume_type": "gp2",
+  "tectonic_aws_extra_tags": {
+    "test_tag": "testing"
+  },
+  "tectonic_aws_master_custom_subnets": {
+    "us-west-1a": "10.0.0.0/19",
+    "us-west-1c": "10.0.32.0/19"
+  },
+  "tectonic_aws_master_ec2_type": "t2.medium",
+  "tectonic_aws_master_root_volume_size": 30,
+  "tectonic_aws_master_root_volume_type": "gp2",
+  "tectonic_aws_private_endpoints": false,
+  "tectonic_aws_region": "us-west-1",
+  "tectonic_aws_ssh_key": "tectonic-jenkins",
+  "tectonic_aws_vpc_cidr_block": "10.0.0.0/16",
+  "tectonic_aws_worker_custom_subnets": {
+    "us-west-1a": "10.0.64.0/19",
+    "us-west-1c": "10.0.96.0/19"
+  },
+  "tectonic_aws_worker_ec2_type": "t2.medium",
+  "tectonic_aws_worker_root_volume_size": 30,
+  "tectonic_aws_worker_root_volume_type": "gp2",
+  "tectonic_base_domain": "tectonic.dev.coreos.systems",
+  "tectonic_cluster_cidr": "10.2.0.0/16",
+  "tectonic_cluster_name": "test",
+  "tectonic_dns_name": "test",
+  "tectonic_etcd_count": 3,
+  "tectonic_kube_apiserver_service_ip": "10.3.0.1",
+  "tectonic_kube_dns_service_ip": "10.3.0.10",
+  "tectonic_kube_etcd_service_ip": "10.3.0.15",
+  "tectonic_license_path": "./license.txt",
+  "tectonic_master_count": 3,
+  "tectonic_pull_secret_path": "./pull_secret.json",
+  "tectonic_service_cidr": "10.3.0.0/16",
+  "tectonic_worker_count": 3
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%installer%frontend%ui-tests%output%metal.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%installer%frontend%ui-tests%output%metal.tfvars
new file mode 100644
index 0000000..e08c6ea
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%installer%frontend%ui-tests%output%metal.tfvars
@@ -0,0 +1,44 @@
+{
+  "tectonic_admin_email": "admin@example.com",
+  "tectonic_admin_password": "password",
+  "tectonic_base_domain": "unused",
+  "tectonic_cluster_cidr": "10.2.0.0/16",
+  "tectonic_cluster_name": "my-cluster",
+  "tectonic_container_linux_version": "1353.8.0",
+  "tectonic_dns_name": "",
+  "tectonic_kube_apiserver_service_ip": "10.3.0.1",
+  "tectonic_kube_dns_service_ip": "10.3.0.10",
+  "tectonic_kube_etcd_service_ip": "10.3.0.15",
+  "tectonic_license_path": "./license.txt",
+  "tectonic_metal_controller_domain": "cluster.example.com",
+  "tectonic_metal_controller_domains": [
+    "node1.example.com"
+  ],
+  "tectonic_metal_controller_macs": [
+    "52:54:00:a1:9c:ae"
+  ],
+  "tectonic_metal_controller_names": [
+    "node1"
+  ],
+  "tectonic_metal_ingress_domain": "tectonic.example.com",
+  "tectonic_metal_matchbox_ca": "-----BEGIN CERTIFICATE-----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\nkA==\n-----END CERTIFICATE-----\n",
+  "tectonic_metal_matchbox_client_cert": "-----BEGIN CERTIFICATE-----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\njyXQv9IZPMTwOndF6AVLH7l1F0E=\n-----END CERTIFICATE-----\n",
+  "tectonic_metal_matchbox_client_key": "-----BEGIN RSA PRIVATE KEY-----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\nPikk0rvNVB/vrPeVjAdGY9TJC/vpz3om92DRDmUifu8rCFxIHE0GrQ0=\n-----END RSA PRIVATE KEY-----\n",
+  "tectonic_metal_matchbox_http_url": "http://matchbox.example.com:8080",
+  "tectonic_metal_matchbox_rpc_endpoint": "matchbox.example.com:8081",
+  "tectonic_metal_worker_domains": [
+    "node2.example.com",
+    "node3.example.com"
+  ],
+  "tectonic_metal_worker_macs": [
+    "52:54:00:b2:2f:86",
+    "52:54:00:c3:61:77"
+  ],
+  "tectonic_metal_worker_names": [
+    "node2",
+    "node3"
+  ],
+  "tectonic_pull_secret_path": "./pull_secret.json",
+  "tectonic_service_cidr": "10.3.0.0/16",
+  "tectonic_ssh_authorized_key": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt3BebCHqnSsgpLjo4kVvyfY/z2BS8t27r/7du+O2pb4xYkr7n+KFpbOz523vMTpQ+o1jY4u4TgexglyT9nqasWgLOvo1qjD1agHme8LlTPQSk07rXqOB85Uq5p7ig2zoOejF6qXhcc3n1c7+HkxHrgpBENjLVHOBpzPBIAHkAGaZcl07OCqbsG5yxqEmSGiAlh/IiUVOZgdDMaGjCRFy0wk0mQaGD66DmnFc1H5CzcPjsxr0qO65e7lTGsE930KkO1Vc+RHCVwvhdXs+c2NhJ2/3740Kpes9n1/YullaWZUzlCPDXtRuy6JRbFbvy39JUgHWGWzB3d+3f8oJ/N4qZ cardno:000603633110"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition.tf
new file mode 100644
index 0000000..0aca0dc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition.tf
@@ -0,0 +1,20 @@
+locals {
+  ignition_etcd_keys = ["ignition_etcd_0.json", "ignition_etcd_1.json", "ignition_etcd_2.json"]
+}
+
+data "ignition_config" "tnc" {
+  count = "${var.instance_count}"
+
+  append {
+    source = "${format("http://${var.cluster_name}-tnc.${var.base_domain}/config/etcd?etcd_index=%d", count.index)}"
+
+    # TODO: add verification
+  }
+
+  # Used for loading certificates
+  append {
+    source = "${format("s3://%s/%s", var.s3_bucket, local.ignition_etcd_keys[count.index])}"
+
+    # TODO: add verification
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition.tf-172 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition.tf-172
new file mode 100644
index 0000000..b0f6866
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition.tf-172
@@ -0,0 +1,38 @@
+data "ignition_config" "etcd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  systemd = [
+    "${data.ignition_systemd_unit.locksmithd.*.id[count.index]}",
+    "${var.ign_etcd_dropin_id_list[count.index]}",
+  ]
+
+  files = ["${compact(list(
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_etcd_crt_id_list}",
+    "${var.ign_ntp_dropin_id}",
+  ]
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  name    = "locksmithd.service"
+  enabled = true
+
+  dropin = [
+    {
+      name = "40-etcd-lock.conf"
+
+      content = <<EOF
+[Service]
+Environment=REBOOT_STRATEGY=etcd-lock
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.crt\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/client.key\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/client.crt\"" : ""}
+Environment="LOCKSMITHD_ENDPOINT=${var.tls_enabled ? "https" : "http"}://${var.cluster_name}-etcd-${count.index}.${var.base_domain}:2379"
+EOF
+    },
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition_s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition_s3.tf
new file mode 100644
index 0000000..b0b98f1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%ignition_s3.tf
@@ -0,0 +1,25 @@
+resource "aws_s3_bucket_object" "ignition_etcd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  bucket  = "${var.s3_bucket}"
+  key     = "ignition_etcd_${count.index}.json"
+  content = "${data.ignition_config.etcd.*.rendered[count.index]}"
+  acl     = "private"
+
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-ignition-etcd-${count.index}",
+      "KubernetesCluster", "${var.cluster_name}",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+data "ignition_config" "s3" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  replace {
+    source       = "${format("s3://%s/%s", var.s3_bucket, aws_s3_bucket_object.ignition_etcd.*.key[count.index])}"
+    verification = "sha512-${sha512(data.ignition_config.etcd.*.rendered[count.index])}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%nodes.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%nodes.tf
new file mode 100644
index 0000000..eaa291f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%nodes.tf
@@ -0,0 +1,135 @@
+locals {
+  ami_owner = "595879546273"
+  arn       = "aws"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_iam_instance_profile" "etcd" {
+  name = "${var.cluster_name}-etcd-profile"
+
+  role = "${var.etcd_iam_role == "" ?
+    join("|", aws_iam_role.etcd_role.*.name) :
+    join("|", data.aws_iam_role.etcd_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "etcd_role" {
+  count = "${var.etcd_iam_role == "" ? 0 : 1}"
+  name  = "${var.etcd_iam_role}"
+}
+
+resource "aws_iam_role" "etcd_role" {
+  count = "${var.etcd_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-etcd-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "etcd" {
+  count = "${var.etcd_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_etcd_policy"
+  role  = "${aws_iam_role.etcd_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "ec2:Describe*",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:AttachVolume",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:DetachVolume",
+      "Resource": "*"
+    },
+    {
+      "Action" : [
+        "s3:GetObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_instance" "etcd_node" {
+  count = "${var.instance_count}"
+  ami   = "${coalesce(var.ec2_ami, data.aws_ami.coreos_ami.image_id)}"
+
+  iam_instance_profile   = "${aws_iam_instance_profile.etcd.name}"
+  instance_type          = "${var.ec2_type}"
+  key_name               = "${var.ssh_key}"
+  subnet_id              = "${element(var.subnets, count.index)}"
+  user_data              = "${data.ignition_config.tnc.*.rendered[count.index]}"
+  vpc_security_group_ids = ["${var.sg_ids}"]
+
+  lifecycle {
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["ami"]
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-etcd-${count.index}",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : var.root_volume_type == "gp2" ? min(10000, max(100, 3 * var.root_volume_size)) : 0}"
+  }
+
+  volume_tags = "${merge(map(
+    "Name", "${var.cluster_name}-etcd-${count.index}-vol",
+    "kubernetes.io/cluster/${var.cluster_name}", "owned",
+    "tectonicClusterID", "${var.cluster_id}"
+  ), var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%nodes.tf-183 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%nodes.tf-183
new file mode 100644
index 0000000..9ad62a6
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%nodes.tf-183
@@ -0,0 +1,145 @@
+locals {
+  ami_owner = "595879546273"
+  arn       = "aws"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_iam_instance_profile" "etcd" {
+  count = "${length(var.external_endpoints) == 0 ? 1 : 0}"
+  name  = "${var.cluster_name}-etcd-profile"
+
+  role = "${var.etcd_iam_role == "" ?
+    join("|", aws_iam_role.etcd_role.*.name) :
+    join("|", data.aws_iam_role.etcd_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "etcd_role" {
+  count = "${var.etcd_iam_role == "" ? 0 : 1}"
+  name  = "${var.etcd_iam_role}"
+}
+
+resource "aws_iam_role" "etcd_role" {
+  count = "${length(var.external_endpoints) == 0 && var.etcd_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-etcd-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "etcd" {
+  count = "${var.etcd_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_etcd_policy"
+  role  = "${aws_iam_role.etcd_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "ec2:Describe*",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:AttachVolume",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:DetachVolume",
+      "Resource": "*"
+    },
+    {
+      "Action": [
+        "ecr:DescribeRepositories",
+        "ecr:ListImages",
+        "ecr:BatchGetImage"
+      ],
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "s3:GetObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_instance" "etcd_node" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+  ami   = "${coalesce(var.ec2_ami, data.aws_ami.coreos_ami.image_id)}"
+
+  iam_instance_profile   = "${aws_iam_instance_profile.etcd.name}"
+  instance_type          = "${var.ec2_type}"
+  key_name               = "${var.ssh_key}"
+  subnet_id              = "${element(var.subnets, count.index)}"
+  user_data              = "${data.ignition_config.s3.*.rendered[count.index]}"
+  vpc_security_group_ids = ["${var.sg_ids}"]
+
+  lifecycle {
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["ami"]
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-etcd-${count.index}",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : var.root_volume_type == "gp2" ? min(10000, max(100, 3 * var.root_volume_size)) : 0}"
+  }
+
+  volume_tags = "${merge(map(
+    "Name", "${var.cluster_name}-etcd-${count.index}-vol",
+    "kubernetes.io/cluster/${var.cluster_name}", "owned",
+    "tectonicClusterID", "${var.cluster_id}"
+  ), var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%outputs.tf
new file mode 100644
index 0000000..8fbb67d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%outputs.tf
@@ -0,0 +1,3 @@
+output "ip_addresses" {
+  value = "${aws_instance.etcd_node.*.private_ip}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%outputs.tf-193 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%outputs.tf-193
new file mode 100644
index 0000000..8fbb67d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%outputs.tf-193
@@ -0,0 +1,3 @@
+output "ip_addresses" {
+  value = "${aws_instance.etcd_node.*.private_ip}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%variables.tf
new file mode 100644
index 0000000..985d357
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%variables.tf
@@ -0,0 +1,86 @@
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "instance_count" {
+  default = "3"
+}
+
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "subnets" {
+  type = "list"
+}
+
+variable "container_image" {
+  type = "string"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "ec2_ami" {
+  type    = "string"
+  default = ""
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied."
+}
+
+variable "s3_bucket" {
+  type = "string"
+}
+
+variable "etcd_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of etcd nodes."
+}
+
+variable "dns_server_ip" {
+  type    = "string"
+  default = ""
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%variables.tf-218 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%variables.tf-218
new file mode 100644
index 0000000..60dd7ca
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%etcd%variables.tf-218
@@ -0,0 +1,111 @@
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "instance_count" {
+  default = "3"
+}
+
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "subnets" {
+  type = "list"
+}
+
+variable "external_endpoints" {
+  type = "list"
+}
+
+variable "container_image" {
+  type = "string"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "ec2_ami" {
+  type    = "string"
+  default = ""
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied."
+}
+
+variable "tls_enabled" {
+  default = false
+}
+
+variable "ign_etcd_dropin_id_list" {
+  type = "list"
+}
+
+variable "s3_bucket" {
+  type = "string"
+}
+
+variable "ign_etcd_crt_id_list" {
+  type = "list"
+}
+
+variable "etcd_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of etcd nodes."
+}
+
+variable "ign_profile_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_systemd_default_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_ntp_dropin_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%ignition.tf
new file mode 100644
index 0000000..41bc5f3
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%ignition.tf
@@ -0,0 +1,91 @@
+data "ignition_config" "main" {
+  files = ["${compact(list(
+    data.ignition_file.detect_master.id,
+    data.ignition_file.init_assets.id,
+    data.ignition_file.rm_assets.id,
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_s3_puller_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = ["${compact(list(
+    var.ign_bootkube_path_unit_id,
+    var.ign_bootkube_service_id,
+    var.ign_docker_dropin_id,
+    var.ign_init_assets_service_id,
+    var.ign_iscsi_service_id,
+    var.ign_k8s_node_bootstrap_service_id,
+    var.ign_kubelet_service_id,
+    var.ign_locksmithd_service_id,
+    var.ign_rm_assets_path_unit_id,
+    var.ign_rm_assets_service_id,
+    var.ign_tectonic_path_unit_id,
+    var.ign_tectonic_service_id,
+    var.ign_update_ca_certificates_dropin_id,
+   ))}"]
+}
+
+data "template_file" "detect_master" {
+  template = "${file("${path.module}/resources/detect-master.sh")}"
+
+  vars {
+    load_balancer_name = "${format("%s-%s", var.cluster_name, var.private_endpoints ? "int" : "ext")}"
+  }
+}
+
+data "ignition_file" "detect_master" {
+  filesystem = "root"
+  path       = "/opt/detect-master.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.detect_master.rendered}"
+  }
+}
+
+data "template_file" "init_assets" {
+  template = "${file("${path.module}/resources/init-assets.sh")}"
+
+  vars {
+    assets_s3_location = "${var.assets_s3_location}"
+    awscli_image       = "${var.container_images["awscli"]}"
+    cluster_name       = "${var.cluster_name}"
+  }
+}
+
+data "ignition_file" "init_assets" {
+  filesystem = "root"
+  path       = "/opt/init-assets.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.init_assets.rendered}"
+  }
+}
+
+data "template_file" "rm_assets" {
+  template = "${file("${path.module}/resources/rm-assets.sh")}"
+
+  vars {
+    assets_s3_location = "${var.assets_s3_location}"
+    awscli_image       = "${var.container_images["awscli"]}"
+    cluster_name       = "${var.cluster_name}"
+  }
+}
+
+data "ignition_file" "rm_assets" {
+  filesystem = "root"
+  path       = "/opt/rm-assets.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.rm_assets.rendered}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%ignition_s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%ignition_s3.tf
new file mode 100644
index 0000000..a6e5a6c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%ignition_s3.tf
@@ -0,0 +1,21 @@
+resource "aws_s3_bucket_object" "ignition_master" {
+  bucket  = "${var.s3_bucket}"
+  key     = "ignition_master.json"
+  content = "${data.ignition_config.main.rendered}"
+  acl     = "private"
+
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-ignition-master",
+      "KubernetesCluster", "${var.cluster_name}",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+data "ignition_config" "s3" {
+  replace {
+    source       = "${format("s3://%s/%s", var.s3_bucket, aws_s3_bucket_object.ignition_master.key)}"
+    verification = "sha512-${sha512(data.ignition_config.main.rendered)}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%master.tf
new file mode 100644
index 0000000..aef72b9
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%master.tf
@@ -0,0 +1,164 @@
+locals {
+  ami_owner = "595879546273"
+  arn       = "aws"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_autoscaling_group" "masters" {
+  name                 = "${var.cluster_name}-masters"
+  desired_capacity     = "${var.instance_count}"
+  max_size             = "${var.instance_count * 3}"
+  min_size             = "${var.instance_count}"
+  launch_configuration = "${aws_launch_configuration.master_conf.id}"
+  vpc_zone_identifier  = ["${var.subnet_ids}"]
+
+  load_balancers = ["${var.aws_lbs}"]
+
+  tags = [
+    {
+      key                 = "Name"
+      value               = "${var.cluster_name}-master"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "kubernetes.io/cluster/${var.cluster_name}"
+      value               = "owned"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "tectonicClusterID"
+      value               = "${var.cluster_id}"
+      propagate_at_launch = true
+    },
+    "${var.autoscaling_group_extra_tags}",
+  ]
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_launch_configuration" "master_conf" {
+  instance_type               = "${var.ec2_type}"
+  image_id                    = "${coalesce(var.ec2_ami, data.aws_ami.coreos_ami.image_id)}"
+  name_prefix                 = "${var.cluster_name}-master-"
+  key_name                    = "${var.ssh_key}"
+  security_groups             = ["${var.master_sg_ids}"]
+  iam_instance_profile        = "${aws_iam_instance_profile.master_profile.arn}"
+  associate_public_ip_address = "${var.public_endpoints}"
+  user_data                   = "${var.user_data_ign}"
+
+  lifecycle {
+    create_before_destroy = true
+
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["image_id"]
+  }
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : 0}"
+  }
+}
+
+resource "aws_iam_instance_profile" "master_profile" {
+  name = "${var.cluster_name}-master-profile"
+
+  role = "${var.master_iam_role == "" ?
+    join("|", aws_iam_role.master_role.*.name) :
+    join("|", data.aws_iam_role.master_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "master_role" {
+  count = "${var.master_iam_role == "" ? 0 : 1}"
+  name  = "${var.master_iam_role}"
+}
+
+resource "aws_iam_role" "master_role" {
+  count = "${var.master_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-master-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "master_policy" {
+  count = "${var.master_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_master_policy"
+  role  = "${aws_iam_role.master_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "ec2:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action": "elasticloadbalancing:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "s3:GetObject",
+        "s3:HeadObject",
+        "s3:ListBucket",
+        "s3:PutObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "autoscaling:DescribeAutoScalingGroups",
+        "autoscaling:DescribeAutoScalingInstances"
+      ],
+      "Resource": "*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%master.tf-216 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%master.tf-216
new file mode 100644
index 0000000..6590b44
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%master.tf-216
@@ -0,0 +1,164 @@
+locals {
+  ami_owner = "595879546273"
+  arn       = "aws"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_autoscaling_group" "masters" {
+  name                 = "${var.cluster_name}-masters"
+  desired_capacity     = "${var.instance_count}"
+  max_size             = "${var.instance_count * 3}"
+  min_size             = "${var.instance_count}"
+  launch_configuration = "${aws_launch_configuration.master_conf.id}"
+  vpc_zone_identifier  = ["${var.subnet_ids}"]
+
+  load_balancers = ["${var.aws_lbs}"]
+
+  tags = [
+    {
+      key                 = "Name"
+      value               = "${var.cluster_name}-master"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "kubernetes.io/cluster/${var.cluster_name}"
+      value               = "owned"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "tectonicClusterID"
+      value               = "${var.cluster_id}"
+      propagate_at_launch = true
+    },
+    "${var.autoscaling_group_extra_tags}",
+  ]
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_launch_configuration" "master_conf" {
+  instance_type               = "${var.ec2_type}"
+  image_id                    = "${coalesce(var.ec2_ami, data.aws_ami.coreos_ami.image_id)}"
+  name_prefix                 = "${var.cluster_name}-master-"
+  key_name                    = "${var.ssh_key}"
+  security_groups             = ["${var.master_sg_ids}"]
+  iam_instance_profile        = "${aws_iam_instance_profile.master_profile.arn}"
+  associate_public_ip_address = "${var.public_endpoints}"
+  user_data                   = "${data.ignition_config.s3.rendered}"
+
+  lifecycle {
+    create_before_destroy = true
+
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["image_id"]
+  }
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : 0}"
+  }
+}
+
+resource "aws_iam_instance_profile" "master_profile" {
+  name = "${var.cluster_name}-master-profile"
+
+  role = "${var.master_iam_role == "" ?
+    join("|", aws_iam_role.master_role.*.name) :
+    join("|", data.aws_iam_role.master_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "master_role" {
+  count = "${var.master_iam_role == "" ? 0 : 1}"
+  name  = "${var.master_iam_role}"
+}
+
+resource "aws_iam_role" "master_role" {
+  count = "${var.master_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-master-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "master_policy" {
+  count = "${var.master_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_master_policy"
+  role  = "${aws_iam_role.master_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "ec2:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action": "elasticloadbalancing:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "s3:GetObject",
+        "s3:HeadObject",
+        "s3:ListBucket",
+        "s3:PutObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "autoscaling:DescribeAutoScalingGroups",
+        "autoscaling:DescribeAutoScalingInstances"
+      ],
+      "Resource": "*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%variables.tf
new file mode 100644
index 0000000..35b325a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%variables.tf
@@ -0,0 +1,115 @@
+variable "autoscaling_group_extra_tags" {
+  description = "Extra AWS tags to be applied to created autoscaling group resources."
+  type        = "list"
+  default     = []
+}
+
+variable "base_domain" {
+  type        = "string"
+  description = "Domain on which the ELB records will be created"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "ec2_ami" {
+  type    = "string"
+  default = ""
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "master_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of master nodes."
+}
+
+variable "master_sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied to the master nodes."
+}
+
+variable "private_endpoints" {
+  description = "If set to true, private-facing ingress resources are created."
+  default     = true
+}
+
+variable "public_endpoints" {
+  description = "If set to true, public-facing ingress resources are created."
+  default     = true
+}
+
+variable "aws_lbs" {
+  description = "List of aws_lb IDs for the Console & APIs"
+  type        = "list"
+  default     = []
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "subnet_ids" {
+  type = "list"
+}
+
+variable "dns_server_ip" {
+  type    = "string"
+  default = ""
+}
+
+variable "kubeconfig_content" {
+  type    = "string"
+  default = ""
+}
+
+variable "user_data_ign" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%variables.tf-251 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%variables.tf-251
new file mode 100644
index 0000000..3935912
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%master-asg%variables.tf-251
@@ -0,0 +1,144 @@
+variable "assets_s3_location" {
+  type        = "string"
+  description = "Location on S3 of the Bootkube/Tectonic assets to use (bucket/key)"
+}
+
+variable "autoscaling_group_extra_tags" {
+  description = "Extra AWS tags to be applied to created autoscaling group resources."
+  type        = "list"
+  default     = []
+}
+
+variable "base_domain" {
+  type        = "string"
+  description = "Domain on which the ELB records will be created"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "ign_s3_puller_id" {
+  type = "string"
+}
+
+variable "ec2_ami" {
+  type    = "string"
+  default = ""
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "master_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of master nodes."
+}
+
+variable "master_sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied to the master nodes."
+}
+
+variable "private_endpoints" {
+  description = "If set to true, private-facing ingress resources are created."
+  default     = true
+}
+
+variable "public_endpoints" {
+  description = "If set to true, public-facing ingress resources are created."
+  default     = true
+}
+
+variable "aws_lbs" {
+  description = "List of aws_lb IDs for the Console & APIs"
+  type        = "list"
+  default     = []
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "subnet_ids" {
+  type = "list"
+}
+
+variable "ign_bootkube_service_id" {
+  type        = "string"
+  description = "The ID of the bootkube systemd service unit"
+}
+
+variable "ign_bootkube_path_unit_id" {
+  type = "string"
+}
+
+variable "ign_tectonic_service_id" {
+  type        = "string"
+  description = "The ID of the tectonic installer systemd service unit"
+}
+
+variable "ign_tectonic_path_unit_id" {
+  type = "string"
+}
+
+variable "ign_init_assets_service_id" {
+  type = "string"
+}
+
+variable "ign_rm_assets_service_id" {
+  type = "string"
+}
+
+variable "ign_rm_assets_path_unit_id" {
+  type = "string"
+}
+
+variable "s3_bucket" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%existing-vpc.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%existing-vpc.tf
new file mode 100644
index 0000000..1cd150c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%existing-vpc.tf
@@ -0,0 +1,12 @@
+# These subnet data-sources import external subnets from their user-supplied subnet IDs
+# whenever an external VPC is specified
+#
+data "aws_subnet" "external_worker" {
+  count = "${var.external_vpc_id == "" ? 0 : length(var.external_worker_subnets)}"
+  id    = "${var.external_worker_subnets[count.index]}"
+}
+
+data "aws_subnet" "external_master" {
+  count = "${var.external_vpc_id == "" ? 0 : length(var.external_master_subnets)}"
+  id    = "${var.external_master_subnets[count.index]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%master-elb.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%master-elb.tf
new file mode 100644
index 0000000..6e04a54
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%master-elb.tf
@@ -0,0 +1,135 @@
+resource "aws_elb" "tnc" {
+  count           = "${var.private_master_endpoints ? 1 : 0}"
+  name            = "${var.cluster_name}-tnc"
+  subnets         = ["${local.master_subnet_ids}"]
+  internal        = true
+  security_groups = ["${aws_security_group.tnc.id}"]
+
+  idle_timeout                = 3600
+  connection_draining         = true
+  connection_draining_timeout = 300
+
+  listener {
+    instance_port     = 49500
+    instance_protocol = "tcp"
+    lb_port           = 80
+    lb_protocol       = "tcp"
+  }
+
+  health_check {
+    healthy_threshold   = 2
+    unhealthy_threshold = 2
+    timeout             = 3
+    target              = "TCP:49500"
+    interval            = 5
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-int",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_elb" "api_internal" {
+  count           = "${var.private_master_endpoints ? 1 : 0}"
+  name            = "${var.cluster_name}-int"
+  subnets         = ["${local.master_subnet_ids}"]
+  internal        = true
+  security_groups = ["${aws_security_group.api.id}"]
+
+  idle_timeout                = 3600
+  connection_draining         = true
+  connection_draining_timeout = 300
+
+  listener {
+    instance_port     = 6443
+    instance_protocol = "tcp"
+    lb_port           = 6443
+    lb_protocol       = "tcp"
+  }
+
+  health_check {
+    healthy_threshold   = 2
+    unhealthy_threshold = 2
+    timeout             = 3
+    target              = "SSL:6443"
+    interval            = 5
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-int",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_elb" "api_external" {
+  count           = "${var.public_master_endpoints ? 1 : 0}"
+  name            = "${var.cluster_name}-ext"
+  subnets         = ["${local.master_subnet_ids}"]
+  internal        = false
+  security_groups = ["${aws_security_group.api.id}"]
+
+  idle_timeout                = 3600
+  connection_draining         = true
+  connection_draining_timeout = 300
+
+  listener {
+    instance_port     = 6443
+    instance_protocol = "tcp"
+    lb_port           = 6443
+    lb_protocol       = "tcp"
+  }
+
+  health_check {
+    healthy_threshold   = 2
+    unhealthy_threshold = 2
+    timeout             = 3
+    target              = "SSL:6443"
+    interval            = 5
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-api-external",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_elb" "console" {
+  name            = "${var.cluster_name}-con"
+  subnets         = ["${local.master_subnet_ids}"]
+  internal        = "${var.public_master_endpoints ? false : true}"
+  security_groups = ["${aws_security_group.console.id}"]
+
+  idle_timeout = 3600
+
+  listener {
+    instance_port     = 32001
+    instance_protocol = "tcp"
+    lb_port           = 80
+    lb_protocol       = "tcp"
+  }
+
+  listener {
+    instance_port     = 32000
+    instance_protocol = "tcp"
+    lb_port           = 443
+    lb_protocol       = "tcp"
+  }
+
+  health_check {
+    healthy_threshold   = 2
+    unhealthy_threshold = 2
+    timeout             = 3
+    target              = "HTTP:32002/healthz"
+    interval            = 5
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-console",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%master-elb.tf-208 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%master-elb.tf-208
new file mode 100644
index 0000000..6b57005
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%master-elb.tf-208
@@ -0,0 +1,102 @@
+resource "aws_elb" "api_internal" {
+  count           = "${var.private_master_endpoints}"
+  name            = "${var.cluster_name}-int"
+  subnets         = ["${local.master_subnet_ids}"]
+  internal        = true
+  security_groups = ["${aws_security_group.api.id}"]
+
+  idle_timeout                = 3600
+  connection_draining         = true
+  connection_draining_timeout = 300
+
+  listener {
+    instance_port     = 443
+    instance_protocol = "tcp"
+    lb_port           = 443
+    lb_protocol       = "tcp"
+  }
+
+  health_check {
+    healthy_threshold   = 2
+    unhealthy_threshold = 2
+    timeout             = 3
+    target              = "SSL:443"
+    interval            = 5
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-int",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_elb" "api_external" {
+  count           = "${var.public_master_endpoints}"
+  name            = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}-ext"
+  subnets         = ["${local.master_subnet_ids}"]
+  internal        = false
+  security_groups = ["${aws_security_group.api.id}"]
+
+  idle_timeout                = 3600
+  connection_draining         = true
+  connection_draining_timeout = 300
+
+  listener {
+    instance_port     = 443
+    instance_protocol = "tcp"
+    lb_port           = 443
+    lb_protocol       = "tcp"
+  }
+
+  health_check {
+    healthy_threshold   = 2
+    unhealthy_threshold = 2
+    timeout             = 3
+    target              = "SSL:443"
+    interval            = 5
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-api-external",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_elb" "console" {
+  name            = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}-con"
+  subnets         = ["${local.master_subnet_ids}"]
+  internal        = "${var.public_master_endpoints ? false : true}"
+  security_groups = ["${aws_security_group.console.id}"]
+
+  idle_timeout = 3600
+
+  listener {
+    instance_port     = 32001
+    instance_protocol = "tcp"
+    lb_port           = 80
+    lb_protocol       = "tcp"
+  }
+
+  listener {
+    instance_port     = 32000
+    instance_protocol = "tcp"
+    lb_port           = 443
+    lb_protocol       = "tcp"
+  }
+
+  health_check {
+    healthy_threshold   = 2
+    unhealthy_threshold = 2
+    timeout             = 3
+    target              = "HTTP:32002/healthz"
+    interval            = 5
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-console",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%outputs.tf
new file mode 100644
index 0000000..46df7ac
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%outputs.tf
@@ -0,0 +1,81 @@
+output "vpc_id" {
+  value = "${data.aws_vpc.cluster_vpc.id}"
+}
+
+# We have to do this join() & split() 'trick' because null_data_source and
+# the ternary operator can't output lists or maps
+output "master_subnet_ids" {
+  value = "${local.master_subnet_ids}"
+}
+
+output "worker_subnet_ids" {
+  value = "${local.worker_subnet_ids}"
+}
+
+output "etcd_sg_id" {
+  value = "${element(concat(aws_security_group.etcd.*.id, list("")), 0)}"
+}
+
+output "master_sg_id" {
+  value = "${aws_security_group.master.id}"
+}
+
+output "worker_sg_id" {
+  value = "${aws_security_group.worker.id}"
+}
+
+output "api_sg_id" {
+  value = "${aws_security_group.api.id}"
+}
+
+output "console_sg_id" {
+  value = "${aws_security_group.console.id}"
+}
+
+output "aws_elb_api_external_id" {
+  value = "${aws_elb.api_external.*.id}"
+}
+
+output "aws_elb_internal_id" {
+  value = "${aws_elb.api_internal.*.id}"
+}
+
+output "aws_elb_console_id" {
+  value = "${aws_elb.console.id}"
+}
+
+output "aws_lbs" {
+  value = ["${compact(concat(aws_elb.api_internal.*.id, list(aws_elb.console.id), aws_elb.api_external.*.id, aws_elb.tnc.*.id))}"]
+}
+
+output "aws_api_external_dns_name" {
+  value = "${element(concat(aws_elb.api_external.*.dns_name, list("")), 0)}"
+}
+
+output "aws_elb_api_external_zone_id" {
+  value = "${element(concat(aws_elb.api_external.*.zone_id, list("")), 0)}"
+}
+
+output "aws_api_internal_dns_name" {
+  value = "${element(concat(aws_elb.api_internal.*.dns_name, list("")), 0)}"
+}
+
+output "aws_elb_api_internal_zone_id" {
+  value = "${element(concat(aws_elb.api_internal.*.zone_id, list("")), 0)}"
+}
+
+output "aws_console_dns_name" {
+  value = "${aws_elb.console.dns_name}"
+}
+
+output "aws_elb_console_zone_id" {
+  value = "${aws_elb.console.zone_id}"
+}
+
+output "aws_elb_tnc_dns_name" {
+  value = "${element(concat(aws_elb.tnc.*.dns_name, list("")), 0)}"
+}
+
+output "aws_elb_tnc_zone_id" {
+  value = "${element(concat(aws_elb.tnc.*.zone_id, list("")), 0)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%outputs.tf-224 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%outputs.tf-224
new file mode 100644
index 0000000..5471abf
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%outputs.tf-224
@@ -0,0 +1,73 @@
+output "vpc_id" {
+  value = "${data.aws_vpc.cluster_vpc.id}"
+}
+
+# We have to do this join() & split() 'trick' because null_data_source and
+# the ternary operator can't output lists or maps
+output "master_subnet_ids" {
+  value = "${local.master_subnet_ids}"
+}
+
+output "worker_subnet_ids" {
+  value = "${local.worker_subnet_ids}"
+}
+
+output "etcd_sg_id" {
+  value = "${element(concat(aws_security_group.etcd.*.id, list("")), 0)}"
+}
+
+output "master_sg_id" {
+  value = "${aws_security_group.master.id}"
+}
+
+output "worker_sg_id" {
+  value = "${aws_security_group.worker.id}"
+}
+
+output "api_sg_id" {
+  value = "${aws_security_group.api.id}"
+}
+
+output "console_sg_id" {
+  value = "${aws_security_group.console.id}"
+}
+
+output "aws_elb_api_external_id" {
+  value = "${aws_elb.api_external.*.id}"
+}
+
+output "aws_elb_internal_id" {
+  value = "${aws_elb.api_internal.*.id}"
+}
+
+output "aws_elb_console_id" {
+  value = "${aws_elb.console.id}"
+}
+
+output "aws_lbs" {
+  value = ["${compact(concat(aws_elb.api_internal.*.id, list(aws_elb.console.id), aws_elb.api_external.*.id))}"]
+}
+
+output "aws_api_external_dns_name" {
+  value = "${element(concat(aws_elb.api_external.*.dns_name, list("")), 0)}"
+}
+
+output "aws_elb_api_external_zone_id" {
+  value = "${element(concat(aws_elb.api_external.*.zone_id, list("")), 0)}"
+}
+
+output "aws_api_internal_dns_name" {
+  value = "${element(concat(aws_elb.api_internal.*.dns_name, list("")), 0)}"
+}
+
+output "aws_elb_api_internal_zone_id" {
+  value = "${element(concat(aws_elb.api_internal.*.zone_id, list("")), 0)}"
+}
+
+output "aws_console_dns_name" {
+  value = "${aws_elb.console.dns_name}"
+}
+
+output "aws_elb_console_zone_id" {
+  value = "${aws_elb.console.zone_id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-elb.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-elb.tf
new file mode 100644
index 0000000..aee96a9
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-elb.tf
@@ -0,0 +1,88 @@
+resource "aws_security_group" "tnc" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_console_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    self        = true
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 80
+    to_port     = 80
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 443
+    to_port     = 443
+  }
+}
+
+resource "aws_security_group" "api" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_api_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    self        = true
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 6443
+    to_port     = 6443
+  }
+}
+
+resource "aws_security_group" "console" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_console_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    self        = true
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 80
+    to_port     = 80
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 443
+    to_port     = 443
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-elb.tf-265 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-elb.tf-265
new file mode 100644
index 0000000..22fb7a2
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-elb.tf-265
@@ -0,0 +1,56 @@
+resource "aws_security_group" "api" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_api_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    self        = true
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 443
+    to_port     = 443
+  }
+}
+
+resource "aws_security_group" "console" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_console_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    self        = true
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 80
+    to_port     = 80
+  }
+
+  ingress {
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 443
+    to_port     = 443
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-etcd.tf
new file mode 100644
index 0000000..58ccd65
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-etcd.tf
@@ -0,0 +1,49 @@
+resource "aws_security_group" "etcd" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_etcd_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    self        = true
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "icmp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 0
+    to_port     = 0
+  }
+
+  ingress {
+    protocol  = "tcp"
+    from_port = 22
+    to_port   = 22
+    self      = true
+
+    security_groups = ["${aws_security_group.master.id}"]
+  }
+
+  ingress {
+    protocol  = "tcp"
+    from_port = 2379
+    to_port   = 2379
+    self      = true
+
+    security_groups = ["${aws_security_group.master.id}"]
+  }
+
+  ingress {
+    protocol  = "tcp"
+    from_port = 2380
+    to_port   = 2380
+    self      = true
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-etcd.tf-186 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-etcd.tf-186
new file mode 100644
index 0000000..98e8e6a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-etcd.tf-186
@@ -0,0 +1,50 @@
+resource "aws_security_group" "etcd" {
+  count  = "${var.enable_etcd_sg}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_etcd_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    self        = true
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "icmp"
+    cidr_blocks = ["0.0.0.0/0"]
+    from_port   = 0
+    to_port     = 0
+  }
+
+  ingress {
+    protocol  = "tcp"
+    from_port = 22
+    to_port   = 22
+    self      = true
+
+    security_groups = ["${aws_security_group.master.id}"]
+  }
+
+  ingress {
+    protocol  = "tcp"
+    from_port = 2379
+    to_port   = 2379
+    self      = true
+
+    security_groups = ["${aws_security_group.master.id}"]
+  }
+
+  ingress {
+    protocol  = "tcp"
+    from_port = 2380
+    to_port   = 2380
+    self      = true
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-master.tf
new file mode 100644
index 0000000..f3f0ddb
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-master.tf
@@ -0,0 +1,209 @@
+resource "aws_security_group" "master" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_master_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_security_group_rule" "master_tnc" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 49500
+  to_port     = 49500
+}
+
+resource "aws_security_group_rule" "master_egress" {
+  type              = "egress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+}
+
+resource "aws_security_group_rule" "master_ingress_icmp" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "icmp"
+  cidr_blocks = ["${data.aws_vpc.cluster_vpc.cidr_block}"]
+  from_port   = 0
+  to_port     = 0
+}
+
+resource "aws_security_group_rule" "master_ingress_ssh" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 22
+  to_port     = 22
+}
+
+resource "aws_security_group_rule" "master_ingress_http" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["${data.aws_vpc.cluster_vpc.cidr_block}"]
+  from_port   = 80
+  to_port     = 80
+}
+
+resource "aws_security_group_rule" "master_ingress_https" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["${data.aws_vpc.cluster_vpc.cidr_block}"]
+  from_port   = 6443
+  to_port     = 6445
+}
+
+resource "aws_security_group_rule" "master_ingress_heapster" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_heapster_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+}
+
+resource "aws_security_group_rule" "master_ingress_flannel" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_flannel_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+}
+
+resource "aws_security_group_rule" "master_ingress_node_exporter" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_node_exporter_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_insecure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_insecure_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_secure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_secure_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+}
+
+resource "aws_security_group_rule" "master_ingress_etcd" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 2379
+  to_port   = 2380
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_bootstrap_etcd" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 12379
+  to_port   = 12380
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_services" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_services_from_console" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.console.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-master.tf-174 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-master.tf-174
new file mode 100644
index 0000000..ae0d7ce
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-master.tf-174
@@ -0,0 +1,199 @@
+resource "aws_security_group" "master" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_master_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_security_group_rule" "master_egress" {
+  type              = "egress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+}
+
+resource "aws_security_group_rule" "master_ingress_icmp" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "icmp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 0
+  to_port     = 0
+}
+
+resource "aws_security_group_rule" "master_ingress_ssh" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 22
+  to_port     = 22
+}
+
+resource "aws_security_group_rule" "master_ingress_http" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 80
+  to_port     = 80
+}
+
+resource "aws_security_group_rule" "master_ingress_https" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 443
+  to_port     = 443
+}
+
+resource "aws_security_group_rule" "master_ingress_heapster" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_heapster_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+}
+
+resource "aws_security_group_rule" "master_ingress_flannel" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_flannel_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+}
+
+resource "aws_security_group_rule" "master_ingress_node_exporter" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_node_exporter_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_insecure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_insecure_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_secure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_kubelet_secure_from_worker" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+}
+
+resource "aws_security_group_rule" "master_ingress_etcd" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 2379
+  to_port   = 2380
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_bootstrap_etcd" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 12379
+  to_port   = 12380
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_services" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+  self      = true
+}
+
+resource "aws_security_group_rule" "master_ingress_services_from_console" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.master.id}"
+  source_security_group_id = "${aws_security_group.console.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-worker.tf
new file mode 100644
index 0000000..32b5bb8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-worker.tf
@@ -0,0 +1,179 @@
+resource "aws_security_group" "worker" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_worker_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_security_group_rule" "worker_egress" {
+  type              = "egress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+}
+
+resource "aws_security_group_rule" "worker_ingress_icmp" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "icmp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 0
+  to_port     = 0
+}
+
+resource "aws_security_group_rule" "worker_ingress_ssh" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 22
+  to_port     = 22
+}
+
+resource "aws_security_group_rule" "worker_ingress_http" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 80
+  to_port     = 80
+}
+
+resource "aws_security_group_rule" "worker_ingress_https" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 443
+  to_port     = 443
+}
+
+resource "aws_security_group_rule" "worker_ingress_heapster" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_heapster_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+}
+
+resource "aws_security_group_rule" "worker_ingress_flannel" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_flannel_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+}
+
+resource "aws_security_group_rule" "worker_ingress_node_exporter" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_node_exporter_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_insecure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_insecure_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_secure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_secure_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+}
+
+resource "aws_security_group_rule" "worker_ingress_services" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_services_from_console" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.console.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-worker.tf-255 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-worker.tf-255
new file mode 100644
index 0000000..32b5bb8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%sg-worker.tf-255
@@ -0,0 +1,179 @@
+resource "aws_security_group" "worker" {
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_worker_sg",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_security_group_rule" "worker_egress" {
+  type              = "egress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+}
+
+resource "aws_security_group_rule" "worker_ingress_icmp" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "icmp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 0
+  to_port     = 0
+}
+
+resource "aws_security_group_rule" "worker_ingress_ssh" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 22
+  to_port     = 22
+}
+
+resource "aws_security_group_rule" "worker_ingress_http" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 80
+  to_port     = 80
+}
+
+resource "aws_security_group_rule" "worker_ingress_https" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  from_port   = 443
+  to_port     = 443
+}
+
+resource "aws_security_group_rule" "worker_ingress_heapster" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_heapster_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 4194
+  to_port   = 4194
+}
+
+resource "aws_security_group_rule" "worker_ingress_flannel" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_flannel_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "udp"
+  from_port = 4789
+  to_port   = 4789
+}
+
+resource "aws_security_group_rule" "worker_ingress_node_exporter" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_node_exporter_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 9100
+  to_port   = 9100
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_insecure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_insecure_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10250
+  to_port   = 10250
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_secure" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_kubelet_secure_from_master" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.master.id}"
+
+  protocol  = "tcp"
+  from_port = 10255
+  to_port   = 10255
+}
+
+resource "aws_security_group_rule" "worker_ingress_services" {
+  type              = "ingress"
+  security_group_id = "${aws_security_group.worker.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+  self      = true
+}
+
+resource "aws_security_group_rule" "worker_ingress_services_from_console" {
+  type                     = "ingress"
+  security_group_id        = "${aws_security_group.worker.id}"
+  source_security_group_id = "${aws_security_group.console.id}"
+
+  protocol  = "tcp"
+  from_port = 30000
+  to_port   = 32767
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%variables.tf
new file mode 100644
index 0000000..4b3aa66
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%variables.tf
@@ -0,0 +1,58 @@
+variable "cidr_block" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "external_vpc_id" {
+  type = "string"
+}
+
+variable "external_master_subnet_ids" {
+  type = "list"
+}
+
+variable "external_worker_subnet_ids" {
+  type = "list"
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "new_master_subnet_configs" {
+  description = "{az_name = new_subnet_cidr}: Empty map means create new subnets in all availability zones in region with generated cidrs"
+  type        = "map"
+}
+
+variable "new_worker_subnet_configs" {
+  description = "{az_name = new_subnet_cidr}: Empty map means create new subnets in all availability zones in region with generated cidrs"
+  type        = "map"
+}
+
+variable "private_master_endpoints" {
+  description = "If set to true, private-facing ingress resources are created."
+  default     = true
+}
+
+variable "public_master_endpoints" {
+  description = "If set to true, public-facing ingress resources are created."
+  default     = true
+}
+
+variable "depends_on" {
+  default = []
+  type    = "list"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%variables.tf-17 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%variables.tf-17
new file mode 100644
index 0000000..fdfa6ed
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%variables.tf-17
@@ -0,0 +1,78 @@
+variable "master_az_count" {
+  type = "string"
+}
+
+variable "worker_az_count" {
+  type = "string"
+}
+
+variable "cidr_block" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "external_vpc_id" {
+  type = "string"
+}
+
+variable "external_master_subnets" {
+  type = "list"
+}
+
+variable "external_worker_subnets" {
+  type = "list"
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "enable_etcd_sg" {
+  description = "If set to true, security groups for etcd nodes are being created"
+  default     = true
+}
+
+variable "master_subnets" {
+  type = "list"
+}
+
+variable "worker_subnets" {
+  type = "list"
+}
+
+variable "master_azs" {
+  type = "list"
+}
+
+variable "worker_azs" {
+  type = "list"
+}
+
+variable "private_master_endpoints" {
+  description = "If set to true, private-facing ingress resources are created."
+  default     = true
+}
+
+variable "public_master_endpoints" {
+  description = "If set to true, public-facing ingress resources are created."
+  default     = true
+}
+
+variable "custom_dns_name" {
+  type        = "string"
+  default     = ""
+  description = "DNS prefix used to construct the console and API server endpoints."
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-private.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-private.tf
new file mode 100644
index 0000000..95c860f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-private.tf
@@ -0,0 +1,43 @@
+resource "aws_route_table" "private_routes" {
+  count  = "${local.new_worker_az_count}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name","${var.cluster_name}-private-${local.new_worker_subnet_azs[count.index]}",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_route" "to_nat_gw" {
+  count                  = "${local.new_worker_az_count}"
+  route_table_id         = "${aws_route_table.private_routes.*.id[count.index]}"
+  destination_cidr_block = "0.0.0.0/0"
+  nat_gateway_id         = "${element(aws_nat_gateway.nat_gw.*.id, count.index)}"
+  depends_on             = ["aws_route_table.private_routes"]
+}
+
+resource "aws_subnet" "worker_subnet" {
+  count = "${local.new_worker_az_count}"
+
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  cidr_block = "${lookup(var.new_worker_subnet_configs,
+    local.new_worker_subnet_azs[count.index],
+    cidrsubnet(local.new_worker_cidr_range, 3, count.index),
+  )}"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-worker-${local.new_worker_subnet_azs[count.index]}",
+    "kubernetes.io/cluster/${var.cluster_name}","shared",
+    "kubernetes.io/role/internal-elb", "",
+    "tectonicClusterID", "${var.cluster_id}",
+    ),
+    var.extra_tags)}"
+}
+
+resource "aws_route_table_association" "worker_routing" {
+  count          = "${local.new_worker_az_count}"
+  route_table_id = "${aws_route_table.private_routes.*.id[count.index]}"
+  subnet_id      = "${aws_subnet.worker_subnet.*.id[count.index]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-private.tf-259 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-private.tf-259
new file mode 100644
index 0000000..315077f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-private.tf-259
@@ -0,0 +1,46 @@
+resource "aws_route_table" "private_routes" {
+  count  = "${var.external_vpc_id == "" ? var.worker_az_count : 0}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-private-${data.aws_availability_zones.azs.names[count.index]}",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_route" "to_nat_gw" {
+  count                  = "${var.external_vpc_id == "" ? var.worker_az_count : 0}"
+  route_table_id         = "${aws_route_table.private_routes.*.id[count.index]}"
+  destination_cidr_block = "0.0.0.0/0"
+  nat_gateway_id         = "${element(aws_nat_gateway.nat_gw.*.id, count.index)}"
+  depends_on             = ["aws_route_table.private_routes"]
+}
+
+resource "aws_subnet" "worker_subnet" {
+  count = "${var.external_vpc_id == "" ? var.worker_az_count : 0}"
+
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  cidr_block = "${length(var.worker_subnets) > 1 ?
+    "${element(var.worker_subnets, count.index)}" :
+    "${cidrsubnet(data.aws_vpc.cluster_vpc.cidr_block, 4, count.index + var.worker_az_count)}"
+  }"
+
+  availability_zone = "${var.worker_azs[count.index]}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-worker-${ "${length(var.worker_azs)}" > 0 ?
+    "${var.worker_azs[count.index]}" :
+    "${data.aws_availability_zones.azs.names[count.index]}" }",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "kubernetes.io/role/internal-elb", "",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_route_table_association" "worker_routing" {
+  count          = "${var.external_vpc_id == "" ? var.worker_az_count : 0}"
+  route_table_id = "${aws_route_table.private_routes.*.id[count.index]}"
+  subnet_id      = "${aws_subnet.worker_subnet.*.id[count.index]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-public.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-public.tf
new file mode 100644
index 0000000..8eb13ab
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-public.tf
@@ -0,0 +1,74 @@
+resource "aws_internet_gateway" "igw" {
+  count  = "${local.external_vpc_mode ? 0 : 1}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-igw",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_route_table" "default" {
+  count  = "${var.external_vpc_id == "" ? 1 : 0}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-public",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}",
+    ), var.extra_tags)}"
+}
+
+resource "aws_main_route_table_association" "main_vpc_routes" {
+  count          = "${local.external_vpc_mode ? 0 : 1}"
+  vpc_id         = "${data.aws_vpc.cluster_vpc.id}"
+  route_table_id = "${aws_route_table.default.id}"
+}
+
+resource "aws_route" "igw_route" {
+  count                  = "${local.external_vpc_mode ? 0 : 1}"
+  destination_cidr_block = "0.0.0.0/0"
+  route_table_id         = "${aws_route_table.default.id}"
+  gateway_id             = "${aws_internet_gateway.igw.id}"
+}
+
+resource "aws_subnet" "master_subnet" {
+  count  = "${local.new_master_az_count}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  cidr_block = "${lookup(var.new_master_subnet_configs,
+    local.new_master_subnet_azs[count.index],
+    cidrsubnet(local.new_master_cidr_range, 3, count.index),
+  )}"
+
+  availability_zone = "${local.new_master_subnet_azs[count.index]}"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-master-${local.new_master_subnet_azs[count.index]}",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_route_table_association" "route_net" {
+  count          = "${local.new_master_az_count}"
+  route_table_id = "${aws_route_table.default.id}"
+  subnet_id      = "${aws_subnet.master_subnet.*.id[count.index]}"
+}
+
+resource "aws_eip" "nat_eip" {
+  count = "${min(local.new_master_az_count,local.new_worker_az_count)}"
+  vpc   = true
+
+  # Terraform does not declare an explicit dependency towards the internet gateway.
+  # this can cause the internet gateway to be deleted/detached before the EIPs.
+  # https://github.com/coreos/tectonic-installer/issues/1017#issuecomment-307780549
+  depends_on = ["aws_internet_gateway.igw"]
+}
+
+resource "aws_nat_gateway" "nat_gw" {
+  count         = "${min(local.new_master_az_count,local.new_worker_az_count)}"
+  allocation_id = "${aws_eip.nat_eip.*.id[count.index]}"
+  subnet_id     = "${aws_subnet.master_subnet.*.id[count.index]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-public.tf-192 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-public.tf-192
new file mode 100644
index 0000000..8f5c0d0
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc-public.tf-192
@@ -0,0 +1,77 @@
+resource "aws_internet_gateway" "igw" {
+  count  = "${var.external_vpc_id == "" ? 1 : 0}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-igw",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_route_table" "default" {
+  count  = "${var.external_vpc_id == "" ? 1 : 0}"
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-public",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_main_route_table_association" "main_vpc_routes" {
+  count          = "${var.external_vpc_id == "" ? 1 : 0}"
+  vpc_id         = "${data.aws_vpc.cluster_vpc.id}"
+  route_table_id = "${aws_route_table.default.id}"
+}
+
+resource "aws_route" "igw_route" {
+  count                  = "${var.external_vpc_id == "" ? 1 : 0}"
+  destination_cidr_block = "0.0.0.0/0"
+  route_table_id         = "${aws_route_table.default.id}"
+  gateway_id             = "${aws_internet_gateway.igw.id}"
+}
+
+resource "aws_subnet" "master_subnet" {
+  count = "${var.external_vpc_id == "" ? var.master_az_count : 0}"
+
+  vpc_id = "${data.aws_vpc.cluster_vpc.id}"
+
+  cidr_block = "${length(var.master_subnets) > 1 ?
+    "${element(var.master_subnets, count.index)}" :
+    "${cidrsubnet(data.aws_vpc.cluster_vpc.cidr_block, 4, count.index)}"
+  }"
+
+  availability_zone = "${var.master_azs[count.index]}"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-master-${ "${length(var.master_azs)}" > 0 ?
+     "${var.master_azs[count.index]}" :
+     "${data.aws_availability_zones.azs.names[count.index]}" }",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+resource "aws_route_table_association" "route_net" {
+  count          = "${var.external_vpc_id == "" ? var.master_az_count : 0}"
+  route_table_id = "${aws_route_table.default.id}"
+  subnet_id      = "${aws_subnet.master_subnet.*.id[count.index]}"
+}
+
+resource "aws_eip" "nat_eip" {
+  count = "${var.external_vpc_id == "" ? min(var.master_az_count, var.worker_az_count) : 0}"
+  vpc   = true
+
+  # Terraform does not declare an explicit dependency towards the internet gateway.
+  # this can cause the internet gateway to be deleted/detached before the EIPs.
+  # https://github.com/coreos/tectonic-installer/issues/1017#issuecomment-307780549
+  depends_on = ["aws_internet_gateway.igw"]
+}
+
+resource "aws_nat_gateway" "nat_gw" {
+  count         = "${var.external_vpc_id == "" ? min(var.master_az_count, var.worker_az_count) : 0}"
+  allocation_id = "${aws_eip.nat_eip.*.id[count.index]}"
+  subnet_id     = "${aws_subnet.master_subnet.*.id[count.index]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc.tf
new file mode 100644
index 0000000..7f112e3
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc.tf
@@ -0,0 +1,17 @@
+locals {
+  new_worker_cidr_range = "${cidrsubnet(data.aws_vpc.cluster_vpc.cidr_block,1,1)}"
+  new_master_cidr_range = "${cidrsubnet(data.aws_vpc.cluster_vpc.cidr_block,1,0)}"
+}
+
+resource "aws_vpc" "new_vpc" {
+  count                = "${var.external_vpc_id == "" ? 1 : 0}"
+  cidr_block           = "${var.cidr_block}"
+  enable_dns_hostnames = true
+  enable_dns_support   = true
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}.${var.base_domain}",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc.tf-244 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc.tf-244
new file mode 100644
index 0000000..425a5db
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%vpc%vpc.tf-244
@@ -0,0 +1,30 @@
+data "aws_availability_zones" "azs" {}
+
+resource "aws_vpc" "new_vpc" {
+  count                = "${var.external_vpc_id == "" ? 1 : 0}"
+  cidr_block           = "${var.cidr_block}"
+  enable_dns_hostnames = true
+  enable_dns_support   = true
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}.${var.base_domain}",
+      "kubernetes.io/cluster/${var.cluster_name}", "shared",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+data "aws_vpc" "cluster_vpc" {
+  # The join() hack is required because currently the ternary operator
+  # evaluates the expressions on both branches of the condition before
+  # returning a value. When providing and external VPC, the template VPC
+  # resource gets a count of zero which triggers an evaluation error.
+  #
+  # This is tracked upstream: https://github.com/hashicorp/hil/issues/50
+  #
+  id = "${var.external_vpc_id == "" ? join(" ", aws_vpc.new_vpc.*.id) : var.external_vpc_id }"
+}
+
+locals {
+  master_subnet_ids = ["${split(",", var.external_vpc_id == "" ? join(",", aws_subnet.master_subnet.*.id) :  join(",", data.aws_subnet.external_master.*.id))}"]
+  worker_subnet_ids = ["${split(",", var.external_vpc_id == "" ? join(",", aws_subnet.worker_subnet.*.id) :  join(",", data.aws_subnet.external_worker.*.id))}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%ignition.tf
new file mode 100644
index 0000000..aa405b2
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%ignition.tf
@@ -0,0 +1,23 @@
+data "ignition_config" "main" {
+  files = ["${compact(list(
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_s3_puller_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = [
+    "${var.ign_docker_dropin_id}",
+    "${var.ign_iscsi_service_id}",
+    "${var.ign_k8s_node_bootstrap_service_id}",
+    "${var.ign_kubelet_service_id}",
+    "${var.ign_locksmithd_service_id}",
+    "${var.ign_update_ca_certificates_dropin_id}",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%ignition_s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%ignition_s3.tf
new file mode 100644
index 0000000..9766c6b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%ignition_s3.tf
@@ -0,0 +1,21 @@
+resource "aws_s3_bucket_object" "ignition_worker" {
+  bucket  = "${var.s3_bucket}"
+  key     = "ignition_worker.json"
+  content = "${data.ignition_config.main.rendered}"
+  acl     = "private"
+
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-ignition-worker",
+      "KubernetesCluster", "${var.cluster_name}",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+data "ignition_config" "s3" {
+  replace {
+    source       = "${format("s3://%s/%s", var.s3_bucket, aws_s3_bucket_object.ignition_worker.key)}"
+    verification = "sha512-${sha512(data.ignition_config.main.rendered)}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%variables.tf
new file mode 100644
index 0000000..9ef4076
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%variables.tf
@@ -0,0 +1,95 @@
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "ec2_ami" {
+  type    = "string"
+  default = ""
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "subnet_ids" {
+  type = "list"
+}
+
+variable "sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied."
+}
+
+variable "load_balancers" {
+  description = "List of ELBs to attach all worker instances to."
+  type        = "list"
+  default     = []
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "autoscaling_group_extra_tags" {
+  description = "Extra AWS tags to be applied to created autoscaling group resources."
+  type        = "list"
+  default     = []
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "worker_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of worker nodes."
+}
+
+variable "base_domain" {
+  type        = "string"
+  description = "Domain on which the ELB records will be created"
+}
+
+variable "kubeconfig_content" {
+  type    = "string"
+  default = ""
+}
+
+variable "user_data_ign" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%variables.tf-199 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%variables.tf-199
new file mode 100644
index 0000000..8863e4d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%variables.tf-199
@@ -0,0 +1,93 @@
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "vpc_id" {
+  type = "string"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "ec2_ami" {
+  type    = "string"
+  default = ""
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "subnet_ids" {
+  type = "list"
+}
+
+variable "sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied."
+}
+
+variable "load_balancers" {
+  description = "List of ELBs to attach all worker instances to."
+  type        = "list"
+  default     = []
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "autoscaling_group_extra_tags" {
+  description = "Extra AWS tags to be applied to created autoscaling group resources."
+  type        = "list"
+  default     = []
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "worker_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of worker nodes."
+}
+
+variable "ign_s3_puller_id" {
+  type = "string"
+}
+
+variable "s3_bucket" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%worker.tf
new file mode 100644
index 0000000..fa9540d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%worker.tf
@@ -0,0 +1,175 @@
+locals {
+  ami_owner = "595879546273"
+  arn       = "aws"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_launch_configuration" "worker_conf" {
+  instance_type        = "${var.ec2_type}"
+  image_id             = "${coalesce(var.ec2_ami, data.aws_ami.coreos_ami.image_id)}"
+  name_prefix          = "${var.cluster_name}-worker-"
+  key_name             = "${var.ssh_key}"
+  security_groups      = ["${var.sg_ids}"]
+  iam_instance_profile = "${aws_iam_instance_profile.worker_profile.arn}"
+  user_data            = "${var.user_data_ign}"
+
+  lifecycle {
+    create_before_destroy = true
+
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["image_id"]
+  }
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : 0}"
+  }
+}
+
+resource "aws_autoscaling_group" "workers" {
+  name                 = "${var.cluster_name}-workers"
+  desired_capacity     = "${var.instance_count}"
+  max_size             = "${var.instance_count * 3}"
+  min_size             = "${var.instance_count}"
+  launch_configuration = "${aws_launch_configuration.worker_conf.id}"
+  vpc_zone_identifier  = ["${var.subnet_ids}"]
+
+  tags = [
+    {
+      key                 = "Name"
+      value               = "${var.cluster_name}-worker"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "kubernetes.io/cluster/${var.cluster_name}"
+      value               = "owned"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "tectonicClusterID"
+      value               = "${var.cluster_id}"
+      propagate_at_launch = true
+    },
+    "${var.autoscaling_group_extra_tags}",
+  ]
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_autoscaling_attachment" "workers" {
+  count = "${length(var.load_balancers)}"
+
+  autoscaling_group_name = "${aws_autoscaling_group.workers.name}"
+  elb                    = "${var.load_balancers[count.index]}"
+}
+
+resource "aws_iam_instance_profile" "worker_profile" {
+  name = "${var.cluster_name}-worker-profile"
+
+  role = "${var.worker_iam_role == "" ?
+    join("|", aws_iam_role.worker_role.*.name) :
+    join("|", data.aws_iam_role.worker_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "worker_role" {
+  count = "${var.worker_iam_role == "" ? 0 : 1}"
+  name  = "${var.worker_iam_role}"
+}
+
+resource "aws_iam_role" "worker_role" {
+  count = "${var.worker_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-worker-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "worker_policy" {
+  count = "${var.worker_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_worker_policy"
+  role  = "${aws_iam_role.worker_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "ec2:Describe*",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:AttachVolume",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:DetachVolume",
+      "Resource": "*"
+    },
+    {
+      "Action": "elasticloadbalancing:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "s3:GetObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "autoscaling:DescribeAutoScalingGroups",
+        "autoscaling:DescribeAutoScalingInstances"
+      ],
+      "Resource": "*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%worker.tf-167 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%worker.tf-167
new file mode 100644
index 0000000..b40a38b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%aws%worker-asg%worker.tf-167
@@ -0,0 +1,175 @@
+locals {
+  ami_owner = "595879546273"
+  arn       = "aws"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_launch_configuration" "worker_conf" {
+  instance_type        = "${var.ec2_type}"
+  image_id             = "${coalesce(var.ec2_ami, data.aws_ami.coreos_ami.image_id)}"
+  name_prefix          = "${var.cluster_name}-worker-"
+  key_name             = "${var.ssh_key}"
+  security_groups      = ["${var.sg_ids}"]
+  iam_instance_profile = "${aws_iam_instance_profile.worker_profile.arn}"
+  user_data            = "${data.ignition_config.s3.rendered}"
+
+  lifecycle {
+    create_before_destroy = true
+
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["image_id"]
+  }
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : 0}"
+  }
+}
+
+resource "aws_autoscaling_group" "workers" {
+  name                 = "${var.cluster_name}-workers"
+  desired_capacity     = "${var.instance_count}"
+  max_size             = "${var.instance_count * 3}"
+  min_size             = "${var.instance_count}"
+  launch_configuration = "${aws_launch_configuration.worker_conf.id}"
+  vpc_zone_identifier  = ["${var.subnet_ids}"]
+
+  tags = [
+    {
+      key                 = "Name"
+      value               = "${var.cluster_name}-worker"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "kubernetes.io/cluster/${var.cluster_name}"
+      value               = "owned"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "tectonicClusterID"
+      value               = "${var.cluster_id}"
+      propagate_at_launch = true
+    },
+    "${var.autoscaling_group_extra_tags}",
+  ]
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_autoscaling_attachment" "workers" {
+  count = "${length(var.load_balancers)}"
+
+  autoscaling_group_name = "${aws_autoscaling_group.workers.name}"
+  elb                    = "${var.load_balancers[count.index]}"
+}
+
+resource "aws_iam_instance_profile" "worker_profile" {
+  name = "${var.cluster_name}-worker-profile"
+
+  role = "${var.worker_iam_role == "" ?
+    join("|", aws_iam_role.worker_role.*.name) :
+    join("|", data.aws_iam_role.worker_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "worker_role" {
+  count = "${var.worker_iam_role == "" ? 0 : 1}"
+  name  = "${var.worker_iam_role}"
+}
+
+resource "aws_iam_role" "worker_role" {
+  count = "${var.worker_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-worker-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "worker_policy" {
+  count = "${var.worker_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_worker_policy"
+  role  = "${aws_iam_role.worker_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "ec2:Describe*",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:AttachVolume",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:DetachVolume",
+      "Resource": "*"
+    },
+    {
+      "Action": "elasticloadbalancing:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "s3:GetObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "autoscaling:DescribeAutoScalingGroups",
+        "autoscaling:DescribeAutoScalingInstances"
+      ],
+      "Resource": "*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%etcd.tf
new file mode 100644
index 0000000..0a769d7
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%etcd.tf
@@ -0,0 +1,69 @@
+resource "azurerm_availability_set" "etcd" {
+  count                       = "${var.etcd_count > 0 ? 1 : 0}"
+  name                        = "${var.cluster_name}-etcd"
+  location                    = "${var.location}"
+  resource_group_name         = "${var.resource_group_name}"
+  managed                     = true
+  platform_fault_domain_count = "${var.fault_domains}"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-etcd",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_virtual_machine" "etcd_node" {
+  count                 = "${var.etcd_count}"
+  name                  = "${var.cluster_name}-etcd-${count.index}"
+  location              = "${var.location}"
+  resource_group_name   = "${var.resource_group_name}"
+  network_interface_ids = ["${var.network_interface_ids[count.index]}"]
+  vm_size               = "${var.vm_size}"
+  availability_set_id   = "${azurerm_availability_set.etcd.id}"
+
+  delete_os_disk_on_termination = true
+
+  storage_image_reference {
+    publisher = "CoreOS"
+    offer     = "CoreOS"
+    sku       = "${var.container_linux_channel}"
+    version   = "${var.container_linux_version}"
+  }
+
+  storage_os_disk {
+    name              = "etcd-${count.index}-os-${var.storage_id}"
+    managed_disk_type = "${var.storage_type}"
+    create_option     = "FromImage"
+    caching           = "ReadWrite"
+    os_type           = "linux"
+    disk_size_gb      = "${var.root_volume_size}"
+  }
+
+  os_profile {
+    computer_name  = "${var.cluster_name}-etcd-${count.index}"
+    admin_username = "core"
+    admin_password = ""
+    custom_data    = "${base64encode("${data.ignition_config.etcd.*.rendered[count.index]}")}"
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = true
+
+    ssh_keys {
+      path     = "/home/core/.ssh/authorized_keys"
+      key_data = "${file(var.public_ssh_key)}"
+    }
+  }
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-etcd-${count.index}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+
+  lifecycle {
+    ignore_changes = [
+      "storage_os_disk",
+      "storage_data_disk",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%ignition.tf
new file mode 100644
index 0000000..c87ed24
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%ignition.tf
@@ -0,0 +1,52 @@
+data "ignition_config" "etcd" {
+  count = "${var.etcd_count}"
+
+  systemd = [
+    "${data.ignition_systemd_unit.locksmithd.*.id[count.index]}",
+    "${var.ign_etcd_dropin_id_list[count.index]}",
+  ]
+
+  users = [
+    "${data.ignition_user.core.id}",
+  ]
+
+  files = ["${compact(list(
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_etcd_crt_id_list}",
+    "${var.ign_ntp_dropin_id}",
+  ]
+}
+
+data "ignition_user" "core" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  name = "core"
+
+  ssh_authorized_keys = [
+    "${file(var.public_ssh_key)}",
+  ]
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  count = "${var.etcd_count}"
+
+  name    = "locksmithd.service"
+  enabled = true
+
+  dropin = [
+    {
+      name = "40-etcd-lock.conf"
+
+      content = <<EOF
+[Service]
+Environment=REBOOT_STRATEGY=etcd-lock
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.crt\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/client.key\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/client.crt\"" : ""}
+Environment="LOCKSMITHD_ENDPOINT=${var.tls_enabled ? "https" : "http"}://etcd-${count.index}:2379"
+EOF
+    },
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%output.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%output.tf
new file mode 100644
index 0000000..4f21251
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%output.tf
@@ -0,0 +1,3 @@
+output "etcd_vm_ids" {
+  value = ["${azurerm_virtual_machine.etcd_node.*.id}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%variables.tf
new file mode 100644
index 0000000..deebe4b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%etcd%variables.tf
@@ -0,0 +1,109 @@
+// Location is the Azure Location (East US, West US, etc)
+variable "location" {
+  type = "string"
+}
+
+variable "resource_group_name" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+// VM Size name
+variable "vm_size" {
+  type = "string"
+}
+
+// Storage account type
+variable "storage_type" {
+  type = "string"
+}
+
+variable "storage_id" {
+  type = "string"
+}
+
+variable "root_volume_size" {
+  type = "string"
+}
+
+// Count of etcd nodes to be created.
+variable "etcd_count" {
+  type = "string"
+}
+
+// The base DNS domain of the cluster.
+// Example: `azure.dev.coreos.systems`
+variable "base_domain" {
+  type = "string"
+}
+
+// The name of the cluster.
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "public_ssh_key" {
+  type = "string"
+}
+
+variable "network_interface_ids" {
+  type = "list"
+}
+
+variable "versions" {
+  description = "(internal) Versions of the components to use"
+  type        = "map"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "const_internal_node_names" {
+  type        = "list"
+  default     = ["etcd-0", "etcd-1", "etcd-2", "etcd-3", "etcd-4"]
+  description = "(internal) The list of hostnames assigned to etcd member nodes."
+}
+
+variable "tls_enabled" {
+  default = false
+}
+
+variable "container_image" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  type = "map"
+}
+
+variable "ign_etcd_dropin_id_list" {
+  type = "list"
+}
+
+variable "fault_domains" {
+  type = "string"
+}
+
+variable "ign_etcd_crt_id_list" {
+  type = "list"
+}
+
+variable "ign_profile_env_id" {
+  type = "string"
+}
+
+variable "ign_systemd_default_env_id" {
+  type = "string"
+}
+
+variable "ign_ntp_dropin_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%ignition-master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%ignition-master.tf
new file mode 100644
index 0000000..da6bc37
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%ignition-master.tf
@@ -0,0 +1,62 @@
+data "ignition_config" "master" {
+  files = ["${compact(list(
+    data.ignition_file.cloud_provider_config.id,
+    data.ignition_file.kubeconfig.id,
+    var.ign_azure_udev_rules_id,
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = ["${compact(list(
+    var.ign_docker_dropin_id,
+    var.ign_locksmithd_service_id,
+    var.ign_k8s_node_bootstrap_service_id,
+    var.ign_kubelet_service_id,
+    var.ign_tx_off_service_id,
+    var.ign_bootkube_service_id,
+    var.ign_tectonic_service_id,
+    var.ign_bootkube_path_unit_id,
+    var.ign_tectonic_path_unit_id,
+    var.ign_update_ca_certificates_dropin_id,
+    var.ign_iscsi_service_id,
+   ))}"]
+
+  users = [
+    "${data.ignition_user.core.id}",
+  ]
+}
+
+data "ignition_user" "core" {
+  name = "core"
+
+  ssh_authorized_keys = [
+    "${file(var.public_ssh_key)}",
+  ]
+}
+
+data "ignition_file" "kubeconfig" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/kubeconfig"
+  mode       = 0644
+
+  content {
+    content = "${var.kubeconfig_content}"
+  }
+}
+
+data "ignition_file" "cloud_provider_config" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/cloud/config"
+  mode       = 0600
+
+  content {
+    content = "${var.cloud_provider_config}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%master.tf
new file mode 100644
index 0000000..068632e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%master.tf
@@ -0,0 +1,68 @@
+resource "azurerm_availability_set" "tectonic_masters" {
+  name                        = "${var.cluster_name}-masters"
+  location                    = "${var.location}"
+  resource_group_name         = "${var.resource_group_name}"
+  managed                     = true
+  platform_fault_domain_count = "${var.fault_domains}"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-masters",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_virtual_machine" "tectonic_master" {
+  count                 = "${var.master_count}"
+  name                  = "${var.cluster_name}-master-${count.index}"
+  location              = "${var.location}"
+  resource_group_name   = "${var.resource_group_name}"
+  network_interface_ids = ["${var.network_interface_ids[count.index]}"]
+  vm_size               = "${var.vm_size}"
+  availability_set_id   = "${azurerm_availability_set.tectonic_masters.id}"
+
+  delete_os_disk_on_termination = true
+
+  storage_image_reference {
+    publisher = "CoreOS"
+    offer     = "CoreOS"
+    sku       = "${var.container_linux_channel}"
+    version   = "${var.container_linux_version}"
+  }
+
+  storage_os_disk {
+    name              = "master-${count.index}-os-${var.storage_id}"
+    managed_disk_type = "${var.storage_type}"
+    create_option     = "FromImage"
+    caching           = "ReadWrite"
+    os_type           = "linux"
+    disk_size_gb      = "${var.root_volume_size}"
+  }
+
+  os_profile {
+    computer_name  = "${var.cluster_name}-master-${count.index}"
+    admin_username = "core"
+    admin_password = ""
+    custom_data    = "${base64encode("${data.ignition_config.master.rendered}")}"
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = true
+
+    ssh_keys {
+      path     = "/home/core/.ssh/authorized_keys"
+      key_data = "${file(var.public_ssh_key)}"
+    }
+  }
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-master-${count.index}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+
+  lifecycle {
+    ignore_changes = [
+      "storage_os_disk",
+      "storage_data_disk",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%outputs.tf
new file mode 100644
index 0000000..c1bf268
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%outputs.tf
@@ -0,0 +1,3 @@
+output "master_vm_ids" {
+  value = ["${azurerm_virtual_machine.tectonic_master.*.id}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%variables.tf
new file mode 100644
index 0000000..f01dab8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%master-as%variables.tf
@@ -0,0 +1,99 @@
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cloud_provider_config" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type        = "string"
+  description = "The name of the cluster."
+}
+
+variable "extra_tags" {
+  type = "map"
+}
+
+variable "ign_azure_udev_rules_id" {
+  type = "string"
+}
+
+variable "ign_tx_off_service_id" {
+  type = "string"
+}
+
+variable "kubeconfig_content" {
+  type = "string"
+}
+
+variable "location" {
+  type        = "string"
+  description = "Location is the Azure Location (East US, West US, etc)"
+}
+
+variable "master_count" {
+  type        = "string"
+  description = "Count of master nodes to be created."
+}
+
+variable "network_interface_ids" {
+  type        = "list"
+  description = "List of NICs to use for master VMs"
+}
+
+variable "public_ssh_key" {
+  type = "string"
+}
+
+variable "resource_group_name" {
+  type = "string"
+}
+
+variable "storage_id" {
+  type = "string"
+}
+
+variable "storage_type" {
+  type        = "string"
+  description = "Storage account type"
+}
+
+variable "root_volume_size" {
+  type = "string"
+}
+
+variable "vm_size" {
+  type        = "string"
+  description = "VM Size name"
+}
+
+variable "ign_bootkube_service_id" {
+  type        = "string"
+  description = "The ID of the bootkube systemd service unit"
+}
+
+variable "ign_bootkube_path_unit_id" {
+  type = "string"
+}
+
+variable "ign_tectonic_service_id" {
+  type        = "string"
+  description = "The ID of the tectonic installer systemd service unit"
+}
+
+variable "ign_tectonic_path_unit_id" {
+  type = "string"
+}
+
+variable "fault_domains" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%resource-group%resource-group.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%resource-group%resource-group.tf
new file mode 100644
index 0000000..ef0db2a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%resource-group%resource-group.tf
@@ -0,0 +1,44 @@
+variable "external_rsg_id" {
+  default = ""
+  type    = "string"
+}
+
+variable "azure_location" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+# Storage ID
+resource "random_id" "storage_id" {
+  byte_length = 2
+}
+
+variable "extra_tags" {
+  type = "map"
+}
+
+resource "azurerm_resource_group" "tectonic_cluster" {
+  count    = "${var.external_rsg_id == "" ? 1 : 0}"
+  location = "${var.azure_location}"
+  name     = "tectonic-cluster-${var.cluster_name}"
+
+  tags = "${merge(map(
+    "Name", "tectonic-cluster-${var.cluster_name}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+output "name" {
+  value = "${var.external_rsg_id == "" ? element(concat(azurerm_resource_group.tectonic_cluster.*.name, list("")), 0) : element(split("/", var.external_rsg_id), 4)}"
+}
+
+output "storage_id" {
+  value = "${random_id.storage_id.hex}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%udev-rules%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%udev-rules%outputs.tf
new file mode 100644
index 0000000..c2e1dcc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%udev-rules%outputs.tf
@@ -0,0 +1,3 @@
+output "udev-rules_id" {
+  value = "${data.ignition_file.azure_udev_rules.id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%udev-rules%udev.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%udev-rules%udev.tf
new file mode 100644
index 0000000..6cd1a35
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%udev-rules%udev.tf
@@ -0,0 +1,9 @@
+data "ignition_file" "azure_udev_rules" {
+  filesystem = "root"
+  path       = "/etc/udev/rules.d/66-azure-storage.rules"
+  mode       = 0644
+
+  content {
+    content = "${file("${path.module}/resources/66-azure-storage.rules")}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb-api.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb-api.tf
new file mode 100644
index 0000000..8e6a09b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb-api.tf
@@ -0,0 +1,73 @@
+resource "azurerm_public_ip" "api_ip" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                         = "${var.cluster_name}_api_ip"
+  location                     = "${var.location}"
+  resource_group_name          = "${var.resource_group_name}"
+  public_ip_address_allocation = "static"
+  domain_name_label            = "${var.cluster_name}-api"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-api",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_lb_rule" "api_lb" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                    = "api-lb-rule-443-443"
+  resource_group_name     = "${var.resource_group_name}"
+  loadbalancer_id         = "${join("", azurerm_lb.tectonic_lb.*.id)}"
+  backend_address_pool_id = "${join("", azurerm_lb_backend_address_pool.api-lb.*.id)}"
+  probe_id                = "${azurerm_lb_probe.api_lb.id}"
+
+  protocol                       = "tcp"
+  frontend_port                  = 443
+  backend_port                   = 443
+  frontend_ip_configuration_name = "api"
+}
+
+resource "azurerm_lb_probe" "api_lb" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                = "api-lb-probe-443-up"
+  loadbalancer_id     = "${azurerm_lb.tectonic_lb.id}"
+  resource_group_name = "${var.resource_group_name}"
+  protocol            = "tcp"
+  port                = 443
+}
+
+resource "azurerm_lb_backend_address_pool" "api-lb" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                = "api-lb-pool"
+  resource_group_name = "${var.resource_group_name}"
+  loadbalancer_id     = "${azurerm_lb.tectonic_lb.id}"
+}
+
+resource "azurerm_lb_rule" "ssh_lb" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                    = "ssh-lb"
+  resource_group_name     = "${var.resource_group_name}"
+  loadbalancer_id         = "${join("", azurerm_lb.tectonic_lb.*.id)}"
+  backend_address_pool_id = "${join("", azurerm_lb_backend_address_pool.api-lb.*.id)}"
+  probe_id                = "${azurerm_lb_probe.ssh_lb.id}"
+  load_distribution       = "SourceIP"
+
+  protocol                       = "tcp"
+  frontend_port                  = 22
+  backend_port                   = 22
+  frontend_ip_configuration_name = "api"
+}
+
+resource "azurerm_lb_probe" "ssh_lb" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                = "ssh-lb-22-up"
+  loadbalancer_id     = "${azurerm_lb.tectonic_lb.id}"
+  resource_group_name = "${var.resource_group_name}"
+  protocol            = "tcp"
+  port                = 22
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb-console.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb-console.tf
new file mode 100644
index 0000000..c743923
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb-console.tf
@@ -0,0 +1,54 @@
+resource "azurerm_public_ip" "console_ip" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                         = "${var.cluster_name}_console_ip"
+  location                     = "${var.location}"
+  resource_group_name          = "${var.resource_group_name}"
+  public_ip_address_allocation = "static"
+  domain_name_label            = "${var.cluster_name}"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_lb_rule" "console_lb_https" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                    = "${var.cluster_name}-console-lb-rule-443-32000"
+  resource_group_name     = "${var.resource_group_name}"
+  loadbalancer_id         = "${azurerm_lb.tectonic_lb.id}"
+  backend_address_pool_id = "${join("", azurerm_lb_backend_address_pool.api-lb.*.id)}"
+  probe_id                = "${azurerm_lb_probe.console_lb.id}"
+
+  protocol                       = "tcp"
+  frontend_port                  = 443
+  backend_port                   = 32000
+  frontend_ip_configuration_name = "console"
+}
+
+resource "azurerm_lb_rule" "console_lb_identity" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                    = "${var.cluster_name}-console-lb-rule-80-32001"
+  resource_group_name     = "${var.resource_group_name}"
+  loadbalancer_id         = "${azurerm_lb.tectonic_lb.id}"
+  backend_address_pool_id = "${join("", azurerm_lb_backend_address_pool.api-lb.*.id)}"
+  probe_id                = "${azurerm_lb_probe.console_lb.id}"
+
+  protocol                       = "tcp"
+  frontend_port                  = 80
+  backend_port                   = 32001
+  frontend_ip_configuration_name = "console"
+}
+
+resource "azurerm_lb_probe" "console_lb" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                = "${var.cluster_name}-console-lb-probe-443-up"
+  loadbalancer_id     = "${azurerm_lb.tectonic_lb.id}"
+  resource_group_name = "${var.resource_group_name}"
+  protocol            = "tcp"
+  port                = 32000
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb.tf
new file mode 100644
index 0000000..b64b8c9
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%lb.tf
@@ -0,0 +1,24 @@
+resource "azurerm_lb" "tectonic_lb" {
+  count = "${var.private_cluster ? 0 : 1}"
+
+  name                = "${var.cluster_name}-api-lb"
+  location            = "${var.location}"
+  resource_group_name = "${var.resource_group_name}"
+
+  frontend_ip_configuration {
+    name                          = "api"
+    public_ip_address_id          = "${join("", azurerm_public_ip.api_ip.*.id)}"
+    private_ip_address_allocation = "dynamic"
+  }
+
+  frontend_ip_configuration {
+    name                          = "console"
+    public_ip_address_id          = "${join("" , azurerm_public_ip.console_ip.*.id)}"
+    private_ip_address_allocation = "dynamic"
+  }
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-api-lb",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-etcd.tf
new file mode 100644
index 0000000..d4455d4
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-etcd.tf
@@ -0,0 +1,12 @@
+resource "azurerm_network_interface" "etcd_nic" {
+  count               = "${var.etcd_count}"
+  name                = "${var.cluster_name}-etcd-nic-${count.index}"
+  location            = "${var.location}"
+  resource_group_name = "${var.resource_group_name}"
+
+  ip_configuration {
+    name                          = "tectonic_etcd_configuration"
+    subnet_id                     = "${var.external_master_subnet_id == "" ?  join(" ", azurerm_subnet.master_subnet.*.id) : var.external_master_subnet_id }"
+    private_ip_address_allocation = "dynamic"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-master.tf
new file mode 100644
index 0000000..1b50472
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-master.tf
@@ -0,0 +1,14 @@
+resource "azurerm_network_interface" "tectonic_master" {
+  count                = "${var.master_count}"
+  name                 = "${var.cluster_name}-master-${count.index}"
+  location             = "${var.location}"
+  resource_group_name  = "${var.resource_group_name}"
+  enable_ip_forwarding = true
+
+  ip_configuration {
+    private_ip_address_allocation           = "dynamic"
+    name                                    = "${var.cluster_name}-MasterIPConfiguration"
+    subnet_id                               = "${var.external_master_subnet_id == "" ? join("",azurerm_subnet.master_subnet.*.id) : var.external_master_subnet_id}"
+    load_balancer_backend_address_pools_ids = ["${compact(azurerm_lb_backend_address_pool.api-lb.*.id)}"]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-worker.tf
new file mode 100644
index 0000000..278db42
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nic-worker.tf
@@ -0,0 +1,13 @@
+resource "azurerm_network_interface" "tectonic_worker" {
+  count                = "${var.worker_count}"
+  name                 = "${var.cluster_name}-worker-${count.index}"
+  location             = "${var.location}"
+  resource_group_name  = "${var.resource_group_name}"
+  enable_ip_forwarding = true
+
+  ip_configuration {
+    private_ip_address_allocation = "dynamic"
+    name                          = "${var.cluster_name}-WorkerIPConfiguration"
+    subnet_id                     = "${var.external_worker_subnet_id == "" ? join("", azurerm_subnet.worker_subnet.*.id) : var.external_worker_subnet_id}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-etcd.tf
new file mode 100644
index 0000000..b21e006
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-etcd.tf
@@ -0,0 +1,125 @@
+resource "azurerm_network_security_rule" "etcd_egress" {
+  count                  = "${var.external_nsg_master_id == "" && var.etcd_count > 0 ? 1 : 0}"
+  name                   = "${var.cluster_name}-etcd-out"
+  description            = "${var.cluster_name} etcd - Outbound"
+  priority               = 2000
+  direction              = "Outbound"
+  access                 = "Allow"
+  protocol               = "*"
+  source_port_range      = "*"
+  destination_port_range = "*"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "etcd_ingress_ssh" {
+  count                  = "${var.external_nsg_master_id == "" && var.etcd_count > 0 ? 1 : 0}"
+  name                   = "${var.cluster_name}-etcd-in-ssh"
+  description            = "${var.cluster_name} etcd - SSH"
+  priority               = 400
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "22"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.ssh_network_internal}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "etcd_ingress_ssh_admin" {
+  count                  = "${var.external_nsg_master_id == "" && var.etcd_count > 0 ? 1 : 0}"
+  name                   = "${var.cluster_name}-etcd-in-ssh-external"
+  description            = "${var.cluster_name} etcd - SSH external"
+  priority               = 405
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "22"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.ssh_network_external}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "etcd_ingress_ssh_from_master" {
+  count                  = "${var.external_nsg_master_id == "" && var.etcd_count > 0 ? 1 : 0}"
+  name                   = "${var.cluster_name}-etcd-in-ssh-master"
+  description            = "${var.cluster_name} etcd - SSH from master"
+  priority               = 410
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "22"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "etcd_ingress_client_self" {
+  count                  = "${var.external_nsg_master_id == "" && var.etcd_count > 0 ? 1 : 0}"
+  name                   = "${var.cluster_name}-etcd-in-client-self"
+  description            = "${var.cluster_name} etcd - etcd client"
+  priority               = 415
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "2379"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "etcd_ingress_client_master" {
+  count                  = "${var.external_nsg_master_id == "" && var.etcd_count > 0 ? 1 : 0}"
+  name                   = "${var.cluster_name}-etcd-in-client-master"
+  description            = "${var.cluster_name} etcd - etcd client from master"
+  priority               = 420
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "2379"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "etcd_ingress_peer" {
+  count                  = "${var.external_nsg_master_id == "" && var.etcd_count > 0 ? 1 : 0}"
+  name                   = "${var.cluster_name}-etcd-in-peer"
+  description            = "${var.cluster_name} etcd - etcd peer"
+  priority               = 425
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "2380"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-master.tf
new file mode 100644
index 0000000..f224a7e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-master.tf
@@ -0,0 +1,242 @@
+resource "azurerm_network_security_group" "master" {
+  count               = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                = "${var.cluster_name}-master"
+  location            = "${var.location}"
+  resource_group_name = "${var.resource_group_name}"
+}
+
+### LB rules
+resource "azurerm_network_security_rule" "alb_probe" {
+  count                       = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                        = "${var.cluster_name}-alb-probe"
+  description                 = "${var.cluster_name} master - Azure Load Balancer probe"
+  priority                    = 295
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "TCP"
+  source_port_range           = "*"
+  destination_port_range      = "*"
+  source_address_prefix       = "AzureLoadBalancer"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+# TODO: Fix NSG name and source
+resource "azurerm_network_security_rule" "api_ingress_https" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-api-in-https"
+  description            = "${var.cluster_name} Kubernetes API"
+  priority               = 300
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "443"
+
+  # TODO: Ternary on private implementation
+  source_address_prefix       = "*"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "console_ingress_https" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-console-in-https"
+  description            = "${var.cluster_name} Azure Load Balancer - Tectonic Console"
+  priority               = 305
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "443"
+
+  # TODO: Ternary on private implementation
+  source_address_prefix       = "*"
+  destination_address_prefix  = "AzureLoadBalancer"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "console_ingress_http" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-console-in-http"
+  description            = "${var.cluster_name} Azure Load Balancer - Tectonic Identity"
+  priority               = 310
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "80"
+
+  # TODO: Ternary on private implementation
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "AzureLoadBalancer"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+### Master node rules
+
+resource "azurerm_network_security_rule" "master_egress" {
+  count                  = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-master-out"
+  description            = "${var.cluster_name} master - Outbound"
+  priority               = 2005
+  direction              = "Outbound"
+  access                 = "Allow"
+  protocol               = "*"
+  source_port_range      = "*"
+  destination_port_range = "*"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_ssh" {
+  count                  = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-master-in-ssh"
+  description            = "${var.cluster_name} master - SSH"
+  priority               = 500
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "22"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.ssh_network_internal}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_ssh_admin" {
+  count                  = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-master-in-ssh-external"
+  description            = "${var.cluster_name} master - SSH external"
+  priority               = 505
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "22"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.ssh_network_external}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_flannel" {
+  count                  = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-master-in-udp-4789"
+  description            = "${var.cluster_name} master - flannel"
+  priority               = 510
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "UDP"
+  source_port_range      = "*"
+  destination_port_range = "4789"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_node_exporter_from_master" {
+  count                       = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                        = "${var.cluster_name}-master-in-tcp-9100-master"
+  description                 = "${var.cluster_name} master - Prometheus node exporter from master"
+  priority                    = 515
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "TCP"
+  source_port_range           = "*"
+  destination_port_range      = "9100"
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_node_exporter_from_worker" {
+  count                       = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                        = "${var.cluster_name}-master-in-tcp-9100-worker"
+  description                 = "${var.cluster_name} master - Prometheus node exporter from worker"
+  priority                    = 520
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "TCP"
+  source_port_range           = "*"
+  destination_port_range      = "9100"
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+# TODO: Review NSG
+resource "azurerm_network_security_rule" "master_ingress_k8s_nodeport_from_alb" {
+  count                  = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-master-in-any-30000-32767-alb"
+  description            = "${var.cluster_name} master - Kubernetes NodePort range from Azure Load Balancer"
+  priority               = 525
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "*"
+  source_port_range      = "*"
+  destination_port_range = "30000-32767"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "AzureLoadBalancer"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+# TODO: Review NSG
+resource "azurerm_network_security_rule" "master_ingress_k8s_nodeport" {
+  count                  = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-master-in-any-30000-32767"
+  description            = "${var.cluster_name} master - Kubernetes NodePort range"
+  priority               = 530
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "*"
+  source_port_range      = "*"
+  destination_port_range = "30000-32767"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "*"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_kubelet_secure" {
+  count                  = "${var.external_nsg_master_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-master-in-tcp-10255-vnet"
+  description            = "${var.cluster_name} master - kubelet"
+  priority               = 535
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "10255"
+
+  # TODO: CR on how open this should be
+  # TODO: Reference subnet
+  source_address_prefix = "VirtualNetwork"
+
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.master.name}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-worker.tf
new file mode 100644
index 0000000..f007038
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%nsg-worker.tf
@@ -0,0 +1,169 @@
+resource "azurerm_network_security_group" "worker" {
+  count               = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                = "${var.cluster_name}-worker"
+  location            = "${var.location}"
+  resource_group_name = "${var.resource_group_name}"
+}
+
+resource "azurerm_network_security_rule" "worker_egress" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-out"
+  description            = "${var.cluster_name} worker - Outbound"
+  priority               = 2010
+  direction              = "Outbound"
+  access                 = "Allow"
+  protocol               = "*"
+  source_port_range      = "*"
+  destination_port_range = "*"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_ssh" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-in-ssh"
+  description            = "${var.cluster_name} worker - SSH"
+  priority               = 600
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "22"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.ssh_network_internal}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_ssh_admin" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-in-ssh-external"
+  description            = "${var.cluster_name} worker - SSH external"
+  priority               = 605
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "22"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.ssh_network_external}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+# TODO: Determine if we need two rules for this
+resource "azurerm_network_security_rule" "worker_ingress_k8s_nodeport" {
+  count                       = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                        = "${var.cluster_name}-worker-in-any-30000-32767"
+  description                 = "${var.cluster_name} worker - Kubernetes NodePort range"
+  priority                    = 610
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "*"
+  source_port_range           = "*"
+  destination_port_range      = "30000-32767"
+  source_address_prefix       = "VirtualNetwork"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_flannel" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-in-udp-4789"
+  description            = "${var.cluster_name} worker - flannel"
+  priority               = 615
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "UDP"
+  source_port_range      = "*"
+  destination_port_range = "4789"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_kubelet_secure" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-in-tcp-10255-vnet"
+  description            = "${var.cluster_name} worker - kubelet"
+  priority               = 620
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "10255"
+
+  # TODO: CR on how open this should be
+  # TODO: Reference subnet
+  source_address_prefix = "VirtualNetwork"
+
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_node_exporter_from_worker" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-in-tcp-9100-vnet"
+  description            = "${var.cluster_name} worker - Prometheus node exporter from worker"
+  priority               = 625
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "9100"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_node_exporter_from_master" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-in-tcp-9100-master"
+  description            = "${var.cluster_name} worker - Prometheus node exporter from master"
+  priority               = 630
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "9100"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_heapster_from_master" {
+  count                  = "${var.external_nsg_worker_id == "" ? 1 : 0}"
+  name                   = "${var.cluster_name}-worker-in-tcp-4194-master"
+  description            = "${var.cluster_name} worker - Heapster from master"
+  priority               = 635
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "TCP"
+  source_port_range      = "*"
+  destination_port_range = "4194"
+
+  # TODO: Reference subnet
+  source_address_prefix       = "${var.vnet_cidr_block}"
+  destination_address_prefix  = "${var.vnet_cidr_block}"
+  resource_group_name         = "${var.resource_group_name}"
+  network_security_group_name = "${azurerm_network_security_group.worker.name}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%outputs.tf
new file mode 100644
index 0000000..d7eca83
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%outputs.tf
@@ -0,0 +1,84 @@
+locals {
+  # A regular expression that parses a Azure subnet id to extract subnet name.
+  const_id_to_subnet_name_regex = "/^/subscriptions/[-\\w]+/resourceGroups/[-\\w]+/providers/Microsoft.Network/virtualNetworks/[.\\w]+/subnets/([.\\w-]+)$/"
+
+  # A regular expression that parses Azure resource IDs into component identifiers
+  const_id_to_group_name_regex = "/^/subscriptions/[-\\w]+/resourceGroups/([\\w()-\\.]+)/providers/[.\\w]+/[.\\w]+/([.\\w-]+)$/"
+}
+
+output "vnet_id" {
+  value = "${var.external_vnet_id == "" ? element(concat(azurerm_virtual_network.tectonic_vnet.*.name, list("")), 0) : replace(var.external_vnet_id, local.const_id_to_group_name_regex, "$2")}"
+}
+
+output "master_subnet" {
+  value = "${var.external_master_subnet_id == "" ?  element(concat(azurerm_subnet.master_subnet.*.id, list("")), 0) : var.external_master_subnet_id}"
+}
+
+output "worker_subnet" {
+  value = "${var.external_worker_subnet_id == "" ?  element(concat(azurerm_subnet.worker_subnet.*.id, list("")), 0) : var.external_worker_subnet_id}"
+}
+
+output "worker_subnet_name" {
+  value = "${var.external_worker_subnet_id == "" ?  element(concat(azurerm_subnet.worker_subnet.*.name, list("")), 0) : replace(var.external_worker_subnet_id, local.const_id_to_subnet_name_regex, "$1")}"
+}
+
+output "vnet_resource_group" {
+  value = "${var.external_vnet_id == "" ?  "" : replace(var.external_vnet_id, local.const_id_to_group_name_regex, "$1")}"
+}
+
+# TODO: Allow user to provide their own network
+output "etcd_cidr" {
+  value = "${element(concat(azurerm_subnet.master_subnet.*.address_prefix, list("")), 0)}"
+}
+
+output "master_cidr" {
+  value = "${element(concat(azurerm_subnet.master_subnet.*.address_prefix, list("")), 0)}"
+}
+
+output "worker_cidr" {
+  value = "${element(concat(azurerm_subnet.worker_subnet.*.address_prefix, list("")), 0)}"
+}
+
+output "worker_nsg_name" {
+  value = "${var.external_nsg_worker_id == "" ? element(concat(azurerm_network_security_group.worker.*.name, list("")), 0) : var.external_nsg_worker_id}"
+}
+
+output "etcd_network_interface_ids" {
+  value = ["${azurerm_network_interface.etcd_nic.*.id}"]
+}
+
+output "etcd_endpoints" {
+  value = "${azurerm_network_interface.etcd_nic.*.private_ip_address}"
+}
+
+output "master_network_interface_ids" {
+  value = ["${azurerm_network_interface.tectonic_master.*.id}"]
+}
+
+output "worker_network_interface_ids" {
+  value = ["${azurerm_network_interface.tectonic_worker.*.id}"]
+}
+
+output "master_private_ip_addresses" {
+  value = ["${azurerm_network_interface.tectonic_master.*.private_ip_address}"]
+}
+
+output "worker_private_ip_addresses" {
+  value = ["${azurerm_network_interface.tectonic_worker.*.private_ip_address}"]
+}
+
+output "api_ip_addresses" {
+  value = ["${split("|", var.private_cluster ? join("|", azurerm_network_interface.tectonic_master.*.private_ip_address) : join("|", azurerm_public_ip.api_ip.*.ip_address))}"]
+}
+
+output "console_ip_addresses" {
+  value = ["${split("|", var.private_cluster ? join("|", azurerm_network_interface.tectonic_worker.*.private_ip_address) : join("|", azurerm_public_ip.console_ip.*.ip_address))}"]
+}
+
+output "ingress_fqdn" {
+  value = "${var.base_domain == "" ? element(concat(azurerm_public_ip.console_ip.*.fqdn, list("")), 0) : "${var.cluster_name}.${var.base_domain}${var.private_cluster ? ":32000" : ""}"}"
+}
+
+output "api_fqdn" {
+  value = "${var.base_domain == "" ? element(concat(azurerm_public_ip.api_ip.*.fqdn, list("")), 0) : "${var.cluster_name}-api.${var.base_domain}"}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%variables.tf
new file mode 100644
index 0000000..df7c218
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%variables.tf
@@ -0,0 +1,96 @@
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+// The base DNS domain of the cluster.
+// Example: `azure.dev.coreos.systems`
+variable "base_domain" {
+  type = "string"
+}
+
+variable "resource_group_name" {
+  type = "string"
+}
+
+variable "vnet_cidr_block" {
+  type = "string"
+}
+
+variable "location" {
+  type = "string"
+}
+
+variable "external_vnet_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "external_master_subnet_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "external_worker_subnet_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "external_nsg_master_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "external_nsg_worker_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "etcd_cidr" {
+  type    = "string"
+  default = ""
+}
+
+variable "etcd_count" {
+  type    = "string"
+  default = ""
+}
+
+variable "master_cidr" {
+  type    = "string"
+  default = ""
+}
+
+variable "worker_cidr" {
+  type    = "string"
+  default = ""
+}
+
+variable "ssh_network_internal" {
+  type    = "string"
+  default = ""
+}
+
+variable "ssh_network_external" {
+  type    = "string"
+  default = ""
+}
+
+variable "master_count" {
+  type = "string"
+}
+
+variable "worker_count" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  type = "map"
+}
+
+variable "private_cluster" {
+  default = false
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%vnet-subnets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%vnet-subnets.tf
new file mode 100644
index 0000000..6604b92
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%vnet%vnet-subnets.tf
@@ -0,0 +1,30 @@
+resource "azurerm_virtual_network" "tectonic_vnet" {
+  count               = "${var.external_vnet_id == "" ? 1 : 0 }"
+  name                = "${var.cluster_name}"
+  resource_group_name = "${var.resource_group_name}"
+  address_space       = ["${var.vnet_cidr_block}"]
+  location            = "${var.location}"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}_vnet",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_subnet" "master_subnet" {
+  count                     = "${var.external_master_subnet_id == "" ? 1 : 0}"
+  name                      = "${var.cluster_name}_master_subnet"
+  resource_group_name       = "${var.external_vnet_id == "" ? var.resource_group_name : replace(var.external_vnet_id, "${var.const_id_to_group_name_regex}", "$1")}"
+  virtual_network_name      = "${var.external_vnet_id == "" ? join("",azurerm_virtual_network.tectonic_vnet.*.name) : replace(var.external_vnet_id, "${var.const_id_to_group_name_regex}", "$2")}"
+  address_prefix            = "${cidrsubnet(var.vnet_cidr_block, 4, 0)}"
+  network_security_group_id = "${var.external_nsg_master_id == "" ? azurerm_network_security_group.master.id : var.external_nsg_master_id}"
+}
+
+resource "azurerm_subnet" "worker_subnet" {
+  count                     = "${var.external_worker_subnet_id == "" ? 1 : 0}"
+  name                      = "${var.cluster_name}_worker_subnet"
+  resource_group_name       = "${var.external_vnet_id == "" ? var.resource_group_name : replace(var.external_vnet_id, "${var.const_id_to_group_name_regex}", "$1")}"
+  virtual_network_name      = "${var.external_vnet_id == "" ? join("",azurerm_virtual_network.tectonic_vnet.*.name) : replace(var.external_vnet_id, "${var.const_id_to_group_name_regex}", "$2") }"
+  address_prefix            = "${cidrsubnet(var.vnet_cidr_block, 4, 1)}"
+  network_security_group_id = "${var.external_nsg_worker_id == "" ? azurerm_network_security_group.worker.id : var.external_nsg_worker_id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%ignition-worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%ignition-worker.tf
new file mode 100644
index 0000000..d388e45
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%ignition-worker.tf
@@ -0,0 +1,58 @@
+data "ignition_config" "worker" {
+  files = ["${compact(list(
+    data.ignition_file.cloud-provider-config.id,
+    data.ignition_file.kubeconfig.id,
+    var.ign_azure_udev_rules_id,
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = [
+    "${var.ign_docker_dropin_id}",
+    "${var.ign_iscsi_service_id}",
+    "${var.ign_k8s_node_bootstrap_service_id}",
+    "${var.ign_kubelet_service_id}",
+    "${var.ign_locksmithd_service_id}",
+    "${var.ign_tx_off_service_id}",
+    "${var.ign_update_ca_certificates_dropin_id}",
+  ]
+
+  users = [
+    "${data.ignition_user.core.id}",
+  ]
+}
+
+data "ignition_file" "kubeconfig" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/kubeconfig"
+  mode       = 0644
+
+  content {
+    content = "${var.kubeconfig_content}"
+  }
+}
+
+data "ignition_file" "cloud-provider-config" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/cloud/config"
+  mode       = 0600
+
+  content {
+    content = "${var.cloud_provider_config}"
+  }
+}
+
+data "ignition_user" "core" {
+  name = "core"
+
+  ssh_authorized_keys = [
+    "${file(var.public_ssh_key)}",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%output.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%output.tf
new file mode 100644
index 0000000..eff294c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%output.tf
@@ -0,0 +1,3 @@
+output "availability_set_name" {
+  value = "${azurerm_availability_set.tectonic_workers.name}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%variables.tf
new file mode 100644
index 0000000..02c1895
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%variables.tf
@@ -0,0 +1,92 @@
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cloud_provider" {
+  type    = "string"
+  default = "azure"
+}
+
+variable "cloud_provider_config" {
+  description = "Content of cloud provider config"
+  type        = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type        = "string"
+  description = "The name of the cluster."
+}
+
+variable "extra_tags" {
+  type = "map"
+}
+
+variable "ign_azure_udev_rules_id" {
+  type = "string"
+}
+
+variable "ign_tx_off_service_id" {
+  type = "string"
+}
+
+variable "kubeconfig_content" {
+  type    = "string"
+  default = ""
+}
+
+variable "location" {
+  type        = "string"
+  description = "Location is the Azure Location (East US, West US, etc)"
+}
+
+variable "network_interface_ids" {
+  type        = "list"
+  description = "List of NICs to use for master VMs"
+}
+
+variable "public_ssh_key" {
+  type = "string"
+}
+
+variable "resource_group_name" {
+  type = "string"
+}
+
+variable "storage_id" {
+  type = "string"
+}
+
+variable "storage_type" {
+  type        = "string"
+  description = "Storage account type"
+}
+
+variable "root_volume_size" {
+  type = "string"
+}
+
+variable "tectonic_kube_dns_service_ip" {
+  type = "string"
+}
+
+variable "vm_size" {
+  type        = "string"
+  description = "VM Size name"
+}
+
+variable "worker_count" {
+  type        = "string"
+  description = "Count of worker nodes to be created."
+}
+
+variable "fault_domains" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%workers.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%workers.tf
new file mode 100644
index 0000000..a0ed9f7
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%azure%worker-as%workers.tf
@@ -0,0 +1,68 @@
+resource "azurerm_availability_set" "tectonic_workers" {
+  name                        = "${var.cluster_name}-workers"
+  location                    = "${var.location}"
+  resource_group_name         = "${var.resource_group_name}"
+  managed                     = true
+  platform_fault_domain_count = "${var.fault_domains}"
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-workers",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_virtual_machine" "tectonic_worker" {
+  count                 = "${var.worker_count}"
+  name                  = "${var.cluster_name}-worker-${count.index}"
+  location              = "${var.location}"
+  resource_group_name   = "${var.resource_group_name}"
+  network_interface_ids = ["${var.network_interface_ids[count.index]}"]
+  vm_size               = "${var.vm_size}"
+  availability_set_id   = "${azurerm_availability_set.tectonic_workers.id}"
+
+  delete_os_disk_on_termination = true
+
+  storage_image_reference {
+    publisher = "CoreOS"
+    offer     = "CoreOS"
+    sku       = "${var.container_linux_channel}"
+    version   = "${var.container_linux_version}"
+  }
+
+  storage_os_disk {
+    name              = "worker-${count.index}-os-${var.storage_id}"
+    managed_disk_type = "${var.storage_type}"
+    create_option     = "FromImage"
+    caching           = "ReadWrite"
+    os_type           = "linux"
+    disk_size_gb      = "${var.root_volume_size}"
+  }
+
+  os_profile {
+    computer_name  = "${var.cluster_name}-worker-${count.index}"
+    admin_username = "core"
+    admin_password = ""
+    custom_data    = "${base64encode("${data.ignition_config.worker.rendered}")}"
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = true
+
+    ssh_keys {
+      path     = "/home/core/.ssh/authorized_keys"
+      key_data = "${file(var.public_ssh_key)}"
+    }
+  }
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}-worker-${count.index}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+
+  lifecycle {
+    ignore_changes = [
+      "storage_os_disk",
+      "storage_data_disk",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%assets.tf
new file mode 100644
index 0000000..f9bad2d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%assets.tf
@@ -0,0 +1,85 @@
+# kubeconfig (/auth/kubeconfig)
+data "template_file" "kubeconfig" {
+  template = "${file("${path.module}/resources/kubeconfig")}"
+
+  vars {
+    root_ca_cert = "${base64encode(var.root_ca_cert_pem)}"
+    admin_cert   = "${base64encode(var.admin_cert_pem)}"
+    admin_key    = "${base64encode(var.admin_key_pem)}"
+    server       = "${var.kube_apiserver_url}"
+    cluster_name = "${var.cluster_name}"
+  }
+}
+
+data "ignition_file" "kubeconfig" {
+  filesystem = "root"
+  path       = "/opt/tectonic/auth/kubeconfig"
+  mode       = "0600"
+
+  content {
+    content = "${data.template_file.kubeconfig.rendered}"
+  }
+}
+
+# kubeconfig-kubelet 
+data "template_file" "kubeconfig-kubelet" {
+  template = "${file("${path.module}/resources/kubeconfig-kubelet")}"
+
+  vars {
+    root_ca_cert = "${base64encode(var.root_ca_cert_pem)}"
+    client_cert  = "${base64encode(var.kubelet_cert_pem)}"
+    client_key   = "${base64encode(var.kubelet_key_pem)}"
+    server       = "${var.kube_apiserver_url}"
+    cluster_name = "${var.cluster_name}"
+  }
+}
+
+data "ignition_file" "kubeconfig-kubelet" {
+  filesystem = "root"
+  path       = "/opt/tectonic/auth/kubeconfig-kubelet"
+  mode       = "0600"
+
+  content {
+    content = "${data.template_file.kubeconfig-kubelet.rendered}"
+  }
+}
+
+# bootkube.sh 
+data "template_file" "bootkube_sh" {
+  template = "${file("${path.module}/resources/bootkube.sh")}"
+
+  vars {
+    bootkube_image           = "${var.container_images["bootkube"]}"
+    kube_core_renderer_image = "${var.container_images["kube_core_renderer"]}"
+    tnc_operator_image       = "${var.container_images["tnc_operator"]}"
+    etcd_cert_signer_image   = "${var.container_images["etcd_cert_signer"]}"
+    etcdctl_image            = "${var.container_images["etcd"]}"
+    etcd_cluster             = "${join(",", data.template_file.initial_cluster.*.rendered)}"
+  }
+}
+
+data "ignition_file" "bootkube_sh" {
+  filesystem = "root"
+  path       = "/opt/tectonic/bootkube.sh"
+  mode       = "0755"
+
+  content {
+    content = "${data.template_file.bootkube_sh.rendered}"
+  }
+}
+
+# bootkube.service (available as output variable)
+data "template_file" "bootkube_service" {
+  template = "${file("${path.module}/resources/bootkube.service")}"
+}
+
+data "ignition_systemd_unit" "bootkube_service" {
+  name    = "bootkube.service"
+  enabled = false
+  content = "${data.template_file.bootkube_service.rendered}"
+}
+
+data "template_file" "initial_cluster" {
+  count    = "${length(var.etcd_endpoints)}"
+  template = "https://${var.etcd_endpoints[count.index]}:2379"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%assets.tf-288 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%assets.tf-288
new file mode 100644
index 0000000..00ec5c6
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%assets.tf-288
@@ -0,0 +1,162 @@
+# Self-hosted manifests (resources/generated/manifests/)
+resource "template_dir" "bootkube" {
+  source_dir      = "${path.module}/resources/manifests"
+  destination_dir = "./generated/manifests"
+
+  vars {
+    hyperkube_image        = "${var.container_images["hyperkube"]}"
+    pod_checkpointer_image = "${var.container_images["pod_checkpointer"]}"
+    kubedns_image          = "${var.container_images["kubedns"]}"
+    kubednsmasq_image      = "${var.container_images["kubednsmasq"]}"
+    kubedns_sidecar_image  = "${var.container_images["kubedns_sidecar"]}"
+
+    # Choose the etcd endpoints to use.
+    # 1. If self-hosted etcd is enabled, then use
+    # var.etcd_service_ip.
+    # 2. Else if no etcd TLS certificates are provided, i.e. we bootstrap etcd
+    # nodes ourselves (using http), then use insecure http var.etcd_endpoints.
+    # 3. Else (if etcd TLS certific are provided), then use the secure https
+    # var.etcd_endpoints.
+    etcd_servers = "${
+      var.self_hosted_etcd != ""
+        ? format("https://%s:2379", cidrhost(var.service_cidr, 15))
+        : var.etcd_tls_enabled
+          ? join(",", formatlist("https://%s:2379", var.etcd_endpoints))
+          : join(",", formatlist("http://%s:2379", var.etcd_endpoints))
+      }"
+
+    etcd_service_ip           = "${cidrhost(var.service_cidr, 15)}"
+    bootstrap_etcd_service_ip = "${cidrhost(var.service_cidr, 20)}"
+
+    cloud_provider             = "${var.cloud_provider}"
+    cloud_provider_config      = "${var.cloud_provider_config}"
+    cloud_provider_config_flag = "${var.cloud_provider_config != "" ? "- --cloud-config=/etc/kubernetes/cloud/config" : "# no cloud provider config given"}"
+
+    cluster_cidr        = "${var.cluster_cidr}"
+    service_cidr        = "${var.service_cidr}"
+    kube_dns_service_ip = "${cidrhost(var.service_cidr, 10)}"
+    advertise_address   = "${var.advertise_address}"
+
+    anonymous_auth      = "${var.anonymous_auth}"
+    oidc_issuer_url     = "${var.oidc_issuer_url}"
+    oidc_client_id      = "${var.oidc_client_id}"
+    oidc_username_claim = "${var.oidc_username_claim}"
+    oidc_groups_claim   = "${var.oidc_groups_claim}"
+    oidc_ca_cert        = "${base64encode(var.oidc_ca_cert)}"
+
+    kube_ca_cert       = "${base64encode(var.kube_ca_cert_pem)}"
+    apiserver_key      = "${base64encode(var.apiserver_key_pem)}"
+    apiserver_cert     = "${base64encode(var.apiserver_cert_pem)}"
+    serviceaccount_pub = "${base64encode(tls_private_key.service_account.public_key_pem)}"
+    serviceaccount_key = "${base64encode(tls_private_key.service_account.private_key_pem)}"
+
+    etcd_ca_flag   = "${var.etcd_ca_cert_pem != "" ? "- --etcd-cafile=/etc/kubernetes/secrets/etcd-client-ca.crt" : "# no etcd-client-ca.crt given" }"
+    etcd_cert_flag = "${var.etcd_client_cert_pem != "" ? "- --etcd-certfile=/etc/kubernetes/secrets/etcd-client.crt" : "# no etcd-client.crt given" }"
+    etcd_key_flag  = "${var.etcd_client_key_pem != "" ? "- --etcd-keyfile=/etc/kubernetes/secrets/etcd-client.key" : "# no etcd-client.key given" }"
+
+    etcd_ca_cert     = "${base64encode(var.etcd_ca_cert_pem)}"
+    etcd_client_cert = "${base64encode(var.etcd_client_cert_pem)}"
+    etcd_client_key  = "${base64encode(var.etcd_client_key_pem)}"
+
+    kubernetes_version = "${replace(var.versions["kubernetes"], "+", "-")}"
+
+    master_count              = "${var.master_count}"
+    node_monitor_grace_period = "${var.node_monitor_grace_period}"
+    pod_eviction_timeout      = "${var.pod_eviction_timeout}"
+
+    cloud_provider_profile = "${var.cloud_provider != "" ? "${var.cloud_provider}" : "metal"}"
+    cloud_config_path      = "${var.cloud_config_path}"
+  }
+}
+
+# Self-hosted bootstrapping manifests (resources/generated/manifests-bootstrap/)
+resource "template_dir" "bootkube_bootstrap" {
+  source_dir      = "${path.module}/resources/bootstrap-manifests"
+  destination_dir = "./generated/bootstrap-manifests"
+
+  vars {
+    hyperkube_image = "${var.container_images["hyperkube"]}"
+    etcd_image      = "${var.container_images["etcd"]}"
+
+    # Choose the etcd endpoints to use.
+    # 1. If self-hosted etcd mode is enabled, then use
+    # var.etcd_service_ip.
+    # 2. Else if no etcd TLS certificates are provided, i.e. we bootstrap etcd
+    # nodes ourselves (using http), then use insecure http var.etcd_endpoints.
+    # 3. Else (if etcd TLS certific are provided), then use the secure https
+    # var.etcd_endpoints.
+    etcd_servers = "${
+      var.self_hosted_etcd != ""
+        ? format("https://%s:2379,https://127.0.0.1:12379", cidrhost(var.service_cidr, 15))
+        : var.etcd_tls_enabled
+          ? join(",", formatlist("https://%s:2379", var.etcd_endpoints))
+          : join(",", formatlist("http://%s:2379", var.etcd_endpoints))
+      }"
+
+    etcd_ca_flag   = "${var.etcd_ca_cert_pem != "" ? "- --etcd-cafile=/etc/kubernetes/secrets/etcd-client-ca.crt" : "# no etcd-client-ca.crt given" }"
+    etcd_cert_flag = "${var.etcd_client_cert_pem != "" ? "- --etcd-certfile=/etc/kubernetes/secrets/etcd-client.crt" : "# no etcd-client.crt given" }"
+    etcd_key_flag  = "${var.etcd_client_key_pem != "" ? "- --etcd-keyfile=/etc/kubernetes/secrets/etcd-client.key" : "# no etcd-client.key given" }"
+
+    cloud_provider             = "${var.cloud_provider}"
+    cloud_provider_config      = "${var.cloud_provider_config}"
+    cloud_provider_config_flag = "${var.cloud_provider_config != "" ? "- --cloud-config=/etc/kubernetes/cloud/config" : "# no cloud provider config given"}"
+
+    advertise_address = "${var.advertise_address}"
+    cluster_cidr      = "${var.cluster_cidr}"
+    service_cidr      = "${var.service_cidr}"
+  }
+}
+
+# kubeconfig (resources/generated/auth/kubeconfig)
+data "template_file" "kubeconfig" {
+  template = "${file("${path.module}/resources/kubeconfig")}"
+
+  vars {
+    kube_ca_cert = "${base64encode(var.kube_ca_cert_pem)}"
+    kubelet_cert = "${base64encode(var.kubelet_cert_pem)}"
+    kubelet_key  = "${base64encode(var.kubelet_key_pem)}"
+    server       = "${var.kube_apiserver_url}"
+    cluster_name = "${var.cluster_name}"
+  }
+}
+
+resource "local_file" "kubeconfig" {
+  content  = "${data.template_file.kubeconfig.rendered}"
+  filename = "./generated/auth/kubeconfig"
+}
+
+# bootkube.sh (resources/generated/bootkube.sh)
+data "template_file" "bootkube_sh" {
+  template = "${file("${path.module}/resources/bootkube.sh")}"
+
+  vars {
+    bootkube_image = "${var.container_images["bootkube"]}"
+  }
+}
+
+resource "local_file" "bootkube_sh" {
+  content  = "${data.template_file.bootkube_sh.rendered}"
+  filename = "./generated/bootkube.sh"
+}
+
+# bootkube.service (available as output variable)
+data "template_file" "bootkube_service" {
+  template = "${file("${path.module}/resources/bootkube.service")}"
+}
+
+data "ignition_systemd_unit" "bootkube_service" {
+  name    = "bootkube.service"
+  enabled = false
+  content = "${data.template_file.bootkube_service.rendered}"
+}
+
+# bootkube.path (available as output variable)
+data "template_file" "bootkube_path_unit" {
+  template = "${file("${path.module}/resources/bootkube.path")}"
+}
+
+data "ignition_systemd_unit" "bootkube_path_unit" {
+  name    = "bootkube.path"
+  enabled = true
+  content = "${data.template_file.bootkube_path_unit.rendered}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%outputs.tf
new file mode 100644
index 0000000..582e029
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%outputs.tf
@@ -0,0 +1,32 @@
+output "kubeconfig-kubelet" {
+  value = "${data.template_file.kubeconfig-kubelet.rendered}"
+}
+
+output "systemd_service_id" {
+  value = "${data.ignition_systemd_unit.bootkube_service.id}"
+}
+
+output "kube_dns_service_ip" {
+  value = "${cidrhost(var.service_cidr, 10)}"
+}
+
+output "kubeconfig_rendered" {
+  value = "${data.template_file.kubeconfig.rendered}"
+}
+
+output "kubeconfig-kubelet_rendered" {
+  value = "${data.template_file.kubeconfig-kubelet.rendered}"
+}
+
+output "ignition_file_id_list" {
+  value = ["${flatten(list(
+    list(
+      data.ignition_file.bootkube_sh.id,
+      data.ignition_file.kubeconfig.id,
+      data.ignition_file.kubeconfig-kubelet.id,
+      data.ignition_file.service_account_key.id,
+      data.ignition_file.service_account_crt.id,
+    ),
+    data.ignition_file.manifest_file_list.*.id,
+  ))}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%outputs.tf-37 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%outputs.tf-37
new file mode 100644
index 0000000..e6e0166
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%outputs.tf-37
@@ -0,0 +1,55 @@
+# This output is meant to be used to inject a dependency on the generated
+# assets. As of Terraform v0.9, it is difficult to make a module depend on
+# another module (no depends_on, no triggers), or to make a data source
+# depend on a module (no depends_on, no triggers, generally no dummy variable).
+#
+# For instance, using the 'archive_file' data source against the generated
+# assets, which is a common use-case, is tricky. There is no mechanism for
+# defining explicit dependencies and the only available variables are for the
+# source, destination and archive type, leaving little opportunities for us to
+# inject a dependency. Thanks to the property described below, this output can
+# be used as part of the output filename, in order to enforce the creation of
+# the archive after the assets have been properly generated.
+#
+# Both localfile and template_dir providers compute their IDs by hashing
+# the content of the resources on disk. Because this output is computed from the
+# combination of all the resources' IDs, it can't be guessed and can only be
+# interpolated once the assets have all been created.
+output "id" {
+  value = "${sha1("
+  ${local_file.kubeconfig.id}
+  ${local_file.bootkube_sh.id}
+  ${template_dir.bootkube.id} ${template_dir.bootkube_bootstrap.id}
+  ${join(" ",
+    template_dir.etcd_manifests.*.id,
+    template_dir.etcd_bootstrap_manifests.*.id,
+    local_file.etcd_bootstrap_service.*.id,
+    local_file.migrate_etcd_cluster.*.id,
+    local_file.migrate_etcd_cluster_pv_backup.*.id,
+    )}
+  ")}"
+}
+
+output "kubeconfig" {
+  value = "${data.template_file.kubeconfig.rendered}"
+}
+
+output "systemd_service_rendered" {
+  value = "${data.template_file.bootkube_service.rendered}"
+}
+
+output "systemd_service_id" {
+  value = "${data.ignition_systemd_unit.bootkube_service.id}"
+}
+
+output "systemd_path_unit_rendered" {
+  value = "${data.template_file.bootkube_path_unit.rendered}"
+}
+
+output "systemd_path_unit_id" {
+  value = "${data.ignition_systemd_unit.bootkube_path_unit.id}"
+}
+
+output "kube_dns_service_ip" {
+  value = "${cidrhost(var.service_cidr, 10)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%self-hosted-etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%self-hosted-etcd.tf
new file mode 100644
index 0000000..4eaef96
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%self-hosted-etcd.tf
@@ -0,0 +1,80 @@
+resource "template_dir" "etcd_manifests" {
+  count           = "${var.self_hosted_etcd != "" ? 1 : 0}"
+  source_dir      = "${path.module}/resources/self-hosted-etcd/manifests"
+  destination_dir = "./generated/etcd/manifests"
+
+  vars {
+    etcd_operator_image = "${var.container_images["etcd_operator"]}"
+    etcd_service_ip     = "${cidrhost(var.service_cidr, 15)}"
+    kenc_image          = "${var.container_images["kenc"]}"
+
+    etcd_ca_cert = "${base64encode(var.etcd_ca_cert_pem)}"
+
+    etcd_server_cert = "${base64encode(var.etcd_server_cert_pem)}"
+    etcd_server_key  = "${base64encode(var.etcd_server_key_pem)}"
+
+    etcd_client_cert = "${base64encode(var.etcd_client_cert_pem)}"
+    etcd_client_key  = "${base64encode(var.etcd_client_key_pem)}"
+
+    etcd_peer_cert = "${base64encode(var.etcd_peer_cert_pem)}"
+    etcd_peer_key  = "${base64encode(var.etcd_peer_key_pem)}"
+  }
+}
+
+resource "template_dir" "etcd_bootstrap_manifests" {
+  count           = "${var.self_hosted_etcd != "" ? 1 : 0}"
+  source_dir      = "${path.module}/resources/self-hosted-etcd/bootstrap-manifests"
+  destination_dir = "./generated/etcd/bootstrap-manifests"
+
+  vars {
+    etcd_image                = "${var.container_images["etcd"]}"
+    etcd_version              = "${var.versions["etcd"]}"
+    bootstrap_etcd_service_ip = "${cidrhost(var.service_cidr, 20)}"
+  }
+}
+
+data "template_file" "etcd_bootstrap_service" {
+  template = "${file("${path.module}/resources/self-hosted-etcd/bootstrap-etcd-service.json")}"
+
+  vars {
+    bootstrap_etcd_service_ip = "${cidrhost(var.service_cidr, 20)}"
+  }
+}
+
+resource "local_file" "etcd_bootstrap_service" {
+  count    = "${var.self_hosted_etcd != "" ? 1 : 0}"
+  content  = "${data.template_file.etcd_bootstrap_service.rendered}"
+  filename = "./generated/etcd/bootstrap-etcd-service.json"
+}
+
+data "template_file" "migrate_etcd_cluster" {
+  template = "${file("${path.module}/resources/self-hosted-etcd/migrate-etcd-cluster.json")}"
+
+  vars {
+    etcd_version              = "${var.versions["etcd"]}"
+    bootstrap_etcd_service_ip = "${cidrhost(var.service_cidr, 20)}"
+  }
+}
+
+resource "local_file" "migrate_etcd_cluster" {
+  count    = "${var.self_hosted_etcd == "enabled" ? 1 : 0}"
+  content  = "${data.template_file.migrate_etcd_cluster.rendered}"
+  filename = "./generated/etcd/migrate-etcd-cluster.json"
+}
+
+data "template_file" "migrate_etcd_cluster_pv_backup" {
+  template = "${file("${path.module}/resources/self-hosted-etcd/migrate-etcd-cluster-pv-backup.json")}"
+
+  vars {
+    etcd_version              = "${var.versions["etcd"]}"
+    bootstrap_etcd_service_ip = "${cidrhost(var.service_cidr, 20)}"
+    etcd_backup_size          = "${var.etcd_backup_size}"
+    etcd_backup_storage_class = "${var.etcd_backup_storage_class}"
+  }
+}
+
+resource "local_file" "migrate_etcd_cluster_pv_backup" {
+  count    = "${var.self_hosted_etcd == "pv_backup" ? 1 : 0}"
+  content  = "${data.template_file.migrate_etcd_cluster_pv_backup.rendered}"
+  filename = "./generated/etcd/migrate-etcd-cluster.json"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%service-account.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%service-account.tf
new file mode 100644
index 0000000..0c4e571
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%service-account.tf
@@ -0,0 +1,35 @@
+# Kubernete's Service Account (resources/generated/tls/{service-account.key,service-account.pub})
+resource "tls_private_key" "service_account" {
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "local_file" "service_account_key" {
+  content  = "${tls_private_key.service_account.private_key_pem}"
+  filename = "./generated/tls/service-account.key"
+}
+
+data "ignition_file" "service_account_key" {
+  filesystem = "root"
+  path       = "/opt/tectonic/tls/service-account.key"
+  mode       = "0644"
+
+  content {
+    content = "${tls_private_key.service_account.private_key_pem}"
+  }
+}
+
+resource "local_file" "service_account_crt" {
+  content  = "${tls_private_key.service_account.public_key_pem}"
+  filename = "./generated/tls/service-account.pub"
+}
+
+data "ignition_file" "service_account_crt" {
+  filesystem = "root"
+  path       = "/opt/tectonic/tls/service-account.pub"
+  mode       = "0644"
+
+  content {
+    content = "${tls_private_key.service_account.public_key_pem}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%service-account.tf-289 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%service-account.tf-289
new file mode 100644
index 0000000..00fbaf1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%service-account.tf-289
@@ -0,0 +1,15 @@
+# Kubernete's Service Account (resources/generated/tls/{service-account.key,service-account.pub})
+resource "tls_private_key" "service_account" {
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "local_file" "service_account_key" {
+  content  = "${tls_private_key.service_account.private_key_pem}"
+  filename = "./generated/tls/service-account.key"
+}
+
+resource "local_file" "service_account_crt" {
+  content  = "${tls_private_key.service_account.public_key_pem}"
+  filename = "./generated/tls/service-account.pub"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%variables.tf
new file mode 100644
index 0000000..6aba396
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%variables.tf
@@ -0,0 +1,147 @@
+variable "apiserver_cert_pem" {
+  type        = "string"
+  description = "The API server certificate in PEM format."
+}
+
+variable "apiserver_key_pem" {
+  type        = "string"
+  description = "The API server key in PEM format."
+}
+
+variable "openshift_apiserver_cert_pem" {
+  type        = "string"
+  description = "The Openshift API server certificate in PEM format."
+}
+
+variable "openshift_apiserver_key_pem" {
+  type        = "string"
+  description = "The Openshift API server key in PEM format."
+}
+
+variable "apiserver_proxy_cert_pem" {
+  type        = "string"
+  description = "The API server proxy certificate in PEM format."
+}
+
+variable "apiserver_proxy_key_pem" {
+  type        = "string"
+  description = "The API server proxy key in PEM format."
+}
+
+variable "cloud_provider_config" {
+  description = "Content of cloud provider config"
+  type        = "string"
+  default     = ""
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "etcd_ca_cert_pem" {
+  type        = "string"
+  description = "The etcd CA certificate in PEM format."
+}
+
+variable "etcd_client_cert_pem" {
+  type        = "string"
+  description = "The etcd client certificate in PEM format."
+}
+
+variable "etcd_client_key_pem" {
+  type        = "string"
+  description = "The etcd client key in PEM format."
+}
+
+variable "etcd_endpoints" {
+  description = "List of etcd endpoints to connect with (hostnames/IPs only)"
+  type        = "list"
+}
+
+variable "kube_apiserver_url" {
+  description = "URL used to reach kube-apiserver"
+  type        = "string"
+}
+
+variable "root_ca_cert_pem" {
+  type        = "string"
+  description = "The Root CA in PEM format."
+}
+
+variable "aggregator_ca_cert_pem" {
+  type        = "string"
+  description = "The Aggregated API Server CA in PEM format."
+}
+
+variable "aggregator_ca_key_pem" {
+  type        = "string"
+  description = "The Aggregated API Server CA key in PEM format."
+}
+
+variable "kube_ca_cert_pem" {
+  type        = "string"
+  description = "The Kubernetes CA in PEM format."
+}
+
+variable "kube_ca_key_pem" {
+  type        = "string"
+  description = "The Kubernetes CA key in PEM format."
+}
+
+variable "service_serving_ca_cert_pem" {
+  type        = "string"
+  description = "The Service Serving CA in PEM format."
+}
+
+variable "service_serving_ca_key_pem" {
+  type        = "string"
+  description = "The Service Serving CA key in PEM format."
+}
+
+variable "admin_cert_pem" {
+  type        = "string"
+  description = "The admin certificate in PEM format."
+}
+
+variable "admin_key_pem" {
+  type        = "string"
+  description = "The admin key in PEM format."
+}
+
+variable "kubelet_cert_pem" {
+  type        = "string"
+  description = "The kubelet certificate in PEM format."
+}
+
+variable "kubelet_key_pem" {
+  type        = "string"
+  description = "The kubelet key in PEM format."
+}
+
+variable "tnc_cert_pem" {
+  type = "string"
+}
+
+variable "tnc_key_pem" {
+  type = "string"
+}
+
+variable "oidc_ca_cert" {
+  type = "string"
+}
+
+variable "service_cidr" {
+  description = "A CIDR notation IP range from which to assign service cluster IPs"
+  type        = "string"
+}
+
+variable "pull_secret_path" {
+  type        = "string"
+  description = "Path on disk to your Tectonic pull secret. Obtain this from your Tectonic Account: https://account.coreos.com."
+  default     = "/Users/coreos/Desktop/config.json"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%variables.tf-277 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%variables.tf-277
new file mode 100644
index 0000000..0a02d2e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootkube%variables.tf-277
@@ -0,0 +1,179 @@
+variable "advertise_address" {
+  description = "The IP address on which to advertise the apiserver to members of the cluster"
+  type        = "string"
+}
+
+variable "anonymous_auth" {
+  description = "Enables anonymous requests to the secure port of the API server"
+  type        = "string"
+}
+
+variable "apiserver_cert_pem" {
+  type        = "string"
+  description = "The API server certificate in PEM format."
+}
+
+variable "apiserver_key_pem" {
+  type        = "string"
+  description = "The API server key in PEM format."
+}
+
+variable "cloud_provider" {
+  description = "The provider for cloud services (empty string for no provider)"
+  type        = "string"
+}
+
+variable "cloud_provider_config" {
+  description = "Content of cloud provider config"
+  type        = "string"
+  default     = ""
+}
+
+variable "cluster_cidr" {
+  description = "A CIDR notation IP range from which to assign pod IPs"
+  type        = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "etcd_tls_enabled" {
+  default = true
+}
+
+variable "etcd_ca_cert_pem" {
+  type        = "string"
+  description = "The etcd CA certificate in PEM format."
+}
+
+variable "etcd_client_cert_pem" {
+  type        = "string"
+  description = "The etcd client certificate in PEM format."
+}
+
+variable "etcd_client_key_pem" {
+  type        = "string"
+  description = "The etcd client key in PEM format."
+}
+
+variable "etcd_endpoints" {
+  description = "List of etcd endpoints to connect with (hostnames/IPs only)"
+  type        = "list"
+}
+
+variable "etcd_peer_cert_pem" {
+  type        = "string"
+  description = "The etcd peer certificate in PEM format."
+}
+
+variable "etcd_peer_key_pem" {
+  type        = "string"
+  description = "The etcd peer key in PEM format."
+}
+
+variable "etcd_server_cert_pem" {
+  type        = "string"
+  description = "The etcd server certificate in PEM format."
+}
+
+variable "etcd_server_key_pem" {
+  type        = "string"
+  description = "The etcd server key in PEM format."
+}
+
+variable "self_hosted_etcd" {
+  type        = "string"
+  description = "See tectonic_self_hosted_etcd in config.tf"
+}
+
+variable "kube_apiserver_url" {
+  description = "URL used to reach kube-apiserver"
+  type        = "string"
+}
+
+variable "kube_ca_cert_pem" {
+  type        = "string"
+  description = "The Kubernetes CA in PEM format."
+}
+
+variable "kubelet_cert_pem" {
+  type        = "string"
+  description = "The kubelet certificate in PEM format."
+}
+
+variable "kubelet_key_pem" {
+  type        = "string"
+  description = "The kubelet key in PEM format."
+}
+
+variable "master_count" {
+  description = "The number of the master nodes"
+  type        = "string"
+}
+
+variable "node_monitor_grace_period" {
+  description = "Amount of time which we allow running Node to be unresponsive before marking it unhealthy. Must be N times more than kubelet's nodeStatusUpdateFrequency, where N means number of retries allowed for kubelet to post node status. N must be stricly > 1."
+  type        = "string"
+  default     = "40s"
+}
+
+variable "oidc_ca_cert" {
+  type = "string"
+}
+
+variable "oidc_client_id" {
+  description = "The client ID for the OpenID Connect client"
+  type        = "string"
+}
+
+variable "oidc_groups_claim" {
+  description = "The OpenID claim to use for specifying user groups (string or array of strings)"
+  type        = "string"
+}
+
+variable "oidc_issuer_url" {
+  description = "The URL of the OpenID issuer, only HTTPS scheme will be accepted"
+  type        = "string"
+}
+
+variable "oidc_username_claim" {
+  description = "The OpenID claim to use as the user name"
+  type        = "string"
+}
+
+variable "pod_eviction_timeout" {
+  description = "The grace period for deleting pods on failed nodes. The eviction process will start after node_monitor_grace_period + pod_eviction_timeout."
+  type        = "string"
+  default     = "5m"
+}
+
+variable "cloud_config_path" {
+  description = "The path to the secret file that contains the cloud config contents. Either be empty ('') or ('/etc/kubernetes/cloud/config')."
+  type        = "string"
+}
+
+variable "etcd_backup_size" {
+  type        = "string"
+  description = "The size of the PersistentVolume used to handle etcd backups"
+}
+
+variable "etcd_backup_storage_class" {
+  type        = "string"
+  description = "The name of the Kubernetes StorageClass that will be used to handle etcd backups"
+}
+
+variable "service_cidr" {
+  description = "A CIDR notation IP range from which to assign service cluster IPs"
+  type        = "string"
+}
+
+variable "versions" {
+  description = "Container versions to use"
+  type        = "map"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootstrap-ssh%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootstrap-ssh%main.tf
new file mode 100644
index 0000000..00cc9a2
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootstrap-ssh%main.tf
@@ -0,0 +1,28 @@
+resource "null_resource" "bootstrapper" {
+  triggers {
+    endpoint     = "${var.bootstrapping_host}"
+    dependencies = "${join("", concat(flatten(var._dependencies)))}"
+  }
+
+  connection {
+    host  = "${var.bootstrapping_host}"
+    user  = "core"
+    agent = true
+  }
+
+  provisioner "file" {
+    when        = "create"
+    source      = "./generated"
+    destination = "$HOME/tectonic"
+  }
+
+  provisioner "remote-exec" {
+    when = "create"
+
+    inline = [
+      "sudo mkdir -p /opt",
+      "sudo rm -rf /opt/tectonic",
+      "sudo mv /home/core/tectonic /opt/",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootstrap-ssh%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootstrap-ssh%variables.tf
new file mode 100644
index 0000000..ceb8fee
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%bootstrap-ssh%variables.tf
@@ -0,0 +1,7 @@
+variable "bootstrapping_host" {
+  type = "string"
+}
+
+variable "_dependencies" {
+  type = "list"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%main.tf
new file mode 100644
index 0000000..b995987
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%main.tf
@@ -0,0 +1,4 @@
+data "external" "version" {
+  count   = "${var.release_version == "latest" ? 1 : 0}"
+  program = ["sh", "-c", "curl https://${var.release_channel}.release.core-os.net/amd64-usr/current/version.txt | sed -n 's/COREOS_VERSION=\\(.*\\)$/{\"version\": \"\\1\"}/p'"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%main.tf-236 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%main.tf-236
new file mode 100644
index 0000000..4e662cb
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%main.tf-236
@@ -0,0 +1,3 @@
+data "external" "version" {
+  program = ["sh", "-c", "curl https://${var.release_channel}.release.core-os.net/amd64-usr/current/version.txt | sed -n 's/COREOS_VERSION=\\(.*\\)$/{\"version\": \"\\1\"}/p'"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%outputs.tf
new file mode 100644
index 0000000..8d9df4a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%outputs.tf
@@ -0,0 +1,13 @@
+locals {
+  // Create a map that matches the structure of the output of the external data source
+  // so we can avoid running the shell script and still parse the output consistently.
+  // Here, we jsonencode because ternaries can only operate on flat data types and
+  // Terraform `merge` and `element` do not play nicely with maps.
+  json = "${var.release_version == "latest" ? jsonencode(data.external.version.*.result) : jsonencode(map("version", var.release_version))}"
+}
+
+output "version" {
+  // Parse out the version from the well-known JSON of format:
+  // {"version":"<version>"}
+  value = "${replace(local.json, "/.*\"version\":\"(.*)\".*/", "$1")}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%outputs.tf-204 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%outputs.tf-204
new file mode 100644
index 0000000..7805bef
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%outputs.tf-204
@@ -0,0 +1,3 @@
+output "version" {
+  value = "${var.release_version == "latest" ? data.external.version.result["version"] : var.release_version}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%variables.tf
new file mode 100644
index 0000000..48a2493
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%variables.tf
@@ -0,0 +1,19 @@
+variable "release_channel" {
+  type = "string"
+
+  description = <<EOF
+The Container Linux update channel.
+
+Examples: `stable`, `beta`, `alpha`
+EOF
+}
+
+variable "release_version" {
+  type = "string"
+
+  description = <<EOF
+The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+
+Examples: `latest`, `1465.6.0`
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%variables.tf-240 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%variables.tf-240
new file mode 100644
index 0000000..48a2493
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%container_linux%variables.tf-240
@@ -0,0 +1,19 @@
+variable "release_channel" {
+  type = "string"
+
+  description = <<EOF
+The Container Linux update channel.
+
+Examples: `stable`, `beta`, `alpha`
+EOF
+}
+
+variable "release_version" {
+  type = "string"
+
+  description = <<EOF
+The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+
+Examples: `latest`, `1465.6.0`
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%dns.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%dns.tf
new file mode 100644
index 0000000..8e5a543
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%dns.tf
@@ -0,0 +1,7 @@
+resource "digitalocean_record" "etcd_nodes" {
+  count  = "${var.droplet_count}"
+  type   = "A"
+  domain = "${var.base_domain}"
+  name   = "${var.cluster_name}-etcd-${count.index}"
+  value  = "${digitalocean_droplet.etcd_node.*.ipv4_address[count.index]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%ignition.tf
new file mode 100644
index 0000000..d4f863d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%ignition.tf
@@ -0,0 +1,49 @@
+data "ignition_config" "etcd" {
+  count = "${length(var.external_endpoints) == 0 ? var.droplet_count : 0}"
+
+  systemd = [
+    "${data.ignition_systemd_unit.locksmithd.*.id[count.index]}",
+    "${var.ign_etcd_dropin_id_list[count.index]}",
+  ]
+
+  files = [
+    "${compact(list(var.ign_profile_env_id, var.ign_systemd_default_env_id,))}",
+    "${var.ign_etcd_crt_id_list}",
+    "${data.ignition_file.node_hostname.*.id[count.index]}",
+    "${var.ign_ntp_dropin_id}",
+  ]
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  count = "${length(var.external_endpoints) == 0 ? var.droplet_count : 0}"
+
+  name    = "locksmithd.service"
+  enabled = true
+
+  dropin = [
+    {
+      name = "40-etcd-lock.conf"
+
+      content = <<EOF
+[Service]
+Environment=REBOOT_STRATEGY=etcd-lock
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.crt\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/client.key\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/client.crt\"" : ""}
+Environment="LOCKSMITHD_ENDPOINT=${var.tls_enabled ? "https" : "http"}://${var.cluster_name}-etcd-${count.index}.${var.base_domain}:2379"
+EOF
+    },
+  ]
+}
+
+data "ignition_file" "node_hostname" {
+  count = "${length(var.external_endpoints) == 0 ? var.droplet_count : 0}"
+
+  path       = "/etc/hostname"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${var.cluster_name}-etcd-${count.index}.${var.base_domain}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%nodes.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%nodes.tf
new file mode 100644
index 0000000..553a8e1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%nodes.tf
@@ -0,0 +1,11 @@
+resource "digitalocean_droplet" "etcd_node" {
+  count = "${length(var.external_endpoints) == 0 ? var.droplet_count : 0}"
+
+  name      = "${var.cluster_name}-etcd-${count.index}"
+  image     = "${var.droplet_image}"
+  region    = "${var.droplet_region}"
+  size      = "${var.droplet_size}"
+  ssh_keys  = ["${var.ssh_keys}"]
+  tags      = ["${var.extra_tags}"]
+  user_data = "${data.ignition_config.etcd.*.rendered[count.index]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%outputs.tf
new file mode 100644
index 0000000..ef23747
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%outputs.tf
@@ -0,0 +1,3 @@
+output "endpoints" {
+  value = ["${digitalocean_record.etcd_nodes.*.fqdn}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%variables.tf
new file mode 100644
index 0000000..0087d23
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%etcd%variables.tf
@@ -0,0 +1,62 @@
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "droplet_count" {
+  type = "string"
+}
+
+variable "droplet_size" {
+  type = "string"
+}
+
+variable "external_endpoints" {
+  type = "list"
+}
+
+variable "extra_tags" {
+  type    = "list"
+  default = []
+}
+
+variable "ssh_keys" {
+  type = "list"
+}
+
+variable "droplet_region" {
+  type = "string"
+}
+
+variable "droplet_image" {
+  type = "string"
+}
+
+variable "ign_etcd_dropin_id_list" {
+  type = "list"
+}
+
+variable "ign_etcd_crt_id_list" {
+  type = "list"
+}
+
+variable "ign_profile_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_systemd_default_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_ntp_dropin_id" {
+  type = "string"
+}
+
+variable "tls_enabled" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%ignition.tf
new file mode 100644
index 0000000..eeb6c24
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%ignition.tf
@@ -0,0 +1,71 @@
+data "ignition_config" "main" {
+  files = [
+    "${compact(list(
+      data.ignition_file.init_assets.id,
+      data.ignition_file.rm_assets.id,
+      var.do_pusher_id,
+      var.ign_installer_kubelet_env_id,
+      var.ign_installer_runtime_mappings_id,
+      var.ign_max_user_watches_id,
+      var.ign_nfs_config_id,
+      var.ign_ntp_dropin_id,
+      var.ign_do_puller_id,
+      var.ign_profile_env_id,
+      var.ign_systemd_default_env_id,
+      var.ign_resolved_conf_id,
+    ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = ["${compact(list(
+    var.ign_bootkube_path_unit_id,
+    var.ign_bootkube_service_id,
+    var.ign_docker_dropin_id,
+    var.ign_init_assets_service_id,
+    var.ign_iscsi_service_id,
+    var.ign_k8s_node_bootstrap_service_id,
+    var.ign_kubelet_service_id,
+    var.ign_locksmithd_service_id,
+    var.ign_rm_assets_path_unit_id,
+    var.ign_rm_assets_service_id,
+    var.ign_tectonic_path_unit_id,
+    var.ign_tectonic_service_id,
+    var.ign_update_ca_certificates_dropin_id,
+   ))}"]
+}
+
+data "template_file" "init_assets" {
+  template = "${file("${path.module}/resources/init-assets.sh")}"
+
+  vars {
+    spaces_bucket = "${var.spaces_bucket}"
+  }
+}
+
+data "ignition_file" "init_assets" {
+  filesystem = "root"
+  path       = "/opt/init-assets.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.init_assets.rendered}"
+  }
+}
+
+data "template_file" "rm_assets" {
+  template = "${file("${path.module}/resources/rm-assets.sh")}"
+
+  vars {
+    spaces_bucket = "${var.spaces_bucket}"
+  }
+}
+
+data "ignition_file" "rm_assets" {
+  filesystem = "root"
+  path       = "/opt/rm-assets.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.rm_assets.rendered}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%loadbalancer.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%loadbalancer.tf
new file mode 100644
index 0000000..b6476c5
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%loadbalancer.tf
@@ -0,0 +1,42 @@
+resource "digitalocean_record" "api" {
+  domain = "${var.base_domain}"
+  type   = "A"
+  name   = "${var.cluster_name}-api"
+  value  = "${digitalocean_floating_ip.master.ip_address}"
+}
+
+resource "digitalocean_loadbalancer" "console" {
+  name   = "${var.cluster_name}-con"
+  region = "${var.droplet_region}"
+
+  forwarding_rule {
+    entry_port      = 80
+    entry_protocol  = "tcp"
+    target_port     = 32001
+    target_protocol = "tcp"
+  }
+
+  forwarding_rule {
+    entry_port      = 443
+    entry_protocol  = "tcp"
+    target_port     = 32000
+    target_protocol = "tcp"
+  }
+
+  healthcheck {
+    port                     = 32002
+    protocol                 = "http"
+    path                     = "/healthz"
+    check_interval_seconds   = 5
+    response_timeout_seconds = 3
+    healthy_threshold        = 2
+    unhealthy_threshold      = 2
+  }
+}
+
+resource "digitalocean_record" "console" {
+  domain = "${var.base_domain}"
+  type   = "A"
+  name   = "${var.cluster_name}"
+  value  = "${digitalocean_loadbalancer.console.ip}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%master.tf
new file mode 100644
index 0000000..98a3c84
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%master.tf
@@ -0,0 +1,44 @@
+resource "digitalocean_floating_ip" "master" {
+  region = "${var.droplet_region}"
+}
+
+resource "null_resource" "tectonic_assets" {
+  # Changes to any asset requires re-provisioning
+  triggers {
+    assets = "${var.assets_id}"
+  }
+
+  provisioner "local-exec" {
+    command = "./generated/bin/do-pusher.sh ${var.assets_path} ${var.spaces_bucket}/assets.zip"
+  }
+}
+
+resource "null_resource" "kubeconfig" {
+  triggers {
+    assets = "${var.kubeconfig_id}"
+  }
+}
+
+resource "digitalocean_droplet" "master_node" {
+  count      = 1
+  depends_on = ["null_resource.tectonic_assets", "null_resource.kubeconfig"]
+  name       = "${var.cluster_name}-master-${count.index}"
+  image      = "${var.droplet_image}"
+  region     = "${var.droplet_region}"
+  size       = "${var.droplet_size}"
+  ssh_keys   = ["${var.ssh_keys}"]
+  tags       = ["${var.extra_tags}"]
+  user_data  = "${data.ignition_config.main.rendered}"
+
+  provisioner "local-exec" {
+    command = "${path.module}/resources/register-master.sh ${var.do_token} ${digitalocean_droplet.master_node.id} ${digitalocean_floating_ip.master.ip_address} ${digitalocean_loadbalancer.console.id}"
+  }
+}
+
+resource "digitalocean_record" "master" {
+  count  = 1
+  domain = "${var.base_domain}"
+  type   = "A"
+  name   = "${var.cluster_name}-master-${count.index}"
+  value  = "${digitalocean_droplet.master_node.ipv4_address}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%outputs.tf
new file mode 100644
index 0000000..e618890
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%outputs.tf
@@ -0,0 +1,7 @@
+output "cluster_fqdn" {
+  value = "${digitalocean_record.api.fqdn}"
+}
+
+output "console_fqdn" {
+  value = "${digitalocean_record.console.fqdn}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%variables.tf
new file mode 100644
index 0000000..55f1f86
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%master%variables.tf
@@ -0,0 +1,96 @@
+variable "do_token" {
+  type = "string"
+}
+
+variable "assets_id" {
+  type = "string"
+}
+
+variable "assets_path" {
+  type = "string"
+}
+
+variable "kubeconfig_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "droplet_size" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  type    = "list"
+  default = []
+}
+
+variable "ssh_keys" {
+  type = "list"
+}
+
+variable "droplet_region" {
+  type = "string"
+}
+
+variable "droplet_image" {
+  type = "string"
+}
+
+variable "ign_do_puller_id" {
+  type = "string"
+}
+
+variable "ign_bootkube_service_id" {
+  type        = "string"
+  description = "The ID of the bootkube systemd service unit"
+}
+
+variable "ign_bootkube_path_unit_id" {
+  type = "string"
+}
+
+variable "ign_tectonic_service_id" {
+  type        = "string"
+  description = "The ID of the tectonic installer systemd service unit"
+}
+
+variable "ign_tectonic_path_unit_id" {
+  type = "string"
+}
+
+variable "spaces_bucket" {
+  type        = "string"
+  description = "Spaces bucket containing files"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "ign_resolved_conf_id" {
+  type = "string"
+}
+
+variable "ign_init_assets_service_id" {
+  type = "string"
+}
+
+variable "ign_rm_assets_service_id" {
+  type = "string"
+}
+
+variable "ign_rm_assets_path_unit_id" {
+  type = "string"
+}
+
+variable "do_pusher_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%ignition.tf
new file mode 100644
index 0000000..83e6b46
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%ignition.tf
@@ -0,0 +1,25 @@
+data "ignition_config" "main" {
+  files = [
+    "${compact(list(
+      var.ign_installer_kubelet_env_id,
+      var.ign_installer_runtime_mappings_id,
+      var.ign_max_user_watches_id,
+      var.ign_nfs_config_id,
+      var.ign_ntp_dropin_id,
+      var.ign_do_puller_id,
+      var.ign_resolved_conf_id,
+      var.ign_profile_env_id,
+      var.ign_systemd_default_env_id,
+    ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = [
+    "${var.ign_docker_dropin_id}",
+    "${var.ign_iscsi_service_id}",
+    "${var.ign_k8s_node_bootstrap_service_id}",
+    "${var.ign_kubelet_service_id}",
+    "${var.ign_locksmithd_service_id}",
+    "${var.ign_update_ca_certificates_dropin_id}",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%variables.tf
new file mode 100644
index 0000000..048ee48
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%variables.tf
@@ -0,0 +1,39 @@
+variable "droplet_count" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "droplet_image" {
+  type = "string"
+}
+
+variable "droplet_region" {
+  type = "string"
+}
+
+variable "droplet_size" {
+  type = "string"
+}
+
+variable "ssh_keys" {
+  type = "list"
+}
+
+variable "extra_tags" {
+  type = "list"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "ign_do_puller_id" {
+  type = "string"
+}
+
+variable "ign_resolved_conf_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%worker.tf
new file mode 100644
index 0000000..0c2e63b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%digitalocean%worker%worker.tf
@@ -0,0 +1,18 @@
+resource "digitalocean_droplet" "worker_node" {
+  count     = "${var.droplet_count}"
+  name      = "${var.cluster_name}-worker-${count.index}"
+  image     = "${var.droplet_image}"
+  region    = "${var.droplet_region}"
+  size      = "${var.droplet_size}"
+  ssh_keys  = ["${var.ssh_keys}"]
+  tags      = ["${var.extra_tags}"]
+  user_data = "${data.ignition_config.main.rendered}"
+}
+
+resource "digitalocean_record" "worker" {
+  count  = "${var.droplet_count}"
+  domain = "${var.base_domain}"
+  type   = "A"
+  name   = "${var.cluster_name}-worker-${count.index}"
+  value  = "${element(digitalocean_droplet.worker_node.*.ipv4_address, count.index)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%azure%records.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%azure%records.tf
new file mode 100644
index 0000000..0b6326b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%azure%records.tf
@@ -0,0 +1,79 @@
+resource "azurerm_dns_a_record" "tectonic_api" {
+  count = "${var.base_domain != "" ? 1 : 0}"
+
+  resource_group_name = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$1")}"
+  zone_name           = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$2")}"
+
+  name    = "${var.cluster_name}-api"
+  ttl     = "60"
+  records = ["${var.api_ip_addresses}"]
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_dns_a_record" "tectonic_console" {
+  count = "${var.base_domain != "" ? 1 : 0}"
+
+  resource_group_name = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$1")}"
+  zone_name           = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$2")}"
+
+  name    = "${var.cluster_name}"
+  ttl     = "60"
+  records = ["${var.console_ip_addresses}"]
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_dns_a_record" "tectonic_etcd" {
+  count = "${var.base_domain != "" ? var.etcd_count : 0}"
+
+  resource_group_name = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$1")}"
+  zone_name           = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$2")}"
+
+  name    = "${var.cluster_name}-etcd-${count.index}"
+  ttl     = "60"
+  records = ["${var.etcd_ip_addresses[count.index]}"]
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_dns_a_record" "tectonic_master" {
+  count = "${var.base_domain != "" ? var.master_count : 0}"
+
+  resource_group_name = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$1")}"
+  zone_name           = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$2")}"
+
+  name    = "${var.cluster_name}-master-${count.index}"
+  ttl     = "60"
+  records = ["${var.master_ip_addresses[count.index]}"]
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
+
+resource "azurerm_dns_a_record" "tectonic_worker" {
+  count = "${var.base_domain != "" ? var.worker_count : 0}"
+
+  resource_group_name = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$1")}"
+  zone_name           = "${replace(var.external_dns_zone_id, "${var.const_id_to_group_name_regex}", "$2")}"
+
+  name    = "${var.cluster_name}-worker-${count.index}"
+  ttl     = "60"
+  records = ["${var.worker_ip_addresses[count.index]}"]
+
+  tags = "${merge(map(
+    "Name", "${var.cluster_name}",
+    "tectonicClusterID", "${var.cluster_id}"),
+    var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%azure%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%azure%variables.tf
new file mode 100644
index 0000000..0951bcf
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%azure%variables.tf
@@ -0,0 +1,67 @@
+// This var is for internal use only.
+// It is to be considered a constant, because Terraform can't acutally define constants.
+variable "const_id_to_group_name_regex" {
+  default     = "/^/subscriptions/[-\\w]+/resourceGroups/([\\w()-\\.]+)/providers/[.\\w]+/[.\\w]+/([.\\w-]+)$/"
+  type        = "string"
+  description = "(internal) A regular expression that parses Azure resource IDs into component identifiers."
+}
+
+// Location is the Azure Location (East US, West US, etc)
+variable "location" {
+  type = "string"
+}
+
+// The base DNS domain of the cluster.
+// Example: `azure.dev.coreos.systems`
+variable "base_domain" {
+  type = "string"
+}
+
+// The name of the cluster.
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "master_ip_addresses" {
+  type = "list"
+}
+
+variable "worker_ip_addresses" {
+  type = "list"
+}
+
+variable "console_ip_addresses" {
+  type = "list"
+}
+
+variable "etcd_ip_addresses" {
+  type = "list"
+}
+
+variable "api_ip_addresses" {
+  type = "list"
+}
+
+variable "external_dns_zone_id" {
+  type = "string"
+}
+
+variable "etcd_count" {
+  type = "string"
+}
+
+variable "master_count" {
+  type = "string"
+}
+
+variable "worker_count" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  type = "map"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%ddns%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%ddns%main.tf
new file mode 100644
index 0000000..2a6b564
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%ddns%main.tf
@@ -0,0 +1,55 @@
+provider "dns" {
+  version = "1.0.0"
+
+  update {
+    server        = "${var.dns_server}"
+    key_name      = "${var.dns_key_name}"
+    key_algorithm = "${var.dns_key_algorithm}"
+    key_secret    = "${var.dns_key_secret}"
+  }
+}
+
+resource "dns_a_record_set" "tectonic-api" {
+  count = "${var.base_domain != "" ? 1 : 0}"
+  zone  = "${var.base_domain}."
+
+  name      = "${var.cluster_name}-api"
+  ttl       = "60"
+  addresses = ["${var.api_ip_addresses}"]
+}
+
+resource "dns_a_record_set" "tectonic-console" {
+  count = "${var.base_domain != "" ? 1 : 0}"
+  zone  = "${var.base_domain}."
+
+  name      = "${var.cluster_name}"
+  ttl       = "60"
+  addresses = ["${var.console_ip_addresses}"]
+}
+
+resource "dns_a_record_set" "tectonic-etcd" {
+  count = "${var.base_domain != "" ? var.etcd_count : 0}"
+  zone  = "${var.base_domain}."
+
+  name      = "${var.cluster_name}-etcd-${count.index}"
+  ttl       = "60"
+  addresses = ["${var.etcd_ip_addresses[count.index]}"]
+}
+
+resource "dns_a_record_set" "tectonic-master" {
+  count = "${var.base_domain != "" ? var.master_count : 0}"
+  zone  = "${var.base_domain}."
+
+  name      = "${var.cluster_name}-master-${count.index}"
+  ttl       = "60"
+  addresses = ["${var.master_ip_addresses[count.index]}"]
+}
+
+resource "dns_a_record_set" "tectonic-worker" {
+  count = "${var.base_domain != "" ? var.worker_count : 0}"
+  zone  = "${var.base_domain}."
+
+  name      = "${var.cluster_name}-worker-${count.index}"
+  ttl       = "60"
+  addresses = ["${var.worker_ip_addresses[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%ddns%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%ddns%variables.tf
new file mode 100644
index 0000000..fcea96c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%ddns%variables.tf
@@ -0,0 +1,56 @@
+variable "dns_server" {
+  type = "string"
+}
+
+variable "dns_key_name" {
+  type = "string"
+}
+
+variable "dns_key_algorithm" {
+  type = "string"
+}
+
+variable "dns_key_secret" {
+  type = "string"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+// The name of the cluster.
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "master_ip_addresses" {
+  type = "list"
+}
+
+variable "worker_ip_addresses" {
+  type = "list"
+}
+
+variable "console_ip_addresses" {
+  type = "list"
+}
+
+variable "etcd_ip_addresses" {
+  type = "list"
+}
+
+variable "api_ip_addresses" {
+  type = "list"
+}
+
+variable "etcd_count" {
+  type = "string"
+}
+
+variable "master_count" {
+  type = "string"
+}
+
+variable "worker_count" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%etcd.tf
new file mode 100644
index 0000000..2c9b7a3
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%etcd.tf
@@ -0,0 +1,26 @@
+resource "openstack_dns_recordset_v2" "etcd_a_nodes" {
+  count   = "${var.self_hosted_etcd != "" ? 0 : var.etcd_count}"
+  type    = "A"
+  ttl     = "60"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  name    = "${var.cluster_name}-etcd-${count.index}.${var.base_domain}."
+  records = ["${var.etcd_ip_addresses[count.index]}"]
+}
+
+resource "openstack_dns_recordset_v2" "etcd_srv_discover" {
+  count   = "${var.self_hosted_etcd != "" ? 0 : 1}"
+  name    = "${var.etcd_tls_enabled ? "_etcd-server-ssl._tcp" : "_etcd-server._tcp"}.${var.base_domain}."
+  type    = "SRV"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  records = ["${formatlist("0 0 2380 %s", openstack_dns_recordset_v2.etcd_a_nodes.*.name)}"]
+  ttl     = "300"
+}
+
+resource "openstack_dns_recordset_v2" "etcd_srv_client" {
+  count   = "${var.self_hosted_etcd != "" ? 0 : 1}"
+  name    = "${var.etcd_tls_enabled ? "_etcd-client-ssl._tcp" : "_etcd-client._tcp"}.${var.base_domain}."
+  type    = "SRV"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  records = ["${formatlist("0 0 2379 %s", openstack_dns_recordset_v2.etcd_a_nodes.*.name)}"]
+  ttl     = "60"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%master.tf
new file mode 100644
index 0000000..53b5a8f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%master.tf
@@ -0,0 +1,8 @@
+resource "openstack_dns_recordset_v2" "master_nodes" {
+  count   = "${var.master_count}"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  name    = "${var.cluster_name}-master-${count.index}.${var.base_domain}."
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.master_ip_addresses[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%outputs.tf
new file mode 100644
index 0000000..a0d44ea
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%outputs.tf
@@ -0,0 +1,15 @@
+output "etcd_a_nodes" {
+  value = "${flatten(openstack_dns_recordset_v2.etcd_a_nodes.*.records)}"
+}
+
+output "master_nodes" {
+  value = "${flatten(openstack_dns_recordset_v2.master_nodes.*.records)}"
+}
+
+output "worker_nodes" {
+  value = "${flatten(openstack_dns_recordset_v2.worker_nodes.*.records)}"
+}
+
+output "worker_nodes_public" {
+  value = "${flatten(openstack_dns_recordset_v2.worker_nodes_public.*.records)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%tectonic.tf
new file mode 100644
index 0000000..b2a878c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%tectonic.tf
@@ -0,0 +1,21 @@
+data "openstack_dns_zone_v2" "tectonic" {
+  name = "${var.base_domain}."
+}
+
+resource "openstack_dns_recordset_v2" "tectonic-api" {
+  count   = "1"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  name    = "${var.cluster_name}-k8s.${var.base_domain}."
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.api_ip_addresses}"]
+}
+
+resource "openstack_dns_recordset_v2" "tectonic-console" {
+  count   = "${var.tectonic_vanilla_k8s ? 0 : 1}"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  name    = "${var.cluster_name}.${var.base_domain}."
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_ip_addresses}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%variables.tf
new file mode 100644
index 0000000..99a9e81
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%variables.tf
@@ -0,0 +1,75 @@
+variable "etcd_tls_enabled" {
+  description = "Indicates whether TLS is used for etcd"
+  type        = "string"
+  default     = "1"
+}
+
+variable "cluster_name" {
+  description = "The name of the cluster"
+  type        = "string"
+}
+
+variable "base_domain" {
+  description = "The base domain used in records"
+  type        = "string"
+}
+
+variable "master_count" {
+  description = "The number of masters"
+  type        = "string"
+}
+
+variable "worker_count" {
+  description = "The number of workers"
+  type        = "string"
+}
+
+variable "etcd_count" {
+  description = "The number of etcd nodes"
+  type        = "string"
+}
+
+variable "etcd_ip_addresses" {
+  description = "List of string IPs for etcd nodes"
+  type        = "list"
+}
+
+variable "master_ip_addresses" {
+  description = "List of string IPs for masters"
+  type        = "list"
+}
+
+variable "worker_ip_addresses" {
+  description = "List of string IPs for workers"
+  type        = "list"
+}
+
+variable "worker_public_ips" {
+  description = "(optional) List of string public IPs for workers"
+  type        = "list"
+  default     = []
+}
+
+// hack: worker_public_ips_enabled is a workaround for https://github.com/hashicorp/terraform/issues/10857
+variable "worker_public_ips_enabled" {
+  description = "Worker nodes have public IPs assigned. worker_public_ips must be provided if true."
+  default     = true
+}
+
+variable "api_ip_addresses" {
+  description = "List of string IPs for k8s API"
+  type        = "list"
+}
+
+variable "self_hosted_etcd" {
+  default     = ""
+  description = "See tectonic_self_hosted_etcd in config.tf"
+}
+
+variable "tectonic_vanilla_k8s" {
+  default = false
+
+  description = <<EOF
+If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%worker.tf
new file mode 100644
index 0000000..9934820
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%designate%worker.tf
@@ -0,0 +1,18 @@
+resource "openstack_dns_recordset_v2" "worker_nodes" {
+  count   = "${var.worker_count}"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  name    = "${var.cluster_name}-worker-${count.index}.${var.base_domain}."
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_ip_addresses[count.index]}"]
+}
+
+resource "openstack_dns_recordset_v2" "worker_nodes_public" {
+  // hack: worker_public_ips_enabled is a workaround for https://github.com/hashicorp/terraform/issues/10857
+  count   = "${var.worker_public_ips_enabled ? var.worker_count : 0}"
+  zone_id = "${data.openstack_dns_zone_v2.tectonic.id}"
+  name    = "${var.cluster_name}-worker-${count.index}-public.${var.base_domain}."
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_public_ips[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%outputs.tf
new file mode 100644
index 0000000..50719cf
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%outputs.tf
@@ -0,0 +1,13 @@
+output "etcd_ip_fqdn_list" {
+  value = ["${split(",", length(var.external_endpoints) == 0 ? join(",", google_dns_record_set.etc_a_node.*.name) : join(",", var.external_endpoints))}"]
+}
+
+output "kube_apiserver_fqdn" {
+  # Remove trailing dot from the name
+  value = "${join(".", compact(split(".", google_dns_record_set.api-external.name)))}"
+}
+
+output "kube_ingress_fqdn" {
+  # Remove trailing dot from the name
+  value = "${join(".", compact(split(".", google_dns_record_set.ingress-external.name)))}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%records.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%records.tf
new file mode 100644
index 0000000..096d937
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%records.tf
@@ -0,0 +1,25 @@
+resource "google_dns_record_set" "api-external" {
+  name         = "${var.cluster_name}-api.${var.base_domain}."
+  type         = "A"
+  ttl          = 300
+  managed_zone = "${var.managed_zone_name}"
+  rrdatas      = ["${var.tectonic_masters_ip}"]
+}
+
+resource "google_dns_record_set" "ingress-external" {
+  name         = "${var.cluster_name}.${var.base_domain}."
+  type         = "A"
+  ttl          = 300
+  managed_zone = "${var.managed_zone_name}"
+  rrdatas      = ["${var.tectonic_ingress_ip}"]
+}
+
+# Etcd
+resource "google_dns_record_set" "etc_a_node" {
+  count        = "${var.etcd_dns_enabled ? var.etcd_instance_count : 0}"
+  type         = "A"
+  ttl          = "60"
+  managed_zone = "${var.managed_zone_name}"
+  name         = "${var.cluster_name}-etcd-${count.index}.${var.base_domain}."
+  rrdatas      = ["${var.etcd_ip_addresses[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%variables.tf
new file mode 100644
index 0000000..f5c4a65
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%gcp%variables.tf
@@ -0,0 +1,48 @@
+variable "cluster_name" {
+  description = "The name of the cluster"
+  type        = "string"
+}
+
+variable "etcd_dns_enabled" {
+  description = "The name of the cluster"
+  type        = "string"
+}
+
+variable "tls_enabled" {
+  description = "The name of the cluster"
+  type        = "string"
+}
+
+variable "etcd_instance_count" {
+  description = "The number of etcd nods"
+  type        = "string"
+}
+
+variable "managed_zone_name" {
+  description = "The name of the managed zone"
+  type        = "string"
+}
+
+variable "etcd_ip_addresses" {
+  description = "The list of etcd nodes addresses"
+  type        = "list"
+}
+
+variable "base_domain" {
+  description = "The base domain used in records"
+  type        = "string"
+}
+
+variable "external_endpoints" {
+  type = "list"
+}
+
+variable "tectonic_masters_ip" {
+  description = "The master load balancer ip"
+  type        = "string"
+}
+
+variable "tectonic_ingress_ip" {
+  description = "The ingress load balancer ip"
+  type        = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%outputs.tf
new file mode 100644
index 0000000..380e379
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%outputs.tf
@@ -0,0 +1,26 @@
+output "etcd_a_nodes" {
+  value = "${powerdns_record.etcd.*.name}"
+}
+
+# We have to do this join() & split() 'trick' because the ternary operator can't output lists.
+# https://github.com/hashicorp/terraform/issues/11566#issuecomment-289417805
+output "etcd_endpoints" {
+  value = ["${split(",", length(var.external_endpoints) == 0 ? join(",", powerdns_record.etcd.*.name) : join(",", var.external_endpoints))}"]
+}
+
+output "ingress_external_fqdn" {
+  # Remove "." at the end of each name
+  value = "${replace(replace(join(";", powerdns_record.ingress_public.*.name), "/[.];/", " "), "/[.]$/", "")}"
+}
+
+output "ingress_internal_fqdn" {
+  value = "${replace(replace(join(";", powerdns_record.ingress_private.*.name), "/[.];/", " "), "/[.]$/", "")}"
+}
+
+output "api_external_fqdn" {
+  value = "${replace(replace(join(";", powerdns_record.api_external.*.name), "/[.];/", " "), "/[.]$/", "")}"
+}
+
+output "api_internal_fqdn" {
+  value = "${replace(replace(join(";", powerdns_record.api_internal.*.name), "/[.];/", " "), "/[.]$/", "")}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%records.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%records.tf
new file mode 100644
index 0000000..67cb606
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%records.tf
@@ -0,0 +1,54 @@
+provider "powerdns" {
+  version    = "0.1.0"
+  api_key    = "${var.api_key}"
+  server_url = "${var.api_url}"
+}
+
+resource "powerdns_record" "api_internal" {
+  count = "${var.tectonic_private_endpoints}"
+  zone  = "${var.base_domain}"
+  name  = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}-api.${var.base_domain}."
+  ttl   = 60
+  type  = "ALIAS"
+
+  records = ["${var.api_internal_elb_dns_name}."]
+}
+
+resource "powerdns_record" "api_external" {
+  count   = "${var.tectonic_public_endpoints}"
+  zone    = "${var.base_domain}"
+  name    = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}-api.${var.base_domain}."
+  type    = "ALIAS"
+  ttl     = 60
+  records = ["${var.api_external_elb_dns_name}."]
+}
+
+resource "powerdns_record" "ingress_public" {
+  count   = "${var.tectonic_public_endpoints}"
+  zone    = "${var.base_domain}"
+  name    = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}.${var.base_domain}."
+  type    = "ALIAS"
+  ttl     = 60
+  records = ["${var.console_elb_dns_name}."]
+}
+
+resource "powerdns_record" "ingress_private" {
+  count = "${var.tectonic_private_endpoints}"
+  zone  = "${var.base_domain}"
+  name  = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}.${var.base_domain}."
+  type  = "ALIAS"
+  ttl   = 60
+
+  records = [
+    "${var.console_elb_dns_name}.",
+  ]
+}
+
+resource "powerdns_record" "etcd" {
+  count   = "${var.etcd_count}"
+  zone    = "${var.base_domain}"
+  name    = "${var.cluster_name}-etcd-${count.index}.${var.base_domain}."
+  type    = "A"
+  ttl     = 60
+  records = ["${var.etcd_ip_addresses[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%variables.tf
new file mode 100644
index 0000000..4d9a53f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%powerdns%variables.tf
@@ -0,0 +1,186 @@
+variable "etcd_tls_enabled" {
+  description = "Indicates whether TLS is used for etcd"
+  type        = "string"
+  default     = "1"
+}
+
+variable "cluster_name" {
+  description = "The name of the cluster"
+  type        = "string"
+}
+
+variable "base_domain" {
+  description = "The base domain used in records"
+  type        = "string"
+}
+
+variable "master_count" {
+  description = "The number of masters"
+  type        = "string"
+}
+
+variable "worker_count" {
+  description = "The number of workers"
+  type        = "string"
+  default     = "0"
+}
+
+variable "etcd_count" {
+  description = "The number of etcd nodes"
+  type        = "string"
+}
+
+variable "etcd_ip_addresses" {
+  description = "List of string IPs for etcd nodes"
+  type        = "list"
+}
+
+variable "master_ip_addresses" {
+  description = "List of string IPs for masters"
+  type        = "list"
+  default     = []
+}
+
+variable "worker_ip_addresses" {
+  description = "List of string IPs for workers"
+  type        = "list"
+  default     = []
+}
+
+variable "cluster_id" {
+  description = "Cluster ID"
+  type        = "string"
+}
+
+variable "external_endpoints" {
+  type = "list"
+
+  description = <<EOF
+  (optional) List of external etcd v3 servers to connect with (hostnames/IPs only).
+Needs to be set if using an external etcd cluster.
+EOF
+}
+
+variable "worker_public_ips" {
+  description = "(optional) List of string public IPs for workers"
+  type        = "list"
+  default     = []
+}
+
+// hack: worker_public_ips_enabled is a workaround for https://github.com/hashicorp/terraform/issues/10857
+variable "worker_public_ips_enabled" {
+  description = "Worker nodes have public IPs assigned. worker_public_ips must be provided if true."
+  default     = true
+}
+
+variable "api_ip_addresses" {
+  description = "List of string IPs for k8s API"
+  type        = "list"
+}
+
+variable "self_hosted_etcd" {
+  default     = ""
+  description = "See tectonic_self_hosted_etcd in config.tf"
+}
+
+variable "tectonic_vanilla_k8s" {
+  description = <<EOF
+If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+EOF
+}
+
+variable "tectonic_extra_tags" {
+  type        = "map"
+  description = "(optional) Extra tags to be applied to created resources."
+}
+
+variable "custom_dns_name" {
+  type        = "string"
+  default     = ""
+  description = "DNS prefix used to construct the console and API server endpoints."
+}
+
+// AWS specific internal zone variables
+
+variable "elb_alias_enabled" {
+  description = <<EOF
+(optional) Whether to create an aliased record set to ELB endpoints.
+Refer to http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html
+for additional information.
+EOF
+
+  default = false
+}
+
+variable "tectonic_external_vpc_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) ID of an existing VPC to launch nodes into.
+If unset a new VPC is created.
+
+Example: `vpc-123456`
+EOF
+}
+
+variable "tectonic_private_endpoints" {
+  description = <<EOF
+(optional) If set to true, create private-facing ingress resources (ELB, A-records).
+If set to false, no private-facing ingress resources will be provisioned and all DNS records will be created in the public Route53 zone.
+EOF
+}
+
+variable "tectonic_public_endpoints" {
+  description = <<EOF
+(optional) If set to true, create public-facing ingress resources (ELB, A-records).
+If set to false, no public-facing ingress resources will be created.
+EOF
+}
+
+variable "tectonic_external_private_zone" {
+  description = <<EOF
+(optional) If set, the given Route53 zone ID will be used as the internal (private) zone.
+This zone will be used to create etcd DNS records as well as internal API and internal Ingress records.
+If set, no additional private zone will be created.
+
+# Example: `"Z1ILINNUJGTAO1"`
+EOF
+}
+
+variable "api_external_elb_dns_name" {
+  description = "External API's ELB DNS name"
+  type        = "string"
+}
+
+variable "api_external_elb_zone_id" {
+  description = "External API's ELB Zone ID"
+  type        = "string"
+}
+
+variable "api_internal_elb_dns_name" {
+  description = "Internal API's ELB DNS name"
+  type        = "string"
+}
+
+variable "api_internal_elb_zone_id" {
+  description = "Internal API's ELB Zone ID"
+  type        = "string"
+}
+
+variable "console_elb_dns_name" {
+  description = "Console's ELB DNS name"
+  type        = "string"
+}
+
+variable "console_elb_zone_id" {
+  description = "Console's ELB Zone ID"
+  type        = "string"
+}
+
+variable "api_url" {
+  type = "string"
+}
+
+variable "api_key" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%etcd.tf
new file mode 100644
index 0000000..578a2be
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%etcd.tf
@@ -0,0 +1,8 @@
+resource "aws_route53_record" "etcd_a_nodes" {
+  count   = "${var.self_hosted_etcd != "" ? 0 : var.etcd_count}"
+  type    = "A"
+  ttl     = "60"
+  zone_id = "${local.zone_id}"
+  name    = "${var.cluster_name}-etcd-${count.index}"
+  records = ["${var.etcd_ip_addresses[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%master.tf
new file mode 100644
index 0000000..bed1331
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%master.tf
@@ -0,0 +1,8 @@
+resource "aws_route53_record" "master_nodes" {
+  count   = "${var.elb_alias_enabled ? 0 : var.master_count}"
+  zone_id = "${data.aws_route53_zone.tectonic.zone_id}"
+  name    = "${var.cluster_name}-master-${count.index}"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.master_ip_addresses[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%master.tf-154 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%master.tf-154
new file mode 100644
index 0000000..bed1331
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%master.tf-154
@@ -0,0 +1,8 @@
+resource "aws_route53_record" "master_nodes" {
+  count   = "${var.elb_alias_enabled ? 0 : var.master_count}"
+  zone_id = "${data.aws_route53_zone.tectonic.zone_id}"
+  name    = "${var.cluster_name}-master-${count.index}"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.master_ip_addresses[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%outputs.tf
new file mode 100644
index 0000000..13d7fc8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%outputs.tf
@@ -0,0 +1,35 @@
+output "worker_nodes" {
+  value = "${aws_route53_record.worker_nodes.*.fqdn}"
+}
+
+output "worker_nodes_public" {
+  value = "${aws_route53_record.worker_nodes_public.*.fqdn}"
+}
+
+output "master_nodes" {
+  value = "${aws_route53_record.master_nodes.*.fqdn}"
+}
+
+output "ingress_external_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_ingress_public.*.name, list("")), 0)}"
+}
+
+output "ingress_internal_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_ingress_private.*.name, list("")), 0)}"
+}
+
+output "routes_external_fqdn" {
+  value = "${element(concat(aws_route53_record.routes_ingress_public.*.name, list("")), 0)}"
+}
+
+output "routes_internal_fqdn" {
+  value = "${element(concat(aws_route53_record.routes_ingress_private.*.name, list("")), 0)}"
+}
+
+output "api_external_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_api_external.*.name, list("")), 0)}"
+}
+
+output "api_internal_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_api_internal.*.name, list("")), 0)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%outputs.tf-268 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%outputs.tf-268
new file mode 100644
index 0000000..1d92ac7
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%outputs.tf-268
@@ -0,0 +1,36 @@
+output "etcd_a_nodes" {
+  value = "${aws_route53_record.etcd_a_nodes.*.fqdn}"
+}
+
+# We have to do this join() & split() 'trick' because the ternary operator can't output lists.
+output "etcd_endpoints" {
+  value = ["${split(",", length(var.external_endpoints) == 0 ? join(",", aws_route53_record.etcd_a_nodes.*.fqdn) : join(",", var.external_endpoints))}"]
+}
+
+output "worker_nodes" {
+  value = "${aws_route53_record.worker_nodes.*.fqdn}"
+}
+
+output "worker_nodes_public" {
+  value = "${aws_route53_record.worker_nodes_public.*.fqdn}"
+}
+
+output "master_nodes" {
+  value = "${aws_route53_record.master_nodes.*.fqdn}"
+}
+
+output "ingress_external_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_ingress_public.*.name, list("")), 0)}"
+}
+
+output "ingress_internal_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_ingress_private.*.name, list("")), 0)}"
+}
+
+output "api_external_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_api_external.*.name, list("")), 0)}"
+}
+
+output "api_internal_fqdn" {
+  value = "${element(concat(aws_route53_record.tectonic_api_internal.*.name, list("")), 0)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%tectonic.tf
new file mode 100644
index 0000000..78772f4
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%tectonic.tf
@@ -0,0 +1,112 @@
+locals {
+  public_endpoints_count  = "${var.public_endpoints ? 1 : 0}"
+  private_endpoints_count = "${var.private_endpoints ? 1 : 0}"
+}
+
+data "aws_route53_zone" "tectonic" {
+  name = "${var.base_domain}"
+}
+
+locals {
+  public_zone_id = "${join("", data.aws_route53_zone.tectonic.*.zone_id)}"
+
+  zone_id = "${var.private_endpoints ?
+                      var.private_zone_id :
+                      local.public_zone_id}"
+}
+
+resource "aws_route53_record" "tectonic_api" {
+  count   = "${var.elb_alias_enabled ? 0 : 1}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.cluster_name}-k8s"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.api_ip_addresses}"]
+}
+
+resource "aws_route53_record" "tectonic_api_external" {
+  count   = "${var.elb_alias_enabled ? local.public_endpoints_count : 0}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.cluster_name}-api.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.api_external_elb_dns_name}"
+    zone_id                = "${var.api_external_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "tectonic_api_internal" {
+  count   = "${var.elb_alias_enabled ? local.private_endpoints_count : 0}"
+  zone_id = "${var.private_zone_id}"
+  name    = "${var.cluster_name}-api.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.api_internal_elb_dns_name}"
+    zone_id                = "${var.api_internal_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "tectonic-console" {
+  count   = "${var.elb_alias_enabled ? 0 : 1}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.cluster_name}"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_ip_addresses}"]
+}
+
+resource "aws_route53_record" "tectonic_ingress_public" {
+  count   = "${var.elb_alias_enabled ? local.public_endpoints_count : 0}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.cluster_name}.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.console_elb_dns_name}"
+    zone_id                = "${var.console_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "tectonic_ingress_private" {
+  count   = "${var.elb_alias_enabled ? local.private_endpoints_count : 0}"
+  zone_id = "${var.private_zone_id}"
+  name    = "${var.cluster_name}.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.console_elb_dns_name}"
+    zone_id                = "${var.console_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "routes_ingress_public" {
+  count   = "${var.elb_alias_enabled ? local.public_endpoints_count : 0}"
+  zone_id = "${local.public_zone_id}"
+  name    = "*.${var.cluster_name}.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.console_elb_dns_name}"
+    zone_id                = "${var.console_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "routes_ingress_private" {
+  count   = "${var.elb_alias_enabled ? local.private_endpoints_count : 0}"
+  zone_id = "${var.private_zone_id}"
+  name    = "*.${var.cluster_name}.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.console_elb_dns_name}"
+    zone_id                = "${var.console_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%tectonic.tf-253 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%tectonic.tf-253
new file mode 100644
index 0000000..3677107
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%tectonic.tf-253
@@ -0,0 +1,98 @@
+data "aws_route53_zone" "tectonic" {
+  name = "${var.base_domain}"
+}
+
+locals {
+  private_zone_id = "${var.tectonic_external_private_zone == "" ?
+                        join("", aws_route53_zone.tectonic_int.*.zone_id) :
+                        var.tectonic_external_private_zone}"
+
+  public_zone_id = "${join("", data.aws_route53_zone.tectonic.*.zone_id)}"
+
+  zone_id = "${var.tectonic_private_endpoints ?
+                      local.private_zone_id :
+                      local.public_zone_id}"
+}
+
+resource "aws_route53_zone" "tectonic_int" {
+  count         = "${var.tectonic_private_endpoints ? "${var.tectonic_external_private_zone == "" ? 1 : 0 }" : 0}"
+  vpc_id        = "${var.tectonic_external_vpc_id}"
+  name          = "${var.base_domain}"
+  force_destroy = true
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}_tectonic_int_zone",
+      "KubernetesCluster", "${var.cluster_name}",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.tectonic_extra_tags)}"
+}
+
+resource "aws_route53_record" "tectonic_api" {
+  count   = "${var.elb_alias_enabled ? 0 : 1}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.cluster_name}-k8s"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.api_ip_addresses}"]
+}
+
+resource "aws_route53_record" "tectonic_api_external" {
+  count   = "${var.elb_alias_enabled ? var.tectonic_public_endpoints : 0}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}-api.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.api_external_elb_dns_name}"
+    zone_id                = "${var.api_external_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "tectonic_api_internal" {
+  count   = "${var.elb_alias_enabled ? var.tectonic_private_endpoints : 0}"
+  zone_id = "${local.private_zone_id}"
+  name    = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}-api.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.api_internal_elb_dns_name}"
+    zone_id                = "${var.api_internal_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "tectonic-console" {
+  count   = "${var.tectonic_vanilla_k8s ? 0 : var.elb_alias_enabled ? 0 : 1}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.cluster_name}"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_ip_addresses}"]
+}
+
+resource "aws_route53_record" "tectonic_ingress_public" {
+  count   = "${var.elb_alias_enabled ? var.tectonic_public_endpoints : 0}"
+  zone_id = "${local.public_zone_id}"
+  name    = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.console_elb_dns_name}"
+    zone_id                = "${var.console_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
+
+resource "aws_route53_record" "tectonic_ingress_private" {
+  count   = "${var.elb_alias_enabled ? var.tectonic_private_endpoints : 0}"
+  zone_id = "${local.private_zone_id}"
+  name    = "${var.custom_dns_name == "" ? var.cluster_name : var.custom_dns_name}.${var.base_domain}"
+  type    = "A"
+
+  alias {
+    name                   = "${var.console_elb_dns_name}"
+    zone_id                = "${var.console_elb_zone_id}"
+    evaluate_target_health = true
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%variables.tf
new file mode 100644
index 0000000..9bc319f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%variables.tf
@@ -0,0 +1,131 @@
+variable "cluster_id" {
+  description = "Cluster ID"
+  type        = "string"
+}
+
+variable "cluster_name" {
+  description = "The name of the cluster"
+  type        = "string"
+}
+
+variable "base_domain" {
+  description = "The base domain used in records"
+  type        = "string"
+}
+
+variable "master_count" {
+  description = "The number of masters"
+  type        = "string"
+}
+
+variable "worker_count" {
+  description = "The number of workers"
+  type        = "string"
+  default     = "0"
+}
+
+variable "master_ip_addresses" {
+  description = "List of string IPs for masters"
+  type        = "list"
+  default     = []
+}
+
+variable "worker_ip_addresses" {
+  description = "List of string IPs for workers"
+  type        = "list"
+  default     = []
+}
+
+variable "worker_public_ips" {
+  description = "(optional) List of string public IPs for workers"
+  type        = "list"
+  default     = []
+}
+
+// hack: worker_public_ips_enabled is a workaround for https://github.com/hashicorp/terraform/issues/10857
+variable "worker_public_ips_enabled" {
+  description = "Worker nodes have public IPs assigned. worker_public_ips must be provided if true."
+  default     = true
+}
+
+variable "api_ip_addresses" {
+  description = "List of string IPs for k8s API"
+  type        = "list"
+}
+
+variable "extra_tags" {
+  type        = "map"
+  description = "Extra tags to be applied to created resources."
+}
+
+// AWS specific internal zone variables
+
+variable "elb_alias_enabled" {
+  description = <<EOF
+(optional) Whether to create an aliased record set to ELB endpoints.
+Refer to http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html
+for additional information.
+EOF
+
+  default = false
+}
+
+variable "external_vpc_id" {
+  type = "string"
+
+  description = <<EOF
+ID of an existing VPC to launch nodes into.
+If unset a new VPC is created.
+
+Example: `vpc-123456`
+EOF
+}
+
+variable "private_endpoints" {
+  description = <<EOF
+If set to true, create private-facing ingress resources (ELB, A-records).
+If set to false, no private-facing ingress resources will be provisioned and all DNS records will be created in the public Route53 zone.
+EOF
+}
+
+variable "public_endpoints" {
+  description = <<EOF
+If set to true, create public-facing ingress resources (ELB, A-records).
+If set to false, no public-facing ingress resources will be created.
+EOF
+}
+
+variable "private_zone_id" {
+  description = "Route53 Private Zone ID"
+  type        = "string"
+}
+
+variable "api_external_elb_dns_name" {
+  description = "External API's ELB DNS name"
+  type        = "string"
+}
+
+variable "api_external_elb_zone_id" {
+  description = "External API's ELB Zone ID"
+  type        = "string"
+}
+
+variable "api_internal_elb_dns_name" {
+  description = "Internal API's ELB DNS name"
+  type        = "string"
+}
+
+variable "api_internal_elb_zone_id" {
+  description = "Internal API's ELB Zone ID"
+  type        = "string"
+}
+
+variable "console_elb_dns_name" {
+  description = "Console's ELB DNS name"
+  type        = "string"
+}
+
+variable "console_elb_zone_id" {
+  description = "Console's ELB Zone ID"
+  type        = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%variables.tf-142 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%variables.tf-142
new file mode 100644
index 0000000..d3e67f5
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%variables.tf-142
@@ -0,0 +1,178 @@
+variable "etcd_tls_enabled" {
+  description = "Indicates whether TLS is used for etcd"
+  type        = "string"
+  default     = "1"
+}
+
+variable "cluster_name" {
+  description = "The name of the cluster"
+  type        = "string"
+}
+
+variable "base_domain" {
+  description = "The base domain used in records"
+  type        = "string"
+}
+
+variable "master_count" {
+  description = "The number of masters"
+  type        = "string"
+}
+
+variable "worker_count" {
+  description = "The number of workers"
+  type        = "string"
+  default     = "0"
+}
+
+variable "etcd_count" {
+  description = "The number of etcd nodes"
+  type        = "string"
+}
+
+variable "etcd_ip_addresses" {
+  description = "List of string IPs for etcd nodes"
+  type        = "list"
+}
+
+variable "master_ip_addresses" {
+  description = "List of string IPs for masters"
+  type        = "list"
+  default     = []
+}
+
+variable "worker_ip_addresses" {
+  description = "List of string IPs for workers"
+  type        = "list"
+  default     = []
+}
+
+variable "cluster_id" {
+  description = "Cluster ID"
+  type        = "string"
+}
+
+variable "external_endpoints" {
+  type = "list"
+
+  description = <<EOF
+  (optional) List of external etcd v3 servers to connect with (hostnames/IPs only).
+Needs to be set if using an external etcd cluster.
+EOF
+}
+
+variable "worker_public_ips" {
+  description = "(optional) List of string public IPs for workers"
+  type        = "list"
+  default     = []
+}
+
+// hack: worker_public_ips_enabled is a workaround for https://github.com/hashicorp/terraform/issues/10857
+variable "worker_public_ips_enabled" {
+  description = "Worker nodes have public IPs assigned. worker_public_ips must be provided if true."
+  default     = true
+}
+
+variable "api_ip_addresses" {
+  description = "List of string IPs for k8s API"
+  type        = "list"
+}
+
+variable "self_hosted_etcd" {
+  default     = ""
+  description = "See tectonic_self_hosted_etcd in config.tf"
+}
+
+variable "tectonic_vanilla_k8s" {
+  description = <<EOF
+If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+EOF
+}
+
+variable "tectonic_extra_tags" {
+  type        = "map"
+  description = "(optional) Extra tags to be applied to created resources."
+}
+
+variable "custom_dns_name" {
+  type        = "string"
+  default     = ""
+  description = "DNS prefix used to construct the console and API server endpoints."
+}
+
+// AWS specific internal zone variables
+
+variable "elb_alias_enabled" {
+  description = <<EOF
+(optional) Whether to create an aliased record set to ELB endpoints.
+Refer to http://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html
+for additional information.
+EOF
+
+  default = false
+}
+
+variable "tectonic_external_vpc_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) ID of an existing VPC to launch nodes into.
+If unset a new VPC is created.
+
+Example: `vpc-123456`
+EOF
+}
+
+variable "tectonic_private_endpoints" {
+  description = <<EOF
+(optional) If set to true, create private-facing ingress resources (ELB, A-records).
+If set to false, no private-facing ingress resources will be provisioned and all DNS records will be created in the public Route53 zone.
+EOF
+}
+
+variable "tectonic_public_endpoints" {
+  description = <<EOF
+(optional) If set to true, create public-facing ingress resources (ELB, A-records).
+If set to false, no public-facing ingress resources will be created.
+EOF
+}
+
+variable "tectonic_external_private_zone" {
+  description = <<EOF
+(optional) If set, the given Route53 zone ID will be used as the internal (private) zone.
+This zone will be used to create etcd DNS records as well as internal API and internal Ingress records.
+If set, no additional private zone will be created.
+
+# Example: `"Z1ILINNUJGTAO1"`
+EOF
+}
+
+variable "api_external_elb_dns_name" {
+  description = "External API's ELB DNS name"
+  type        = "string"
+}
+
+variable "api_external_elb_zone_id" {
+  description = "External API's ELB Zone ID"
+  type        = "string"
+}
+
+variable "api_internal_elb_dns_name" {
+  description = "Internal API's ELB DNS name"
+  type        = "string"
+}
+
+variable "api_internal_elb_zone_id" {
+  description = "Internal API's ELB Zone ID"
+  type        = "string"
+}
+
+variable "console_elb_dns_name" {
+  description = "Console's ELB DNS name"
+  type        = "string"
+}
+
+variable "console_elb_zone_id" {
+  description = "Console's ELB Zone ID"
+  type        = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%worker.tf
new file mode 100644
index 0000000..5c782ec
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%worker.tf
@@ -0,0 +1,18 @@
+resource "aws_route53_record" "worker_nodes" {
+  count   = "${var.elb_alias_enabled ? 0 : var.worker_count}"
+  zone_id = "${data.aws_route53_zone.tectonic.zone_id}"
+  name    = "${var.cluster_name}-worker-${count.index}"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_ip_addresses[count.index]}"]
+}
+
+resource "aws_route53_record" "worker_nodes_public" {
+  // hack: worker_public_ips_enabled is a workaround for https://github.com/hashicorp/terraform/issues/10857
+  count   = "${var.worker_public_ips_enabled ? var.worker_count : 0}"
+  zone_id = "${data.aws_route53_zone.tectonic.zone_id}"
+  name    = "${var.cluster_name}-worker-${count.index}-public"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_public_ips[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%worker.tf-219 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%worker.tf-219
new file mode 100644
index 0000000..5c782ec
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%dns%route53%worker.tf-219
@@ -0,0 +1,18 @@
+resource "aws_route53_record" "worker_nodes" {
+  count   = "${var.elb_alias_enabled ? 0 : var.worker_count}"
+  zone_id = "${data.aws_route53_zone.tectonic.zone_id}"
+  name    = "${var.cluster_name}-worker-${count.index}"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_ip_addresses[count.index]}"]
+}
+
+resource "aws_route53_record" "worker_nodes_public" {
+  // hack: worker_public_ips_enabled is a workaround for https://github.com/hashicorp/terraform/issues/10857
+  count   = "${var.worker_public_ips_enabled ? var.worker_count : 0}"
+  zone_id = "${data.aws_route53_zone.tectonic.zone_id}"
+  name    = "${var.cluster_name}-worker-${count.index}-public"
+  type    = "A"
+  ttl     = "60"
+  records = ["${var.worker_public_ips[count.index]}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%etcd.tf
new file mode 100644
index 0000000..12c1637
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%etcd.tf
@@ -0,0 +1,46 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+resource "google_compute_instance" "etcd-node" {
+  name           = "${var.cluster_name}-etcd-${count.index}"
+  count          = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+  machine_type   = "${var.machine_type}"
+  can_ip_forward = false
+  zone           = "${element(var.zone_list, count.index)}"
+
+  boot_disk {
+    initialize_params {
+      image = "coreos-${var.cl_channel}"
+      type  = "${var.disk_type}"
+      size  = "${var.disk_size}"
+    }
+  }
+
+  network_interface {
+    subnetwork = "${var.master_subnetwork_name}"
+
+    access_config = {
+      // Ephemeral IP
+    }
+  }
+
+  tags = ["tectonic-etcd"]
+
+  metadata = {
+    user-data = "${data.ignition_config.etcd.*.rendered[count.index]}"
+    sshKeys   = "core:${file(var.public_ssh_key)}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%ignition.tf
new file mode 100644
index 0000000..f4f12c4
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%ignition.tf
@@ -0,0 +1,50 @@
+data "ignition_config" "etcd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  systemd = [
+    "${data.ignition_systemd_unit.locksmithd.*.id[count.index]}",
+    "${var.ign_etcd_dropin_id_list[count.index]}",
+  ]
+
+  files = ["${compact(list(
+    data.ignition_file.node_hostname.*.id[count.index],
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_etcd_crt_id_list}",
+    "${var.ign_ntp_dropin_id}",
+  ]
+}
+
+data "ignition_file" "node_hostname" {
+  count      = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+  path       = "/etc/hostname"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${var.cluster_name}-etcd-${count.index}.${var.base_domain}"
+  }
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  name    = "locksmithd.service"
+  enabled = true
+
+  dropin = [
+    {
+      name = "40-etcd-lock.conf"
+
+      content = <<EOF
+[Service]
+Environment=REBOOT_STRATEGY=etcd-lock
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.crt\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/client.key\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/client.crt\"" : ""}
+Environment="LOCKSMITHD_ENDPOINT=${var.tls_enabled ? "https" : "http"}://${var.cluster_name}-etcd-${count.index}.${var.base_domain}:2379"
+EOF
+    },
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%outputs.tf
new file mode 100644
index 0000000..36fdf5b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%outputs.tf
@@ -0,0 +1,19 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+output "etcd_ip_addresses" {
+  value = ["${google_compute_instance.etcd-node.*.network_interface.0.address}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%variables.tf
new file mode 100644
index 0000000..c563b8c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%etcd%variables.tf
@@ -0,0 +1,95 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+variable "external_endpoints" {
+  type = "list"
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "container_image" {
+  type = "string"
+}
+
+variable "managed_zone_name" {
+  type = "string"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "master_subnetwork_name" {
+  type = "string"
+}
+
+variable "cl_channel" {
+  type = "string"
+}
+
+variable "zone_list" {
+  type = "list"
+}
+
+variable "machine_type" {
+  type = "string"
+}
+
+variable "disk_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "disk_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "tls_enabled" {
+  default = false
+}
+
+variable "ign_etcd_dropin_id_list" {
+  type = "list"
+}
+
+variable "public_ssh_key" {
+  default = ""
+}
+
+variable "ign_etcd_crt_id_list" {
+  type = "list"
+}
+
+variable "ign_profile_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_systemd_default_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_ntp_dropin_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%iam.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%iam.tf
new file mode 100644
index 0000000..41674f1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%iam.tf
@@ -0,0 +1,24 @@
+resource "google_service_account" "master-node-sa" {
+  account_id   = "${format("%.28s", var.cluster_name)}-m"
+  display_name = "Master node"
+}
+
+resource "google_project_iam_member" "master-compute-admin" {
+  role   = "roles/compute.instanceAdmin"
+  member = "serviceAccount:${google_service_account.master-node-sa.email}"
+}
+
+resource "google_project_iam_member" "master-network-admin" {
+  role   = "roles/compute.networkAdmin"
+  member = "serviceAccount:${google_service_account.master-node-sa.email}"
+}
+
+resource "google_project_iam_member" "master-storage-admin" {
+  role   = "roles/storage.admin"
+  member = "serviceAccount:${google_service_account.master-node-sa.email}"
+}
+
+resource "google_project_iam_member" "master-object-storage-admin" {
+  role   = "roles/storage.objectAdmin"
+  member = "serviceAccount:${google_service_account.master-node-sa.email}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%ignition.tf
new file mode 100644
index 0000000..3e66b7a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%ignition.tf
@@ -0,0 +1,80 @@
+data "ignition_config" "main" {
+  files = ["${compact(list(
+    data.ignition_file.detect_master.id,
+    data.ignition_file.init_assets.id,
+    data.ignition_file.kubeconfig.id,
+    var.ign_gcs_puller_id,
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = ["${compact(list(
+    var.ign_bootkube_path_unit_id,
+    var.ign_bootkube_service_id,
+    var.ign_docker_dropin_id,
+    var.ign_init_assets_service_id,
+    var.ign_iscsi_service_id,
+    var.ign_k8s_node_bootstrap_service_id,
+    var.ign_kubelet_service_id,
+    var.ign_locksmithd_service_id,
+    var.ign_tectonic_path_unit_id,
+    var.ign_tectonic_service_id,
+    var.ign_update_ca_certificates_dropin_id,
+   ))}"]
+}
+
+data "ignition_file" "kubeconfig" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/kubeconfig"
+  mode       = 0644
+
+  content {
+    content = "${var.kubeconfig_content}"
+  }
+}
+
+data "template_file" "init_assets" {
+  template = "${file("${path.module}/resources/init-assets.sh")}"
+
+  vars {
+    assets_gcs_location = "${var.assets_gcs_location}"
+    gcloudsdk_image     = "${var.container_images["gcloudsdk"]}"
+  }
+}
+
+data "ignition_file" "init_assets" {
+  filesystem = "root"
+  path       = "/opt/init-assets.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.init_assets.rendered}"
+  }
+}
+
+data "template_file" "detect_master" {
+  template = "${file("${path.module}/resources/detect-master.sh")}"
+
+  vars {
+    region              = "${var.region}"
+    instance_group_name = "${var.cluster_name}-master-igm-0"
+    gcloudsdk_image     = "${var.container_images["gcloudsdk"]}"
+  }
+}
+
+data "ignition_file" "detect_master" {
+  filesystem = "root"
+  path       = "/opt/detect-master.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.detect_master.rendered}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%master.tf
new file mode 100644
index 0000000..2770e74
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%master.tf
@@ -0,0 +1,64 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+resource "google_compute_instance_template" "master-it" {
+  name           = "${var.cluster_name}-master-it"
+  region         = "${var.region}"
+  machine_type   = "${var.machine_type}"
+  can_ip_forward = false
+
+  disk {
+    source_image = "coreos-${var.cl_channel}"
+    auto_delete  = true
+    disk_type    = "${var.disk_type}"
+    disk_size_gb = "${var.disk_size}"
+  }
+
+  network_interface {
+    subnetwork = "${var.master_subnetwork_name}"
+
+    access_config = {
+      // Ephemeral IP
+    }
+  }
+
+  tags = ["tectonic-masters"]
+
+  metadata = {
+    user-data = "${data.ignition_config.main.rendered}"
+    sshKeys   = "core:${file(var.public_ssh_key)}"
+  }
+
+  service_account {
+    email  = "${google_service_account.master-node-sa.email}"
+    scopes = ["cloud-platform"]
+  }
+}
+
+resource "google_compute_region_instance_group_manager" "master-igm" {
+  count              = 1
+  region             = "${var.region}"
+  target_size        = "${var.instance_count}"
+  name               = "${var.cluster_name}-master-igm-${count.index}"
+  instance_template  = "${google_compute_instance_template.master-it.self_link}"
+  target_pools       = ["${var.master_targetpool_self_link}"]
+  base_instance_name = "${var.cluster_name}-master"
+
+  named_port {
+    name = "https"
+    port = 443
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%outputs.tf
new file mode 100644
index 0000000..022f249
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%outputs.tf
@@ -0,0 +1,19 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+output "instance_group" {
+  value = ["${google_compute_region_instance_group_manager.master-igm.*.instance_group}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%variables.tf
new file mode 100644
index 0000000..232f01f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%master-igm%variables.tf
@@ -0,0 +1,102 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+variable "cl_channel" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "region" {
+  type = "string"
+}
+
+variable "machine_type" {
+  type = "string"
+}
+
+variable "master_targetpool_self_link" {
+  type = "string"
+}
+
+variable "master_subnetwork_name" {
+  type = "string"
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "disk_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "disk_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "ign_bootkube_service_id" {
+  type        = "string"
+  description = "The ID of the bootkube systemd service unit"
+}
+
+variable "ign_bootkube_path_unit_id" {
+  type = "string"
+}
+
+variable "ign_tectonic_service_id" {
+  type        = "string"
+  description = "The ID of the tectonic installer systemd service unit"
+}
+
+variable "ign_tectonic_path_unit_id" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "image_re" {
+  description = "(internal) Regular expression used to extract repo and tag components from image strings"
+  type        = "string"
+}
+
+variable "public_ssh_key" {
+  default = ""
+}
+
+variable "kubeconfig_content" {
+  type = "string"
+}
+
+variable "ign_gcs_puller_id" {
+  type = "string"
+}
+
+variable "ign_init_assets_service_id" {
+  type = "string"
+}
+
+variable "assets_gcs_location" {
+  type        = "string"
+  description = "Location on gcs of the Bootkube/Tectonic assets to use (bucket/key)"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-etcd.tf
new file mode 100644
index 0000000..56e0c9d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-etcd.tf
@@ -0,0 +1,30 @@
+resource "google_compute_firewall" "etcd-ingress" {
+  name    = "${var.cluster_name}-etcd-ingress"
+  network = "${google_compute_network.network.name}"
+
+  # ICMP
+  allow {
+    protocol = "icmp"
+  }
+
+  allow {
+    protocol = "tcp"
+    ports    = ["22"] # ssh
+  }
+
+  source_ranges = ["0.0.0.0/0"]
+  target_tags   = ["tectonic-etcd"]
+}
+
+resource "google_compute_firewall" "etcd" {
+  name    = "${var.cluster_name}-etcd"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["2379", "2380", "12379"] # etcd and bootstrap-etcd
+  }
+
+  source_tags = ["tectonic-etcd"]
+  target_tags = ["tectonic-etcd"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-master.tf
new file mode 100644
index 0000000..2feb11f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-master.tf
@@ -0,0 +1,95 @@
+resource "google_compute_firewall" "master-ingress" {
+  name    = "${var.cluster_name}-master-ingress"
+  network = "${google_compute_network.network.name}"
+
+  # ICMP
+  allow {
+    protocol = "icmp"
+  }
+
+  allow {
+    protocol = "tcp"
+    ports    = ["22", "80", "443"] # ssh, http, https
+  }
+
+  source_ranges = ["0.0.0.0/0"]
+  target_tags   = ["tectonic-masters"]
+}
+
+resource "google_compute_firewall" "master-ingress-heapster" {
+  name    = "${var.cluster_name}-master-ingress-heapster"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["4194"]
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-masters"]
+}
+
+resource "google_compute_firewall" "master-ingress-flannel" {
+  name    = "${var.cluster_name}-master-ingress-flannel"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "udp"
+    ports    = ["4789"]
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-masters"]
+}
+
+resource "google_compute_firewall" "master-ingress-node-exporter" {
+  name    = "${var.cluster_name}-master-ingress-node-exporter"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["9100"]
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-masters"]
+}
+
+resource "google_compute_firewall" "master-ingress-kubelet" {
+  name    = "${var.cluster_name}-master-ingress-kubelet"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["10250", "10255"] # insecure and secure ports
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-masters"]
+}
+
+resource "google_compute_firewall" "master-ingress-etcd" {
+  name    = "${var.cluster_name}-master-ingress-etcd"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["2379", "12379"] # etcd and bootstrap-etcd
+  }
+
+  source_tags = ["tectonic-masters"]
+  target_tags = ["tectonic-masters", "tectonic-etcd"]
+}
+
+resource "google_compute_firewall" "master-ingress-services" {
+  name    = "${var.cluster_name}-master-ingress-services"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["30000-32767"]
+  }
+
+  source_tags = ["tectonic-masters"]
+  target_tags = ["tectonic-masters"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-worker.tf
new file mode 100644
index 0000000..a45980c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%firewall-worker.tf
@@ -0,0 +1,82 @@
+resource "google_compute_firewall" "worker-ingress" {
+  name    = "${var.cluster_name}-worker-ingress"
+  network = "${google_compute_network.network.name}"
+
+  # ICMP
+  allow {
+    protocol = "icmp"
+  }
+
+  allow {
+    protocol = "tcp"
+    ports    = ["22", "80", "443"] # ssh, http, https
+  }
+
+  source_ranges = ["0.0.0.0/0"]
+  target_tags   = ["tectonic-workers"]
+}
+
+resource "google_compute_firewall" "worker-ingress-heapster" {
+  name    = "${var.cluster_name}-worker-ingress-heapster"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["4194"]
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-workers"]
+}
+
+resource "google_compute_firewall" "worker-ingress-flannel" {
+  name    = "${var.cluster_name}-worker-ingress-flannel"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "udp"
+    ports    = ["4789"]
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-workers"]
+}
+
+resource "google_compute_firewall" "worker-ingress-node-exporter" {
+  name    = "${var.cluster_name}-worker-ingress-node-exporter"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["9100"]
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-workers"]
+}
+
+resource "google_compute_firewall" "worker-ingress-kubelet" {
+  name    = "${var.cluster_name}-worker-ingress-kubelet"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["10250", "10255"] # insecure and secure ports
+  }
+
+  source_tags = ["tectonic-masters", "tectonic-workers"]
+  target_tags = ["tectonic-workers"]
+}
+
+resource "google_compute_firewall" "worker-ingress-services" {
+  name    = "${var.cluster_name}-worker-ingress-services"
+  network = "${google_compute_network.network.name}"
+
+  allow {
+    protocol = "tcp"
+    ports    = ["30000-32767"]
+  }
+
+  source_tags = ["tectonic-workers"]
+  target_tags = ["tectonic-workers"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%loadbalancer.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%loadbalancer.tf
new file mode 100644
index 0000000..9f2a132
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%loadbalancer.tf
@@ -0,0 +1,85 @@
+resource "google_compute_target_pool" "master-targetpool" {
+  name             = "${var.cluster_name}-master-targetpool"
+  session_affinity = "CLIENT_IP_PROTO"
+}
+
+resource "google_compute_target_pool" "worker-targetpool" {
+  name = "${var.cluster_name}-worker-targetpool"
+
+  health_checks = [
+    "${google_compute_http_health_check.worker-hc.name}",
+  ]
+}
+
+resource "google_compute_http_health_check" "worker-hc" {
+  name         = "${var.cluster_name}-worker-hc"
+  request_path = "/"
+
+  timeout_sec        = 1
+  check_interval_sec = 1
+}
+
+// api-server/masters lb
+// We need to use a global lb for bootstraping
+// because of https://issuetracker.google.com/issues/67366622
+resource "google_compute_global_address" "masters-ip" {
+  name = "${var.cluster_name}-masters-ip"
+}
+
+resource "google_compute_global_forwarding_rule" "api-external-fwd-rule" {
+  name       = "${var.cluster_name}-api-external-fwd-rule"
+  target     = "${google_compute_target_tcp_proxy.api-external-tcp-proxy.self_link}"
+  ip_address = "${google_compute_global_address.masters-ip.address}"
+  port_range = "443"
+}
+
+resource "google_compute_target_tcp_proxy" "api-external-tcp-proxy" {
+  name            = "${var.cluster_name}-api-external-tcp-proxy"
+  backend_service = "${google_compute_backend_service.api-backend-service.self_link}"
+}
+
+resource "google_compute_backend_service" "api-backend-service" {
+  name             = "${var.cluster_name}-api-backend-service"
+  protocol         = "TCP"
+  port_name        = "https"
+  timeout_sec      = 10
+  session_affinity = "NONE"
+
+  backend {
+    group = "${var.master_instance_group[0]}"
+  }
+
+  health_checks = ["${google_compute_health_check.api-health-check.self_link}"]
+}
+
+resource "google_compute_health_check" "api-health-check" {
+  name               = "${var.cluster_name}-api-health-check"
+  timeout_sec        = 1
+  check_interval_sec = 1
+
+  ssl_health_check {
+    port = "443"
+  }
+}
+
+resource "google_compute_address" "ingress-ip" {
+  name = "${var.cluster_name}-ingress-ip"
+}
+
+resource "google_compute_forwarding_rule" "ingress-external-http-fwd-rule" {
+  load_balancing_scheme = "EXTERNAL"
+  name                  = "${var.cluster_name}-ingress-external-http-fwd-rule"
+  ip_address            = "${google_compute_address.ingress-ip.address}"
+  region                = "${var.gcp_region}"
+  target                = "${google_compute_target_pool.worker-targetpool.self_link}"
+  port_range            = "80"
+}
+
+resource "google_compute_forwarding_rule" "ingress-external-https-fwd-rule" {
+  load_balancing_scheme = "EXTERNAL"
+  name                  = "${var.cluster_name}-ingress-external-https-fwd-rule"
+  ip_address            = "${google_compute_address.ingress-ip.address}"
+  region                = "${var.gcp_region}"
+  target                = "${google_compute_target_pool.worker-targetpool.self_link}"
+  port_range            = "443"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%network.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%network.tf
new file mode 100644
index 0000000..6d30973
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%network.tf
@@ -0,0 +1,36 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+## A single GCP network
+resource "google_compute_network" "network" {
+  name                    = "${var.cluster_name}-network"
+  auto_create_subnetworks = "false"
+}
+
+## Two subnetworks (masters, workers)
+resource "google_compute_subnetwork" "master-subnet" {
+  name          = "${var.cluster_name}-master-subnet"
+  ip_cidr_range = "${var.master_ip_cidr_range}"
+  network       = "${google_compute_network.network.self_link}"
+  region        = "${var.gcp_region}"
+}
+
+resource "google_compute_subnetwork" "worker-subnet" {
+  name          = "${var.cluster_name}-worker-subnet"
+  ip_cidr_range = "${var.worker_ip_cidr_range}"
+  network       = "${google_compute_network.network.self_link}"
+  region        = "${var.gcp_region}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%outputs.tf
new file mode 100644
index 0000000..4a20104
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%outputs.tf
@@ -0,0 +1,43 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+output "master_ip" {
+  value = "${google_compute_global_address.masters-ip.address}"
+}
+
+output "ingress_ip" {
+  value = "${google_compute_address.ingress-ip.address}"
+}
+
+output "master_targetpool_self_link" {
+  value = "${google_compute_target_pool.master-targetpool.self_link}"
+}
+
+output "worker_targetpool_self_link" {
+  value = "${google_compute_target_pool.worker-targetpool.self_link}"
+}
+
+output "master_subnetwork_name" {
+  value = "${google_compute_subnetwork.master-subnet.name}"
+}
+
+output "worker_subnetwork_name" {
+  value = "${google_compute_subnetwork.worker-subnet.name}"
+}
+
+output "tectonic_network_name" {
+  value = "${google_compute_network.network.name}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%variables.tf
new file mode 100644
index 0000000..4b3fa6a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%network%variables.tf
@@ -0,0 +1,43 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+variable "gcp_region" {
+  type = "string"
+}
+
+variable "master_ip_cidr_range" {
+  type = "string"
+}
+
+variable "worker_ip_cidr_range" {
+  type = "string"
+}
+
+variable "managed_zone_name" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "master_instance_group" {
+  type = "list"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%iam.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%iam.tf
new file mode 100644
index 0000000..9559120
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%iam.tf
@@ -0,0 +1,14 @@
+resource "google_service_account" "worker-node-sa" {
+  account_id   = "${format("%.28s", var.cluster_name)}-w"
+  display_name = "Worker node"
+}
+
+resource "google_project_iam_member" "worker-compute-viewer" {
+  role   = "roles/compute.viewer"
+  member = "serviceAccount:${google_service_account.worker-node-sa.email}"
+}
+
+resource "google_project_iam_member" "worker-storage-admin" {
+  role   = "roles/storage.admin"
+  member = "serviceAccount:${google_service_account.worker-node-sa.email}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%ignition.tf
new file mode 100644
index 0000000..a3b43ae
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%ignition.tf
@@ -0,0 +1,33 @@
+data "ignition_config" "main" {
+  files = ["${compact(list(
+    data.ignition_file.kubeconfig.id,
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = [
+    "${var.ign_docker_dropin_id}",
+    "${var.ign_iscsi_service_id}",
+    "${var.ign_k8s_node_bootstrap_service_id}",
+    "${var.ign_kubelet_service_id}",
+    "${var.ign_locksmithd_service_id}",
+    "${var.ign_update_ca_certificates_dropin_id}",
+  ]
+}
+
+data "ignition_file" "kubeconfig" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/kubeconfig"
+  mode       = 0644
+
+  content {
+    content = "${var.kubeconfig_content}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%variables.tf
new file mode 100644
index 0000000..e3de1ff
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%variables.tf
@@ -0,0 +1,61 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+variable "cl_channel" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "region" {
+  type = "string"
+}
+
+variable "machine_type" {
+  type = "string"
+}
+
+variable "worker_targetpool_self_link" {
+  type = "string"
+}
+
+variable "worker_subnetwork_name" {
+  type = "string"
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "disk_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "disk_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "public_ssh_key" {
+  default = ""
+}
+
+variable "kubeconfig_content" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%worker.tf
new file mode 100644
index 0000000..7709a11
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%gcp%worker-igm%worker.tf
@@ -0,0 +1,59 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+resource "google_compute_instance_template" "worker-it" {
+  name           = "${var.cluster_name}-worker-it"
+  region         = "${var.region}"
+  machine_type   = "${var.machine_type}"
+  can_ip_forward = false
+
+  disk {
+    source_image = "coreos-${var.cl_channel}"
+    auto_delete  = true
+    disk_type    = "${var.disk_type}"
+    disk_size_gb = "${var.disk_size}"
+  }
+
+  network_interface {
+    subnetwork = "${var.worker_subnetwork_name}"
+
+    access_config = {
+      // Ephemeral IP
+    }
+  }
+
+  tags = ["tectonic-workers"]
+
+  metadata = {
+    user-data = "${data.ignition_config.main.rendered}"
+    sshKeys   = "core:${file(var.public_ssh_key)}"
+  }
+
+  service_account {
+    email  = "${google_service_account.worker-node-sa.email}"
+    scopes = ["cloud-platform"]
+  }
+}
+
+resource "google_compute_region_instance_group_manager" "worker-igm" {
+  count              = 1
+  region             = "${var.region}"
+  target_size        = "${var.instance_count}"
+  name               = "${var.cluster_name}-worker-igm-${count.index}"
+  instance_template  = "${google_compute_instance_template.worker-it.self_link}"
+  target_pools       = ["${var.worker_targetpool_self_link}"]
+  base_instance_name = "${var.cluster_name}-worker"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%ignition.tf
new file mode 100644
index 0000000..0781cd8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%ignition.tf
@@ -0,0 +1,56 @@
+data "ignition_config" "etcd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  systemd = [
+    "${data.ignition_systemd_unit.locksmithd.*.id[count.index]}",
+    "${var.ign_etcd_dropin_id_list[count.index]}",
+  ]
+
+  files = ["${compact(list(
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+    var.dns_server_ip != "" ? join("", data.ignition_file.node_resolv.*.id) : "",
+   ))}",
+    "${var.ign_etcd_crt_id_list}",
+  ]
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  name    = "locksmithd.service"
+  enabled = true
+
+  dropin = [
+    {
+      name = "40-etcd-lock.conf"
+
+      content = <<EOF
+[Service]
+Environment=REBOOT_STRATEGY=etcd-lock
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.crt\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/client.key\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/client.crt\"" : ""}
+Environment="LOCKSMITHD_ENDPOINT=${var.tls_enabled ? "https" : "http"}://${var.cluster_name}-etcd-${count.index}.${var.base_domain}:2379"
+EOF
+    },
+  ]
+}
+
+// DNS Server resolution
+data "template_file" "node_resolv" {
+  count    = "${var.dns_server_ip != "" ? 1 : 0}"
+  template = "search us-gov-west-1.compute.internal\nnameserver ${var.dns_server_ip}"
+}
+
+data "ignition_file" "node_resolv" {
+  count      = "${var.dns_server_ip != "" ? 1 : 0}"
+  path       = "/etc/resolv.conf"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${data.template_file.node_resolv.rendered}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%ignition_s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%ignition_s3.tf
new file mode 100644
index 0000000..b0b98f1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%ignition_s3.tf
@@ -0,0 +1,25 @@
+resource "aws_s3_bucket_object" "ignition_etcd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  bucket  = "${var.s3_bucket}"
+  key     = "ignition_etcd_${count.index}.json"
+  content = "${data.ignition_config.etcd.*.rendered[count.index]}"
+  acl     = "private"
+
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-ignition-etcd-${count.index}",
+      "KubernetesCluster", "${var.cluster_name}",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+data "ignition_config" "s3" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  replace {
+    source       = "${format("s3://%s/%s", var.s3_bucket, aws_s3_bucket_object.ignition_etcd.*.key[count.index])}"
+    verification = "sha512-${sha512(data.ignition_config.etcd.*.rendered[count.index])}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%nodes.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%nodes.tf
new file mode 100644
index 0000000..332e873
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%nodes.tf
@@ -0,0 +1,136 @@
+locals {
+  ami_owner = "190570271432"
+  arn       = "aws-us-gov"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_iam_instance_profile" "etcd" {
+  count = "${length(var.external_endpoints) == 0 ? 1 : 0}"
+  name  = "${var.cluster_name}-etcd-profile"
+
+  role = "${var.etcd_iam_role == "" ?
+    join("|", aws_iam_role.etcd_role.*.name) :
+    join("|", data.aws_iam_role.etcd_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "etcd_role" {
+  count = "${var.etcd_iam_role == "" ? 0 : 1}"
+  name  = "${var.etcd_iam_role}"
+}
+
+resource "aws_iam_role" "etcd_role" {
+  count = "${length(var.external_endpoints) == 0 && var.etcd_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-etcd-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "etcd" {
+  count = "${var.etcd_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_etcd_policy"
+  role  = "${aws_iam_role.etcd_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "ec2:Describe*",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:AttachVolume",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:DetachVolume",
+      "Resource": "*"
+    },
+    {
+      "Action" : [
+        "s3:GetObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_instance" "etcd_node" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+  ami   = "${data.aws_ami.coreos_ami.image_id}"
+
+  iam_instance_profile   = "${aws_iam_instance_profile.etcd.name}"
+  instance_type          = "${var.ec2_type}"
+  key_name               = "${var.ssh_key}"
+  subnet_id              = "${element(var.subnets, count.index)}"
+  user_data              = "${data.ignition_config.s3.*.rendered[count.index]}"
+  vpc_security_group_ids = ["${var.sg_ids}"]
+
+  lifecycle {
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["ami"]
+  }
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-etcd-${count.index}",
+      "kubernetes.io/cluster/${var.cluster_name}", "owned",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : var.root_volume_type == "gp2" ? min(10000, max(100, 3 * var.root_volume_size)) : 0}"
+  }
+
+  volume_tags = "${merge(map(
+    "Name", "${var.cluster_name}-etcd-${count.index}-vol",
+    "kubernetes.io/cluster/${var.cluster_name}", "owned",
+    "tectonicClusterID", "${var.cluster_id}"
+  ), var.extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%outputs.tf
new file mode 100644
index 0000000..8fbb67d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%outputs.tf
@@ -0,0 +1,3 @@
+output "ip_addresses" {
+  value = "${aws_instance.etcd_node.*.private_ip}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%variables.tf
new file mode 100644
index 0000000..e20e432
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%etcd%variables.tf
@@ -0,0 +1,111 @@
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "instance_count" {
+  default = "3"
+}
+
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "subnets" {
+  type = "list"
+}
+
+variable "external_endpoints" {
+  type = "list"
+}
+
+variable "container_image" {
+  type = "string"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied."
+}
+
+variable "tls_enabled" {
+  default = false
+}
+
+variable "ign_etcd_dropin_id_list" {
+  type = "list"
+}
+
+variable "s3_bucket" {
+  type = "string"
+}
+
+variable "ign_etcd_crt_id_list" {
+  type = "list"
+}
+
+variable "etcd_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of etcd nodes."
+}
+
+variable "dns_server_ip" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_profile_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_systemd_default_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_ntp_dropin_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%ignition.tf
new file mode 100644
index 0000000..7342efc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%ignition.tf
@@ -0,0 +1,111 @@
+data "ignition_config" "main" {
+  files = [
+    "${compact(list(
+    data.ignition_file.detect_master.id,
+    data.ignition_file.init_assets.id,
+    data.ignition_file.rm_assets.id,
+    var.dns_server_ip != "" ? join("", data.ignition_file.node_resolv.*.id) : "",
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_s3_puller_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = [
+    "${compact(list(
+    var.ign_docker_dropin_id,
+    var.ign_locksmithd_service_id,
+    var.ign_kubelet_service_id,
+    var.ign_k8s_node_bootstrap_service_id,
+    var.ign_init_assets_service_id,
+    var.ign_rm_assets_service_id,
+    var.ign_bootkube_service_id,
+    var.ign_tectonic_service_id,
+    var.ign_bootkube_path_unit_id,
+    var.ign_tectonic_path_unit_id,
+    var.ign_rm_assets_path_unit_id,
+    var.ign_update_ca_certificates_dropin_id,
+    var.ign_iscsi_service_id,
+   ))}",
+  ]
+}
+
+data "template_file" "detect_master" {
+  template = "${file("${path.module}/resources/detect-master.sh")}"
+
+  vars {
+    load_balancer_name = "${format("%s-%s", var.cluster_name, var.private_endpoints ? "int" : "ext")}"
+  }
+}
+
+data "ignition_file" "detect_master" {
+  filesystem = "root"
+  path       = "/opt/detect-master.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.detect_master.rendered}"
+  }
+}
+
+data "template_file" "init_assets" {
+  template = "${file("${path.module}/resources/init-assets.sh")}"
+
+  vars {
+    cluster_name       = "${var.cluster_name}"
+    awscli_image       = "${var.container_images["awscli"]}"
+    assets_s3_location = "${var.assets_s3_location}"
+  }
+}
+
+data "ignition_file" "init_assets" {
+  filesystem = "root"
+  path       = "/opt/init-assets.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.init_assets.rendered}"
+  }
+}
+
+data "template_file" "rm_assets" {
+  template = "${file("${path.module}/resources/rm-assets.sh")}"
+
+  vars {
+    cluster_name       = "${var.cluster_name}"
+    awscli_image       = "${var.container_images["awscli"]}"
+    assets_s3_location = "${var.assets_s3_location}"
+  }
+}
+
+data "ignition_file" "rm_assets" {
+  filesystem = "root"
+  path       = "/opt/rm-assets.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.rm_assets.rendered}"
+  }
+}
+
+// DNS Server resolution
+data "template_file" "node_resolv" {
+  count    = "${var.dns_server_ip != "" ? 1 : 0}"
+  template = "search us-gov-west-1.compute.internal\nnameserver ${var.dns_server_ip}"
+}
+
+data "ignition_file" "node_resolv" {
+  count      = "${var.dns_server_ip != "" ? 1 : 0}"
+  path       = "/etc/resolv.conf"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${data.template_file.node_resolv.rendered}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%ignition_s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%ignition_s3.tf
new file mode 100644
index 0000000..f71ac7d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%ignition_s3.tf
@@ -0,0 +1,21 @@
+resource "aws_s3_bucket_object" "ignition_master" {
+  bucket  = "${var.s3_bucket}"
+  key     = "ignition_master.json"
+  content = "${data.ignition_config.main.rendered}"
+  acl     = "private"
+
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-ignition-etcd-${count.index}",
+      "KubernetesCluster", "${var.cluster_name}",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+data "ignition_config" "s3" {
+  replace {
+    source       = "${format("s3://%s/%s", var.s3_bucket, aws_s3_bucket_object.ignition_master.key)}"
+    verification = "sha512-${sha512(data.ignition_config.main.rendered)}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%master.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%master.tf
new file mode 100644
index 0000000..693fdae
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%master.tf
@@ -0,0 +1,164 @@
+locals {
+  ami_owner = "190570271432"
+  arn       = "aws-us-gov"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_autoscaling_group" "masters" {
+  name                 = "${var.cluster_name}-masters"
+  desired_capacity     = "${var.instance_count}"
+  max_size             = "${var.instance_count * 3}"
+  min_size             = "${var.instance_count}"
+  launch_configuration = "${aws_launch_configuration.master_conf.id}"
+  vpc_zone_identifier  = ["${var.subnet_ids}"]
+
+  load_balancers = ["${var.aws_lbs}"]
+
+  tags = [
+    {
+      key                 = "Name"
+      value               = "${var.cluster_name}-master"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "kubernetes.io/cluster/${var.cluster_name}"
+      value               = "owned"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "tectonicClusterID"
+      value               = "${var.cluster_id}"
+      propagate_at_launch = true
+    },
+    "${var.autoscaling_group_extra_tags}",
+  ]
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_launch_configuration" "master_conf" {
+  instance_type               = "${var.ec2_type}"
+  image_id                    = "${data.aws_ami.coreos_ami.image_id}"
+  name_prefix                 = "${var.cluster_name}-master-"
+  key_name                    = "${var.ssh_key}"
+  security_groups             = ["${var.master_sg_ids}"]
+  iam_instance_profile        = "${aws_iam_instance_profile.master_profile.arn}"
+  associate_public_ip_address = "${var.public_endpoints}"
+  user_data                   = "${data.ignition_config.s3.rendered}"
+
+  lifecycle {
+    create_before_destroy = true
+
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["image_id"]
+  }
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : 0}"
+  }
+}
+
+resource "aws_iam_instance_profile" "master_profile" {
+  name = "${var.cluster_name}-master-profile"
+
+  role = "${var.master_iam_role == "" ?
+    join("|", aws_iam_role.master_role.*.name) :
+    join("|", data.aws_iam_role.master_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "master_role" {
+  count = "${var.master_iam_role == "" ? 0 : 1}"
+  name  = "${var.master_iam_role}"
+}
+
+resource "aws_iam_role" "master_role" {
+  count = "${var.master_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-master-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "master_policy" {
+  count = "${var.master_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_master_policy"
+  role  = "${aws_iam_role.master_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Action": "ec2:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action": "elasticloadbalancing:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "s3:GetObject",
+        "s3:HeadObject",
+        "s3:ListBucket",
+        "s3:PutObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "autoscaling:DescribeAutoScalingGroups",
+        "autoscaling:DescribeAutoScalingInstances"
+      ],
+      "Resource": "*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%variables.tf
new file mode 100644
index 0000000..6e7157b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%master-asg%variables.tf
@@ -0,0 +1,149 @@
+variable "assets_s3_location" {
+  type        = "string"
+  description = "Location on S3 of the Bootkube/Tectonic assets to use (bucket/key)"
+}
+
+variable "autoscaling_group_extra_tags" {
+  description = "Extra AWS tags to be applied to created autoscaling group resources."
+  type        = "list"
+  default     = []
+}
+
+variable "base_domain" {
+  type        = "string"
+  description = "Domain on which the ELB records will be created"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "ign_s3_puller_id" {
+  type = "string"
+}
+
+variable "image_re" {
+  description = "(internal) Regular expression used to extract repo and tag components from image strings"
+  type        = "string"
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "master_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of master nodes."
+}
+
+variable "master_sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied to the master nodes."
+}
+
+variable "private_endpoints" {
+  description = "If set to true, private-facing ingress resources are created."
+  default     = true
+}
+
+variable "public_endpoints" {
+  description = "If set to true, public-facing ingress resources are created."
+  default     = true
+}
+
+variable "aws_lbs" {
+  description = "List of aws_lb IDs for the Console & APIs"
+  type        = "list"
+  default     = []
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "subnet_ids" {
+  type = "list"
+}
+
+variable "ign_bootkube_service_id" {
+  type        = "string"
+  description = "The ID of the bootkube systemd service unit"
+}
+
+variable "ign_bootkube_path_unit_id" {
+  type = "string"
+}
+
+variable "ign_tectonic_service_id" {
+  type        = "string"
+  description = "The ID of the tectonic installer systemd service unit"
+}
+
+variable "ign_tectonic_path_unit_id" {
+  type = "string"
+}
+
+variable "ign_init_assets_service_id" {
+  type = "string"
+}
+
+variable "ign_rm_assets_service_id" {
+  type = "string"
+}
+
+variable "ign_rm_assets_path_unit_id" {
+  type = "string"
+}
+
+variable "s3_bucket" {
+  type = "string"
+}
+
+variable "dns_server_ip" {
+  type    = "string"
+  default = ""
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%ignition.tf
new file mode 100644
index 0000000..da8202f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%ignition.tf
@@ -0,0 +1,39 @@
+data "ignition_config" "main" {
+  files = ["${compact(list(
+    var.dns_server_ip != "" ? join("", data.ignition_file.node_resolv.*.id) : "",
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_s3_puller_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = [
+    "${var.ign_docker_dropin_id}",
+    "${var.ign_k8s_node_bootstrap_service_id}",
+    "${var.ign_kubelet_service_id}",
+    "${var.ign_locksmithd_service_id}",
+    "${var.ign_update_ca_certificates_dropin_id}",
+  ]
+}
+
+// DNS Server resolution
+data "template_file" "node_resolv" {
+  count    = "${var.dns_server_ip != "" ? 1 : 0}"
+  template = "search us-gov-west-1.compute.internal\nnameserver ${var.dns_server_ip}"
+}
+
+data "ignition_file" "node_resolv" {
+  count      = "${var.dns_server_ip != "" ? 1 : 0}"
+  path       = "/etc/resolv.conf"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${data.template_file.node_resolv.rendered}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%ignition_s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%ignition_s3.tf
new file mode 100644
index 0000000..9766c6b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%ignition_s3.tf
@@ -0,0 +1,21 @@
+resource "aws_s3_bucket_object" "ignition_worker" {
+  bucket  = "${var.s3_bucket}"
+  key     = "ignition_worker.json"
+  content = "${data.ignition_config.main.rendered}"
+  acl     = "private"
+
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.cluster_name}-ignition-worker",
+      "KubernetesCluster", "${var.cluster_name}",
+      "tectonicClusterID", "${var.cluster_id}"
+    ), var.extra_tags)}"
+}
+
+data "ignition_config" "s3" {
+  replace {
+    source       = "${format("s3://%s/%s", var.s3_bucket, aws_s3_bucket_object.ignition_worker.key)}"
+    verification = "sha512-${sha512(data.ignition_config.main.rendered)}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%variables.tf
new file mode 100644
index 0000000..df89b45
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%variables.tf
@@ -0,0 +1,93 @@
+variable "ssh_key" {
+  type = "string"
+}
+
+variable "vpc_id" {
+  type = "string"
+}
+
+variable "container_linux_channel" {
+  type = "string"
+}
+
+variable "container_linux_version" {
+  type = "string"
+}
+
+variable "cluster_id" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "ec2_type" {
+  type = "string"
+}
+
+variable "instance_count" {
+  type = "string"
+}
+
+variable "subnet_ids" {
+  type = "list"
+}
+
+variable "sg_ids" {
+  type        = "list"
+  description = "The security group IDs to be applied."
+}
+
+variable "load_balancers" {
+  description = "List of ELBs to attach all worker instances to."
+  type        = "list"
+  default     = []
+}
+
+variable "extra_tags" {
+  description = "Extra AWS tags to be applied to created resources."
+  type        = "map"
+  default     = {}
+}
+
+variable "autoscaling_group_extra_tags" {
+  description = "Extra AWS tags to be applied to created autoscaling group resources."
+  type        = "list"
+  default     = []
+}
+
+variable "root_volume_type" {
+  type        = "string"
+  description = "The type of volume for the root block device."
+}
+
+variable "root_volume_size" {
+  type        = "string"
+  description = "The size of the volume in gigabytes for the root block device."
+}
+
+variable "root_volume_iops" {
+  type        = "string"
+  default     = "100"
+  description = "The amount of provisioned IOPS for the root block device."
+}
+
+variable "worker_iam_role" {
+  type        = "string"
+  default     = ""
+  description = "IAM role to use for the instance profiles of worker nodes."
+}
+
+variable "ign_s3_puller_id" {
+  type = "string"
+}
+
+variable "s3_bucket" {
+  type = "string"
+}
+
+variable "dns_server_ip" {
+  type    = "string"
+  default = ""
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%worker.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%worker.tf
new file mode 100644
index 0000000..43b3c94
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%govcloud%worker-asg%worker.tf
@@ -0,0 +1,175 @@
+locals {
+  ami_owner = "190570271432"
+  arn       = "aws-us-gov"
+}
+
+data "aws_ami" "coreos_ami" {
+  filter {
+    name   = "name"
+    values = ["CoreOS-${var.container_linux_channel}-${var.container_linux_version}-*"]
+  }
+
+  filter {
+    name   = "architecture"
+    values = ["x86_64"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  filter {
+    name   = "owner-id"
+    values = ["${local.ami_owner}"]
+  }
+}
+
+resource "aws_launch_configuration" "worker_conf" {
+  instance_type        = "${var.ec2_type}"
+  image_id             = "${data.aws_ami.coreos_ami.image_id}"
+  name_prefix          = "${var.cluster_name}-worker-"
+  key_name             = "${var.ssh_key}"
+  security_groups      = ["${var.sg_ids}"]
+  iam_instance_profile = "${aws_iam_instance_profile.worker_profile.arn}"
+  user_data            = "${data.ignition_config.s3.rendered}"
+
+  lifecycle {
+    create_before_destroy = true
+
+    # Ignore changes in the AMI which force recreation of the resource. This
+    # avoids accidental deletion of nodes whenever a new CoreOS Release comes
+    # out.
+    ignore_changes = ["image_id"]
+  }
+
+  root_block_device {
+    volume_type = "${var.root_volume_type}"
+    volume_size = "${var.root_volume_size}"
+    iops        = "${var.root_volume_type == "io1" ? var.root_volume_iops : 0}"
+  }
+}
+
+resource "aws_autoscaling_group" "workers" {
+  name                 = "${var.cluster_name}-workers"
+  desired_capacity     = "${var.instance_count}"
+  max_size             = "${var.instance_count * 3}"
+  min_size             = "${var.instance_count}"
+  launch_configuration = "${aws_launch_configuration.worker_conf.id}"
+  vpc_zone_identifier  = ["${var.subnet_ids}"]
+
+  tags = [
+    {
+      key                 = "Name"
+      value               = "${var.cluster_name}-worker"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "kubernetes.io/cluster/${var.cluster_name}"
+      value               = "owned"
+      propagate_at_launch = true
+    },
+    {
+      key                 = "tectonicClusterID"
+      value               = "${var.cluster_id}"
+      propagate_at_launch = true
+    },
+    "${var.autoscaling_group_extra_tags}",
+  ]
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_autoscaling_attachment" "workers" {
+  count = "${length(var.load_balancers)}"
+
+  autoscaling_group_name = "${aws_autoscaling_group.workers.name}"
+  elb                    = "${var.load_balancers[count.index]}"
+}
+
+resource "aws_iam_instance_profile" "worker_profile" {
+  name = "${var.cluster_name}-worker-profile"
+
+  role = "${var.worker_iam_role == "" ?
+    join("|", aws_iam_role.worker_role.*.name) :
+    join("|", data.aws_iam_role.worker_role.*.name)
+  }"
+}
+
+data "aws_iam_role" "worker_role" {
+  count = "${var.worker_iam_role == "" ? 0 : 1}"
+  name  = "${var.worker_iam_role}"
+}
+
+resource "aws_iam_role" "worker_role" {
+  count = "${var.worker_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}-worker-role"
+  path  = "/"
+
+  assume_role_policy = <<EOF
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Action": "sts:AssumeRole",
+            "Principal": {
+                "Service": "ec2.amazonaws.com"
+            },
+            "Effect": "Allow",
+            "Sid": ""
+        }
+    ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy" "worker_policy" {
+  count = "${var.worker_iam_role == "" ? 1 : 0}"
+  name  = "${var.cluster_name}_worker_policy"
+  role  = "${aws_iam_role.worker_role.id}"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "ec2:Describe*",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:AttachVolume",
+      "Resource": "*"
+    },
+    {
+      "Effect": "Allow",
+      "Action": "ec2:DetachVolume",
+      "Resource": "*"
+    },
+    {
+      "Action": "elasticloadbalancing:*",
+      "Resource": "*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "s3:GetObject"
+      ],
+      "Resource": "arn:${local.arn}:s3:::*",
+      "Effect": "Allow"
+    },
+    {
+      "Action" : [
+        "autoscaling:DescribeAutoScalingGroups",
+        "autoscaling:DescribeAutoScalingInstances"
+      ],
+      "Resource": "*",
+      "Effect": "Allow"
+    }
+  ]
+}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%assets.tf
new file mode 100644
index 0000000..ad39ccf
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%assets.tf
@@ -0,0 +1,61 @@
+data "template_file" "docker_dropin" {
+  template = "${file("${path.module}/resources/dropins/10-dockeropts.conf")}"
+}
+
+data "ignition_systemd_unit" "docker_dropin" {
+  name    = "docker.service"
+  enabled = true
+
+  dropin = [
+    {
+      name    = "10-dockeropts.conf"
+      content = "${data.template_file.docker_dropin.rendered}"
+    },
+  ]
+}
+
+data "template_file" "installer_runtime_mappings" {
+  template = "${file("${path.module}/resources/kubernetes/runtime-mappings.yaml")}"
+}
+
+data "ignition_file" "installer_runtime_mappings" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/installer/runtime-mappings.yaml"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.installer_runtime_mappings.rendered}"
+  }
+}
+
+data "template_file" "kubelet" {
+  template = "${file("${path.module}/resources/services/kubelet.service")}"
+
+  vars {
+    kubelet_image_url     = "${replace(var.container_images["hyperkube"],var.image_re,"$1")}"
+    kubelet_image_tag     = "${replace(var.container_images["hyperkube"],var.image_re,"$2")}"
+    cloud_provider        = "${var.cloud_provider}"
+    cloud_provider_config = "${var.cloud_provider_config != "" ? "--cloud-config=/etc/kubernetes/cloud/config" : ""}"
+    cluster_dns_ip        = "${var.kube_dns_service_ip}"
+    debug_config          = "${var.kubelet_debug_config}"
+    node_label            = "${var.kubelet_node_label}"
+    node_taints_param     = "${var.kubelet_node_taints != "" ? "--register-with-taints=${var.kubelet_node_taints}" : ""}"
+  }
+}
+
+data "ignition_systemd_unit" "kubelet" {
+  name    = "kubelet.service"
+  enabled = true
+  content = "${data.template_file.kubelet.rendered}"
+}
+
+data "ignition_systemd_unit" "rm_assets" {
+  name    = "rm-assets.service"
+  enabled = true
+  content = "${file("${path.module}/resources/services/rm-assets.service")}"
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  name = "locksmithd.service"
+  mask = true
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%assets.tf-207 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%assets.tf-207
new file mode 100644
index 0000000..6acb58c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%assets.tf-207
@@ -0,0 +1,291 @@
+locals {
+  profile_env_enabled = "${var.http_proxy_enabled && !var.proxy_exclusive_units}"
+}
+
+data "template_file" "max_user_watches" {
+  template = "${file("${path.module}/resources/sysctl.d/max-user-watches.conf")}"
+}
+
+data "ignition_file" "max_user_watches" {
+  filesystem = "root"
+  path       = "/etc/sysctl.d/10-max-user-watches.conf"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.max_user_watches.rendered}"
+  }
+}
+
+data "template_file" "docker_dropin" {
+  template = "${file("${path.module}/resources/dropins/10-dockeropts.conf")}"
+}
+
+data "ignition_systemd_unit" "docker_dropin" {
+  name    = "docker.service"
+  enabled = true
+
+  dropin = [
+    {
+      name    = "10-dockeropts.conf"
+      content = "${data.template_file.docker_dropin.rendered}"
+    },
+  ]
+}
+
+data "template_file" "installer_runtime_mappings" {
+  template = "${file("${path.module}/resources/kubernetes/runtime-mappings.yaml")}"
+}
+
+data "ignition_file" "installer_runtime_mappings" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/installer/runtime-mappings.yaml"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.installer_runtime_mappings.rendered}"
+  }
+}
+
+data "template_file" "ntp_dropin" {
+  template = "${file("${path.module}/resources/dropins/10-timesyncd.conf")}"
+
+  vars {
+    ntp_servers = "${join(" ", var.ntp_servers)}"
+  }
+}
+
+data "ignition_file" "ntp_dropin" {
+  path       = "/etc/systemd/timesyncd.conf.d/10-tectonic-installer.conf"
+  filesystem = "root"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.ntp_dropin.rendered}"
+  }
+}
+
+data "template_file" "kubelet" {
+  template = "${file("${path.module}/resources/services/kubelet.service")}"
+
+  vars {
+    cloud_provider        = "${var.cloud_provider}"
+    cloud_provider_config = "${var.cloud_provider_config != "" ? "--cloud-config=/etc/kubernetes/cloud/config" : ""}"
+    cluster_dns_ip        = "${var.kube_dns_service_ip}"
+    cni_bin_dir_flag      = "${var.kubelet_cni_bin_dir != "" ? "--cni-bin-dir=${var.kubelet_cni_bin_dir}" : ""}"
+    debug_config          = "${var.kubelet_debug_config}"
+    kubeconfig_fetch_cmd  = "${var.kubeconfig_fetch_cmd != "" ? "ExecStartPre=${var.kubeconfig_fetch_cmd}" : ""}"
+    node_label            = "${var.kubelet_node_label}"
+    node_taints_param     = "${var.kubelet_node_taints != "" ? "--register-with-taints=${var.kubelet_node_taints}" : ""}"
+  }
+}
+
+data "ignition_systemd_unit" "kubelet" {
+  name    = "kubelet.service"
+  enabled = true
+  content = "${data.template_file.kubelet.rendered}"
+}
+
+data "template_file" "k8s_node_bootstrap" {
+  template = "${file("${path.module}/resources/services/k8s-node-bootstrap.service")}"
+
+  vars {
+    bootstrap_upgrade_cl     = "${var.bootstrap_upgrade_cl}"
+    kubeconfig_fetch_cmd     = "${var.kubeconfig_fetch_cmd != "" ? "ExecStartPre=${var.kubeconfig_fetch_cmd}" : ""}"
+    tectonic_torcx_image_url = "${replace(var.container_images["tectonic_torcx"],var.image_re,"$1")}"
+    tectonic_torcx_image_tag = "${replace(var.container_images["tectonic_torcx"],var.image_re,"$2")}"
+    torcx_skip_setup         = "${var.tectonic_vanilla_k8s ? "true" : "false" }"
+    torcx_store_url          = "${var.torcx_store_url}"
+  }
+}
+
+data "ignition_systemd_unit" "k8s_node_bootstrap" {
+  name    = "k8s-node-bootstrap.service"
+  enabled = true
+  content = "${data.template_file.k8s_node_bootstrap.rendered}"
+}
+
+data "ignition_systemd_unit" "init_assets" {
+  name    = "init-assets.service"
+  enabled = "${var.assets_location != "" ? true : false}"
+  content = "${file("${path.module}/resources/services/init-assets.service")}"
+}
+
+data "ignition_systemd_unit" "rm_assets_path_unit" {
+  name    = "rm-assets.path"
+  enabled = true
+  content = "${file("${path.module}/resources/paths/rm-assets.path")}"
+}
+
+data "ignition_systemd_unit" "rm_assets" {
+  name    = "rm-assets.service"
+  enabled = false
+  content = "${file("${path.module}/resources/services/rm-assets.service")}"
+}
+
+data "template_file" "s3_puller" {
+  template = "${file("${path.module}/resources/bin/s3-puller.sh")}"
+
+  vars {
+    awscli_image = "${var.container_images["awscli"]}"
+  }
+}
+
+data "ignition_file" "s3_puller" {
+  filesystem = "root"
+  path       = "/opt/s3-puller.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.s3_puller.rendered}"
+  }
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  name = "locksmithd.service"
+  mask = true
+}
+
+data "template_file" "installer_kubelet_env" {
+  template = "${file("${path.module}/resources/kubernetes/kubelet.env")}"
+
+  vars {
+    kubelet_image_url = "${replace(var.container_images["hyperkube"],var.image_re,"$1")}"
+    kubelet_image_tag = "${replace(var.container_images["hyperkube"],var.image_re,"$2")}"
+  }
+}
+
+data "ignition_file" "installer_kubelet_env" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/installer/kubelet.env"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.installer_kubelet_env.rendered}"
+  }
+}
+
+data "template_file" "tx_off" {
+  template = "${file("${path.module}/resources/services/tx-off.service")}"
+}
+
+data "ignition_systemd_unit" "tx_off" {
+  name    = "tx-off.service"
+  enabled = true
+  content = "${data.template_file.tx_off.rendered}"
+}
+
+data "template_file" "azure_udev_rules" {
+  template = "${file("${path.module}/resources/udev/66-azure-storage.rules")}"
+}
+
+data "ignition_file" "azure_udev_rules" {
+  filesystem = "root"
+  path       = "/etc/udev/rules.d/66-azure-storage.rules"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.azure_udev_rules.rendered}"
+  }
+}
+
+data "template_file" "coreos_metadata" {
+  template = "${file("${path.module}/resources/dropins/10-metadata.conf")}"
+
+  vars {
+    metadata_provider = "${var.metadata_provider}"
+  }
+}
+
+data "ignition_systemd_unit" "coreos_metadata" {
+  name    = "coreos-metadata.service"
+  enabled = true
+
+  dropin = [
+    {
+      name    = "10-metadata.conf"
+      content = "${data.template_file.coreos_metadata.rendered}"
+    },
+  ]
+}
+
+data "template_file" "gcs_puller" {
+  vars {
+    gcloudsdk_image = "${var.container_images["gcloudsdk"]}"
+  }
+
+  template = "${file("${path.module}/resources/bin/gcs-puller.sh")}"
+}
+
+data "ignition_file" "gcs_puller" {
+  filesystem = "root"
+  path       = "/opt/gcs-puller.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.gcs_puller.rendered}"
+  }
+}
+
+data "ignition_systemd_unit" "iscsi" {
+  name    = "iscsid.service"
+  enabled = "${var.iscsi_enabled ? true : false}"
+}
+
+data "template_file" "profile_env" {
+  count = "${local.profile_env_enabled ? 1 : 0}"
+
+  vars {
+    http_proxy  = "${var.http_proxy}"
+    https_proxy = "${var.https_proxy}"
+    no_proxy    = "${join(",", var.no_proxy)}"
+  }
+
+  template = "${file("${path.module}/resources/proxy/profile.env")}"
+}
+
+data "ignition_file" "profile_env" {
+  count = "${local.profile_env_enabled ? 1 : 0}"
+
+  path       = "/etc/profile.env"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${data.template_file.profile_env.rendered}"
+  }
+}
+
+data "template_file" "systemd_default_env" {
+  count = "${var.http_proxy_enabled ? 1 : 0}"
+
+  vars {
+    http_proxy  = "${var.http_proxy}"
+    https_proxy = "${var.https_proxy}"
+    no_proxy    = "${join(",", var.no_proxy)}"
+  }
+
+  template = "${file("${path.module}/resources/proxy/10-default-env.conf")}"
+}
+
+data "ignition_file" "systemd_default_env" {
+  count = "${var.http_proxy_enabled ? 1 : 0}"
+
+  path       = "/etc/systemd/system.conf.d/10-default-env.conf"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${data.template_file.systemd_default_env.rendered}"
+  }
+}
+
+data "ignition_file" "nfs_config" {
+  count      = "${var.nfs_config_file != "/dev/null" ? 1 : 0}"
+  path       = "/etc/conf.d/nfs"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${file(var.nfs_config_file)}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%ca_certs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%ca_certs.tf
new file mode 100644
index 0000000..c84c3cd
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%ca_certs.tf
@@ -0,0 +1,51 @@
+data "template_file" "update_ca_certificates_dropin" {
+  template = "${file("${path.module}/resources/dropins/10-always-update-ca-certificates.conf")}"
+}
+
+data "ignition_systemd_unit" "update_ca_certificates_dropin" {
+  name    = "update-ca-certificates.service"
+  enabled = true
+
+  dropin = [
+    {
+      name    = "10-always-update-ca-certificates.conf"
+      content = "${data.template_file.update_ca_certificates_dropin.rendered}"
+    },
+  ]
+}
+
+data "ignition_file" "root_ca_cert_pem" {
+  filesystem = "root"
+  path       = "/etc/ssl/certs/root_ca.pem"
+  mode       = 0400
+  uid        = 0
+  gid        = 0
+
+  content {
+    content = "${var.root_ca_cert_pem}"
+  }
+}
+
+data "ignition_file" "etcd_ca_cert_pem" {
+  filesystem = "root"
+  path       = "/etc/ssl/certs/etcd_ca.pem"
+  mode       = 0444
+  uid        = 0
+  gid        = 0
+
+  content {
+    content = "${var.etcd_ca_cert_pem}"
+  }
+}
+
+data "ignition_file" "ingress_ca_cert_pem" {
+  filesystem = "root"
+  path       = "/etc/ssl/certs/ingress_ca.pem"
+  mode       = 0444
+  uid        = 0
+  gid        = 0
+
+  content {
+    content = "${var.ingress_ca_cert_pem}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%ca_certs.tf-250 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%ca_certs.tf-250
new file mode 100644
index 0000000..3e58f5d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%ca_certs.tf-250
@@ -0,0 +1,65 @@
+data "template_file" "update_ca_certificates_dropin" {
+  template = "${file("${path.module}/resources/dropins/10-always-update-ca-certificates.conf")}"
+}
+
+data "ignition_systemd_unit" "update_ca_certificates_dropin" {
+  name    = "update-ca-certificates.service"
+  enabled = true
+
+  dropin = [
+    {
+      name    = "10-always-update-ca-certificates.conf"
+      content = "${data.template_file.update_ca_certificates_dropin.rendered}"
+    },
+  ]
+}
+
+data "ignition_file" "kube_ca_cert_pem" {
+  filesystem = "root"
+  path       = "/etc/ssl/certs/kube_ca.pem"
+  mode       = 0444
+  uid        = 0
+  gid        = 0
+
+  content {
+    content = "${var.kube_ca_cert_pem}"
+  }
+}
+
+data "ignition_file" "etcd_ca_cert_pem" {
+  filesystem = "root"
+  path       = "/etc/ssl/certs/etcd_ca.pem"
+  mode       = 0444
+  uid        = 0
+  gid        = 0
+
+  content {
+    content = "${var.etcd_ca_cert_pem}"
+  }
+}
+
+data "ignition_file" "ingress_ca_cert_pem" {
+  filesystem = "root"
+  path       = "/etc/ssl/certs/ingress_ca.pem"
+  mode       = 0444
+  uid        = 0
+  gid        = 0
+
+  content {
+    content = "${var.ingress_ca_cert_pem}"
+  }
+}
+
+data "ignition_file" "custom_ca_cert_pem" {
+  count = "${length(var.custom_ca_cert_pem_list)}"
+
+  filesystem = "root"
+  path       = "/etc/ssl/certs/custom_ca_${count.index}.pem"
+  mode       = 0444
+  uid        = 0
+  gid        = 0
+
+  content {
+    content = "${var.custom_ca_cert_pem_list[count.index]}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%etcd.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%etcd.tf
new file mode 100644
index 0000000..2cb5829
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%etcd.tf
@@ -0,0 +1,27 @@
+data "ignition_file" "etcd_ca" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  path       = "/etc/ssl/etcd/ca.crt"
+  mode       = 0644
+  uid        = 232
+  gid        = 232
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_ca_cert_pem}"
+  }
+}
+
+data "ignition_file" "root_ca" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  path       = "/etc/ssl/etcd/root-ca.crt"
+  mode       = 0644
+  uid        = 232
+  gid        = 232
+  filesystem = "root"
+
+  content {
+    content = "${var.root_ca_cert_pem}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%etcd.tf-155 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%etcd.tf-155
new file mode 100644
index 0000000..c1b238d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%etcd.tf-155
@@ -0,0 +1,167 @@
+locals {
+  scheme = "${var.etcd_tls_enabled ? "https" : "http"}"
+
+  // see https://github.com/hashicorp/terraform/issues/9858
+  etcd_initial_cluster_list = "${concat(var.etcd_initial_cluster_list, list("dummy"))}"
+
+  metadata_env = "EnvironmentFile=/run/metadata/coreos"
+
+  metadata_deps = <<EOF
+Requires=coreos-metadata.service
+After=coreos-metadata.service
+EOF
+
+  cert_options = <<EOF
+--cert-file=/etc/ssl/etcd/server.crt \
+  --client-cert-auth=true \
+  --key-file=/etc/ssl/etcd/server.key \
+  --peer-cert-file=/etc/ssl/etcd/peer.crt \
+  --peer-key-file=/etc/ssl/etcd/peer.key \
+  --peer-trusted-ca-file=/etc/ssl/etcd/ca.crt \
+  --peer-client-cert-auth=true \
+  --trusted-ca-file=/etc/ssl/etcd/ca.crtEOF
+}
+
+data "template_file" "etcd_names" {
+  count    = "${var.etcd_count}"
+  template = "${var.cluster_name}-etcd-${count.index}${var.base_domain == "" ? "" : ".${var.base_domain}"}"
+}
+
+data "template_file" "advertise_client_urls" {
+  count    = "${var.etcd_count}"
+  template = "${local.scheme}://${var.etcd_advertise_name_list[count.index]}:2379"
+}
+
+data "template_file" "initial_advertise_peer_urls" {
+  count    = "${var.etcd_count}"
+  template = "${local.scheme}://${var.etcd_advertise_name_list[count.index]}:2380"
+}
+
+data "template_file" "initial_cluster" {
+  count    = "${length(var.etcd_initial_cluster_list) > 0 ? var.etcd_count : 0}"
+  template = "${data.template_file.etcd_names.*.rendered[count.index]}=${local.scheme}://${local.etcd_initial_cluster_list[count.index]}:2380"
+}
+
+data "template_file" "etcd" {
+  count    = "${var.etcd_count}"
+  template = "${file("${path.module}/resources/dropins/40-etcd-cluster.conf")}"
+
+  vars = {
+    advertise_client_urls       = "${data.template_file.advertise_client_urls.*.rendered[count.index]}"
+    cert_options                = "${var.etcd_tls_enabled ? local.cert_options : ""}"
+    container_image             = "${var.container_images["etcd"]}"
+    initial_advertise_peer_urls = "${data.template_file.initial_advertise_peer_urls.*.rendered[count.index]}"
+    initial_cluster             = "${length(var.etcd_initial_cluster_list) > 0 ? format("--initial-cluster=%s", join(",", data.template_file.initial_cluster.*.rendered)) : ""}"
+    metadata_deps               = "${var.use_metadata ? local.metadata_deps : ""}"
+    metadata_env                = "${var.use_metadata ? local.metadata_env : ""}"
+    name                        = "${data.template_file.etcd_names.*.rendered[count.index]}"
+    scheme                      = "${local.scheme}"
+  }
+}
+
+data "ignition_systemd_unit" "etcd" {
+  count   = "${var.etcd_count}"
+  name    = "etcd-member.service"
+  enabled = true
+
+  dropin = [
+    {
+      name    = "40-etcd-cluster.conf"
+      content = "${data.template_file.etcd.*.rendered[count.index]}"
+    },
+  ]
+}
+
+data "ignition_file" "etcd_ca" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  path       = "/etc/ssl/etcd/ca.crt"
+  mode       = 0644
+  uid        = 232
+  gid        = 232
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_ca_cert_pem}"
+  }
+}
+
+data "ignition_file" "etcd_client_key" {
+  path       = "/etc/ssl/etcd/client.key"
+  mode       = 0400
+  uid        = 0
+  gid        = 0
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_client_key_pem}"
+  }
+}
+
+data "ignition_file" "etcd_client_crt" {
+  path       = "/etc/ssl/etcd/client.crt"
+  mode       = 0400
+  uid        = 0
+  gid        = 0
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_client_crt_pem}"
+  }
+}
+
+data "ignition_file" "etcd_server_key" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  path       = "/etc/ssl/etcd/server.key"
+  mode       = 0400
+  uid        = 232
+  gid        = 232
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_server_key_pem}"
+  }
+}
+
+data "ignition_file" "etcd_server_crt" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  path       = "/etc/ssl/etcd/server.crt"
+  mode       = 0400
+  uid        = 232
+  gid        = 232
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_server_crt_pem}"
+  }
+}
+
+data "ignition_file" "etcd_peer_key" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  path       = "/etc/ssl/etcd/peer.key"
+  mode       = 0400
+  uid        = 232
+  gid        = 232
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_peer_key_pem}"
+  }
+}
+
+data "ignition_file" "etcd_peer_crt" {
+  count = "${var.etcd_count > 0 ? 1 : 0}"
+
+  path       = "/etc/ssl/etcd/peer.crt"
+  mode       = 0400
+  uid        = 232
+  gid        = 232
+  filesystem = "root"
+
+  content {
+    content = "${var.etcd_peer_crt_pem}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%outputs.tf
new file mode 100644
index 0000000..524dd52
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%outputs.tf
@@ -0,0 +1,37 @@
+output "update_ca_certificates_dropin_rendered" {
+  value = "${data.template_file.update_ca_certificates_dropin.rendered}"
+}
+
+output "ca_cert_pem_list" {
+  value = [
+    "${var.root_ca_cert_pem}",
+    "${var.ingress_ca_cert_pem}",
+    "${var.etcd_ca_cert_pem}",
+  ]
+}
+
+output "etcd_crt_id_list" {
+  value = ["${flatten(list(
+    data.ignition_file.root_ca.*.id,
+    data.ignition_file.etcd_ca.*.id,
+  ))}"]
+}
+
+output "ignition_file_id_list" {
+  value = [
+    "${data.ignition_file.root_ca_cert_pem.id}",
+    "${data.ignition_file.ingress_ca_cert_pem.id}",
+    "${data.ignition_file.etcd_ca_cert_pem.id}",
+    "${data.ignition_file.installer_runtime_mappings.id}",
+  ]
+}
+
+output "ignition_systemd_id_list" {
+  value = [
+    "${data.ignition_systemd_unit.docker_dropin.id}",
+    "${data.ignition_systemd_unit.kubelet.id}",
+    "${data.ignition_systemd_unit.locksmithd.id}",
+    "${data.ignition_systemd_unit.update_ca_certificates_dropin.id}",
+    "${data.ignition_systemd_unit.rm_assets.id}",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%outputs.tf-144 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%outputs.tf-144
new file mode 100644
index 0000000..d31911b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%outputs.tf-144
@@ -0,0 +1,181 @@
+output "max_user_watches_id" {
+  value = "${data.ignition_file.max_user_watches.id}"
+}
+
+output "max_user_watches_rendered" {
+  value = "${data.template_file.max_user_watches.rendered}"
+}
+
+output "docker_dropin_id" {
+  value = "${data.ignition_systemd_unit.docker_dropin.id}"
+}
+
+output "docker_dropin_rendered" {
+  value = "${data.template_file.docker_dropin.rendered}"
+}
+
+output "kubelet_service_id" {
+  value = "${data.ignition_systemd_unit.kubelet.id}"
+}
+
+output "kubelet_service_rendered" {
+  value = "${data.template_file.kubelet.rendered}"
+}
+
+output "k8s_node_bootstrap_service_id" {
+  value = "${data.ignition_systemd_unit.k8s_node_bootstrap.id}"
+}
+
+output "k8s_node_bootstrap_service_rendered" {
+  value = "${data.template_file.k8s_node_bootstrap.rendered}"
+}
+
+output "ntp_dropin_id" {
+  value = "${data.ignition_file.ntp_dropin.id}"
+}
+
+output "ntp_dropin_rendered" {
+  value = "${data.template_file.ntp_dropin.rendered}"
+}
+
+output "init_assets_service_id" {
+  value = "${data.ignition_systemd_unit.init_assets.id}"
+}
+
+output "rm_assets_service_id" {
+  value = "${data.ignition_systemd_unit.rm_assets.id}"
+}
+
+output "rm_assets_path_unit_id" {
+  value = "${data.ignition_systemd_unit.rm_assets_path_unit.id}"
+}
+
+output "s3_puller_id" {
+  value = "${data.ignition_file.s3_puller.id}"
+}
+
+output "s3_puller_rendered" {
+  value = "${data.template_file.s3_puller.rendered}"
+}
+
+output "locksmithd_service_id" {
+  value = "${data.ignition_systemd_unit.locksmithd.id}"
+}
+
+output "installer_runtime_mappings_id" {
+  value = "${data.ignition_file.installer_runtime_mappings.id}"
+}
+
+output "installer_runtime_mappings_rendered" {
+  value = "${data.template_file.installer_runtime_mappings.rendered}"
+}
+
+output "installer_kubelet_env_id" {
+  value = "${data.ignition_file.installer_kubelet_env.id}"
+}
+
+output "installer_kubelet_env_rendered" {
+  value = "${data.template_file.installer_kubelet_env.rendered}"
+}
+
+output "tx_off_service_id" {
+  value = "${data.ignition_systemd_unit.tx_off.id}"
+}
+
+output "tx_off_service_rendered" {
+  value = "${data.template_file.tx_off.rendered}"
+}
+
+output "azure_udev_rules_id" {
+  value = "${data.ignition_file.azure_udev_rules.id}"
+}
+
+output "azure_udev_rules_rendered" {
+  value = "${data.template_file.azure_udev_rules.rendered}"
+}
+
+output "etcd_dropin_id_list" {
+  value = "${data.ignition_systemd_unit.etcd.*.id}"
+}
+
+output "etcd_dropin_rendered_list" {
+  value = "${data.template_file.etcd.*.rendered}"
+}
+
+output "coreos_metadata_dropin_id" {
+  value = "${data.ignition_systemd_unit.coreos_metadata.id}"
+}
+
+output "coreos_metadata_dropin_rendered" {
+  value = "${data.template_file.coreos_metadata.rendered}"
+}
+
+output "gcs_puller_id" {
+  value = "${data.ignition_file.gcs_puller.id}"
+}
+
+output "update_ca_certificates_dropin_id" {
+  value = "${data.ignition_systemd_unit.update_ca_certificates_dropin.id}"
+}
+
+output "update_ca_certificates_dropin_rendered" {
+  value = "${data.template_file.update_ca_certificates_dropin.rendered}"
+}
+
+output "ca_cert_id_list" {
+  value = [
+    "${data.ignition_file.kube_ca_cert_pem.id}",
+    "${data.ignition_file.ingress_ca_cert_pem.id}",
+    "${data.ignition_file.etcd_ca_cert_pem.id}",
+    "${data.ignition_file.custom_ca_cert_pem.*.id}",
+  ]
+}
+
+output "ca_cert_pem_list" {
+  value = [
+    "${var.kube_ca_cert_pem}",
+    "${var.ingress_ca_cert_pem}",
+    "${var.etcd_ca_cert_pem}",
+    "${var.custom_ca_cert_pem_list}",
+  ]
+}
+
+output "etcd_crt_id_list" {
+  value = [
+    "${data.ignition_file.etcd_ca.*.id}",
+    "${data.ignition_file.etcd_client_key.*.id}",
+    "${data.ignition_file.etcd_client_crt.*.id}",
+    "${data.ignition_file.etcd_server_key.*.id}",
+    "${data.ignition_file.etcd_server_crt.*.id}",
+    "${data.ignition_file.etcd_peer_key.*.id}",
+    "${data.ignition_file.etcd_peer_crt.*.id}",
+  ]
+}
+
+output "iscsi_service_id" {
+  value = "${data.ignition_systemd_unit.iscsi.id}"
+}
+
+output "profile_env_id" {
+  value = "${join("",data.ignition_file.profile_env.*.id)}"
+}
+
+output "profile_env_rendered" {
+  value = "${join("",data.template_file.profile_env.*.rendered)}"
+}
+
+output "systemd_default_env_id" {
+  value = "${join("",data.ignition_file.systemd_default_env.*.id)}"
+}
+
+output "systemd_default_env_rendered" {
+  value = "${join("",data.template_file.systemd_default_env.*.rendered)}"
+}
+
+output "nfs_config_id" {
+  value = "${join("" , data.ignition_file.nfs_config.*.id)}"
+}
+
+output "nfs_config_rendered" {
+  value = "${file(var.nfs_config_file)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%variables.tf
new file mode 100644
index 0000000..1a8236e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%variables.tf
@@ -0,0 +1,87 @@
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "image_re" {
+  description = <<EOF
+(internal) Regular expression used to extract repo and tag components from image strings
+EOF
+
+  type = "string"
+}
+
+variable "kubelet_debug_config" {
+  type        = "string"
+  default     = ""
+  description = "internal debug flags for the kubelet (used in CI only)"
+}
+
+variable "kube_dns_service_ip" {
+  type        = "string"
+  description = "Service IP used to reach kube-dns"
+}
+
+variable "kubelet_node_label" {
+  type        = "string"
+  description = "Label that Kubelet will apply on the node"
+}
+
+variable "kubelet_node_taints" {
+  type        = "string"
+  description = "(optional) Taints that Kubelet will apply on the node"
+  default     = ""
+}
+
+variable "cloud_provider" {
+  type        = "string"
+  description = "(optional) The cloud provider to be used for the kubelet."
+  default     = ""
+}
+
+variable "cloud_provider_config" {
+  type        = "string"
+  description = "(optional) The cloud provider config to be used for the kubelet."
+  default     = ""
+}
+
+variable "torcx_store_url" {
+  type        = "string"
+  description = "(optional) URL template for torcx store. Leave empty to use the default CoreOS endpoint."
+  default     = ""
+}
+
+variable "etcd_count" {
+  type    = "string"
+  default = 0
+}
+
+variable "metadata_provider" {
+  type    = "string"
+  default = ""
+}
+
+variable "root_ca_cert_pem" {
+  type        = "string"
+  description = "The public root CA certificate in PEM format."
+}
+
+variable "ingress_ca_cert_pem" {
+  type        = "string"
+  description = "The ingress kube CA certificate in PEM format."
+}
+
+variable "etcd_ca_cert_pem" {
+  type        = "string"
+  description = "The etcd kube CA certificate in PEM format."
+}
+
+variable "tnc_cert_pem" {
+  type        = "string"
+  description = "The TNC certificate in PEM format."
+}
+
+variable "tnc_key_pem" {
+  type        = "string"
+  description = "The TNC key in PEM format."
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%variables.tf-269 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%variables.tf-269
new file mode 100644
index 0000000..16830ca
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%ignition%variables.tf-269
@@ -0,0 +1,198 @@
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "image_re" {
+  description = <<EOF
+(internal) Regular expression used to extract repo and tag components from image strings
+EOF
+
+  type = "string"
+}
+
+variable "kubelet_cni_bin_dir" {
+  type = "string"
+}
+
+variable "kubelet_debug_config" {
+  type        = "string"
+  default     = ""
+  description = "internal debug flags for the kubelet (used in CI only)"
+}
+
+variable "kube_dns_service_ip" {
+  type        = "string"
+  description = "Service IP used to reach kube-dns"
+}
+
+variable "kubelet_node_label" {
+  type        = "string"
+  description = "Label that Kubelet will apply on the node"
+}
+
+variable "kubelet_node_taints" {
+  type        = "string"
+  description = "(optional) Taints that Kubelet will apply on the node"
+  default     = ""
+}
+
+variable "kubeconfig_fetch_cmd" {
+  type        = "string"
+  description = "(optional) The command that fetches `/etc/kubernetes/kubeconfig`."
+  default     = ""
+}
+
+variable "cloud_provider" {
+  type        = "string"
+  description = "(optional) The cloud provider to be used for the kubelet."
+  default     = ""
+}
+
+variable "cloud_provider_config" {
+  type        = "string"
+  description = "(optional) The cloud provider config to be used for the kubelet."
+  default     = ""
+}
+
+variable "bootstrap_upgrade_cl" {
+  type        = "string"
+  description = "(optional) Whether to trigger a ContainerLinux OS upgrade during the bootstrap process."
+  default     = "true"
+}
+
+variable "torcx_store_url" {
+  type        = "string"
+  description = "(optional) URL template for torcx store. Leave empty to use the default CoreOS endpoint."
+  default     = ""
+}
+
+variable "tectonic_vanilla_k8s" {
+  description = <<EOF
+If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+EOF
+}
+
+variable "assets_location" {
+  type        = "string"
+  description = "(optional) The storing location to retrieve the assets."
+  default     = ""
+}
+
+variable "etcd_count" {
+  type    = "string"
+  default = 0
+}
+
+variable "etcd_tls_enabled" {
+  type    = "string"
+  default = true
+}
+
+variable "etcd_advertise_name_list" {
+  type    = "list"
+  default = []
+}
+
+variable "etcd_initial_cluster_list" {
+  type    = "list"
+  default = []
+}
+
+variable "base_domain" {
+  type    = "string"
+  default = ""
+}
+
+variable "cluster_name" {
+  type    = "string"
+  default = ""
+}
+
+variable "metadata_provider" {
+  type    = "string"
+  default = ""
+}
+
+variable "use_metadata" {
+  default = true
+}
+
+variable "kube_ca_cert_pem" {
+  type        = "string"
+  description = "The public kube CA certificate in PEM format."
+}
+
+variable "ntp_servers" {
+  type        = "list"
+  description = "A list of NTP servers to be used for time synchronization on the cluster nodes."
+}
+
+variable "ingress_ca_cert_pem" {
+  type        = "string"
+  description = "The ingress kube CA certificate in PEM format."
+}
+
+variable "etcd_ca_cert_pem" {
+  type        = "string"
+  description = "The etcd kube CA certificate in PEM format."
+}
+
+variable "etcd_client_key_pem" {
+  default = ""
+}
+
+variable "etcd_client_crt_pem" {
+  default = ""
+}
+
+variable "etcd_server_key_pem" {
+  default = ""
+}
+
+variable "etcd_server_crt_pem" {
+  default = ""
+}
+
+variable "etcd_peer_key_pem" {
+  default = ""
+}
+
+variable "etcd_peer_crt_pem" {
+  default = ""
+}
+
+variable "custom_ca_cert_pem_list" {
+  type        = "list"
+  description = "(optional) A list of custom CAs in PEM format."
+}
+
+variable "iscsi_enabled" {
+  type    = "string"
+  default = "false"
+}
+
+variable "http_proxy" {
+  type = "string"
+}
+
+variable "https_proxy" {
+  type = "string"
+}
+
+variable "http_proxy_enabled" {
+  type = "string"
+}
+
+variable "no_proxy" {
+  type = "list"
+}
+
+variable "nfs_config_file" {
+  type        = "string"
+  description = "Path to a file containing the desired NFS config in /etc/conf.d/nfs."
+}
+
+variable "proxy_exclusive_units" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%assets.tf
new file mode 100644
index 0000000..b39d5f8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%assets.tf
@@ -0,0 +1,17 @@
+data "template_file" "calico" {
+  template = "${file("${path.module}/resources/manifests/kube-calico.yaml")}"
+
+  vars {
+    calico_cni_image = "${var.container_images["calico_cni"]}"
+    calico_image     = "${var.container_images["calico"]}"
+    cluster_cidr     = "${var.cluster_cidr}"
+    mtu              = "${var.mtu}"
+  }
+}
+
+resource "local_file" "calico" {
+  count = "${var.enabled ? 1 : 0}"
+
+  content  = "${data.template_file.calico.rendered}"
+  filename = "./generated/net-manifests/kube-calico.yaml"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%outputs.tf
new file mode 100644
index 0000000..d5d6f06
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%outputs.tf
@@ -0,0 +1,7 @@
+output "id" {
+  value = "${var.enabled ? sha1(element(concat(local_file.calico.*.id, list("")), 0)) : "# calico disabled"}"
+}
+
+output "name" {
+  value = "calico"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%variables.tf
new file mode 100644
index 0000000..55fcac6
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%calico%variables.tf
@@ -0,0 +1,18 @@
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "cluster_cidr" {
+  description = "A CIDR notation IP range from which to assign pod IPs"
+  type        = "string"
+}
+
+variable "enabled" {
+  description = "If set true, calico networking will be deployed"
+}
+
+variable "mtu" {
+  type    = "string"
+  default = 1500
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%assets.tf
new file mode 100644
index 0000000..f4fee54
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%assets.tf
@@ -0,0 +1,33 @@
+data "template_file" "flannel" {
+  template = "${file("${path.module}/resources/manifests/kube-flannel.yaml")}"
+
+  vars {
+    cluster_cidr      = "${var.cluster_cidr}"
+    flannel_cni_image = "${var.container_images["flannel_cni"]}"
+    flannel_image     = "${var.container_images["flannel"]}"
+  }
+}
+
+data "template_file" "calico_network_policy" {
+  template = "${file("${path.module}/resources/manifests/kube-calico.yaml")}"
+
+  vars {
+    calico_cni_image = "${var.container_images["calico_cni"]}"
+    calico_image     = "${var.container_images["calico"]}"
+    cluster_cidr     = "${var.cluster_cidr}"
+  }
+}
+
+resource "local_file" "calico_network_policy" {
+  count = "${var.enabled ? 1 : 0}"
+
+  content  = "${data.template_file.calico_network_policy.rendered}"
+  filename = "./generated/net-manifests/kube-calico.yaml"
+}
+
+resource "local_file" "flannel" {
+  count = "${var.enabled ? 1 : 0}"
+
+  content  = "${data.template_file.flannel.rendered}"
+  filename = "./generated/net-manifests/kube-flannel.yaml"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%outputs.tf
new file mode 100644
index 0000000..b0b0408
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%outputs.tf
@@ -0,0 +1,7 @@
+output "id" {
+  value = "${var.enabled ? "${sha1("${element(concat(local_file.calico_network_policy.*.id, list("")), 0)}")}" : "# calico policy disabled"}"
+}
+
+output "name" {
+  value = "calico"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%variables.tf
new file mode 100644
index 0000000..8ba504d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%canal%variables.tf
@@ -0,0 +1,13 @@
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "cluster_cidr" {
+  description = "A CIDR notation IP range from which to assign pod IPs"
+  type        = "string"
+}
+
+variable "enabled" {
+  description = "If set true, calico network policy will be deployed"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%assets.tf
new file mode 100644
index 0000000..817142c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%assets.tf
@@ -0,0 +1,16 @@
+data "template_file" "flannel" {
+  template = "${file("${path.module}/resources/manifests/kube-flannel.yaml")}"
+
+  vars {
+    cluster_cidr      = "${var.cluster_cidr}"
+    flannel_cni_image = "${var.container_images["flannel_cni"]}"
+    flannel_image     = "${var.container_images["flannel"]}"
+  }
+}
+
+resource "local_file" "flannel" {
+  count = "${var.enabled ? 1 : 0}"
+
+  content  = "${data.template_file.flannel.rendered}"
+  filename = "./generated/net-manifests/kube-flannel.yaml"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%outputs.tf
new file mode 100644
index 0000000..93f0a22
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%outputs.tf
@@ -0,0 +1,7 @@
+output "id" {
+  value = "${var.enabled ? sha1(element(concat(local_file.flannel.*.id, list("")), 0)) : "# flannel disabled"}"
+}
+
+output "name" {
+  value = "flannel_vxlan"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%variables.tf
new file mode 100644
index 0000000..cfade5e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%net%flannel_vxlan%variables.tf
@@ -0,0 +1,14 @@
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "cluster_cidr" {
+  description = "A CIDR notation IP range from which to assign pod IPs"
+  type        = "string"
+}
+
+variable "enabled" {
+  description = "If set to true, flannel networking will be deployed"
+  default     = true
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%ignition.tf
new file mode 100644
index 0000000..60bf009
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%ignition.tf
@@ -0,0 +1,60 @@
+data "ignition_config" "etcd" {
+  count = "${var.self_hosted_etcd != "" ? 0 : var.instance_count}"
+
+  users = [
+    "${data.ignition_user.core.id}",
+  ]
+
+  files = ["${compact(list(
+    data.ignition_file.resolv_conf.id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_etcd_crt_id_list}",
+    "${var.ign_ntp_dropin_id}",
+  ]
+
+  systemd = [
+    "${data.ignition_systemd_unit.locksmithd.*.id[count.index]}",
+    "${var.ign_etcd_dropin_id_list[count.index]}",
+    "${var.ign_coreos_metadata_dropin_id}",
+  ]
+}
+
+data "ignition_file" "resolv_conf" {
+  path       = "/etc/resolv.conf"
+  mode       = 0644
+  uid        = 0
+  filesystem = "root"
+
+  content {
+    content = "${var.resolv_conf_content}"
+  }
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  count = "${var.instance_count}"
+
+  name    = "locksmithd.service"
+  enabled = true
+
+  dropin = [
+    {
+      name = "40-etcd-lock.conf"
+
+      content = <<EOF
+[Service]
+Environment=REBOOT_STRATEGY=etcd-lock
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.crt\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/client.key\"" : ""}
+${var.tls_enabled ? "Environment=\"LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/client.crt\"" : ""}
+Environment="LOCKSMITHD_ENDPOINT=${var.tls_enabled ? "https" : "http"}://${var.cluster_name}-etcd-${count.index}.${var.base_domain}:2379"
+EOF
+    },
+  ]
+}
+
+data "ignition_user" "core" {
+  name                = "core"
+  ssh_authorized_keys = ["${var.core_public_keys}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%output.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%output.tf
new file mode 100644
index 0000000..03ad20d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%output.tf
@@ -0,0 +1,3 @@
+output "user_data" {
+  value = "${data.ignition_config.etcd.*.rendered}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%variables.tf
new file mode 100644
index 0000000..46a8bc5
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%etcd%variables.tf
@@ -0,0 +1,59 @@
+// The content of the /etc/resolv.conf file.
+variable resolv_conf_content {
+  type = "string"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_image" {
+  type = "string"
+}
+
+variable "core_public_keys" {
+  type = "list"
+}
+
+variable "self_hosted_etcd" {
+  default     = ""
+  description = "See tectonic_self_hosted_etcd in config.tf"
+}
+
+variable "instance_count" {
+  default = ""
+}
+
+variable "tls_enabled" {
+  default = false
+}
+
+variable "ign_etcd_dropin_id_list" {
+  type = "list"
+}
+
+variable "ign_coreos_metadata_dropin_id" {
+  type = "string"
+}
+
+variable "ign_etcd_crt_id_list" {
+  type = "list"
+}
+
+variable "ign_profile_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_systemd_default_env_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_ntp_dropin_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%ignition.tf
new file mode 100644
index 0000000..cab87d9
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%ignition.tf
@@ -0,0 +1,89 @@
+data "ignition_config" "node" {
+  count = "${var.instance_count}"
+
+  users = [
+    "${data.ignition_user.core.id}",
+  ]
+
+  files = ["${compact(list(
+    data.ignition_file.hostname.*.id[count.index],
+    data.ignition_file.kubeconfig.id,
+    data.ignition_file.resolv_conf.id,
+    data.ignition_file.sshd.id,
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+   ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = ["${compact(list(
+    var.ign_docker_dropin_id,
+    var.ign_k8s_node_bootstrap_service_id,
+    var.ign_locksmithd_service_id,
+    var.ign_kubelet_service_id,
+    var.ign_bootkube_service_id,
+    var.ign_tectonic_service_id,
+    var.ign_bootkube_path_unit_id,
+    var.ign_tectonic_path_unit_id,
+    var.ign_update_ca_certificates_dropin_id,
+    var.ign_iscsi_service_id,
+   ))}"]
+}
+
+data "ignition_file" "resolv_conf" {
+  path       = "/etc/resolv.conf"
+  mode       = 0644
+  uid        = 0
+  filesystem = "root"
+
+  content {
+    content = "${var.resolv_conf_content}"
+  }
+}
+
+data "ignition_user" "core" {
+  name                = "core"
+  ssh_authorized_keys = ["${var.core_public_keys}"]
+}
+
+data "ignition_file" "hostname" {
+  count      = "${var.instance_count}"
+  path       = "/etc/hostname"
+  mode       = 0644
+  uid        = 0
+  filesystem = "root"
+
+  content {
+    content = "${var.cluster_name}-${var.hostname_infix}-${count.index}"
+  }
+}
+
+data "ignition_file" "kubeconfig" {
+  filesystem = "root"
+  path       = "/etc/kubernetes/kubeconfig"
+  mode       = 0644
+
+  content {
+    content = "${var.kubeconfig_content}"
+  }
+}
+
+data "ignition_file" "sshd" {
+  filesystem = "root"
+  path       = "/etc/ssh/sshd_config"
+  mode       = 0600
+
+  content {
+    content = <<EOF
+Subsystem sftp internal-sftp
+
+PermitRootLogin no
+AuthenticationMethods publickey
+EOF
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%output.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%output.tf
new file mode 100644
index 0000000..2b64616
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%output.tf
@@ -0,0 +1,3 @@
+output "user_data" {
+  value = "${data.ignition_config.node.*.rendered}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%variables.tf
new file mode 100644
index 0000000..55151b8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%nodes%variables.tf
@@ -0,0 +1,49 @@
+variable "cluster_name" {
+  type        = "string"
+  description = "The name of the cluster. The master hostnames will be prefixed with this."
+}
+
+variable "core_public_keys" {
+  type = "list"
+}
+
+variable "hostname_infix" {
+  type = "string"
+}
+
+variable "instance_count" {
+  type        = "string"
+  description = "The amount of nodes to be created. Example: `3`"
+}
+
+variable "kubeconfig_content" {
+  type        = "string"
+  description = "The content of the kubeconfig file."
+}
+
+variable "resolv_conf_content" {
+  type        = "string"
+  description = "The content of the /etc/resolv.conf file."
+}
+
+variable "ign_bootkube_service_id" {
+  type        = "string"
+  description = "The ID of the bootkube systemd service unit"
+  default     = ""
+}
+
+variable "ign_bootkube_path_unit_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_tectonic_service_id" {
+  type        = "string"
+  description = "The ID of the tectonic installer systemd service unit"
+  default     = ""
+}
+
+variable "ign_tectonic_path_unit_id" {
+  type    = "string"
+  default = ""
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%output.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%output.tf
new file mode 100644
index 0000000..b0178a9
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%output.tf
@@ -0,0 +1,44 @@
+output "secgroup_master_names" {
+  value = [
+    "${openstack_networking_secgroup_v2.base.name}",
+    "${openstack_networking_secgroup_v2.k8s.name}",
+    "${openstack_networking_secgroup_v2.etcd.name}",
+  ]
+}
+
+output "secgroup_master_ids" {
+  value = [
+    "${openstack_networking_secgroup_v2.base.id}",
+    "${openstack_networking_secgroup_v2.k8s.id}",
+    "${openstack_networking_secgroup_v2.etcd.id}",
+  ]
+}
+
+output "secgroup_node_names" {
+  value = [
+    "${openstack_networking_secgroup_v2.base.name}",
+    "${openstack_networking_secgroup_v2.k8s.name}",
+  ]
+}
+
+output "secgroup_node_ids" {
+  value = [
+    "${openstack_networking_secgroup_v2.base.id}",
+    "${openstack_networking_secgroup_v2.k8s.id}",
+    "${openstack_networking_secgroup_v2.k8s_nodes.id}",
+  ]
+}
+
+output "secgroup_etcd_names" {
+  value = [
+    "${openstack_networking_secgroup_v2.base.name}",
+    "${openstack_networking_secgroup_v2.etcd.name}",
+  ]
+}
+
+output "secgroup_etcd_ids" {
+  value = [
+    "${openstack_networking_secgroup_v2.base.id}",
+    "${openstack_networking_secgroup_v2.etcd.id}",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%default%secgroup.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%default%secgroup.tf
new file mode 100644
index 0000000..b2b20fd
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%default%secgroup.tf
@@ -0,0 +1,17 @@
+resource "openstack_networking_secgroup_rule_v2" "ssh" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 22
+  port_range_max    = 22
+  protocol          = "tcp"
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${var.secgroup_id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "icmp" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  protocol          = "icmp"
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${var.secgroup_id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%default%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%default%variables.tf
new file mode 100644
index 0000000..69a764b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%default%variables.tf
@@ -0,0 +1,3 @@
+variable "secgroup_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%etcd%secgroup.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%etcd%secgroup.tf
new file mode 100644
index 0000000..c496c91
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%etcd%secgroup.tf
@@ -0,0 +1,20 @@
+resource "openstack_networking_secgroup_rule_v2" "etcd" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 2379
+  port_range_max    = 2380
+  protocol          = "tcp"
+  remote_ip_prefix  = "${var.cluster_cidr}"
+  security_group_id = "${var.secgroup_id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "bootstrap_etcd" {
+  count             = "${var.self_hosted ? 1 : 0}"
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 12379
+  port_range_max    = 12380
+  protocol          = "tcp"
+  remote_ip_prefix  = "${var.cluster_cidr}"
+  security_group_id = "${var.secgroup_id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%etcd%variables.tf
new file mode 100644
index 0000000..027d12f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%etcd%variables.tf
@@ -0,0 +1,11 @@
+variable "secgroup_id" {
+  type = "string"
+}
+
+variable "self_hosted" {
+  default = false
+}
+
+variable "cluster_cidr" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s%secgroup.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s%secgroup.tf
new file mode 100644
index 0000000..0dbcbd2
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s%secgroup.tf
@@ -0,0 +1,49 @@
+resource "openstack_networking_secgroup_rule_v2" "https" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 443
+  port_range_max    = 443
+  protocol          = "tcp"
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${var.secgroup_id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "cAdvisor" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 4194
+  port_range_max    = 4194
+  protocol          = "tcp"
+  remote_ip_prefix  = "${var.cluster_cidr}"
+  security_group_id = "${var.secgroup_id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "flannel" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 4789
+  port_range_max    = 4789
+  protocol          = "udp"
+  remote_ip_prefix  = "${var.cluster_cidr}"
+  security_group_id = "${var.secgroup_id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "kubelet" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 10250
+  port_range_max    = 10250
+  protocol          = "tcp"
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${var.secgroup_id}"
+}
+
+resource "openstack_networking_secgroup_rule_v2" "node_ports" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 30000
+  port_range_max    = 32767
+  protocol          = "tcp"
+  remote_ip_prefix  = "0.0.0.0/0"
+  security_group_id = "${var.secgroup_id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s%variables.tf
new file mode 100644
index 0000000..bea462d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s%variables.tf
@@ -0,0 +1,7 @@
+variable "secgroup_id" {
+  type = "string"
+}
+
+variable "cluster_cidr" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s_nodes%secgroup.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s_nodes%secgroup.tf
new file mode 100644
index 0000000..02bca18
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s_nodes%secgroup.tf
@@ -0,0 +1,9 @@
+resource "openstack_networking_secgroup_rule_v2" "http" {
+  direction         = "ingress"
+  ethertype         = "IPv4"
+  port_range_min    = 80
+  port_range_max    = 80
+  protocol          = "tcp"
+  remote_ip_prefix  = "${var.cluster_cidr}"
+  security_group_id = "${var.secgroup_id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s_nodes%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s_nodes%variables.tf
new file mode 100644
index 0000000..bea462d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%rules%k8s_nodes%variables.tf
@@ -0,0 +1,7 @@
+variable "secgroup_id" {
+  type = "string"
+}
+
+variable "cluster_cidr" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%secgroup.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%secgroup.tf
new file mode 100644
index 0000000..3f29bcd
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%secgroup.tf
@@ -0,0 +1,46 @@
+resource "openstack_networking_secgroup_v2" "base" {
+  name        = "${var.cluster_name}_base"
+  description = "SSH and ICMP"
+}
+
+module "default" {
+  source      = "./rules/default"
+  secgroup_id = "${openstack_networking_secgroup_v2.base.id}"
+}
+
+resource "openstack_networking_secgroup_v2" "k8s" {
+  name                 = "${var.cluster_name}_k8s"
+  description          = "Ports needed by Kubernetes"
+  delete_default_rules = true
+}
+
+module "k8s" {
+  source       = "./rules/k8s"
+  secgroup_id  = "${openstack_networking_secgroup_v2.k8s.id}"
+  cluster_cidr = "${var.cluster_cidr}"
+}
+
+resource "openstack_networking_secgroup_v2" "k8s_nodes" {
+  name                 = "${var.cluster_name}_k8s_nodes"
+  description          = "Ports needed by Kubernetes nodes"
+  delete_default_rules = true
+}
+
+module "k8s_nodes" {
+  source       = "./rules/k8s_nodes"
+  secgroup_id  = "${openstack_networking_secgroup_v2.k8s_nodes.id}"
+  cluster_cidr = "${var.cluster_cidr}"
+}
+
+resource "openstack_networking_secgroup_v2" "etcd" {
+  name                 = "${var.cluster_name}_etcd"
+  description          = "Ports needed by etcd"
+  delete_default_rules = true
+}
+
+module "etcd" {
+  source       = "./rules/etcd"
+  secgroup_id  = "${openstack_networking_secgroup_v2.etcd.id}"
+  self_hosted  = "${var.self_hosted_etcd != ""}"
+  cluster_cidr = "${var.cluster_cidr}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%variables.tf
new file mode 100644
index 0000000..54e5816
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secgroups%variables.tf
@@ -0,0 +1,12 @@
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "self_hosted_etcd" {
+  default     = ""
+  description = "See tectonic_self_hosted_etcd in config.tf"
+}
+
+variable "cluster_cidr" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secrets%secrets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secrets%secrets.tf
new file mode 100644
index 0000000..42818dc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secrets%secrets.tf
@@ -0,0 +1,26 @@
+resource "tls_private_key" "core" {
+  algorithm = "RSA"
+}
+
+resource "openstack_compute_keypair_v2" "k8s_keypair" {
+  name       = "${var.cluster_name}_keypair"
+  public_key = "${tls_private_key.core.public_key_openssh}"
+}
+
+resource "null_resource" "export" {
+  provisioner "local-exec" {
+    command = "echo '${tls_private_key.core.private_key_pem}' >id_rsa_core && chmod 0600 id_rsa_core"
+  }
+
+  provisioner "local-exec" {
+    command = "echo '${tls_private_key.core.public_key_openssh}' >id_rsa_core.pub"
+  }
+}
+
+data "ignition_user" "core" {
+  name = "core"
+
+  ssh_authorized_keys = [
+    "${tls_private_key.core.public_key_openssh}",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secrets%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secrets%variables.tf
new file mode 100644
index 0000000..534f962
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%openstack%secrets%variables.tf
@@ -0,0 +1,13 @@
+// The name of the cluster.
+// The openstack keypairs will be prefixed with this.
+variable "cluster_name" {
+  type = "string"
+}
+
+output "core_private_key_pem" {
+  value = "${tls_private_key.core.private_key_pem}"
+}
+
+output "core_public_key_openssh" {
+  value = "${tls_private_key.core.public_key_openssh}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%assets.tf
new file mode 100644
index 0000000..7af8ba0
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%assets.tf
@@ -0,0 +1,60 @@
+# Unique Cluster ID (uuid)
+resource "random_id" "cluster_id" {
+  byte_length = 16
+}
+
+resource "random_string" "ingress_status_password" {
+  length  = 6
+  special = false
+  upper   = false
+}
+
+# tectonic.sh (/opt/tectonic/tectonic.sh)
+data "template_file" "tectonic_sh" {
+  // TODO: This doesn't need to be a template anymore
+  template = "${file("${path.module}/resources/tectonic.sh")}"
+
+  vars {
+    ingress_kind = "${var.ingress_kind}"
+  }
+}
+
+data "ignition_file" "tectonic_sh" {
+  filesystem = "root"
+  mode       = "0755"
+  path       = "/opt/tectonic/tectonic.sh"
+
+  content {
+    content = "${data.template_file.tectonic_sh.rendered}"
+  }
+}
+
+# (/opt/tectonic/tectonic-wrapper.sh)
+data "template_file" "tectonic_wrapper_sh" {
+  template = "${file("${path.module}/resources/tectonic-wrapper.sh")}"
+
+  vars {
+    hyperkube_image = "${var.container_images["hyperkube"]}"
+  }
+}
+
+data "ignition_file" "tectonic_wrapper_sh" {
+  filesystem = "root"
+  mode       = "0755"
+  path       = "/opt/tectonic/tectonic-wrapper.sh"
+
+  content {
+    content = "${data.template_file.tectonic_wrapper_sh.rendered}"
+  }
+}
+
+# tectonic.service (available as output variable)
+data "template_file" "tectonic_service" {
+  template = "${file("${path.module}/resources/tectonic.service")}"
+}
+
+data "ignition_systemd_unit" "tectonic_service" {
+  name    = "tectonic.service"
+  enabled = false
+  content = "${data.template_file.tectonic_service.rendered}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%assets.tf-182 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%assets.tf-182
new file mode 100644
index 0000000..9eb69b6
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%assets.tf-182
@@ -0,0 +1,156 @@
+# Unique Cluster ID (uuid)
+resource "random_id" "cluster_id" {
+  byte_length = 16
+}
+
+# Kubernetes Manifests (resources/generated/manifests/)
+resource "template_dir" "tectonic" {
+  source_dir      = "${path.module}/resources/manifests"
+  destination_dir = "./generated/tectonic"
+
+  vars {
+    addon_resizer_image                = "${var.container_images["addon_resizer"]}"
+    console_image                      = "${var.container_images["console"]}"
+    error_server_image                 = "${var.container_images["error_server"]}"
+    heapster_image                     = "${var.container_images["heapster"]}"
+    identity_image                     = "${var.container_images["identity"]}"
+    ingress_controller_image           = "${var.container_images["ingress_controller"]}"
+    kube_version_operator_image        = "${var.container_images["kube_version_operator"]}"
+    node_agent_image                   = "${var.container_images["node_agent"]}"
+    etcd_operator_image                = "${var.container_images["etcd_operator"]}"
+    stats_emitter_image                = "${var.container_images["stats_emitter"]}"
+    stats_extender_image               = "${var.container_images["stats_extender"]}"
+    tectonic_channel_operator_image    = "${var.container_images["tectonic_channel_operator"]}"
+    tectonic_prometheus_operator_image = "${var.container_images["tectonic_prometheus_operator"]}"
+    tectonic_etcd_operator_image       = "${var.container_images["tectonic_etcd_operator"]}"
+    tectonic_cluo_operator_image       = "${var.container_images["tectonic_cluo_operator"]}"
+    tectonic_alm_operator_image        = "${var.container_images["tectonic_alm_operator"]}"
+
+    tectonic_monitoring_auth_base_image = "${var.container_base_images["tectonic_monitoring_auth"]}"
+    config_reload_base_image            = "${var.container_base_images["config_reload"]}"
+    addon_resizer_base_image            = "${var.container_base_images["addon_resizer"]}"
+    kube_state_metrics_base_image       = "${var.container_base_images["kube_state_metrics"]}"
+    prometheus_operator_base_image      = "${var.container_base_images["prometheus_operator"]}"
+    prometheus_config_reload_base_image = "${var.container_base_images["prometheus_config_reload"]}"
+    prometheus_base_image               = "${var.container_base_images["prometheus"]}"
+    alertmanager_base_image             = "${var.container_base_images["alertmanager"]}"
+    node_exporter_base_image            = "${var.container_base_images["node_exporter"]}"
+    grafana_base_image                  = "${var.container_base_images["grafana"]}"
+    grafana_watcher_base_image          = "${var.container_base_images["grafana_watcher"]}"
+    kube_rbac_proxy_base_image          = "${var.container_base_images["kube_rbac_proxy"]}"
+
+    kubernetes_version             = "${var.versions["kubernetes"]}"
+    monitoring_version             = "${var.versions["monitoring"]}"
+    tectonic_version               = "${var.versions["tectonic"]}"
+    etcd_version                   = "${var.versions["etcd"]}"
+    tectonic_etcd_operator_version = "${var.versions["tectonic-etcd"]}"
+    tectonic_cluo_operator_version = "${var.versions["cluo"]}"
+    tectonic_alm_operator_version  = "${var.versions["alm"]}"
+
+    etcd_cluster_size = "${var.master_count > 2 ? 3 : 1}"
+
+    license     = "${base64encode(file(var.license_path))}"
+    pull_secret = "${base64encode(file(var.pull_secret_path))}"
+    ca_cert     = "${base64encode(var.ca_cert)}"
+
+    update_server  = "${var.update_server}"
+    update_channel = "${var.update_channel}"
+    update_app_id  = "${var.update_app_id}"
+
+    admin_user_id       = "${random_id.admin_user_id.b64}"
+    admin_email         = "${lower(var.admin_email)}"
+    admin_password_hash = "${bcrypt(var.admin_password, 12)}"
+
+    base_address         = "${var.base_address}"
+    console_base_address = "${var.base_address}"
+    console_base_host    = "${element(split(":", var.base_address), 0)}"
+    console_client_id    = "${var.console_client_id}"
+    console_secret       = "${random_id.console_secret.b64}"
+    console_callback     = "https://${var.base_address}/auth/callback"
+
+    tectonic_monitoring_auth_cookie_secret = "${base64encode(random_id.tectonic_monitoring_auth_cookie_secret.b64)}"
+
+    alertmanager_callback = "https://${var.base_address}/alertmanager/auth/callback"
+    prometheus_callback   = "https://${var.base_address}/prometheus/auth/callback"
+    grafana_callback      = "https://${var.base_address}/grafana/auth/callback"
+
+    ingress_kind     = "${var.ingress_kind}"
+    ingress_ca_cert  = "${base64encode(var.ingress_ca_cert_pem)}"
+    ingress_tls_cert = "${base64encode(var.ingress_cert_pem)}"
+    ingress_tls_key  = "${base64encode(var.ingress_key_pem)}"
+
+    identity_server_tls_cert = "${base64encode(var.identity_server_cert_pem)}"
+    identity_server_tls_key  = "${base64encode(var.identity_server_key_pem)}"
+    identity_client_tls_cert = "${base64encode(var.identity_client_cert_pem)}"
+    identity_client_tls_key  = "${base64encode(var.identity_client_key_pem)}"
+
+    kubectl_client_id = "${var.kubectl_client_id}"
+    kubectl_secret    = "${random_id.kubectl_secret.b64}"
+
+    kube_apiserver_url = "${var.kube_apiserver_url}"
+    oidc_issuer_url    = "https://${var.base_address}/identity"
+    stats_url          = "${var.stats_url}"
+
+    # TODO: We could also patch https://www.terraform.io/docs/providers/random/ to add an UUID resource.
+    cluster_id   = "${format("%s-%s-%s-%s-%s", substr(random_id.cluster_id.hex, 0, 8), substr(random_id.cluster_id.hex, 8, 4), substr(random_id.cluster_id.hex, 12, 4), substr(random_id.cluster_id.hex, 16, 4), substr(random_id.cluster_id.hex, 20, 12))}"
+    cluster_name = "${var.cluster_name}"
+
+    platform              = "${var.platform}"
+    certificates_strategy = "${var.ca_generated == "true" ? "installerGeneratedCA" : "userProvidedCA"}"
+    identity_api_service  = "${var.identity_api_service}"
+
+    image_re            = "${var.image_re}"
+    kube_dns_service_ip = "${cidrhost(var.service_cidr, 10)}"
+  }
+}
+
+# tectonic.sh (resources/generated/tectonic.sh)
+data "template_file" "tectonic" {
+  template = "${file("${path.module}/resources/tectonic.sh")}"
+
+  vars {
+    ingress_kind = "${var.ingress_kind}"
+  }
+}
+
+resource "local_file" "tectonic" {
+  content  = "${data.template_file.tectonic.rendered}"
+  filename = "./generated/tectonic.sh"
+}
+
+# tectonic.sh (resources/generated/tectonic-wrapper.sh)
+data "template_file" "tectonic_wrapper" {
+  template = "${file("${path.module}/resources/tectonic-wrapper.sh")}"
+
+  vars {
+    hyperkube_image  = "${var.container_images["hyperkube"]}"
+    self_hosted_etcd = "${var.self_hosted_etcd != "" ? "true" : "false"}"
+  }
+}
+
+resource "local_file" "tectonic_wrapper" {
+  content  = "${data.template_file.tectonic_wrapper.rendered}"
+  filename = "./generated/tectonic-wrapper.sh"
+}
+
+# tectonic.service (available as output variable)
+data "template_file" "tectonic_service" {
+  template = "${file("${path.module}/resources/tectonic.service")}"
+}
+
+data "ignition_systemd_unit" "tectonic_service" {
+  name    = "tectonic.service"
+  enabled = false
+  content = "${data.template_file.tectonic_service.rendered}"
+}
+
+# tectonic.path (available as output variable)
+data "template_file" "tectonic_path" {
+  template = "${file("${path.module}/resources/tectonic.path")}"
+}
+
+data "ignition_systemd_unit" "tectonic_path" {
+  name    = "tectonic.path"
+  enabled = true
+  content = "${data.template_file.tectonic_path.rendered}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%crypto.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%crypto.tf
new file mode 100644
index 0000000..5fbb0db
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%crypto.tf
@@ -0,0 +1,17 @@
+# Cryptographically-secure ramdon strings used by various components.
+
+resource "random_id" "admin_user_id" {
+  byte_length = 16
+}
+
+resource "random_id" "kubectl_secret" {
+  byte_length = 16
+}
+
+resource "random_id" "console_secret" {
+  byte_length = 16
+}
+
+resource "random_id" "tectonic_monitoring_auth_cookie_secret" {
+  byte_length = 16
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%crypto.tf-220 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%crypto.tf-220
new file mode 100644
index 0000000..5fbb0db
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%crypto.tf-220
@@ -0,0 +1,17 @@
+# Cryptographically-secure ramdon strings used by various components.
+
+resource "random_id" "admin_user_id" {
+  byte_length = 16
+}
+
+resource "random_id" "kubectl_secret" {
+  byte_length = 16
+}
+
+resource "random_id" "console_secret" {
+  byte_length = 16
+}
+
+resource "random_id" "tectonic_monitoring_auth_cookie_secret" {
+  byte_length = 16
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%output.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%output.tf
new file mode 100644
index 0000000..8c2963d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%output.tf
@@ -0,0 +1,28 @@
+output "systemd_service_rendered" {
+  value = "${data.template_file.tectonic_service.rendered}"
+}
+
+output "systemd_service_id" {
+  value = "${data.ignition_systemd_unit.tectonic_service.id}"
+}
+
+output "ignition_file_id_list" {
+  value = ["${flatten(list(
+    list(
+      data.ignition_file.tectonic_sh.id,
+      data.ignition_file.tectonic_wrapper_sh.id,
+    ),
+    data.ignition_file.tectonic_manifest_list.*.id,
+  ))}"]
+}
+
+output "cluster_id" {
+  value = "${format(
+    "%s-%s-%s-%s-%s",
+    substr(random_id.cluster_id.hex, 0, 8),
+    substr(random_id.cluster_id.hex, 8, 4),
+    substr(random_id.cluster_id.hex, 12, 4),
+    substr(random_id.cluster_id.hex, 16, 4),
+    substr(random_id.cluster_id.hex, 20, 12)
+  )}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%output.tf-162 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%output.tf-162
new file mode 100644
index 0000000..bab58cc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%output.tf-162
@@ -0,0 +1,47 @@
+# This output is meant to be used to inject a dependency on the generated
+# assets. As of Terraform v0.9, it is difficult to make a module depend on
+# another module (no depends_on, no triggers), or to make a data source
+# depend on a module (no depends_on, no triggers, generally no dummy variable).
+#
+# For instance, using the 'archive_file' data source against the generated
+# assets, which is a common use-case, is tricky. There is no mechanism for
+# defining explicit dependencies and the only available variables are for the
+# source, destination and archive type, leaving little opportunities for us to
+# inject a dependency. Thanks to the property described below, this output can
+# be used as part of the output filename, in order to enforce the creation of
+# the archive after the assets have been properly generated.
+#
+# Both localfile and template_dir providers compute their IDs by hashing
+# the content of the resources on disk. Because this output is computed from the
+# combination of all the resources' IDs, it can't be guessed and can only be
+# interpolated once the assets have all been created.
+output "id" {
+  value = "${sha1("${template_dir.tectonic.id} ${local_file.tectonic.id}")}"
+}
+
+output "systemd_service_rendered" {
+  value = "${data.template_file.tectonic_service.rendered}"
+}
+
+output "systemd_service_id" {
+  value = "${data.ignition_systemd_unit.tectonic_service.id}"
+}
+
+output "systemd_path_unit_rendered" {
+  value = "${data.template_file.tectonic_path.rendered}"
+}
+
+output "systemd_path_unit_id" {
+  value = "${data.ignition_systemd_unit.tectonic_path.id}"
+}
+
+output "cluster_id" {
+  value = "${format(
+    "%s-%s-%s-%s-%s",
+    substr(random_id.cluster_id.hex, 0, 8),
+    substr(random_id.cluster_id.hex, 8, 4),
+    substr(random_id.cluster_id.hex, 12, 4),
+    substr(random_id.cluster_id.hex, 16, 4),
+    substr(random_id.cluster_id.hex, 20, 12)
+  )}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%variables.tf
new file mode 100644
index 0000000..a989497
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%variables.tf
@@ -0,0 +1,72 @@
+variable "container_images" {
+  description = "Container images to use. Leave blank for defaults."
+  type        = "map"
+}
+
+variable "container_base_images" {
+  description = "Container base images to use. Leave blank for defaults."
+  type        = "map"
+}
+
+variable "versions" {
+  description = "Versions of the components to use. Leave blank for defaults."
+  type        = "map"
+}
+
+variable "platform" {
+  description = "Platform on which Tectonic is being installed. Example: aws or libvirt."
+  type        = "string"
+}
+
+variable "ingress_kind" {
+  description = "Type of Ingress mapping to use. Example: HostPort or NodePort."
+  type        = "string"
+}
+
+variable "license_path" {
+  description = "Path on disk to your Tectonic license. Obtain this from your Tectonic Account: https://account.coreos.com."
+  type        = "string"
+  default     = "/Users/coreos/Desktop/tectonic-license.txt"
+}
+
+variable "pull_secret_path" {
+  type        = "string"
+  description = "Path on disk to your Tectonic pull secret. Obtain this from your Tectonic Account: https://account.coreos.com."
+  default     = "/Users/coreos/Desktop/config.json"
+}
+
+variable "base_address" {
+  description = "Base address used to access the Tectonic Console, without protocol nor trailing forward slash (may contain a port). Example: console.example.com:30000."
+  type        = "string"
+}
+
+variable "update_server" {
+  description = "Server contacted to request Tectonic software updates. Leave blank for defaults."
+  type        = "string"
+}
+
+variable "update_channel" {
+  description = "Release channel used to request Tectonic software updates. Leave blank for defaults. Example: Tectonic-1.5"
+  type        = "string"
+}
+
+variable "update_app_id" {
+  description = "Application identifier used to request Tectonic software updates. Leave blank for defaults."
+  type        = "string"
+}
+
+variable "ingress_ca_cert_pem" {
+  type = "string"
+}
+
+variable "ingress_cert_pem" {
+  type = "string"
+}
+
+variable "ingress_key_pem" {
+  type = "string"
+}
+
+variable "ingress_bundle_pem" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%variables.tf-246 b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%variables.tf-246
new file mode 100644
index 0000000..42d89cb
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tectonic%variables.tf-246
@@ -0,0 +1,158 @@
+variable "cluster_name" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use. Leave blank for defaults."
+  type        = "map"
+}
+
+variable "container_base_images" {
+  description = "Container base images to use. Leave blank for defaults."
+  type        = "map"
+}
+
+variable "versions" {
+  description = "Versions of the components to use. Leave blank for defaults."
+  type        = "map"
+}
+
+variable "platform" {
+  description = "Platform on which Tectonic is being installed. Example: bare-metal or aws."
+  type        = "string"
+}
+
+variable "ingress_kind" {
+  description = "Type of Ingress mapping to use. Example: HostPort or NodePort."
+  type        = "string"
+}
+
+variable "license_path" {
+  description = "Path on disk to your Tectonic license. Obtain this from your Tectonic Account: https://account.coreos.com."
+  type        = "string"
+  default     = "/Users/coreos/Desktop/tectonic-license.txt"
+}
+
+variable "pull_secret_path" {
+  type        = "string"
+  description = "Path on disk to your Tectonic pull secret. Obtain this from your Tectonic Account: https://account.coreos.com."
+  default     = "/Users/coreos/Desktop/config.json"
+}
+
+variable "ca_generated" {
+  description = "Define whether the CA has been generated or user-provided."
+  type        = "string"
+}
+
+variable "ca_cert" {
+  description = "Contents of a PEM-encoded CA certificate, used to generate Tectonic Console's server certificate. Leave blank to generate a new CA."
+  type        = "string"
+}
+
+variable "base_address" {
+  description = "Base address used to access the Tectonic Console, without protocol nor trailing forward slash (may contain a port). Example: console.example.com:30000."
+  type        = "string"
+}
+
+variable "admin_email" {
+  description = "E-mail address used to log in to the Tectonic Console."
+  type        = "string"
+  default     = "admin@example.com"
+}
+
+variable "admin_password" {
+  description = "Password used to by the cluster admin to login to the Tectonic Console. Backslashes and double quotes must be escaped."
+  type        = "string"
+}
+
+variable "update_server" {
+  description = "Server contacted to request Tectonic software updates. Leave blank for defaults."
+  type        = "string"
+}
+
+variable "update_channel" {
+  description = "Release channel used to request Tectonic software updates. Leave blank for defaults. Example: Tectonic-1.5"
+  type        = "string"
+}
+
+variable "update_app_id" {
+  description = "Application identifier used to request Tectonic software updates. Leave blank for defaults."
+  type        = "string"
+}
+
+variable "console_client_id" {
+  description = "OIDC identifier for the Tectonic Console. Leave blank for defaults."
+  type        = "string"
+}
+
+variable "kubectl_client_id" {
+  description = "OIDC identifier for kubectl. Leave blank for defaults."
+  type        = "string"
+}
+
+variable "kube_apiserver_url" {
+  description = "URL used to reach kube-apiserver. Leave blank for defaults."
+  type        = "string"
+}
+
+variable "identity_api_service" {
+  description = "service used to reach the identity apiserver."
+  type        = "string"
+  default     = "tectonic-identity-api.tectonic-system.svc.cluster.local"
+}
+
+variable "self_hosted_etcd" {
+  type        = "string"
+  description = "See tectonic_self_hosted_etcd in config.tf"
+}
+
+variable "master_count" {
+  description = "The amount of master nodes present in the cluster."
+  type        = "string"
+}
+
+variable "stats_url" {
+  description = "The statistics collection URL to which to report."
+  type        = "string"
+}
+
+variable "image_re" {
+  description = <<EOF
+(internal) Regular expression used to extract repo and tag components from image strings
+EOF
+
+  type = "string"
+}
+
+variable "ingress_ca_cert_pem" {
+  type = "string"
+}
+
+variable "ingress_cert_pem" {
+  type = "string"
+}
+
+variable "ingress_key_pem" {
+  type = "string"
+}
+
+variable "identity_server_cert_pem" {
+  type = "string"
+}
+
+variable "identity_server_key_pem" {
+  type = "string"
+}
+
+variable "identity_client_cert_pem" {
+  type = "string"
+}
+
+variable "identity_client_key_pem" {
+  type = "string"
+}
+
+variable "service_cidr" {
+  description = "A CIDR notation IP range from which to assign service cluster IPs"
+  type        = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%assets.tf
new file mode 100644
index 0000000..ece0595
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%assets.tf
@@ -0,0 +1,63 @@
+# etcd assets
+data "template_file" "etcd_ca_cert_pem" {
+  template = "${var.self_signed == "true"
+    ? join("", tls_self_signed_cert.etcd_ca.*.cert_pem)
+    : file(var.etcd_ca_cert_path)
+  }"
+}
+
+data "template_file" "etcd_client_crt" {
+  template = "${var.self_signed == "true"
+    ? join("", tls_locally_signed_cert.etcd_client.*.cert_pem)
+    : file(var.etcd_client_cert_path)
+  }"
+}
+
+data "template_file" "etcd_client_key" {
+  template = "${var.self_signed == "true"
+    ? join("", tls_private_key.etcd_client.*.private_key_pem)
+    : file(var.etcd_client_key_path)
+  }"
+}
+
+resource "local_file" "etcd_ca_crt" {
+  count    = "${var.self_signed == "true" || var.etcd_ca_cert_path != "/dev/null" ? 1 : 0}"
+  content  = "${data.template_file.etcd_ca_cert_pem.rendered}"
+  filename = "./generated/tls/etcd-client-ca.crt"
+}
+
+resource "local_file" "etcd_client_crt" {
+  count    = "${var.self_signed == "true" || var.etcd_client_cert_path != "/dev/null" ? 1 : 0}"
+  content  = "${data.template_file.etcd_client_crt.rendered}"
+  filename = "./generated/tls/etcd-client.crt"
+}
+
+resource "local_file" "etcd_client_key" {
+  count    = "${var.self_signed == "true" || var.etcd_client_key_path != "/dev/null" ? 1 : 0}"
+  content  = "${data.template_file.etcd_client_key.rendered}"
+  filename = "./generated/tls/etcd-client.key"
+}
+
+resource "local_file" "etcd_server_crt" {
+  count    = "${var.self_signed == "true" ? 1 : 0}"
+  content  = "${join("", tls_locally_signed_cert.etcd_server.*.cert_pem)}"
+  filename = "./generated/tls/etcd/server.crt"
+}
+
+resource "local_file" "etcd_server_key" {
+  count    = "${var.self_signed == "true" ? 1 : 0}"
+  content  = "${join("", tls_private_key.etcd_server.*.private_key_pem)}"
+  filename = "./generated/tls/etcd/server.key"
+}
+
+resource "local_file" "etcd_peer_crt" {
+  count    = "${var.self_signed == "true" ? 1 : 0}"
+  content  = "${join("", tls_locally_signed_cert.etcd_peer.*.cert_pem)}"
+  filename = "./generated/tls/etcd/peer.crt"
+}
+
+resource "local_file" "etcd_peer_key" {
+  count    = "${var.self_signed == "true" ? 1 : 0}"
+  content  = "${join("", tls_private_key.etcd_peer.*.private_key_pem)}"
+  filename = "./generated/tls/etcd/peer.key"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%main.tf
new file mode 100644
index 0000000..6a3f281
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%main.tf
@@ -0,0 +1,170 @@
+// root CA
+
+resource "tls_private_key" "etcd_ca" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_self_signed_cert" "etcd_ca" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  key_algorithm   = "${tls_private_key.etcd_ca.algorithm}"
+  private_key_pem = "${tls_private_key.etcd_ca.private_key_pem}"
+
+  subject {
+    common_name  = "etcd-ca"
+    organization = "etcd"
+  }
+
+  is_ca_certificate     = true
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+    "cert_signing",
+  ]
+}
+
+// (etcd) server keys
+// These are used for etcd-to-etcd member communcation
+
+resource "tls_private_key" "etcd_server" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "etcd_server" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  key_algorithm   = "${tls_private_key.etcd_server.algorithm}"
+  private_key_pem = "${tls_private_key.etcd_server.private_key_pem}"
+
+  subject {
+    common_name  = "etcd"
+    organization = "etcd"
+  }
+
+  dns_names = ["${concat(
+    var.etcd_cert_dns_names,
+    list(
+      "localhost",
+      "*.kube-etcd.kube-system.svc.cluster.local",
+      "kube-etcd-client.kube-system.svc.cluster.local",
+    ))}"]
+
+  ip_addresses = [
+    "127.0.0.1",
+    "${cidrhost(var.service_cidr, 15)}",
+    "${cidrhost(var.service_cidr, 20)}",
+  ]
+}
+
+resource "tls_locally_signed_cert" "etcd_server" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  cert_request_pem = "${tls_cert_request.etcd_server.cert_request_pem}"
+
+  ca_key_algorithm      = "${join(" ", tls_self_signed_cert.etcd_ca.*.key_algorithm)}"
+  ca_private_key_pem    = "${join(" ", tls_private_key.etcd_ca.*.private_key_pem)}"
+  ca_cert_pem           = "${join(" ", tls_self_signed_cert.etcd_ca.*.cert_pem)}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "server_auth",
+  ]
+}
+
+// client keys
+// These are used for "api server"-to-etcd and "etcd operator"-to-etcd client communication
+
+resource "tls_private_key" "etcd_client" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "etcd_client" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  key_algorithm   = "${tls_private_key.etcd_client.algorithm}"
+  private_key_pem = "${tls_private_key.etcd_client.private_key_pem}"
+
+  subject {
+    common_name  = "etcd"
+    organization = "etcd"
+  }
+}
+
+resource "tls_locally_signed_cert" "etcd_client" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  cert_request_pem = "${tls_cert_request.etcd_client.cert_request_pem}"
+
+  ca_key_algorithm      = "${join(" ", tls_self_signed_cert.etcd_ca.*.key_algorithm)}"
+  ca_private_key_pem    = "${join(" ", tls_private_key.etcd_ca.*.private_key_pem)}"
+  ca_cert_pem           = "${join(" ", tls_self_signed_cert.etcd_ca.*.cert_pem)}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "client_auth",
+  ]
+}
+
+// peer keys
+// These are used for etcd-to-etcd member communcation
+
+resource "tls_private_key" "etcd_peer" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "etcd_peer" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  key_algorithm   = "${tls_private_key.etcd_peer.algorithm}"
+  private_key_pem = "${tls_private_key.etcd_peer.private_key_pem}"
+
+  subject {
+    common_name  = "etcd"
+    organization = "etcd"
+  }
+
+  dns_names = ["${concat(
+    var.etcd_cert_dns_names,
+    list(
+      "*.kube-etcd.kube-system.svc.cluster.local",
+      "kube-etcd-client.kube-system.svc.cluster.local",
+    ))}"]
+
+  ip_addresses = [
+    "${cidrhost(var.service_cidr, 15)}",
+    "${cidrhost(var.service_cidr, 20)}",
+  ]
+}
+
+resource "tls_locally_signed_cert" "etcd_peer" {
+  count = "${var.self_signed == "true" ? 1 : 0}"
+
+  cert_request_pem = "${tls_cert_request.etcd_peer.cert_request_pem}"
+
+  ca_key_algorithm      = "${join(" ", tls_self_signed_cert.etcd_ca.*.key_algorithm)}"
+  ca_private_key_pem    = "${join(" ", tls_private_key.etcd_ca.*.private_key_pem)}"
+  ca_cert_pem           = "${join(" ", tls_self_signed_cert.etcd_ca.*.cert_pem)}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "server_auth",
+    "client_auth",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%outputs.tf
new file mode 100644
index 0000000..0e72004
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%outputs.tf
@@ -0,0 +1,41 @@
+output "etcd_ca_crt_pem" {
+  value = "${data.template_file.etcd_ca_cert_pem.rendered}"
+}
+
+output "etcd_client_crt_pem" {
+  value = "${data.template_file.etcd_client_crt.rendered}"
+}
+
+output "etcd_client_key_pem" {
+  value = "${data.template_file.etcd_client_key.rendered}"
+}
+
+output "etcd_peer_crt_pem" {
+  value = "${element(concat(tls_locally_signed_cert.etcd_peer.*.cert_pem, list("")), 0)}"
+}
+
+output "etcd_peer_key_pem" {
+  value = "${element(concat(tls_private_key.etcd_peer.*.private_key_pem, list("")), 0)}"
+}
+
+output "etcd_server_crt_pem" {
+  value = "${element(concat(tls_locally_signed_cert.etcd_server.*.cert_pem, list("")), 0)}"
+}
+
+output "etcd_server_key_pem" {
+  value = "${element(concat(tls_private_key.etcd_server.*.private_key_pem, list("")), 0)}"
+}
+
+output "id" {
+  value = "${sha1("
+  ${join(" ",
+    local_file.etcd_ca_crt.*.id,
+    local_file.etcd_server_crt.*.id,
+    local_file.etcd_server_key.*.id,
+    local_file.etcd_client_crt.*.id,
+    local_file.etcd_client_key.*.id,
+    local_file.etcd_peer_crt.*.id,
+    local_file.etcd_peer_key.*.id,
+    )}
+  ")}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%variables.tf
new file mode 100644
index 0000000..f72b913
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%signed%variables.tf
@@ -0,0 +1,43 @@
+// usually the caller sets this to:
+// var.tectonic_self_hosted_etcd != "" || var.tectonic_etcd_tls_enabled
+variable "self_signed" {
+  description = <<EOF
+If set to true, self-signed certificates are generated.
+If set to false, only the passed CA and client certs are being used.
+EOF
+}
+
+variable "validity_period" {
+  description = <<EOF
+Validity period of the self-signed certificates (in hours).
+Default is 3 years.
+EOF
+
+  type = "string"
+
+  // Default is provided only in this case
+  // bacause *some* of etcd internal certs are still self-generated and need
+  // this variable set
+  default = 26280
+}
+
+variable "etcd_ca_cert_path" {
+  type        = "string"
+  description = "external CA certificate"
+}
+
+variable "etcd_client_cert_path" {
+  type = "string"
+}
+
+variable "etcd_client_key_path" {
+  type = "string"
+}
+
+variable "service_cidr" {
+  type = "string"
+}
+
+variable "etcd_cert_dns_names" {
+  type = "list"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%assets.tf
new file mode 100644
index 0000000..a4ab456
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%assets.tf
@@ -0,0 +1,34 @@
+resource "local_file" "etcd_ca_crt" {
+  content  = "${file(var.etcd_ca_crt_pem_path)}"
+  filename = "./generated/tls/etcd-client-ca.crt"
+}
+
+resource "local_file" "etcd_client_crt" {
+  content  = "${file(var.etcd_client_crt_pem_path)}"
+  filename = "./generated/tls/etcd-client.crt"
+}
+
+resource "local_file" "etcd_client_key" {
+  content  = "${file(var.etcd_client_key_pem_path)}"
+  filename = "./generated/tls/etcd-client.key"
+}
+
+resource "local_file" "etcd_server_crt" {
+  content  = "${file(var.etcd_server_crt_pem_path)}"
+  filename = "./generated/tls/etcd/server.crt"
+}
+
+resource "local_file" "etcd_server_key" {
+  content  = "${file(var.etcd_server_key_pem_path)}"
+  filename = "./generated/tls/etcd/server.key"
+}
+
+resource "local_file" "etcd_peer_crt" {
+  content  = "${file(var.etcd_peer_crt_pem_path)}"
+  filename = "./generated/tls/etcd/peer.crt"
+}
+
+resource "local_file" "etcd_peer_key" {
+  content  = "${file(var.etcd_peer_key_pem_path)}"
+  filename = "./generated/tls/etcd/peer.key"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%outputs.tf
new file mode 100644
index 0000000..52aae97
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%outputs.tf
@@ -0,0 +1,41 @@
+output "etcd_ca_crt_pem" {
+  value = "${file(var.etcd_ca_crt_pem_path)}"
+}
+
+output "etcd_client_crt_pem" {
+  value = "${file(var.etcd_client_crt_pem_path)}"
+}
+
+output "etcd_client_key_pem" {
+  value = "${file(var.etcd_client_key_pem_path)}"
+}
+
+output "etcd_peer_crt_pem" {
+  value = "${file(var.etcd_peer_crt_pem_path)}"
+}
+
+output "etcd_peer_key_pem" {
+  value = "${file(var.etcd_peer_key_pem_path)}"
+}
+
+output "etcd_server_crt_pem" {
+  value = "${file(var.etcd_server_crt_pem_path)}"
+}
+
+output "etcd_server_key_pem" {
+  value = "${file(var.etcd_server_key_pem_path)}"
+}
+
+output "id" {
+  value = "${sha1("
+  ${join(" ",
+    local_file.etcd_ca_crt.*.id,
+    local_file.etcd_server_crt.*.id,
+    local_file.etcd_server_key.*.id,
+    local_file.etcd_client_crt.*.id,
+    local_file.etcd_client_key.*.id,
+    local_file.etcd_peer_crt.*.id,
+    local_file.etcd_peer_key.*.id,
+    )}
+  ")}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%variables.tf
new file mode 100644
index 0000000..4c578f5
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%etcd%user-provided%variables.tf
@@ -0,0 +1,34 @@
+variable "etcd_ca_crt_pem_path" {
+  type        = "string"
+  description = "The path to the public CA certificate used to sign the etcd certificates below."
+}
+
+variable "etcd_server_crt_pem_path" {
+  type        = "string"
+  description = "The path to the public etcd server certificate."
+}
+
+variable "etcd_server_key_pem_path" {
+  type        = "string"
+  description = "The path to the private etcd server key."
+}
+
+variable "etcd_peer_crt_pem_path" {
+  type        = "string"
+  description = "The path to the public etcd peer certificate."
+}
+
+variable "etcd_peer_key_pem_path" {
+  type        = "string"
+  description = "The path to the private etcd peer key."
+}
+
+variable "etcd_client_crt_pem_path" {
+  type        = "string"
+  description = "The path to the public etcd client certificate."
+}
+
+variable "etcd_client_key_pem_path" {
+  type        = "string"
+  description = "The path to the private etcd client key."
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%main.tf
new file mode 100644
index 0000000..b86a042
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%main.tf
@@ -0,0 +1,55 @@
+# Identity's gRPC server/client certificates
+
+resource "tls_private_key" "identity_server" {
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "identity_server" {
+  key_algorithm   = "${tls_private_key.identity_server.algorithm}"
+  private_key_pem = "${tls_private_key.identity_server.private_key_pem}"
+
+  subject {
+    common_name = "tectonic-identity-api.tectonic-system.svc.cluster.local"
+  }
+}
+
+resource "tls_locally_signed_cert" "identity_server" {
+  cert_request_pem = "${tls_cert_request.identity_server.cert_request_pem}"
+
+  ca_key_algorithm      = "${var.ca_key_alg}"
+  ca_private_key_pem    = "${var.ca_key_pem}"
+  ca_cert_pem           = "${var.ca_cert_pem}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "server_auth",
+  ]
+}
+
+resource "tls_private_key" "identity_client" {
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "identity_client" {
+  key_algorithm   = "${tls_private_key.identity_client.algorithm}"
+  private_key_pem = "${tls_private_key.identity_client.private_key_pem}"
+
+  subject {
+    common_name = "tectonic-identity-api.tectonic-system.svc.cluster.local"
+  }
+}
+
+resource "tls_locally_signed_cert" "identity_client" {
+  cert_request_pem = "${tls_cert_request.identity_client.cert_request_pem}"
+
+  ca_key_algorithm      = "${var.ca_key_alg}"
+  ca_private_key_pem    = "${var.ca_key_pem}"
+  ca_cert_pem           = "${var.ca_cert_pem}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "client_auth",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%outputs.tf
new file mode 100644
index 0000000..d542d92
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%outputs.tf
@@ -0,0 +1,15 @@
+output "client_key_pem" {
+  value = "${tls_private_key.identity_client.private_key_pem}"
+}
+
+output "client_cert_pem" {
+  value = "${tls_locally_signed_cert.identity_client.cert_pem}"
+}
+
+output "server_key_pem" {
+  value = "${tls_private_key.identity_server.private_key_pem}"
+}
+
+output "server_cert_pem" {
+  value = "${tls_locally_signed_cert.identity_server.cert_pem}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%variables.tf
new file mode 100644
index 0000000..cd85e15
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%self-signed%variables.tf
@@ -0,0 +1,20 @@
+variable "ca_cert_pem" {
+  type = "string"
+}
+
+variable "ca_key_pem" {
+  type = "string"
+}
+
+variable "ca_key_alg" {
+  type = "string"
+}
+
+variable "validity_period" {
+  description = <<EOF
+Validity period of the self-signed certificates (in hours).
+Default is 3 years.
+EOF
+
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%user-provided%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%user-provided%outputs.tf
new file mode 100644
index 0000000..334e2b3
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%user-provided%outputs.tf
@@ -0,0 +1,15 @@
+output "client_key_pem" {
+  value = "${file(var.client_key_pem_path)}"
+}
+
+output "client_cert_pem" {
+  value = "${file(var.client_cert_pem_path)}"
+}
+
+output "server_key_pem" {
+  value = "${file(var.server_key_pem_path)}"
+}
+
+output "server_cert_pem" {
+  value = "${file(var.server_cert_pem_path)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%user-provided%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%user-provided%variables.tf
new file mode 100644
index 0000000..84119ff
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%identity%user-provided%variables.tf
@@ -0,0 +1,15 @@
+variable "client_key_pem_path" {
+  type = "string"
+}
+
+variable "client_cert_pem_path" {
+  type = "string"
+}
+
+variable "server_key_pem_path" {
+  type = "string"
+}
+
+variable "server_cert_pem_path" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%main.tf
new file mode 100644
index 0000000..da7af43
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%main.tf
@@ -0,0 +1,35 @@
+resource "tls_private_key" "ingress" {
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "ingress" {
+  key_algorithm   = "${tls_private_key.ingress.algorithm}"
+  private_key_pem = "${tls_private_key.ingress.private_key_pem}"
+
+  subject {
+    common_name = "${element(split(":", var.base_address), 0)}"
+  }
+
+  # subject commonName is deprecated per RFC2818 in favor of
+  # subjectAltName
+  dns_names = [
+    "${element(split(":", var.base_address), 0)}",
+  ]
+}
+
+resource "tls_locally_signed_cert" "ingress" {
+  cert_request_pem = "${tls_cert_request.ingress.cert_request_pem}"
+
+  ca_key_algorithm      = "${var.ca_key_alg}"
+  ca_private_key_pem    = "${var.ca_key_pem}"
+  ca_cert_pem           = "${var.ca_cert_pem}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+    "server_auth",
+    "client_auth",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%output.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%output.tf
new file mode 100644
index 0000000..c730834
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%output.tf
@@ -0,0 +1,11 @@
+output "ca_cert_pem" {
+  value = "${var.ca_cert_pem}"
+}
+
+output "key_pem" {
+  value = "${tls_private_key.ingress.private_key_pem}"
+}
+
+output "cert_pem" {
+  value = "${tls_locally_signed_cert.ingress.cert_pem}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%variables.tf
new file mode 100644
index 0000000..1b20761
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%self-signed%variables.tf
@@ -0,0 +1,24 @@
+variable "base_address" {
+  type = "string"
+}
+
+variable "ca_cert_pem" {
+  type = "string"
+}
+
+variable "ca_key_pem" {
+  type = "string"
+}
+
+variable "ca_key_alg" {
+  type = "string"
+}
+
+variable "validity_period" {
+  description = <<EOF
+Validity period of the self-signed certificates (in hours).
+Default is 3 years.
+EOF
+
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%user-provided%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%user-provided%outputs.tf
new file mode 100644
index 0000000..8a76918
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%user-provided%outputs.tf
@@ -0,0 +1,11 @@
+output "ca_cert_pem" {
+  value = "${file(var.ca_cert_pem_path)}"
+}
+
+output "cert_pem" {
+  value = "${file(var.cert_pem_path)}"
+}
+
+output "key_pem" {
+  value = "${file(var.key_pem_path)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%user-provided%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%user-provided%variables.tf
new file mode 100644
index 0000000..bda47c7
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%ingress%user-provided%variables.tf
@@ -0,0 +1,14 @@
+variable "ca_cert_pem_path" {
+  type        = "string"
+  description = "The path to the public CA certificate used to sign the ingress certificates below."
+}
+
+variable "cert_pem_path" {
+  type        = "string"
+  description = "The path to the signed public ingress certificate."
+}
+
+variable "key_pem_path" {
+  type        = "string"
+  description = "The path to the private ingress key."
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%api.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%api.tf
new file mode 100644
index 0000000..f645f4c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%api.tf
@@ -0,0 +1,43 @@
+# Kubernetes API Server (resources/generated/tls/{apiserver.key,apiserver.crt})
+resource "tls_private_key" "apiserver" {
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "apiserver" {
+  key_algorithm   = "${tls_private_key.apiserver.algorithm}"
+  private_key_pem = "${tls_private_key.apiserver.private_key_pem}"
+
+  subject {
+    common_name  = "kube-apiserver"
+    organization = "kube-master"
+  }
+
+  dns_names = [
+    "${replace(element(split(":", var.kube_apiserver_url), 1), "/", "")}",
+    "kubernetes",
+    "kubernetes.default",
+    "kubernetes.default.svc",
+    "kubernetes.default.svc.cluster.local",
+  ]
+
+  ip_addresses = [
+    "${cidrhost(var.service_cidr, 1)}",
+  ]
+}
+
+resource "tls_locally_signed_cert" "apiserver" {
+  cert_request_pem = "${tls_cert_request.apiserver.cert_request_pem}"
+
+  ca_key_algorithm      = "${var.ca_cert_pem == "" ? join(" ", tls_self_signed_cert.kube_ca.*.key_algorithm) : var.ca_key_alg}"
+  ca_private_key_pem    = "${var.ca_cert_pem == "" ? join(" ", tls_private_key.kube_ca.*.private_key_pem) : var.ca_key_pem}"
+  ca_cert_pem           = "${var.ca_cert_pem == "" ? join(" ", tls_self_signed_cert.kube_ca.*.cert_pem): var.ca_cert_pem}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+    "server_auth",
+    "client_auth",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%assets.tf
new file mode 100644
index 0000000..1a107a8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%assets.tf
@@ -0,0 +1,29 @@
+resource "local_file" "apiserver_key" {
+  content  = "${tls_private_key.apiserver.private_key_pem}"
+  filename = "./generated/tls/apiserver.key"
+}
+
+resource "local_file" "apiserver_crt" {
+  content  = "${tls_locally_signed_cert.apiserver.cert_pem}"
+  filename = "./generated/tls/apiserver.crt"
+}
+
+resource "local_file" "kube_ca_key" {
+  content  = "${var.ca_cert_pem == "" ? join(" ", tls_private_key.kube_ca.*.private_key_pem) : var.ca_key_pem}"
+  filename = "./generated/tls/ca.key"
+}
+
+resource "local_file" "kube_ca_crt" {
+  content  = "${var.ca_cert_pem == "" ? join(" ", tls_self_signed_cert.kube_ca.*.cert_pem) : var.ca_cert_pem}"
+  filename = "./generated/tls/ca.crt"
+}
+
+resource "local_file" "kubelet_key" {
+  content  = "${tls_private_key.kubelet.private_key_pem}"
+  filename = "./generated/tls/kubelet.key"
+}
+
+resource "local_file" "kubelet_crt" {
+  content  = "${tls_locally_signed_cert.kubelet.cert_pem}"
+  filename = "./generated/tls/kubelet.crt"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%ca.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%ca.tf
new file mode 100644
index 0000000..c4df176
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%ca.tf
@@ -0,0 +1,41 @@
+# NOTE: Across this module, the following syntax is used at various places:
+#   `"${var.ca_cert_pem == "" ? join(" ", tls_private_key.kube-ca.*.private_key_pem) : var.ca_key_pem}"`
+#
+# Due to https://github.com/hashicorp/hil/issues/50, both sides of conditions
+# are evaluated, until one of them is discarded. Unfortunately, the
+# `{tls_private_key/tls_self_signed_cert}.kube-ca` resources are created
+# conditionally and might not be present - in which case an error is
+# generated. Because a `count` is used on these ressources, the resources can be
+# referenced as lists with the `.*` notation, and arrays are allowed to be
+# empty. The `join()` interpolation function is then used to cast them back to
+# a string. Since `count` can only be 0 or 1, the returned value is either empty
+# (and discarded anyways) or the desired value.
+
+# Kubernetes CA (resources/generated/tls/{ca.crt,ca.key})
+resource "tls_private_key" "kube_ca" {
+  count = "${var.ca_cert_pem == "" ? 1 : 0}"
+
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_self_signed_cert" "kube_ca" {
+  count = "${var.ca_cert_pem == "" ? 1 : 0}"
+
+  key_algorithm   = "${tls_private_key.kube_ca.algorithm}"
+  private_key_pem = "${tls_private_key.kube_ca.private_key_pem}"
+
+  subject {
+    common_name  = "kube-ca"
+    organization = "bootkube"
+  }
+
+  is_ca_certificate     = true
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+    "cert_signing",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%kubelet.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%kubelet.tf
new file mode 100644
index 0000000..610af20
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%kubelet.tf
@@ -0,0 +1,31 @@
+# Kubelet
+resource "tls_private_key" "kubelet" {
+  algorithm = "RSA"
+  rsa_bits  = "2048"
+}
+
+resource "tls_cert_request" "kubelet" {
+  key_algorithm   = "${tls_private_key.kubelet.algorithm}"
+  private_key_pem = "${tls_private_key.kubelet.private_key_pem}"
+
+  subject {
+    common_name  = "kubelet"
+    organization = "system:masters"
+  }
+}
+
+resource "tls_locally_signed_cert" "kubelet" {
+  cert_request_pem = "${tls_cert_request.kubelet.cert_request_pem}"
+
+  ca_key_algorithm      = "${var.ca_cert_pem == "" ? join(" ", tls_self_signed_cert.kube_ca.*.key_algorithm) : var.ca_key_alg}"
+  ca_private_key_pem    = "${var.ca_cert_pem == "" ? join(" ", tls_private_key.kube_ca.*.private_key_pem) : var.ca_key_pem}"
+  ca_cert_pem           = "${var.ca_cert_pem == "" ? join(" ", tls_self_signed_cert.kube_ca.*.cert_pem) : var.ca_cert_pem}"
+  validity_period_hours = "${var.validity_period}"
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+    "server_auth",
+    "client_auth",
+  ]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%outputs.tf
new file mode 100644
index 0000000..fdd9b3e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%outputs.tf
@@ -0,0 +1,40 @@
+output "ca_cert_pem" {
+  value = "${var.ca_cert_pem == "" ? element(concat(tls_self_signed_cert.kube_ca.*.cert_pem, list("")), 0) : var.ca_cert_pem}"
+}
+
+output "ca_key_alg" {
+  value = "${var.ca_cert_pem == "" ? element(concat(tls_self_signed_cert.kube_ca.*.key_algorithm, list("")), 0) : var.ca_key_alg}"
+}
+
+output "ca_key_pem" {
+  value = "${var.ca_cert_pem == "" ? element(concat(tls_private_key.kube_ca.*.private_key_pem, list("")), 0) : var.ca_key_pem}"
+}
+
+output "kubelet_cert_pem" {
+  value = "${tls_locally_signed_cert.kubelet.cert_pem}"
+}
+
+output "kubelet_key_pem" {
+  value = "${tls_private_key.kubelet.private_key_pem}"
+}
+
+output "apiserver_cert_pem" {
+  value = "${tls_locally_signed_cert.apiserver.cert_pem}"
+}
+
+output "apiserver_key_pem" {
+  value = "${tls_private_key.apiserver.private_key_pem}"
+}
+
+output "id" {
+  value = "${sha1("
+  ${join(" ",
+    list(local_file.apiserver_key.id,
+    local_file.apiserver_crt.id,
+    local_file.kube_ca_key.id,
+    local_file.kube_ca_crt.id,
+    local_file.kubelet_key.id,
+    local_file.kubelet_crt.id,)
+    )}
+  ")}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%variables.tf
new file mode 100644
index 0000000..81ae646
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%self-signed%variables.tf
@@ -0,0 +1,31 @@
+variable "ca_cert_pem" {
+  description = "PEM-encoded CA certificate (generated if blank)"
+  type        = "string"
+}
+
+variable "ca_key_alg" {
+  description = "Algorithm used to generate ca_key (required if ca_cert is specified)"
+  type        = "string"
+}
+
+variable "ca_key_pem" {
+  description = "PEM-encoded CA key (required if ca_cert is specified)"
+  type        = "string"
+}
+
+variable "kube_apiserver_url" {
+  type = "string"
+}
+
+variable "service_cidr" {
+  type = "string"
+}
+
+variable "validity_period" {
+  description = <<EOF
+Validity period of the self-signed certificates (in hours).
+Default is 3 years.
+EOF
+
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%assets.tf
new file mode 100644
index 0000000..0b511a1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%assets.tf
@@ -0,0 +1,24 @@
+resource "local_file" "apiserver_key" {
+  content  = "${file(var.apiserver_key_pem_path)}"
+  filename = "./generated/tls/apiserver.key"
+}
+
+resource "local_file" "apiserver_crt" {
+  content  = "${file(var.apiserver_cert_pem_path)}"
+  filename = "./generated/tls/apiserver.crt"
+}
+
+resource "local_file" "kube_ca_crt" {
+  content  = "${file(var.ca_cert_pem_path)}"
+  filename = "./generated/tls/ca.crt"
+}
+
+resource "local_file" "kubelet_key" {
+  content  = "${file(var.kubelet_key_pem_path)}"
+  filename = "./generated/tls/kubelet.key"
+}
+
+resource "local_file" "kubelet_crt" {
+  content  = "${file(var.kubelet_cert_pem_path)}"
+  filename = "./generated/tls/kubelet.crt"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%outputs.tf
new file mode 100644
index 0000000..83d728e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%outputs.tf
@@ -0,0 +1,31 @@
+output "ca_cert_pem" {
+  value = "${file(var.ca_cert_pem_path)}"
+}
+
+output "kubelet_cert_pem" {
+  value = "${file(var.kubelet_cert_pem_path)}"
+}
+
+output "kubelet_key_pem" {
+  value = "${file(var.kubelet_key_pem_path)}"
+}
+
+output "apiserver_cert_pem" {
+  value = "${file(var.apiserver_cert_pem_path)}"
+}
+
+output "apiserver_key_pem" {
+  value = "${file(var.apiserver_key_pem_path)}"
+}
+
+output "id" {
+  value = "${sha1("
+  ${join(" ",
+    list(local_file.apiserver_key.id,
+    local_file.apiserver_crt.id,
+    local_file.kube_ca_crt.id,
+    local_file.kubelet_key.id,
+    local_file.kubelet_crt.id,)
+    )}
+  ")}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%variables.tf
new file mode 100644
index 0000000..ab605ac
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%tls%kube%user-provided%variables.tf
@@ -0,0 +1,19 @@
+variable "ca_cert_pem_path" {
+  type = "string"
+}
+
+variable "kubelet_cert_pem_path" {
+  type = "string"
+}
+
+variable "kubelet_key_pem_path" {
+  type = "string"
+}
+
+variable "apiserver_cert_pem_path" {
+  type = "string"
+}
+
+variable "apiserver_key_pem_path" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%update-payload%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%update-payload%assets.tf
new file mode 100644
index 0000000..d44e737
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%update-payload%assets.tf
@@ -0,0 +1,29 @@
+# Kubernetes Deployments and AppVersions TPR used in the payload
+resource "template_dir" "payload_operators" {
+  source_dir      = "../tectonic/resources/manifests/updater/operators"
+  destination_dir = "./generated/operators"
+
+  vars {
+    kube_version_operator_image        = "${var.tectonic_container_images["kube_version_operator"]}"
+    tectonic_channel_operator_image    = "${var.tectonic_container_images["tectonic_channel_operator"]}"
+    tectonic_prometheus_operator_image = "${var.tectonic_container_images["tectonic_prometheus_operator"]}"
+    tectonic_etcd_operator_image       = "${var.tectonic_container_images["tectonic_etcd_operator"]}"
+    tectonic_cluo_operator_image       = "${var.tectonic_container_images["tectonic_cluo_operator"]}"
+    tectonic_alm_operator_image        = "${var.tectonic_container_images["tectonic_alm_operator"]}"
+    image_re                           = "${var.tectonic_image_re}"
+  }
+}
+
+resource "template_dir" "payload_appversions" {
+  source_dir      = "../tectonic/resources/manifests/updater/app_versions"
+  destination_dir = "./generated/app_versions"
+
+  vars {
+    kubernetes_version             = "${var.tectonic_versions["kubernetes"]}"
+    monitoring_version             = "${var.tectonic_versions["monitoring"]}"
+    tectonic_version               = "${var.tectonic_versions["tectonic"]}"
+    tectonic_etcd_operator_version = "${var.tectonic_versions["tectonic-etcd"]}"
+    tectonic_cluo_operator_version = "${var.tectonic_versions["cluo"]}"
+    tectonic_alm_operator_version  = "${var.tectonic_versions["alm"]}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%ignition.tf
new file mode 100644
index 0000000..5c70e41
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%ignition.tf
@@ -0,0 +1,81 @@
+data "ignition_config" "etcd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  users = [
+    "${data.ignition_user.core.id}",
+  ]
+
+  files = ["${compact(list(
+    data.ignition_file.node_hostname.*.id[count.index],
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+  ))}",
+    "${var.ign_etcd_crt_id_list}",
+  ]
+
+  systemd = [
+    "${data.ignition_systemd_unit.locksmithd.*.id[count.index]}",
+    "${var.ign_etcd_dropin_id_list[count.index]}",
+  ]
+
+  networkd = [
+    "${data.ignition_networkd_unit.vmnetwork.*.id[count.index]}",
+  ]
+}
+
+data "ignition_user" "core" {
+  name                = "core"
+  ssh_authorized_keys = ["${var.core_public_keys}"]
+}
+
+data "ignition_systemd_unit" "locksmithd" {
+  count = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+
+  name    = "locksmithd.service"
+  enabled = true
+
+  dropin = [
+    {
+      name    = "40-etcd-lock.conf"
+      content = "[Service]\nEnvironment=REBOOT_STRATEGY=etcd-lock\n"
+      name    = "40-etcd-lock.conf"
+
+      content = <<EOF
+[Service]
+Environment=REBOOT_STRATEGY=etcd-lock
+Environment=LOCKSMITHD_ETCD_CAFILE=/etc/ssl/etcd/ca.crt
+Environment=LOCKSMITHD_ETCD_KEYFILE=/etc/ssl/etcd/client.key
+Environment=LOCKSMITHD_ETCD_CERTFILE=/etc/ssl/etcd/client.crt
+Environment=LOCKSMITHD_ENDPOINT=https://${var.hostname["${count.index}"]}.${var.base_domain}:2379
+EOF
+    },
+  ]
+}
+
+data "ignition_file" "node_hostname" {
+  count      = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+  path       = "/etc/hostname"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${var.hostname["${count.index}"]}"
+  }
+}
+
+data "ignition_networkd_unit" "vmnetwork" {
+  count = "${var.instance_count}"
+  name  = "00-ens192.network"
+
+  content = <<EOF
+  [Match]
+  Name=ens192
+  [Network]
+  DNS=${var.dns_server}
+  Address=${var.ip_address["${count.index}"]}
+  Gateway=${var.gateways["${count.index}"]}
+  UseDomains=yes
+  Domains=${var.base_domain}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%nodes.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%nodes.tf
new file mode 100644
index 0000000..95877c6
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%nodes.tf
@@ -0,0 +1,26 @@
+resource "vsphere_virtual_machine" "etcd_node" {
+  count         = "${length(var.external_endpoints) == 0 ? var.instance_count : 0}"
+  name          = "${var.hostname["${count.index}"]}"
+  datacenter    = "${var.vmware_datacenters["${count.index}"]}"
+  cluster       = "${var.vmware_clusters["${count.index}"]}"
+  resource_pool = "${var.vmware_resource_pool["${count.index}"]}"
+  vcpu          = "${var.vm_vcpu}"
+  memory        = "${var.vm_memory}"
+  folder        = "${var.vmware_folder}"
+  domain        = "${var.base_domain}"
+
+  network_interface {
+    label = "${var.vm_network_labels["${count.index}"]}"
+  }
+
+  disk {
+    datastore = "${var.vm_disk_datastores["${count.index}"]}"
+    template  = "${var.vm_disk_template_folder}/${var.vm_disk_template}"
+    type      = "thin"
+  }
+
+  custom_configuration_parameters {
+    guestinfo.coreos.config.data.encoding = "base64"
+    guestinfo.coreos.config.data          = "${base64encode(data.ignition_config.etcd.*.rendered[count.index])}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%outputs.tf
new file mode 100644
index 0000000..69869dc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%outputs.tf
@@ -0,0 +1,12 @@
+output "ip_address" {
+  value = ["${vsphere_virtual_machine.etcd_node.*.network_interface.0.ipv4_address}"]
+}
+
+output "name" {
+  value = ["${vsphere_virtual_machine.etcd_node.*.name}"]
+}
+
+# We have to do this join() & split() 'trick' because the ternary operator can't output lists.
+output "endpoints" {
+  value = ["${split(",", length(var.external_endpoints) == 0 ? join(",", formatlist("%s.%s", vsphere_virtual_machine.etcd_node.*.name, var.base_domain)) : join(",", var.external_endpoints))}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%variables.tf
new file mode 100644
index 0000000..0dd965a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%etcd%variables.tf
@@ -0,0 +1,116 @@
+variable "instance_count" {
+  type        = "string"
+  description = "Amount of etcd nodes to be created. This should be an odd number and typically recommended to be 1 or 3 or 5"
+}
+
+variable "base_domain" {
+  type = "string"
+}
+
+variable "external_endpoints" {
+  type = "list"
+}
+
+variable "container_image" {
+  type = "string"
+}
+
+variable "cluster_name" {
+  type        = "string"
+  description = "Name of Tectonic cluster. ETCD node names will be prefixed with this string"
+}
+
+variable "vmware_folder" {
+  type        = "string"
+  description = "Name of the VMware folder to create objects in"
+}
+
+variable core_public_keys {
+  type        = "list"
+  description = "Public Key for Core User"
+}
+
+variable vmware_datacenters {
+  type        = "map"
+  description = "vSphere Datacenter to create VMs in"
+}
+
+variable vmware_clusters {
+  type        = "map"
+  description = "vSphere Cluster to create VMs in"
+}
+
+variable "vmware_resource_pool" {
+  type        = "map"
+  description = "vSphere resource pool to create VMs in"
+}
+
+variable vm_vcpu {
+  type        = "string"
+  description = "ETCD VMs vCPU count"
+}
+
+variable vm_memory {
+  type        = "string"
+  description = "ETCD VMs Memory size in MB"
+}
+
+variable vm_network_labels {
+  type        = "map"
+  description = "ETCD VMs PortGroups"
+}
+
+variable vm_disk_datastores {
+  type        = "map"
+  description = "vSphere datastores to use for VMs"
+}
+
+variable vm_disk_template {
+  type        = "string"
+  description = "Disk template to use for cloning ETCD VM CoreOS Container Linux"
+}
+
+variable vm_disk_template_folder {
+  type        = "string"
+  description = "vSphere Folder CoreOS Container Linux is located in"
+}
+
+variable dns_server {
+  type        = "string"
+  description = "DNS Server of the nodes"
+}
+
+variable ip_address {
+  type        = "map"
+  description = "IP Address of the node"
+}
+
+variable gateways {
+  type        = "map"
+  description = "Network gateway IP for the node"
+}
+
+variable hostname {
+  type        = "map"
+  description = "Hostname of the node"
+}
+
+variable "ign_etcd_crt_id_list" {
+  type = "list"
+}
+
+variable "ign_profile_env_id" {
+  type = "string"
+}
+
+variable "ign_systemd_default_env_id" {
+  type = "string"
+}
+
+variable "ign_etcd_dropin_id_list" {
+  type = "list"
+}
+
+variable "ign_ntp_dropin_id" {
+  type = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%ignition.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%ignition.tf
new file mode 100644
index 0000000..e1822d8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%ignition.tf
@@ -0,0 +1,69 @@
+data "ignition_config" "node" {
+  count = "${var.instance_count}"
+
+  users = [
+    "${data.ignition_user.core.id}",
+  ]
+
+  files = ["${compact(list(
+    data.ignition_file.node_hostname.*.id[count.index],
+    var.ign_installer_kubelet_env_id,
+    var.ign_installer_runtime_mappings_id,
+    var.ign_max_user_watches_id,
+    var.ign_nfs_config_id,
+    var.ign_ntp_dropin_id,
+    var.ign_profile_env_id,
+    var.ign_systemd_default_env_id,
+  ))}",
+    "${var.ign_ca_cert_id_list}",
+  ]
+
+  systemd = ["${compact(list(
+    var.ign_docker_dropin_id,
+    var.ign_locksmithd_service_id,
+    var.ign_k8s_node_bootstrap_service_id,
+    var.ign_kubelet_service_id,
+    var.ign_bootkube_service_id,
+    var.ign_tectonic_service_id,
+    var.ign_bootkube_path_unit_id,
+    var.ign_tectonic_path_unit_id,
+    var.ign_update_ca_certificates_dropin_id,
+    var.ign_iscsi_service_id,
+   ))}"]
+
+  networkd = [
+    "${data.ignition_networkd_unit.vmnetwork.*.id[count.index]}",
+  ]
+}
+
+data "ignition_user" "core" {
+  name                = "core"
+  ssh_authorized_keys = ["${var.core_public_keys}"]
+}
+
+data "ignition_networkd_unit" "vmnetwork" {
+  count = "${var.instance_count}"
+  name  = "00-ens192.network"
+
+  content = <<EOF
+  [Match]
+  Name=ens192
+  [Network]
+  DNS=${var.dns_server}
+  Address=${var.ip_address["${count.index}"]}
+  Gateway=${var.gateways["${count.index}"]}
+  UseDomains=yes
+  Domains=${var.base_domain}
+EOF
+}
+
+data "ignition_file" "node_hostname" {
+  count      = "${var.instance_count}"
+  path       = "/etc/hostname"
+  mode       = 0644
+  filesystem = "root"
+
+  content {
+    content = "${var.hostname["${count.index}"]}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%nodes.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%nodes.tf
new file mode 100644
index 0000000..903f15f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%nodes.tf
@@ -0,0 +1,43 @@
+resource "vsphere_virtual_machine" "node" {
+  count         = "${var.instance_count}"
+  name          = "${var.hostname["${count.index}"]}"
+  datacenter    = "${var.vmware_datacenters["${count.index}"]}"
+  cluster       = "${var.vmware_clusters["${count.index}"]}"
+  resource_pool = "${var.vmware_resource_pool["${count.index}"]}"
+  vcpu          = "${var.vm_vcpu}"
+  memory        = "${var.vm_memory}"
+  folder        = "${var.vmware_folder}"
+  domain        = "${var.base_domain}"
+
+  network_interface {
+    label = "${var.vm_network_labels["${count.index}"]}"
+  }
+
+  disk {
+    datastore = "${var.vm_disk_datastores["${count.index}"]}"
+    template  = "${var.vm_disk_template_folder}/${var.vm_disk_template}"
+    type      = "thin"
+  }
+
+  custom_configuration_parameters {
+    guestinfo.coreos.config.data.encoding = "base64"
+    guestinfo.coreos.config.data          = "${base64encode(data.ignition_config.node.*.rendered[count.index])}"
+  }
+
+  connection {
+    type        = "ssh"
+    user        = "core"
+    private_key = "${file(var.private_key != "" ? pathexpand(var.private_key) : "/dev/null")}"
+  }
+
+  provisioner "file" {
+    content     = "${var.kubeconfig}"
+    destination = "$HOME/kubeconfig"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo mv /home/core/kubeconfig /etc/kubernetes/kubeconfig",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%outputs.tf
new file mode 100644
index 0000000..c9cd69d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%outputs.tf
@@ -0,0 +1,3 @@
+output "ip_address" {
+  value = ["${vsphere_virtual_machine.node.*.network_interface.0.ipv4_address}"]
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%variables.tf
new file mode 100644
index 0000000..7510740
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%modules%vmware%node%variables.tf
@@ -0,0 +1,126 @@
+variable "base_domain" {
+  type = "string"
+}
+
+variable "container_images" {
+  description = "Container images to use"
+  type        = "map"
+}
+
+variable "image_re" {
+  description = "(internal) Regular expression used to extract repo and tag components from image strings"
+  type        = "string"
+}
+
+variable "instance_count" {
+  type        = "string"
+  description = "Number of nodes to be created."
+}
+
+variable "kubeconfig" {
+  type        = "string"
+  description = "Contents of Kubeconfig"
+}
+
+variable "private_key" {
+  type        = "string"
+  description = "SSH private key file in .pem format corresponding to tectonic_vmware_ssh_authorized_key. If not provided, SSH agent will be used."
+  default     = ""
+}
+
+variable "vmware_folder" {
+  type        = "string"
+  description = "Name of the VMware folder to create objects in"
+}
+
+variable "core_public_keys" {
+  type        = "list"
+  description = "Public Key for Core User"
+}
+
+variable "dns_server" {
+  type        = "string"
+  description = "DNS Server of the nodes"
+}
+
+variable "gateways" {
+  type        = "map"
+  description = "Network gateway IP for the node"
+}
+
+variable "hostname" {
+  type        = "map"
+  description = "Hostname of the node"
+}
+
+variable "ip_address" {
+  type        = "map"
+  description = "IP Address of the node"
+}
+
+variable "vmware_resource_pool" {
+  type        = "map"
+  description = "vSphere resource pool to create VMs in"
+}
+
+variable vm_disk_datastores {
+  type        = "map"
+  description = "vSphere datastores to use for VMs"
+}
+
+variable vm_network_labels {
+  type        = "map"
+  description = "VMs PortGroups"
+}
+
+variable "vm_disk_template" {
+  type        = "string"
+  description = "Disk template to use for cloning CoreOS Container Linux"
+}
+
+variable "vm_disk_template_folder" {
+  type        = "string"
+  description = "vSphere Folder CoreOS Container Linux is located in"
+}
+
+variable "vm_memory" {
+  type        = "string"
+  description = "VMs Memory size in MB"
+}
+
+variable "vm_vcpu" {
+  type        = "string"
+  description = "VMs vCPU count"
+}
+
+variable "vmware_clusters" {
+  type        = "map"
+  description = "vSphere Cluster to create VMs in"
+}
+
+variable "vmware_datacenters" {
+  type        = "map"
+  description = "vSphere Datacenter to create VMs in"
+}
+
+variable "ign_bootkube_service_id" {
+  type        = "string"
+  description = "The ID of the bootkube systemd service unit"
+  default     = ""
+}
+
+variable "ign_bootkube_path_unit_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "ign_tectonic_service_id" {
+  type        = "string"
+  description = "The ID of the tectonic installer systemd service unit"
+  default     = ""
+}
+
+variable "ign_tectonic_path_unit_id" {
+  type    = "string"
+  default = ""
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%main.tf
new file mode 100644
index 0000000..1ce8780
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%main.tf
@@ -0,0 +1,278 @@
+provider "aws" {
+  region  = "${var.tectonic_aws_region}"
+  profile = "${var.tectonic_aws_profile}"
+  version = "1.7.0"
+}
+
+data "aws_availability_zones" "azs" {}
+
+module "container_linux" {
+  source = "../../modules/container_linux"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+module "vpc" {
+  source = "../../modules/aws/vpc"
+
+  base_domain              = "${var.tectonic_base_domain}"
+  cidr_block               = "${var.tectonic_aws_vpc_cidr_block}"
+  cluster_id               = "${module.tectonic.cluster_id}"
+  cluster_name             = "${var.tectonic_cluster_name}"
+  custom_dns_name          = "${var.tectonic_dns_name}"
+  enable_etcd_sg           = "${var.tectonic_self_hosted_etcd == "" && length(compact(var.tectonic_etcd_servers)) == 0 ? 1 : 0}"
+  external_master_subnets  = "${compact(var.tectonic_aws_external_master_subnet_ids)}"
+  external_vpc_id          = "${var.tectonic_aws_external_vpc_id}"
+  external_worker_subnets  = "${compact(var.tectonic_aws_external_worker_subnet_ids)}"
+  extra_tags               = "${var.tectonic_aws_extra_tags}"
+  private_master_endpoints = "${var.tectonic_aws_private_endpoints}"
+  public_master_endpoints  = "${var.tectonic_aws_public_endpoints}"
+
+  # VPC layout settings.
+  #
+  # The following parameters control the layout of the VPC accross availability zones.
+  # Two modes are available:
+  # A. Explicitly configure a list of AZs + associated subnet CIDRs
+  # B. Let the module calculate subnets accross a set number of AZs
+  #
+  # To enable mode A, configure a set of AZs + CIDRs for masters and workers using the
+  # "tectonic_aws_master_custom_subnets" and "tectonic_aws_worker_custom_subnets" variables.
+  #
+  # To enable mode B, make sure that "tectonic_aws_master_custom_subnets" and "tectonic_aws_worker_custom_subnets"
+  # ARE NOT SET.
+
+  # These counts could be deducted by length(keys(var.tectonic_aws_master_custom_subnets))
+  # but there is a restriction on passing computed values as counts. This approach works around that.
+  master_az_count = "${length(keys(var.tectonic_aws_master_custom_subnets)) > 0 ? "${length(keys(var.tectonic_aws_master_custom_subnets))}" : "${length(data.aws_availability_zones.azs.names)}"}"
+  worker_az_count = "${length(keys(var.tectonic_aws_worker_custom_subnets)) > 0 ? "${length(keys(var.tectonic_aws_worker_custom_subnets))}" : "${length(data.aws_availability_zones.azs.names)}"}"
+  # The appending of the "padding" element is required as workaround since the function
+  # element() won't work on empty lists. See https://github.com/hashicorp/terraform/issues/11210
+  master_subnets = "${concat(values(var.tectonic_aws_master_custom_subnets),list("padding"))}"
+  worker_subnets = "${concat(values(var.tectonic_aws_worker_custom_subnets),list("padding"))}"
+  # The split() / join() trick works around the limitation of ternary operator expressions
+  # only being able to return strings.
+  master_azs = "${ split("|", "${length(keys(var.tectonic_aws_master_custom_subnets))}" > 0 ?
+    join("|", keys(var.tectonic_aws_master_custom_subnets)) :
+    join("|", data.aws_availability_zones.azs.names)
+  )}"
+  worker_azs = "${ split("|", "${length(keys(var.tectonic_aws_worker_custom_subnets))}" > 0 ?
+    join("|", keys(var.tectonic_aws_worker_custom_subnets)) :
+    join("|", data.aws_availability_zones.azs.names)
+  )}"
+}
+
+module "etcd" {
+  source = "../../modules/aws/etcd"
+
+  base_domain                = "${var.tectonic_base_domain}"
+  cluster_id                 = "${module.tectonic.cluster_id}"
+  cluster_name               = "${var.tectonic_cluster_name}"
+  container_image            = "${var.tectonic_container_images["etcd"]}"
+  container_linux_channel    = "${var.tectonic_container_linux_channel}"
+  container_linux_version    = "${module.container_linux.version}"
+  ec2_ami                    = "${var.tectonic_aws_ec2_ami_override}"
+  ec2_type                   = "${var.tectonic_aws_etcd_ec2_type}"
+  etcd_iam_role              = "${var.tectonic_aws_etcd_iam_role_name}"
+  external_endpoints         = "${compact(var.tectonic_etcd_servers)}"
+  extra_tags                 = "${var.tectonic_aws_extra_tags}"
+  ign_etcd_crt_id_list       = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list    = "${module.ignition_masters.etcd_dropin_id_list}"
+  ign_ntp_dropin_id          = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id         = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id = "${module.ignition_masters.systemd_default_env_id}"
+  instance_count             = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  root_volume_iops           = "${var.tectonic_aws_etcd_root_volume_iops}"
+  root_volume_size           = "${var.tectonic_aws_etcd_root_volume_size}"
+  root_volume_type           = "${var.tectonic_aws_etcd_root_volume_type}"
+  s3_bucket                  = "${aws_s3_bucket.tectonic.bucket}"
+  sg_ids                     = "${concat(var.tectonic_aws_etcd_extra_sg_ids, list(module.vpc.etcd_sg_id))}"
+  ssh_key                    = "${var.tectonic_aws_ssh_key}"
+  subnets                    = "${module.vpc.worker_subnet_ids}"
+  tls_enabled                = "${var.tectonic_etcd_tls_enabled}"
+}
+
+module "ignition_masters" {
+  source = "../../modules/ignition"
+
+  assets_location           = "${aws_s3_bucket_object.tectonic_assets.bucket}/${aws_s3_bucket_object.tectonic_assets.key}"
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider            = "aws"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubeconfig_fetch_cmd      = "/opt/s3-puller.sh ${aws_s3_bucket_object.kubeconfig.bucket}/${aws_s3_bucket_object.kubeconfig.key} /etc/kubernetes/kubeconfig"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "masters" {
+  source = "../../modules/aws/master-asg"
+
+  assets_s3_location                   = "${aws_s3_bucket_object.tectonic_assets.bucket}/${aws_s3_bucket_object.tectonic_assets.key}"
+  autoscaling_group_extra_tags         = "${var.tectonic_autoscaling_group_extra_tags}"
+  aws_lbs                              = "${module.vpc.aws_lbs}"
+  base_domain                          = "${var.tectonic_base_domain}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_images                     = "${var.tectonic_container_images}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  ec2_ami                              = "${var.tectonic_aws_ec2_ami_override}"
+  ec2_type                             = "${var.tectonic_aws_master_ec2_type}"
+  extra_tags                           = "${var.tectonic_aws_extra_tags}"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_init_assets_service_id           = "${module.ignition_masters.init_assets_service_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_masters.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_masters.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_masters.profile_env_id}"
+  ign_rm_assets_path_unit_id           = "${module.ignition_masters.rm_assets_path_unit_id}"
+  ign_rm_assets_service_id             = "${module.ignition_masters.rm_assets_service_id}"
+  ign_s3_puller_id                     = "${module.ignition_masters.s3_puller_id}"
+  ign_systemd_default_env_id           = "${module.ignition_masters.systemd_default_env_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  instance_count                       = "${var.tectonic_master_count}"
+  master_iam_role                      = "${var.tectonic_aws_master_iam_role_name}"
+  master_sg_ids                        = "${concat(var.tectonic_aws_master_extra_sg_ids, list(module.vpc.master_sg_id))}"
+  private_endpoints                    = "${var.tectonic_aws_private_endpoints}"
+  public_endpoints                     = "${var.tectonic_aws_public_endpoints}"
+  root_volume_iops                     = "${var.tectonic_aws_master_root_volume_iops}"
+  root_volume_size                     = "${var.tectonic_aws_master_root_volume_size}"
+  root_volume_type                     = "${var.tectonic_aws_master_root_volume_type}"
+  s3_bucket                            = "${aws_s3_bucket.tectonic.bucket}"
+  ssh_key                              = "${var.tectonic_aws_ssh_key}"
+  subnet_ids                           = "${module.vpc.master_subnet_ids}"
+}
+
+module "ignition_workers" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider          = "aws"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubeconfig_fetch_cmd    = "/opt/s3-puller.sh ${aws_s3_bucket_object.kubeconfig.bucket}/${aws_s3_bucket_object.kubeconfig.key} /etc/kubernetes/kubeconfig"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "workers" {
+  source = "../../modules/aws/worker-asg"
+
+  autoscaling_group_extra_tags         = "${var.tectonic_autoscaling_group_extra_tags}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  ec2_ami                              = "${var.tectonic_aws_ec2_ami_override}"
+  ec2_type                             = "${var.tectonic_aws_worker_ec2_type}"
+  extra_tags                           = "${var.tectonic_aws_extra_tags}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_workers.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_workers.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_workers.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_s3_puller_id                     = "${module.ignition_workers.s3_puller_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  instance_count                       = "${var.tectonic_worker_count}"
+  load_balancers                       = "${var.tectonic_aws_worker_load_balancers}"
+  root_volume_iops                     = "${var.tectonic_aws_worker_root_volume_iops}"
+  root_volume_size                     = "${var.tectonic_aws_worker_root_volume_size}"
+  root_volume_type                     = "${var.tectonic_aws_worker_root_volume_type}"
+  s3_bucket                            = "${aws_s3_bucket.tectonic.bucket}"
+  sg_ids                               = "${concat(var.tectonic_aws_worker_extra_sg_ids, list(module.vpc.worker_sg_id))}"
+  ssh_key                              = "${var.tectonic_aws_ssh_key}"
+  subnet_ids                           = "${module.vpc.worker_subnet_ids}"
+  vpc_id                               = "${module.vpc.vpc_id}"
+  worker_iam_role                      = "${var.tectonic_aws_worker_iam_role_name}"
+}
+
+module "dns" {
+  source = "../../modules/dns/route53"
+
+  api_external_elb_dns_name      = "${module.vpc.aws_api_external_dns_name}"
+  api_external_elb_zone_id       = "${module.vpc.aws_elb_api_external_zone_id}"
+  api_internal_elb_dns_name      = "${module.vpc.aws_api_internal_dns_name}"
+  api_internal_elb_zone_id       = "${module.vpc.aws_elb_api_internal_zone_id}"
+  api_ip_addresses               = "${module.vpc.aws_lbs}"
+  base_domain                    = "${var.tectonic_base_domain}"
+  cluster_id                     = "${module.tectonic.cluster_id}"
+  cluster_name                   = "${var.tectonic_cluster_name}"
+  console_elb_dns_name           = "${module.vpc.aws_console_dns_name}"
+  console_elb_zone_id            = "${module.vpc.aws_elb_console_zone_id}"
+  custom_dns_name                = "${var.tectonic_dns_name}"
+  elb_alias_enabled              = true
+  etcd_count                     = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_ip_addresses              = "${module.etcd.ip_addresses}"
+  external_endpoints             = ["${compact(var.tectonic_etcd_servers)}"]
+  master_count                   = "${var.tectonic_master_count}"
+  tectonic_external_private_zone = "${var.tectonic_aws_external_private_zone}"
+  tectonic_external_vpc_id       = "${module.vpc.vpc_id}"
+  tectonic_extra_tags            = "${var.tectonic_aws_extra_tags}"
+  tectonic_private_endpoints     = "${var.tectonic_aws_private_endpoints}"
+  tectonic_public_endpoints      = "${var.tectonic_aws_public_endpoints}"
+  tectonic_vanilla_k8s           = "${var.tectonic_vanilla_k8s}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%s3.tf
new file mode 100644
index 0000000..9fa6d7c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%s3.tf
@@ -0,0 +1,65 @@
+data "aws_region" "current" {
+  current = true
+}
+
+resource "aws_s3_bucket" "tectonic" {
+  # Buckets must start with a lower case name and are limited to 63 characters,
+  # so we prepend the letter 'a' and use the md5 hex digest for the case of a long domain
+  # leaving 29 chars for the cluster name.
+  bucket = "${var.tectonic_aws_assets_s3_bucket_name == "" ? format("%s%s-%s", "a", var.tectonic_cluster_name, md5(format("%s-%s", data.aws_region.current.name , var.tectonic_base_domain))) : var.tectonic_aws_assets_s3_bucket_name }"
+
+  acl = "private"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-tectonic",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_aws_extra_tags)}"
+
+  lifecycle {
+    ignore_changes = ["*"]
+  }
+}
+
+# Bootkube / Tectonic assets
+resource "aws_s3_bucket_object" "tectonic_assets" {
+  bucket = "${aws_s3_bucket.tectonic.bucket}"
+  key    = "assets.zip"
+  source = "${data.archive_file.assets.output_path}"
+  acl    = "private"
+
+  # To be on par with the current Tectonic installer, we only do server-side
+  # encryption, using AES256. Eventually, we should start using KMS-based
+  # client-side encryption.
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-tectonic-assets",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_aws_extra_tags)}"
+
+  lifecycle {
+    ignore_changes = ["*"]
+  }
+}
+
+# kubeconfig
+resource "aws_s3_bucket_object" "kubeconfig" {
+  bucket  = "${aws_s3_bucket.tectonic.bucket}"
+  key     = "kubeconfig"
+  content = "${module.bootkube.kubeconfig}"
+  acl     = "private"
+
+  # The current Tectonic installer stores bits of the kubeconfig in KMS. As we
+  # do not support KMS yet, we at least offload it to S3 for now. Eventually,
+  # we should consider using KMS-based client-side encryption, or uploading it
+  # to KMS.
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-kubeconfig",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_aws_extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%tectonic.tf
new file mode 100644
index 0000000..dd093f1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%tectonic.tf
@@ -0,0 +1,160 @@
+data "template_file" "etcd_hostname_list" {
+  count    = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count > 0 ? var.tectonic_etcd_count : length(data.aws_availability_zones.azs.names) == 5 ? 5 : 3}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}.${var.tectonic_base_domain}"
+}
+
+module "bootkube" {
+  source         = "../../modules/bootkube"
+  cloud_provider = "aws"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${var.tectonic_aws_private_endpoints ? module.dns.api_internal_fqdn : module.dns.api_external_fqdn}:443"
+  oidc_issuer_url    = "https://${var.tectonic_aws_private_endpoints ? module.dns.ingress_internal_fqdn : module.dns.ingress_external_fqdn}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+  self_hosted_etcd = "${var.tectonic_self_hosted_etcd}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${module.dns.etcd_endpoints}"
+  master_count              = "${var.tectonic_master_count}"
+
+  # The default behavior of Kubernetes's controller manager is to mark a node
+  # as Unhealthy after 40s without an update from the node's kubelet. However,
+  # AWS ELB's Route53 records have a fixed TTL of 60s. Therefore, when an ELB's
+  # node disappears (e.g. scaled down or crashed), kubelet might fail to report
+  # for a period of time that exceed the default grace period of 40s and the
+  # node might become Unhealthy. While the eviction process won't start until
+  # the pod_eviction_timeout is reached, 5min by default, certain operators
+  # might already have taken action. This is the case for the etcd operator as
+  # of v0.3.3, which removes the likely-healthy etcd pods from the the
+  # cluster, potentially leading to a loss-of-quorum as generally all kubelets
+  # are affected simultaneously.
+  #
+  # To cope with this issue, we increase the grace period, and reduce the
+  # pod eviction time-out accordingly so pods still get evicted after an total
+  # time of 340s after the first post-status failure.
+  #
+  # Ref: https://github.com/kubernetes/kubernetes/issues/41916
+  # Ref: https://github.com/kubernetes-incubator/kube-aws/issues/598
+  node_monitor_grace_period = "2m"
+
+  pod_eviction_timeout = "220s"
+
+  cloud_config_path = ""
+}
+
+module "tectonic" {
+  source   = "../../modules/tectonic"
+  platform = "aws"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${var.tectonic_aws_private_endpoints ? module.dns.ingress_internal_fqdn : module.dns.ingress_external_fqdn}"
+  kube_apiserver_url = "https://${var.tectonic_aws_private_endpoints ? module.dns.api_internal_fqdn : module.dns.api_external_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "NodePort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../modules/net/calico"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
+
+data "archive_file" "assets" {
+  type       = "zip"
+  source_dir = "./generated/"
+
+  # Because the archive_file provider is a data source, depends_on can't be
+  # used to guarantee that the tectonic/bootkube modules have generated
+  # all the assets on disk before trying to archive them. Instead, we use their
+  # ID outputs, that are only computed once the assets have actually been
+  # written to disk. We re-hash the IDs (or dedicated module outputs, like module.bootkube.content_hash)
+  # to make the filename shorter, since there is no security nor collision risk anyways.
+  #
+  # Additionally, data sources do not support managing any lifecycle whatsoever,
+  # and therefore, the archive is never deleted. To avoid cluttering the module
+  # folder, we write it in the Terraform managed hidden folder `.terraform`.
+  output_path = "./.terraform/generated_${sha1("${module.etcd_certs.id} ${module.tectonic.id} ${module.bootkube.id} ${module.flannel_vxlan.id} ${module.calico.id} ${module.canal.id}")}.zip"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%tls.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%tls.tf
new file mode 100644
index 0000000..c33902e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%tls.tf
@@ -0,0 +1,40 @@
+module "kube_certs" {
+  source = "../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${var.tectonic_aws_private_endpoints ? module.dns.api_internal_fqdn : module.dns.api_external_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/self-signed"
+
+  base_address    = "${var.tectonic_aws_private_endpoints ? module.dns.ingress_internal_fqdn : module.dns.ingress_external_fqdn}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%variables.tf
new file mode 100644
index 0000000..0dbec64
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%aws%variables.tf
@@ -0,0 +1,347 @@
+variable "tectonic_aws_config_version" {
+  description = <<EOF
+(internal) This declares the version of the AWS configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_aws_profile" {
+  description = <<EOF
+(optional) This declares the AWS credentials profile to use.
+EOF
+
+  type    = "string"
+  default = "default"
+}
+
+variable "tectonic_aws_ssh_key" {
+  type        = "string"
+  description = "Name of an SSH key located within the AWS region. Example: coreos-user."
+}
+
+variable "tectonic_aws_master_ec2_type" {
+  type        = "string"
+  description = "Instance size for the master node(s). Example: `t2.medium`."
+  default     = "t2.medium"
+}
+
+variable "tectonic_aws_worker_ec2_type" {
+  type        = "string"
+  description = "Instance size for the worker node(s). Example: `t2.medium`."
+  default     = "t2.medium"
+}
+
+variable "tectonic_aws_etcd_ec2_type" {
+  type = "string"
+
+  description = <<EOF
+  Instance size for the etcd node(s). Example: `t2.medium`. Read the [etcd recommended hardware](https://coreos.com/etcd/docs/latest/op-guide/hardware.html) guide for best performance
+  EOF
+
+  default = "t2.medium"
+}
+
+variable "tectonic_aws_ec2_ami_override" {
+  type        = "string"
+  description = "(optional) AMI override for all nodes. Example: `ami-foobar123`."
+  default     = ""
+}
+
+variable "tectonic_aws_etcd_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for etcd nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_aws_assets_s3_bucket_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Unique name under which the Amazon S3 bucket will be created. Bucket name must start with a lower case name and is limited to 63 characters.
+The Tectonic Installer uses the bucket to store tectonic assets and kubeconfig.
+If name is not provided the installer will construct the name using "tectonic_cluster_name", current AWS region and "tectonic_base_domain"
+EOF
+}
+
+variable "tectonic_aws_master_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for master nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_aws_worker_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for worker nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_aws_vpc_cidr_block" {
+  type    = "string"
+  default = "10.0.0.0/16"
+
+  description = <<EOF
+Block of IP addresses used by the VPC.
+This should not overlap with any other networks, such as a private datacenter connected via Direct Connect.
+EOF
+}
+
+variable "tectonic_aws_external_vpc_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) ID of an existing VPC to launch nodes into.
+If unset a new VPC is created.
+
+Example: `vpc-123456`
+EOF
+
+  default = ""
+}
+
+variable "tectonic_aws_private_endpoints" {
+  default = true
+
+  description = <<EOF
+(optional) If set to true, create private-facing ingress resources (ELB, A-records).
+If set to false, no private-facing ingress resources will be provisioned and all DNS records will be created in the public Route53 zone.
+EOF
+}
+
+variable "tectonic_aws_public_endpoints" {
+  default = true
+
+  description = <<EOF
+(optional) If set to true, create public-facing ingress resources (ELB, A-records).
+If set to false, no public-facing ingress resources will be created.
+EOF
+}
+
+variable "tectonic_aws_external_private_zone" {
+  default = ""
+
+  description = <<EOF
+(optional) If set, the given Route53 zone ID will be used as the internal (private) zone.
+This zone will be used to create etcd DNS records as well as internal API and internal Ingress records.
+If set, no additional private zone will be created.
+
+Example: `"Z1ILINNUJGTAO1"`
+EOF
+}
+
+variable "tectonic_aws_external_master_subnet_ids" {
+  type = "list"
+
+  description = <<EOF
+(optional) List of subnet IDs within an existing VPC to deploy master nodes into.
+Required to use an existing VPC and the list must match the AZ count.
+
+Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+EOF
+
+  default = []
+}
+
+variable "tectonic_aws_external_worker_subnet_ids" {
+  type = "list"
+
+  description = <<EOF
+(optional) List of subnet IDs within an existing VPC to deploy worker nodes into.
+Required to use an existing VPC and the list must match the AZ count.
+
+Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+EOF
+
+  default = []
+}
+
+variable "tectonic_aws_extra_tags" {
+  type        = "map"
+  description = "(optional) Extra AWS tags to be applied to created resources."
+  default     = {}
+}
+
+variable "tectonic_autoscaling_group_extra_tags" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) Extra AWS tags to be applied to created autoscaling group resources.
+This is a list of maps having the keys `key`, `value` and `propagate_at_launch`.
+
+Example: `[ { key = "foo", value = "bar", propagate_at_launch = true } ]`
+EOF
+}
+
+variable "tectonic_dns_name" {
+  type        = "string"
+  default     = ""
+  description = "(optional) DNS prefix used to construct the console and API server endpoints."
+}
+
+variable "tectonic_aws_etcd_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of etcd nodes."
+}
+
+variable "tectonic_aws_etcd_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of etcd nodes."
+}
+
+variable "tectonic_aws_etcd_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of etcd nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_aws_master_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of master nodes."
+}
+
+variable "tectonic_aws_master_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of master nodes."
+}
+
+variable "tectonic_aws_master_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of master nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_aws_worker_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of worker nodes."
+}
+
+variable "tectonic_aws_worker_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of worker nodes."
+}
+
+variable "tectonic_aws_worker_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of worker nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_aws_master_custom_subnets" {
+  type    = "map"
+  default = {}
+
+  description = <<EOF
+(optional) This configures master availability zones and their corresponding subnet CIDRs directly.
+
+Example:
+`{ eu-west-1a = "10.0.0.0/20", eu-west-1b = "10.0.16.0/20" }`
+EOF
+}
+
+variable "tectonic_aws_worker_custom_subnets" {
+  type    = "map"
+  default = {}
+
+  description = <<EOF
+(optional) This configures worker availability zones and their corresponding subnet CIDRs directly.
+
+Example: `{ eu-west-1a = "10.0.64.0/20", eu-west-1b = "10.0.80.0/20" }`
+EOF
+}
+
+variable "tectonic_aws_region" {
+  type        = "string"
+  default     = "eu-west-1"
+  description = "The target AWS region for the cluster."
+}
+
+variable "tectonic_aws_master_iam_role_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Name of IAM role to use for the instance profiles of master nodes.
+The name is also the last part of a role's ARN.
+
+Example:
+ * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+ * Role Name = tectonic-installer
+EOF
+}
+
+variable "tectonic_aws_worker_iam_role_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Name of IAM role to use for the instance profiles of worker nodes.
+The name is also the last part of a role's ARN.
+
+Example:
+ * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+ * Role Name = tectonic-installer
+EOF
+}
+
+variable "tectonic_aws_etcd_iam_role_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Name of IAM role to use for the instance profiles of etcd nodes.
+The name is also the last part of a role's ARN.
+
+Example:
+ * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+ * Role Name = tectonic-installer
+EOF
+}
+
+variable "tectonic_aws_worker_load_balancers" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) List of ELBs to attach all worker instances to.
+This is useful for exposing NodePort services via load-balancers managed separately from the cluster.
+
+Example:
+ * `["ingress-nginx"]`
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%bootstrap.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%bootstrap.tf
new file mode 100644
index 0000000..29b7d82
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%bootstrap.tf
@@ -0,0 +1,22 @@
+locals {
+  "bootstrapping_host" = "${var.tectonic_azure_private_cluster ?
+    module.vnet.master_private_ip_addresses[0] :
+    module.vnet.api_fqdn}"
+}
+
+module "bootstrapper" {
+  source = "../../modules/bootstrap-ssh"
+
+  _dependencies = [
+    "${module.masters.master_vm_ids}",
+    "${module.etcd.etcd_vm_ids}",
+    "${module.etcd_certs.id}",
+    "${module.bootkube.id}",
+    "${module.tectonic.id}",
+    "${module.flannel_vxlan.id}",
+    "${module.calico.id}",
+    "${module.canal.id}",
+  ]
+
+  bootstrapping_host = "${local.bootstrapping_host}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%main.tf
new file mode 100644
index 0000000..e326fa8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%main.tf
@@ -0,0 +1,279 @@
+provider "azurerm" {
+  version       = "0.3.1"
+  environment   = "${var.tectonic_azure_cloud_environment}"
+  client_secret = "${var.tectonic_azure_client_secret}"
+}
+
+data "azurerm_client_config" "current" {}
+
+module "container_linux" {
+  source = "../../modules/container_linux"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+module "resource_group" {
+  source = "../../modules/azure/resource-group"
+
+  external_rsg_id = "${var.tectonic_azure_external_resource_group}"
+  azure_location  = "${var.tectonic_azure_location}"
+  cluster_name    = "${var.tectonic_cluster_name}"
+  cluster_id      = "${module.tectonic.cluster_id}"
+  extra_tags      = "${var.tectonic_azure_extra_tags}"
+}
+
+module "vnet" {
+  source = "../../modules/azure/vnet"
+
+  location            = "${var.tectonic_azure_location}"
+  resource_group_name = "${module.resource_group.name}"
+  cluster_name        = "${var.tectonic_cluster_name}"
+  cluster_id          = "${module.tectonic.cluster_id}"
+  base_domain         = "${var.tectonic_base_domain}"
+  vnet_cidr_block     = "${var.tectonic_azure_vnet_cidr_block}"
+
+  etcd_count           = "${local.etcd_count}"
+  master_count         = "${var.tectonic_master_count}"
+  worker_count         = "${var.tectonic_worker_count}"
+  etcd_cidr            = "${module.vnet.etcd_cidr}"
+  master_cidr          = "${module.vnet.master_cidr}"
+  worker_cidr          = "${module.vnet.worker_cidr}"
+  ssh_network_internal = "${var.tectonic_azure_ssh_network_internal}"
+  ssh_network_external = "${var.tectonic_azure_ssh_network_external}"
+
+  external_vnet_id          = "${var.tectonic_azure_external_vnet_id}"
+  external_master_subnet_id = "${var.tectonic_azure_external_master_subnet_id}"
+  external_worker_subnet_id = "${var.tectonic_azure_external_worker_subnet_id}"
+  external_nsg_master_id    = "${var.tectonic_azure_external_nsg_master_id}"
+  external_nsg_worker_id    = "${var.tectonic_azure_external_nsg_worker_id}"
+
+  extra_tags = "${var.tectonic_azure_extra_tags}"
+
+  private_cluster = "${var.tectonic_azure_private_cluster}"
+}
+
+module "etcd" {
+  source = "../../modules/azure/etcd"
+
+  base_domain                = "${var.tectonic_base_domain}"
+  cluster_id                 = "${module.tectonic.cluster_id}"
+  cluster_name               = "${var.tectonic_cluster_name}"
+  container_image            = "${var.tectonic_container_images["etcd"]}"
+  container_linux_channel    = "${var.tectonic_container_linux_channel}"
+  container_linux_version    = "${module.container_linux.version}"
+  etcd_count                 = "${local.etcd_count}"
+  extra_tags                 = "${var.tectonic_azure_extra_tags}"
+  fault_domains              = "${var.tectonic_azure_location_fault_domains["${var.tectonic_azure_location}"]}"
+  ign_etcd_crt_id_list       = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list    = "${module.ignition_masters.etcd_dropin_id_list}"
+  ign_ntp_dropin_id          = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id         = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id = "${module.ignition_masters.systemd_default_env_id}"
+  location                   = "${var.tectonic_azure_location}"
+  network_interface_ids      = "${module.vnet.etcd_network_interface_ids}"
+  public_ssh_key             = "${var.tectonic_azure_ssh_key}"
+  resource_group_name        = "${module.resource_group.name}"
+  root_volume_size           = "${var.tectonic_azure_etcd_root_volume_size}"
+  storage_id                 = "${module.resource_group.storage_id}"
+  storage_type               = "${var.tectonic_azure_etcd_storage_type}"
+  tls_enabled                = "${var.tectonic_etcd_tls_enabled}"
+  versions                   = "${var.tectonic_versions}"
+  vm_size                    = "${var.tectonic_azure_etcd_vm_size}"
+}
+
+# Workaround for https://github.com/hashicorp/terraform/issues/4084
+data "null_data_source" "cloud_provider" {
+  inputs = {
+    "aadClientId"                = "${data.azurerm_client_config.current.client_id}"
+    "aadClientSecret"            = "${var.tectonic_azure_client_secret}"
+    "cloud"                      = "${var.tectonic_azure_cloud_environment}"
+    "location"                   = "${var.tectonic_azure_location}"
+    "primaryAvailabilitySetName" = "${module.workers.availability_set_name}"
+    "resourceGroup"              = "${module.resource_group.name}"
+    "securityGroupName"          = "${module.vnet.worker_nsg_name}"
+    "subnetName"                 = "${module.vnet.worker_subnet_name}"
+    "subscriptionId"             = "${data.azurerm_client_config.current.subscription_id}"
+    "tenantId"                   = "${data.azurerm_client_config.current.tenant_id}"
+    "vnetName"                   = "${module.vnet.vnet_id}"
+    "vnetResourceGroup"          = "${module.vnet.vnet_resource_group}"
+  }
+}
+
+data "template_file" "etcd_advertise_name_list" {
+  count    = "${local.etcd_count}"
+  template = "$$$$$$$${COREOS_AZURE_IPV4_DYNAMIC}"
+}
+
+module "ignition_masters" {
+  source = "../../modules/ignition"
+
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider            = "azure"
+  cloud_provider_config     = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_advertise_name_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${local.etcd_count}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "masters" {
+  source = "../../modules/azure/master-as"
+
+  cloud_provider_config                = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  extra_tags                           = "${var.tectonic_azure_extra_tags}"
+  fault_domains                        = "${var.tectonic_azure_location_fault_domains["${var.tectonic_azure_location}"]}"
+  ign_azure_udev_rules_id              = "${module.ignition_masters.azure_udev_rules_id}"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_masters.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_masters.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_masters.systemd_default_env_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_tx_off_service_id                = "${module.ignition_masters.tx_off_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+  location                             = "${var.tectonic_azure_location}"
+  master_count                         = "${var.tectonic_master_count}"
+  network_interface_ids                = "${module.vnet.master_network_interface_ids}"
+  public_ssh_key                       = "${var.tectonic_azure_ssh_key}"
+  resource_group_name                  = "${module.resource_group.name}"
+  root_volume_size                     = "${var.tectonic_azure_master_root_volume_size}"
+  storage_id                           = "${module.resource_group.storage_id}"
+  storage_type                         = "${var.tectonic_azure_master_storage_type}"
+  vm_size                              = "${var.tectonic_azure_master_vm_size}"
+}
+
+module "ignition_workers" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider          = "azure"
+  cloud_provider_config   = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "workers" {
+  source = "../../modules/azure/worker-as"
+
+  cloud_provider_config                = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  extra_tags                           = "${var.tectonic_azure_extra_tags}"
+  fault_domains                        = "${var.tectonic_azure_location_fault_domains["${var.tectonic_azure_location}"]}"
+  ign_azure_udev_rules_id              = "${module.ignition_workers.azure_udev_rules_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_workers.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_workers.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_workers.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_tx_off_service_id                = "${module.ignition_workers.tx_off_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+  location                             = "${var.tectonic_azure_location}"
+  network_interface_ids                = "${module.vnet.worker_network_interface_ids}"
+  public_ssh_key                       = "${var.tectonic_azure_ssh_key}"
+  resource_group_name                  = "${module.resource_group.name}"
+  root_volume_size                     = "${var.tectonic_azure_worker_root_volume_size}"
+  storage_id                           = "${module.resource_group.storage_id}"
+  storage_type                         = "${var.tectonic_azure_worker_storage_type}"
+  tectonic_kube_dns_service_ip         = "${module.bootkube.kube_dns_service_ip}"
+  vm_size                              = "${var.tectonic_azure_worker_vm_size}"
+  worker_count                         = "${var.tectonic_worker_count}"
+}
+
+module "dns" {
+  source = "../../modules/dns/azure"
+
+  etcd_count   = "${local.etcd_count}"
+  master_count = "${var.tectonic_master_count}"
+  worker_count = "${var.tectonic_worker_count}"
+
+  etcd_ip_addresses    = "${module.vnet.etcd_endpoints}"
+  master_ip_addresses  = "${module.vnet.master_private_ip_addresses}"
+  worker_ip_addresses  = "${module.vnet.worker_private_ip_addresses}"
+  api_ip_addresses     = "${module.vnet.api_ip_addresses}"
+  console_ip_addresses = "${module.vnet.console_ip_addresses}"
+
+  base_domain  = "${var.tectonic_base_domain}"
+  cluster_name = "${var.tectonic_cluster_name}"
+  cluster_id   = "${module.tectonic.cluster_id}"
+
+  location             = "${var.tectonic_azure_location}"
+  external_dns_zone_id = "${var.tectonic_azure_external_dns_zone_id}"
+
+  extra_tags = "${var.tectonic_azure_extra_tags}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%tectonic.tf
new file mode 100644
index 0000000..67a1051
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%tectonic.tf
@@ -0,0 +1,128 @@
+locals {
+  etcd_count = "${var.tectonic_self_hosted_etcd != "" ? 0 : max(var.tectonic_etcd_count, 1)}"
+}
+
+data "template_file" "etcd_hostname_list" {
+  count    = "${local.etcd_count}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}${var.tectonic_base_domain == "" ? "" : ".${var.tectonic_base_domain}"}"
+}
+
+module "bootkube" {
+  source = "../../modules/bootkube"
+
+  cloud_provider        = "azure"
+  cloud_provider_config = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${module.vnet.api_fqdn}:443"
+  oidc_issuer_url    = "https://${module.vnet.ingress_fqdn}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${data.template_file.etcd_hostname_list.*.rendered}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+
+  master_count = "${var.tectonic_master_count}"
+
+  cloud_config_path = "/etc/kubernetes/cloud"
+}
+
+module "tectonic" {
+  source   = "../../modules/tectonic"
+  platform = "azure"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${module.vnet.ingress_fqdn}"
+  kube_apiserver_url = "https://${module.vnet.api_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "NodePort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../modules/net/calico"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%tls.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%tls.tf
new file mode 100644
index 0000000..5855480
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%tls.tf
@@ -0,0 +1,40 @@
+module "kube_certs" {
+  source = "../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${module.vnet.api_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/self-signed"
+
+  base_address    = "${module.vnet.ingress_fqdn}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%variables.tf
new file mode 100644
index 0000000..cbde73c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%azure%variables.tf
@@ -0,0 +1,314 @@
+variable "tectonic_azure_config_version" {
+  description = <<EOF
+(internal) This declares the version of the Azure configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.1"
+}
+
+variable "tectonic_azure_ssh_network_internal" {
+  type = "string"
+
+  description = <<EOF
+(optional) Network (internal) to allow SSH access from. Maps to `source_address_prefix` in Azure.
+Defaults to `VirtualNetwork`. Should be internal to Azure environment.
+Allowed values: [network CIDR (i.e., 10.0.0.0/16) \| `VirtualNetwork` \| `Internet` \| `*` ]
+EOF
+
+  default = "VirtualNetwork"
+}
+
+variable "tectonic_azure_ssh_network_external" {
+  type = "string"
+
+  description = <<EOF
+(optional) Network (external) to allow SSH access from. Maps to `source_address_prefix` in Azure.
+Defaults to `*`. Can be external to Azure environment.
+Allowed values: [network CIDR (i.e., 10.0.0.0/16) \| `VirtualNetwork` \| `Internet` \| `*` ]
+EOF
+
+  default = "*"
+}
+
+variable "tectonic_azure_location" {
+  type = "string"
+
+  description = <<EOF
+(internal) An Azure location where the cluster will be built.
+Use the location name as returned in the *Name* column by `az account list-locations` CLI command.
+Lowercase string with no spaces between words. Example: southcentralus
+EOF
+}
+
+variable "tectonic_azure_ssh_key" {
+  type        = "string"
+  description = "(required) Path to an SSH public key file to be provisioned as the SSH key for the 'core' user."
+}
+
+variable "tectonic_azure_master_vm_size" {
+  type        = "string"
+  description = "(optional) Instance size for the master node(s). Example: Standard_DS2_v2."
+  default     = "Standard_DS2_v2"
+}
+
+variable "tectonic_azure_worker_vm_size" {
+  type        = "string"
+  description = "(optional) Instance size for the worker node(s). Example: Standard_DS2_v2."
+  default     = "Standard_DS2_v2"
+}
+
+variable "tectonic_azure_etcd_vm_size" {
+  type        = "string"
+  description = "(optional) Instance size for the etcd node(s). Example: Standard_DS2_v2."
+  default     = "Standard_DS2_v2"
+}
+
+variable "tectonic_azure_master_storage_type" {
+  type = "string"
+
+  description = <<EOF
+(optional) Storage account type for the master node(s). Example: Premium_LRS.
+Using Premium storage is constrained by the of instance specified in 'tectonic_azure_master_vm_size'.
+See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+EOF
+
+  default = "Premium_LRS"
+}
+
+variable "tectonic_azure_master_root_volume_size" {
+  type        = "string"
+  default     = "32"
+  description = "The size of the volume in gigabytes for the root block device of master nodes."
+}
+
+variable "tectonic_azure_worker_storage_type" {
+  type = "string"
+
+  description = <<EOF
+(optional) Storage account type for the worker node(s). Example: Premium_LRS.
+Using Premium storage is constrained by the of instance specified in 'tectonic_azure_worker_vm_size'.
+See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+EOF
+
+  default = "Premium_LRS"
+}
+
+variable "tectonic_azure_worker_root_volume_size" {
+  type        = "string"
+  default     = "32"
+  description = "The size of the volume in gigabytes for the root block device of worker nodes."
+}
+
+variable "tectonic_azure_etcd_storage_type" {
+  type = "string"
+
+  description = <<EOF
+(optional) Storage account type for the etcd node(s). Example: Premium_LRS.
+Using Premium storage is constrained by the of instance specified in 'tectonic_azure_etcd_vm_size'.
+See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+EOF
+
+  default = "Premium_LRS"
+}
+
+variable "tectonic_azure_etcd_root_volume_size" {
+  type        = "string"
+  default     = "32"
+  description = "The size of the volume in gigabytes for the root block device of etcd nodes."
+}
+
+variable "tectonic_azure_vnet_cidr_block" {
+  type    = "string"
+  default = "10.0.0.0/16"
+
+  description = <<EOF
+(optional) Range of IP addresses assigned to the Virtual Network in which the cluster nodes run.
+This should not overlap with any other networks, such as the Kubernetes cluster (pod) range,
+service range or a private datacenter connected via ExpressRoute."
+EOF
+}
+
+variable "tectonic_azure_external_vnet_id" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Resource ID of an existing Virtual Network to launch nodes into.
+Leave blank to create a new Virtual Network.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: /subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/my-k8s-vnet
+EOF
+}
+
+variable "tectonic_azure_external_master_subnet_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) Subnet ID within an existing VNet to deploy master nodes into.
+Required to use an existing VNet.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/test-pre-vnet/subnets/my-k8s-subnet
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_worker_subnet_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) Subnet ID within an existing VNet to deploy worker nodes into.
+Required to use an existing VNet.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/test-pre-vnet/subnets/my-k8s-subnet
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_resource_group" {
+  type = "string"
+
+  description = <<EOF
+(optional) Name of an external resource group to place created resources in.
+Leave blank to have a new one created.
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_nsg_master_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) The ID of the external Network Security Group used for masters.
+Leave blank to have a new one created.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/networkSecurityGroups/my-master-nsg
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_nsg_worker_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) The ID of the external Network Security Group used for workers.
+Leave blank to have a new one created.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/networkSecurityGroups/my-worker-nsg
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_dns_zone_id" {
+  description = <<EOF
+(optional) The ID of the external Azure DNS zone used for nodes & endpoints FQDNs.
+Required when 'tectonic_base_domain' is set.
+This must be a pre-existing, properly configured Azure DNS zone that the Azure service principal running the Tectonic installer has permission to perform operations on.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/dnszones/my-k8s-dns
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_cloud_environment" {
+  type = "string"
+
+  description = <<EOF
+(optional) Azure cloud environment to use. See
+https://github.com/Azure/go-autorest/blob/ec5f4903f77ed9927ac95b19ab8e44ada64c1356/autorest/azure/environments.go#L13
+for available environments.
+EOF
+
+  default = "AZUREPUBLICCLOUD"
+}
+
+variable "tectonic_azure_client_secret" {
+  type = "string"
+
+  description = "(internal) The client secret to use."
+}
+
+variable "tectonic_azure_extra_tags" {
+  type = "map"
+
+  description = <<EOF
+(optional) A map of extra Azure tags to be applied to created resources.
+NOTE: Tags MUST NOT contain reserved characters '<,>,%,&,\,?,/' or control characters.
+EOF
+
+  default = {}
+}
+
+variable "tectonic_azure_private_cluster" {
+  description = <<EOF
+(optional) Setting this to true will result in NO public facing endpoints being created. All traffic is contained within the VNET.
+A VNET with an already configured and active VPN connection is required and needs to be supplied via 'tectonic_azure_external_vnet_id'.
+DNS is currently required, either the Azure managed one or configured via the generic DNS module.
+EOF
+
+  default = false
+}
+
+variable "tectonic_azure_location_fault_domains" {
+  description = <<EOF
+(internal) This mapping is for internal use only. It should not be overriden by users.
+It holds the correspondent number of fault domains for each location,
+because Azure doesn't provide an API call to query this data per location.
+The latest version of this data is always available at this location:
+https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability
+EOF
+
+  type = "map"
+
+  default = {
+    eastus             = 3
+    eastus2            = 3
+    westus             = 3
+    westus2            = 2
+    centralus          = 3
+    northcentralus     = 3
+    southcentralus     = 3
+    westcentralus      = 2
+    canadacentral      = 2
+    canadaeast         = 2
+    northeurope        = 3
+    westeurope         = 3
+    uksouth            = 2
+    ukwest             = 2
+    eastasia           = 2
+    southeastasia      = 2
+    japaneast          = 2
+    japanwest          = 2
+    southindia         = 2
+    centralindia       = 2
+    westindia          = 2
+    koreacentral       = 2
+    koreasouth         = 2
+    australiaeast      = 2
+    australiasoutheast = 2
+    brazilsouth        = 2
+    usgovvirginia      = 2
+    usgovtexas         = 2
+    usgovarizona       = 2
+    usdodcentral       = 2
+    usdodeast          = 2
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%assets.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%assets.tf
new file mode 100644
index 0000000..c05618b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%assets.tf
@@ -0,0 +1,37 @@
+data "template_file" "do_puller" {
+  template = "${file("${path.module}/resources/do-puller.sh")}"
+
+  vars {
+    do_access_key_id     = "${var.tectonic_do_spaces_access_key_id}"
+    do_secret_access_key = "${var.tectonic_do_spaces_secret_access_key}"
+    do_region            = "${var.tectonic_do_spaces_region}"
+  }
+}
+
+data "ignition_file" "do_puller" {
+  filesystem = "root"
+  path       = "/opt/do-puller.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.do_puller.rendered}"
+  }
+}
+
+data "template_file" "resolved_conf" {
+  vars {
+    domain = "${var.tectonic_base_domain}"
+  }
+
+  template = "${file("${path.module}/resources/etc/resolved.conf")}"
+}
+
+data "ignition_file" "resolved_conf" {
+  filesystem = "root"
+  path       = "/etc/systemd/resolved.conf"
+  mode       = 0644
+
+  content {
+    content = "${data.template_file.resolved_conf.rendered}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%main.tf
new file mode 100644
index 0000000..6a1e0b0
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%main.tf
@@ -0,0 +1,173 @@
+provider "digitalocean" {
+  token   = "${var.tectonic_do_token}"
+  version = "~> 0.1"
+}
+
+module "container_linux" {
+  source = "../../modules/container_linux"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+module "etcd" {
+  source = "../../modules/digitalocean/etcd"
+
+  base_domain                = "${var.tectonic_base_domain}"
+  cluster_name               = "${var.tectonic_cluster_name}"
+  external_endpoints         = "${compact(var.tectonic_etcd_servers)}"
+  ign_etcd_crt_id_list       = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list    = "${module.ignition_masters.etcd_dropin_id_list}"
+  ign_ntp_dropin_id          = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id         = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id = "${module.ignition_masters.systemd_default_env_id}"
+  droplet_count              = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  ssh_keys                   = "${var.tectonic_do_ssh_keys}"
+  droplet_size               = "${var.tectonic_do_etcd_droplet_size}"
+  droplet_region             = "${var.tectonic_do_droplet_region}"
+  droplet_image              = "${var.tectonic_do_droplet_image}"
+  extra_tags                 = "${var.tectonic_do_extra_tags}"
+  droplet_region             = "${var.tectonic_do_droplet_region}"
+  droplet_image              = "${var.tectonic_do_droplet_image}"
+  tls_enabled                = "${var.tectonic_etcd_tls_enabled}"
+}
+
+module "ignition_masters" {
+  source = "../../modules/ignition"
+
+  assets_location           = "${local.do_spaces_bucket}/assets.zip"
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider            = ""
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "masters" {
+  source = "../../modules/digitalocean/master"
+
+  do_token                             = "${var.tectonic_do_token}"
+  assets_id                            = "${data.archive_file.assets.id}"
+  kubeconfig_id                        = "${null_resource.kubeconfig.id}"
+  assets_path                          = "${data.archive_file.assets.output_path}"
+  spaces_bucket                        = "${local.do_spaces_bucket}"
+  droplet_size                         = "${var.tectonic_do_master_droplet_size}"
+  droplet_region                       = "${var.tectonic_do_droplet_region}"
+  droplet_image                        = "${var.tectonic_do_droplet_image}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  ssh_keys                             = "${var.tectonic_do_ssh_keys}"
+  extra_tags                           = "${var.tectonic_do_extra_tags}"
+  base_domain                          = "${var.tectonic_base_domain}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_images                     = "${var.tectonic_container_images}"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_init_assets_service_id           = "${module.ignition_masters.init_assets_service_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_masters.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_masters.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_masters.profile_env_id}"
+  ign_rm_assets_path_unit_id           = "${module.ignition_masters.rm_assets_path_unit_id}"
+  ign_rm_assets_service_id             = "${module.ignition_masters.rm_assets_service_id}"
+  ign_systemd_default_env_id           = "${module.ignition_masters.systemd_default_env_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  do_pusher_id                         = "${data.ignition_file.do_pusher.id}"
+  ign_do_puller_id                     = "${data.ignition_file.do_puller.id}"
+  ign_resolved_conf_id                 = "${data.ignition_file.resolved_conf.id}"
+}
+
+module "ignition_workers" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider          = ""
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubeconfig_fetch_cmd    = "/opt/do-puller.sh ${local.do_spaces_bucket}/kubeconfig /etc/kubernetes/kubeconfig"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "workers" {
+  source = "../../modules/digitalocean/worker"
+
+  droplet_count                        = "${var.tectonic_worker_count}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  droplet_size                         = "${var.tectonic_do_worker_droplet_size}"
+  droplet_region                       = "${var.tectonic_do_droplet_region}"
+  droplet_image                        = "${var.tectonic_do_droplet_image}"
+  ssh_keys                             = "${var.tectonic_do_ssh_keys}"
+  extra_tags                           = "${var.tectonic_do_extra_tags}"
+  base_domain                          = "${var.tectonic_base_domain}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_workers.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_workers.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_workers.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  ign_do_puller_id                     = "${data.ignition_file.do_puller.id}"
+  ign_resolved_conf_id                 = "${data.ignition_file.resolved_conf.id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%spaces.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%spaces.tf
new file mode 100644
index 0000000..8c38cc2
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%spaces.tf
@@ -0,0 +1,39 @@
+locals {
+  do_spaces_bucket = "${format("%s%s-%s", "a", var.tectonic_cluster_name, md5(format("%s-%s", var.tectonic_do_droplet_region, var.tectonic_base_domain)))}"
+}
+
+data "template_file" "do_pusher" {
+  template = "${file("${path.module}/resources/do-pusher.sh")}"
+
+  vars {
+    do_access_key_id     = "${var.tectonic_do_spaces_access_key_id}"
+    do_secret_access_key = "${var.tectonic_do_spaces_secret_access_key}"
+    do_region            = "${var.tectonic_do_spaces_region}"
+  }
+}
+
+resource "local_file" "do_pusher" {
+  content  = "${data.template_file.do_pusher.rendered}"
+  filename = "./generated/bin/do-pusher.sh"
+}
+
+data "ignition_file" "do_pusher" {
+  filesystem = "root"
+  path       = "/opt/do-pusher.sh"
+  mode       = 0755
+
+  content {
+    content = "${data.template_file.do_pusher.rendered}"
+  }
+}
+
+resource "null_resource" "kubeconfig" {
+  # Changes to kubeconfig requires re-provisioning
+  triggers {
+    assets = "${module.bootkube.kubeconfig}"
+  }
+
+  provisioner "local-exec" {
+    command = "./generated/bin/do-pusher.sh ./generated/auth/kubeconfig ${local.do_spaces_bucket}/kubeconfig"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%tectonic.tf
new file mode 100644
index 0000000..8a54e66
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%tectonic.tf
@@ -0,0 +1,122 @@
+data "template_file" "etcd_hostname_list" {
+  count    = "${var.tectonic_etcd_count > 0 ? var.tectonic_etcd_count : 3}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}.${var.tectonic_base_domain}"
+}
+
+module "bootkube" {
+  source = "../../modules/bootkube"
+
+  cloud_provider     = ""
+  cluster_name       = "${var.tectonic_cluster_name}"
+  kube_apiserver_url = "https://${module.masters.cluster_fqdn}:443"
+  oidc_issuer_url    = "https://${module.masters.console_fqdn}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images          = "${var.tectonic_container_images}"
+  versions                  = "${var.tectonic_versions}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+  service_cidr              = "${var.tectonic_service_cidr}"
+  cluster_cidr              = "${var.tectonic_cluster_cidr}"
+  advertise_address         = "0.0.0.0"
+  anonymous_auth            = "false"
+  oidc_username_claim       = "email"
+  oidc_groups_claim         = "groups"
+  oidc_client_id            = "tectonic-kubectl"
+  oidc_ca_cert              = "${module.ingress_certs.ca_cert_pem}"
+  apiserver_cert_pem        = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem         = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem      = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem        = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem      = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem          = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem           = "${module.kube_certs.kubelet_key_pem}"
+  etcd_endpoints            = "${module.etcd.endpoints}"
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  master_count              = 1
+  cloud_config_path         = ""
+}
+
+module "tectonic" {
+  source = "../../modules/tectonic"
+
+  platform           = "digitalocean"
+  cluster_name       = "${var.tectonic_cluster_name}"
+  base_address       = "${module.masters.console_fqdn}"
+  kube_apiserver_url = "https://${module.masters.cluster_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images         = "${var.tectonic_container_images}"
+  container_base_images    = "${var.tectonic_container_base_images}"
+  versions                 = "${var.tectonic_versions}"
+  license_path             = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path         = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+  admin_email              = "${var.tectonic_admin_email}"
+  admin_password           = "${var.tectonic_admin_password}"
+  update_channel           = "${var.tectonic_update_channel}"
+  update_app_id            = "${var.tectonic_update_app_id}"
+  update_server            = "${var.tectonic_update_server}"
+  ca_generated             = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert                  = "${module.kube_certs.ca_cert_pem}"
+  ingress_ca_cert_pem      = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem         = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem          = "${module.ingress_certs.key_pem}"
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+  console_client_id        = "tectonic-console"
+  kubectl_client_id        = "tectonic-kubectl"
+  ingress_kind             = "NodePort"
+  self_hosted_etcd         = "${var.tectonic_self_hosted_etcd}"
+  master_count             = 1
+  stats_url                = "${var.tectonic_stats_url}"
+  image_re                 = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../modules/net/calico"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
+
+data "archive_file" "assets" {
+  type       = "zip"
+  source_dir = "./generated/"
+
+  # Because the archive_file provider is a data source, depends_on can't be
+  # used to guarantee that the tectonic/bootkube modules have generated
+  # all the assets on disk before trying to archive them. Instead, we use their
+  # ID outputs, that are only computed once the assets have actually been
+  # written to disk. We re-hash the IDs (or dedicated module outputs, like module.bootkube.content_hash)
+  # to make the filename shorter, since there is no security nor collision risk anyways.
+  #
+  # Additionally, data sources do not support managing any lifecycle whatsoever,
+  # and therefore, the archive is never deleted. To avoid cluttering the module
+  # folder, we write it in the Terraform managed hidden folder `.terraform`.
+  output_path = "./.terraform/generated_${sha1("${module.etcd_certs.id} ${module.tectonic.id} ${module.bootkube.id} ${module.flannel_vxlan.id} ${module.calico.id} ${module.canal.id}")}.zip"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%tls.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%tls.tf
new file mode 100644
index 0000000..86c8adf
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%tls.tf
@@ -0,0 +1,40 @@
+module "kube_certs" {
+  source = "../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${module.masters.cluster_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/self-signed"
+
+  base_address    = "${module.masters.console_fqdn}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%variables.tf
new file mode 100644
index 0000000..9d1f026
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%digitalocean%variables.tf
@@ -0,0 +1,69 @@
+variable "tectonic_do_config_version" {
+  description = <<EOF
+(internal) This declares the version of the DigitalOcean configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_do_token" {
+  type        = "string"
+  description = "DigitalOcean API token."
+}
+
+variable "tectonic_do_ssh_keys" {
+  type        = "list"
+  description = "A list of DigitalOcean SSH IDs to enable."
+}
+
+variable "tectonic_do_droplet_image" {
+  type        = "string"
+  description = "Droplet image."
+  default     = "coreos-stable"
+}
+
+variable "tectonic_do_master_droplet_size" {
+  type        = "string"
+  description = "Instance size for the master node(s). Example: `512mb`."
+  default     = "1gb"
+}
+
+variable "tectonic_do_worker_droplet_size" {
+  type        = "string"
+  description = "Instance size for the worker node(s). Example: `512mb`."
+  default     = "512mb"
+}
+
+variable "tectonic_do_droplet_region" {
+  type        = "string"
+  default     = "nyc1"
+  description = "The droplet region."
+}
+
+variable "tectonic_do_etcd_droplet_size" {
+  type        = "string"
+  description = "Droplet size for the etcd node(s). Example: `512mb`."
+  default     = "512mb"
+}
+
+variable "tectonic_do_extra_tags" {
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_do_spaces_access_key_id" {
+  type        = "string"
+  description = "Spaces access key ID"
+}
+
+variable "tectonic_do_spaces_secret_access_key" {
+  type        = "string"
+  description = "Spaces secret access key"
+}
+
+variable "tectonic_do_spaces_region" {
+  type        = "string"
+  default     = "nyc3"
+  description = "Spaces region"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%gcs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%gcs.tf
new file mode 100644
index 0000000..ebed2de
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%gcs.tf
@@ -0,0 +1,18 @@
+resource "google_storage_bucket" "assets_storage_bucket" {
+  name          = "${var.tectonic_cluster_name}-${var.tectonic_gcp_region}-${var.tectonic_gcp_ext_google_managedzone_name}"
+  location      = "${upper(var.tectonic_gcp_region)}"
+  storage_class = "REGIONAL"
+  force_destroy = true
+}
+
+resource "google_storage_bucket_acl" "private_acl" {
+  bucket         = "${google_storage_bucket.assets_storage_bucket.name}"
+  predefined_acl = "projectprivate"
+}
+
+# Bootkube / Tectonic assets
+resource "google_storage_bucket_object" "tectonic-assets" {
+  name   = "assets.zip"
+  bucket = "${google_storage_bucket.assets_storage_bucket.name}"
+  source = "${data.archive_file.assets.output_path}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%main.tf
new file mode 100644
index 0000000..6a9f4b5
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%main.tf
@@ -0,0 +1,228 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+provider "google" {
+  region  = "${var.tectonic_gcp_region}"
+  version = "1.2.0"
+}
+
+module "container_linux" {
+  source = "../../modules/container_linux"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+module "network" {
+  source = "../../modules/gcp/network"
+
+  base_domain           = "${var.tectonic_base_domain}"
+  cluster_name          = "${var.tectonic_cluster_name}"
+  gcp_region            = "${var.tectonic_gcp_region}"
+  managed_zone_name     = "${var.tectonic_gcp_ext_google_managedzone_name}"
+  master_instance_group = "${module.masters.instance_group}"
+  master_ip_cidr_range  = "10.10.0.0/16"
+  worker_ip_cidr_range  = "10.11.0.0/16"
+}
+
+data "google_compute_zones" "available" {}
+
+module "etcd" {
+  source = "../../modules/gcp/etcd"
+
+  base_domain                = "${var.tectonic_base_domain}"
+  cl_channel                 = "${var.tectonic_container_linux_channel}"
+  cluster_name               = "${var.tectonic_cluster_name}"
+  container_image            = "${var.tectonic_container_images["etcd"]}"
+  disk_size                  = "${var.tectonic_gcp_etcd_disk_size}"
+  disk_type                  = "${var.tectonic_gcp_etcd_disktype}"
+  external_endpoints         = ["${compact(var.tectonic_etcd_servers)}"]
+  ign_etcd_crt_id_list       = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list    = "${module.ignition_masters.etcd_dropin_id_list}"
+  ign_ntp_dropin_id          = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id         = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id = "${module.ignition_masters.systemd_default_env_id}"
+  instance_count             = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count > 0 ? var.tectonic_etcd_count : length(data.google_compute_zones.available.names) == 5 ? 5 : 3}"
+  machine_type               = "${var.tectonic_gcp_etcd_gce_type}"
+  managed_zone_name          = "${var.tectonic_gcp_ext_google_managedzone_name}"
+  master_subnetwork_name     = "${module.network.master_subnetwork_name}"
+  public_ssh_key             = "${var.tectonic_gcp_ssh_key}"
+  tls_enabled                = "${var.tectonic_etcd_tls_enabled}"
+  zone_list                  = "${data.google_compute_zones.available.names}"
+}
+
+module "masters" {
+  source = "../../modules/gcp/master-igm"
+
+  cl_channel       = "${var.tectonic_container_linux_channel}"
+  cluster_name     = "${var.tectonic_cluster_name}"
+  container_images = "${var.tectonic_container_images}"
+  disk_size        = "${var.tectonic_gcp_master_disk_size}"
+  disk_type        = "${var.tectonic_gcp_master_disktype}"
+
+  region             = "${var.tectonic_gcp_region}"
+  instance_count     = "${var.tectonic_master_count}"
+  machine_type       = "${var.tectonic_gcp_master_gce_type}"
+  cluster_name       = "${var.tectonic_cluster_name}"
+  public_ssh_key     = "${var.tectonic_gcp_ssh_key}"
+  kubeconfig_content = "${module.bootkube.kubeconfig}"
+
+  master_subnetwork_name      = "${module.network.master_subnetwork_name}"
+  master_targetpool_self_link = "${module.network.master_targetpool_self_link}"
+
+  assets_gcs_location               = "${google_storage_bucket.assets_storage_bucket.name}/${google_storage_bucket_object.tectonic-assets.name}"
+  ign_init_assets_service_id        = "${module.ignition_masters.init_assets_service_id}"
+  ign_gcs_puller_id                 = "${module.ignition_masters.gcs_puller_id}"
+  ign_k8s_node_bootstrap_service_id = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_masters.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_masters.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_masters.systemd_default_env_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  image_re                             = "${var.tectonic_image_re}"
+  instance_count                       = "${var.tectonic_master_count}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+  machine_type                         = "${var.tectonic_gcp_master_gce_type}"
+  master_subnetwork_name               = "${module.network.master_subnetwork_name}"
+  master_targetpool_self_link          = "${module.network.master_targetpool_self_link}"
+  public_ssh_key                       = "${var.tectonic_gcp_ssh_key}"
+  region                               = "${var.tectonic_gcp_region}"
+}
+
+module "workers" {
+  source = "../../modules/gcp/worker-igm"
+
+  cl_channel   = "${var.tectonic_container_linux_channel}"
+  cluster_name = "${var.tectonic_cluster_name}"
+  disk_size    = "${var.tectonic_gcp_worker_disk_size}"
+  disk_type    = "${var.tectonic_gcp_worker_disktype}"
+
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_workers.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_workers.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_workers.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  instance_count                       = "${var.tectonic_worker_count}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+  machine_type                         = "${var.tectonic_gcp_worker_gce_type}"
+  public_ssh_key                       = "${var.tectonic_gcp_ssh_key}"
+  region                               = "${var.tectonic_gcp_region}"
+  worker_subnetwork_name               = "${module.network.worker_subnetwork_name}"
+  worker_targetpool_self_link          = "${module.network.worker_targetpool_self_link}"
+}
+
+module "ignition_masters" {
+  source = "../../modules/ignition"
+
+  assets_location           = "${google_storage_bucket.assets_storage_bucket.name}/${google_storage_bucket_object.tectonic-assets.name}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "ignition_workers" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  cluster_name            = "${var.tectonic_cluster_name}"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "dns" {
+  source = "../../modules/dns/gcp"
+
+  base_domain         = "${var.tectonic_base_domain}"
+  cluster_name        = "${var.tectonic_cluster_name}"
+  etcd_dns_enabled    = "${var.tectonic_self_hosted_etcd == "" && length(compact(var.tectonic_etcd_servers)) == 0}"
+  etcd_instance_count = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count > 0 ? var.tectonic_etcd_count : length(data.google_compute_zones.available.names) == 5 ? 5 : 3}"
+  etcd_ip_addresses   = "${module.etcd.etcd_ip_addresses}"
+  external_endpoints  = ["${compact(var.tectonic_etcd_servers)}"]
+  managed_zone_name   = "${var.tectonic_gcp_ext_google_managedzone_name}"
+  tectonic_ingress_ip = "${module.network.ingress_ip}"
+  tectonic_masters_ip = "${module.network.master_ip}"
+  tls_enabled         = "${var.tectonic_etcd_tls_enabled}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%tectonic.tf
new file mode 100644
index 0000000..54b4773
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%tectonic.tf
@@ -0,0 +1,151 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+data "template_file" "etcd_hostname_list" {
+  count    = "${var.tectonic_self_hosted_etcd != "" ? 0 : max(var.tectonic_etcd_count, 1)}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}.${var.tectonic_base_domain}"
+}
+
+module "bootkube" {
+  source         = "../../modules/bootkube"
+  cloud_provider = ""
+  cluster_name   = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${module.dns.kube_apiserver_fqdn}:443"
+  oidc_issuer_url    = "https://${module.dns.kube_ingress_fqdn}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_groups_claim   = "groups"
+  oidc_username_claim = "email"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  cloud_config_path         = ""
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${data.template_file.etcd_hostname_list.*.rendered}"
+  master_count              = "${var.tectonic_master_count}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+}
+
+module "tectonic" {
+  source   = "../../modules/tectonic"
+  platform = "google"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${module.dns.kube_ingress_fqdn}"
+  kube_apiserver_url = "https://${module.dns.kube_apiserver_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "HostPort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../modules/net/calico"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
+
+data "archive_file" "assets" {
+  type       = "zip"
+  source_dir = "${path.cwd}/generated/"
+
+  # Because the archive_file provider is a data source, depends_on can't be
+  # used to guarantee that the tectonic/bootkube modules have generated
+  # all the assets on disk before trying to archive them. Instead, we use their
+  # ID outputs, that are only computed once the assets have actually been
+  # written to disk. We re-hash the IDs to make the filename shorter, since
+  # there is no security nor collision risk anyways.
+  #
+  # Additionally, data sources do not support managing any lifecycle whatsoever,
+  # and therefore, the archive is never deleted. To avoid cluttering the module
+  # folder, we write it in the TerraForm managed hidden folder `.terraform`.
+  output_path = "./.terraform/generated_${sha1("${module.etcd_certs.id} ${module.tectonic.id} ${module.bootkube.id} ${module.flannel_vxlan.id} ${module.calico.id} ${module.canal.id}")}.zip"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%tls.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%tls.tf
new file mode 100644
index 0000000..60502fb
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%tls.tf
@@ -0,0 +1,40 @@
+module "kube_certs" {
+  source = "../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${module.dns.kube_apiserver_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/self-signed"
+
+  base_address    = "${module.dns.kube_ingress_fqdn}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%variables.tf
new file mode 100644
index 0000000..ecc537d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%gcp%variables.tf
@@ -0,0 +1,94 @@
+/*
+Copyright 2017 Google Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+variable "tectonic_gcp_config_version" {
+  description = <<EOF
+This declares the version of the GCP configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_gcp_ext_google_managedzone_name" {
+  # not to be confused with tectonic_base_domain (the DNS compliant domain name)
+  type        = "string"
+  description = "GCP resource name of Cloud DNS ManagedZone - created outside of Tectonic"
+}
+
+variable "tectonic_gcp_region" {
+  type        = "string"
+  description = "The GCP region to use. Some regions only have 2 zones."
+}
+
+variable "tectonic_gcp_master_gce_type" {
+  type        = "string"
+  description = "Instance size for the master node(s). Example: `n1-standard-2`."
+  default     = "n1-standard-2"
+}
+
+variable "tectonic_gcp_master_disktype" {
+  type        = "string"
+  default     = "pd-standard"
+  description = "The type of disk (pd-standard or pd-ssd) for the master nodes."
+}
+
+variable "tectonic_gcp_master_disk_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the disk in gigabytes for the root block device of master nodes."
+}
+
+variable "tectonic_gcp_worker_gce_type" {
+  type        = "string"
+  description = "Instance size for the worker node(s). Example: `n1-standard-2`."
+  default     = "n1-standard-2"
+}
+
+variable "tectonic_gcp_worker_disktype" {
+  type        = "string"
+  default     = "pd-standard"
+  description = "The type of disk (pd-standard or pd-ssd) for the worker nodes."
+}
+
+variable "tectonic_gcp_worker_disk_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the disk in gigabytes for the root block device of worker nodes."
+}
+
+variable "tectonic_gcp_etcd_gce_type" {
+  type        = "string"
+  description = "Instance size for the etcd node(s). Example: `n1-standard-2`."
+  default     = "n1-standard-2"
+}
+
+variable "tectonic_gcp_etcd_disktype" {
+  type        = "string"
+  default     = "pd-standard"
+  description = "The type of disk (pd-standard or pd-ssd) for the etcd nodes."
+}
+
+variable "tectonic_gcp_etcd_disk_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the disk in gigabytes for the root block device of etcd nodes."
+}
+
+variable "tectonic_gcp_ssh_key" {
+  type        = "string"
+  description = "(required) Path to an SSH public key file to be provisioned as the SSH key for the 'core' user."
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%main.tf
new file mode 100644
index 0000000..fc7bdba
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%main.tf
@@ -0,0 +1,279 @@
+provider "aws" {
+  region  = "us-gov-west-1"
+  profile = "${var.tectonic_govcloud_profile}"
+  version = "1.7.0"
+}
+
+data "aws_availability_zones" "azs" {}
+
+module "container_linux" {
+  source = "../../modules/container_linux"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+module "vpc" {
+  source = "../../modules/aws/vpc"
+
+  base_domain              = "${var.tectonic_base_domain}"
+  cidr_block               = "${var.tectonic_govcloud_vpc_cidr_block}"
+  cluster_id               = "${module.tectonic.cluster_id}"
+  cluster_name             = "${var.tectonic_cluster_name}"
+  custom_dns_name          = "${var.tectonic_dns_name}"
+  enable_etcd_sg           = "${length(compact(var.tectonic_etcd_servers)) == 0 ? 1 : 0}"
+  external_master_subnets  = "${compact(var.tectonic_govcloud_external_master_subnet_ids)}"
+  external_vpc_id          = "${var.tectonic_govcloud_external_vpc_id}"
+  external_worker_subnets  = "${compact(var.tectonic_govcloud_external_worker_subnet_ids)}"
+  extra_tags               = "${var.tectonic_govcloud_extra_tags}"
+  private_master_endpoints = true
+  public_master_endpoints  = false
+
+  # VPC layout settings.
+  #
+  # The following parameters control the layout of the VPC accross availability zones.
+  # Two modes are available:
+  # A. Explicitly configure a list of AZs + associated subnet CIDRs
+  # B. Let the module calculate subnets accross a set number of AZs
+  #
+  # To enable mode A, configure a set of AZs + CIDRs for masters and workers using the
+  # "tectonic_govcloud_master_custom_subnets" and "tectonic_govcloud_worker_custom_subnets" variables.
+  #
+  # To enable mode B, make sure that "tectonic_govcloud_master_custom_subnets" and "tectonic_govcloud_worker_custom_subnets"
+  # ARE NOT SET.
+
+  # These counts could be deducted by length(keys(var.tectonic_govcloud_master_custom_subnets))
+  # but there is a restriction on passing computed values as counts. This approach works around that.
+  master_az_count = "${length(keys(var.tectonic_govcloud_master_custom_subnets)) > 0 ? "${length(keys(var.tectonic_govcloud_master_custom_subnets))}" : "${length(data.aws_availability_zones.azs.names)}"}"
+  worker_az_count = "${length(keys(var.tectonic_govcloud_worker_custom_subnets)) > 0 ? "${length(keys(var.tectonic_govcloud_worker_custom_subnets))}" : "${length(data.aws_availability_zones.azs.names)}"}"
+  # The appending of the "padding" element is required as workaround since the function
+  # element() won't work on empty lists. See https://github.com/hashicorp/terraform/issues/11210
+  master_subnets = "${concat(values(var.tectonic_govcloud_master_custom_subnets),list("padding"))}"
+  worker_subnets = "${concat(values(var.tectonic_govcloud_worker_custom_subnets),list("padding"))}"
+  # The split() / join() trick works around the limitation of ternary operator expressions
+  # only being able to return strings.
+  master_azs = "${ split("|", "${length(keys(var.tectonic_govcloud_master_custom_subnets))}" > 0 ?
+    join("|", keys(var.tectonic_govcloud_master_custom_subnets)) :
+    join("|", data.aws_availability_zones.azs.names)
+  )}"
+  worker_azs = "${ split("|", "${length(keys(var.tectonic_govcloud_worker_custom_subnets))}" > 0 ?
+    join("|", keys(var.tectonic_govcloud_worker_custom_subnets)) :
+    join("|", data.aws_availability_zones.azs.names)
+  )}"
+}
+
+module "etcd" {
+  source = "../../modules/govcloud/etcd"
+
+  base_domain                = "${var.tectonic_base_domain}"
+  cluster_id                 = "${module.tectonic.cluster_id}"
+  cluster_name               = "${var.tectonic_cluster_name}"
+  container_image            = "${var.tectonic_container_images["etcd"]}"
+  container_linux_channel    = "${var.tectonic_container_linux_channel}"
+  container_linux_version    = "${module.container_linux.version}"
+  dns_server_ip              = "${var.tectonic_govcloud_dns_server_ip}"
+  ec2_type                   = "${var.tectonic_govcloud_etcd_ec2_type}"
+  external_endpoints         = "${compact(var.tectonic_etcd_servers)}"
+  extra_tags                 = "${var.tectonic_govcloud_extra_tags}"
+  ign_etcd_crt_id_list       = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list    = "${module.ignition_masters.etcd_dropin_id_list}"
+  ign_ntp_dropin_id          = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id         = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id = "${module.ignition_masters.systemd_default_env_id}"
+  instance_count             = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  root_volume_iops           = "${var.tectonic_govcloud_etcd_root_volume_iops}"
+  root_volume_size           = "${var.tectonic_govcloud_etcd_root_volume_size}"
+  root_volume_type           = "${var.tectonic_govcloud_etcd_root_volume_type}"
+  s3_bucket                  = "${aws_s3_bucket.tectonic.bucket}"
+  sg_ids                     = "${concat(var.tectonic_govcloud_etcd_extra_sg_ids, list(module.vpc.etcd_sg_id))}"
+  ssh_key                    = "${var.tectonic_govcloud_ssh_key}"
+  subnets                    = "${module.vpc.worker_subnet_ids}"
+  tls_enabled                = "${var.tectonic_etcd_tls_enabled}"
+}
+
+module "ignition_masters" {
+  source = "../../modules/ignition"
+
+  assets_location           = "${aws_s3_bucket_object.tectonic_assets.bucket}/${aws_s3_bucket_object.tectonic_assets.key}"
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider            = "aws"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubeconfig_fetch_cmd      = "/opt/s3-puller.sh ${aws_s3_bucket_object.kubeconfig.bucket}/${aws_s3_bucket_object.kubeconfig.key} /etc/kubernetes/kubeconfig"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "masters" {
+  source = "../../modules/govcloud/master-asg"
+
+  assets_s3_location                   = "${aws_s3_bucket_object.tectonic_assets.bucket}/${aws_s3_bucket_object.tectonic_assets.key}"
+  autoscaling_group_extra_tags         = "${var.tectonic_autoscaling_group_extra_tags}"
+  aws_lbs                              = "${module.vpc.aws_lbs}"
+  base_domain                          = "${var.tectonic_base_domain}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_images                     = "${var.tectonic_container_images}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  dns_server_ip                        = "${var.tectonic_govcloud_dns_server_ip}"
+  ec2_type                             = "${var.tectonic_govcloud_master_ec2_type}"
+  extra_tags                           = "${var.tectonic_govcloud_extra_tags}"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_init_assets_service_id           = "${module.ignition_masters.init_assets_service_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_masters.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_masters.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_rm_assets_path_unit_id           = "${module.ignition_masters.rm_assets_path_unit_id}"
+  ign_rm_assets_service_id             = "${module.ignition_masters.rm_assets_service_id}"
+  ign_s3_puller_id                     = "${module.ignition_masters.s3_puller_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  image_re                             = "${var.tectonic_image_re}"
+  instance_count                       = "${var.tectonic_master_count}"
+  master_iam_role                      = "${var.tectonic_govcloud_master_iam_role_name}"
+  master_sg_ids                        = "${concat(var.tectonic_govcloud_master_extra_sg_ids, list(module.vpc.master_sg_id))}"
+  private_endpoints                    = true
+  public_endpoints                     = false
+  root_volume_iops                     = "${var.tectonic_govcloud_master_root_volume_iops}"
+  root_volume_size                     = "${var.tectonic_govcloud_master_root_volume_size}"
+  root_volume_type                     = "${var.tectonic_govcloud_master_root_volume_type}"
+  s3_bucket                            = "${aws_s3_bucket.tectonic.bucket}"
+  ssh_key                              = "${var.tectonic_govcloud_ssh_key}"
+  subnet_ids                           = "${module.vpc.master_subnet_ids}"
+}
+
+module "ignition_workers" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider          = "aws"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubeconfig_fetch_cmd    = "/opt/s3-puller.sh ${aws_s3_bucket_object.kubeconfig.bucket}/${aws_s3_bucket_object.kubeconfig.key} /etc/kubernetes/kubeconfig"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "workers" {
+  source = "../../modules/govcloud/worker-asg"
+
+  autoscaling_group_extra_tags         = "${var.tectonic_autoscaling_group_extra_tags}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  dns_server_ip                        = "${var.tectonic_govcloud_dns_server_ip}"
+  ec2_type                             = "${var.tectonic_govcloud_worker_ec2_type}"
+  extra_tags                           = "${var.tectonic_govcloud_extra_tags}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_workers.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_workers.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_workers.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_s3_puller_id                     = "${module.ignition_workers.s3_puller_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  instance_count                       = "${var.tectonic_worker_count}"
+  load_balancers                       = "${var.tectonic_govcloud_worker_load_balancers}"
+  root_volume_iops                     = "${var.tectonic_govcloud_worker_root_volume_iops}"
+  root_volume_size                     = "${var.tectonic_govcloud_worker_root_volume_size}"
+  root_volume_type                     = "${var.tectonic_govcloud_worker_root_volume_type}"
+  s3_bucket                            = "${aws_s3_bucket.tectonic.bucket}"
+  sg_ids                               = "${concat(var.tectonic_govcloud_worker_extra_sg_ids, list(module.vpc.worker_sg_id))}"
+  ssh_key                              = "${var.tectonic_govcloud_ssh_key}"
+  subnet_ids                           = "${module.vpc.worker_subnet_ids}"
+  vpc_id                               = "${module.vpc.vpc_id}"
+  worker_iam_role                      = "${var.tectonic_govcloud_worker_iam_role_name}"
+}
+
+module "dns" {
+  source                         = "../../modules/dns/powerdns"
+  api_url                        = "${var.tectonic_govcloud_dns_server_api_url}"
+  api_external_elb_dns_name      = "${module.vpc.aws_api_external_dns_name}"
+  api_external_elb_zone_id       = "${module.vpc.aws_elb_api_external_zone_id}"
+  api_internal_elb_dns_name      = "${module.vpc.aws_api_internal_dns_name}"
+  api_internal_elb_zone_id       = "${module.vpc.aws_elb_api_internal_zone_id}"
+  api_ip_addresses               = "${module.vpc.aws_lbs}"
+  base_domain                    = "${var.tectonic_base_domain}"
+  cluster_id                     = "${module.tectonic.cluster_id}"
+  cluster_name                   = "${var.tectonic_cluster_name}"
+  console_elb_dns_name           = "${module.vpc.aws_console_dns_name}"
+  console_elb_zone_id            = "${module.vpc.aws_elb_console_zone_id}"
+  custom_dns_name                = "${var.tectonic_dns_name}"
+  elb_alias_enabled              = true
+  etcd_count                     = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_ip_addresses              = "${module.etcd.ip_addresses}"
+  external_endpoints             = ["${compact(var.tectonic_etcd_servers)}"]
+  master_count                   = "${var.tectonic_master_count}"
+  tectonic_external_private_zone = "${var.tectonic_govcloud_external_private_zone}"
+  tectonic_external_vpc_id       = "${module.vpc.vpc_id}"
+  tectonic_extra_tags            = "${var.tectonic_govcloud_extra_tags}"
+  tectonic_vanilla_k8s           = "${var.tectonic_vanilla_k8s}"
+  tectonic_private_endpoints     = true
+  tectonic_public_endpoints      = false
+  api_key                        = "${var.tectonic_govcloud_dns_server_api_key}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%s3.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%s3.tf
new file mode 100644
index 0000000..67c163b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%s3.tf
@@ -0,0 +1,65 @@
+data "aws_region" "current" {
+  current = true
+}
+
+resource "aws_s3_bucket" "tectonic" {
+  # Buckets must start with a lower case name and are limited to 63 characters,
+  # so we prepend the letter 'a' and use the md5 hex digest for the case of a long domain
+  # leaving 29 chars for the cluster name.
+  bucket = "${var.tectonic_govcloud_assets_s3_bucket_name == "" ? format("%s%s-%s", "a", var.tectonic_cluster_name, md5(format("%s-%s", data.aws_region.current.name , var.tectonic_base_domain))) : var.tectonic_govcloud_assets_s3_bucket_name }"
+
+  acl = "private"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-tectonic",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_govcloud_extra_tags)}"
+
+  lifecycle {
+    ignore_changes = ["*"]
+  }
+}
+
+# Bootkube / Tectonic assets
+resource "aws_s3_bucket_object" "tectonic_assets" {
+  bucket = "${aws_s3_bucket.tectonic.bucket}"
+  key    = "assets.zip"
+  source = "${data.archive_file.assets.output_path}"
+  acl    = "private"
+
+  # To be on par with the current Tectonic installer, we only do server-side
+  # encryption, using AES256. Eventually, we should start using KMS-based
+  # client-side encryption.
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-tectonic-assets",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_govcloud_extra_tags)}"
+
+  lifecycle {
+    ignore_changes = ["*"]
+  }
+}
+
+# kubeconfig
+resource "aws_s3_bucket_object" "kubeconfig" {
+  bucket  = "${aws_s3_bucket.tectonic.bucket}"
+  key     = "kubeconfig"
+  content = "${module.bootkube.kubeconfig}"
+  acl     = "private"
+
+  # The current Tectonic installer stores bits of the kubeconfig in KMS. As we
+  # do not support KMS yet, we at least offload it to S3 for now. Eventually,
+  # we should consider using KMS-based client-side encryption, or uploading it
+  # to KMS.
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-kubeconfig",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_govcloud_extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%tectonic.tf
new file mode 100644
index 0000000..82262b3
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%tectonic.tf
@@ -0,0 +1,160 @@
+data "template_file" "etcd_hostname_list" {
+  count    = "${var.tectonic_etcd_count > 0 ? var.tectonic_etcd_count : length(data.aws_availability_zones.azs.names) == 5 ? 5 : 3}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}.${var.tectonic_base_domain}"
+}
+
+module "bootkube" {
+  source         = "../../modules/bootkube"
+  cloud_provider = "aws"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${module.dns.api_internal_fqdn}:443"
+  oidc_issuer_url    = "https://${module.dns.ingress_internal_fqdn}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+  self_hosted_etcd = ""
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${module.dns.etcd_endpoints}"
+  master_count              = "${var.tectonic_master_count}"
+
+  # The default behavior of Kubernetes's controller manager is to mark a node
+  # as Unhealthy after 40s without an update from the node's kubelet. However,
+  # AWS ELB's Route53 records have a fixed TTL of 60s. Therefore, when an ELB's
+  # node disappears (e.g. scaled down or crashed), kubelet might fail to report
+  # for a period of time that exceed the default grace period of 40s and the
+  # node might become Unhealthy. While the eviction process won't start until
+  # the pod_eviction_timeout is reached, 5min by default, certain operators
+  # might already have taken action. This is the case for the etcd operator as
+  # of v0.3.3, which removes the likely-healthy etcd pods from the the
+  # cluster, potentially leading to a loss-of-quorum as generally all kubelets
+  # are affected simultaneously.
+  #
+  # To cope with this issue, we increase the grace period, and reduce the
+  # pod eviction time-out accordingly so pods still get evicted after an total
+  # time of 340s after the first post-status failure.
+  #
+  # Ref: https://github.com/kubernetes/kubernetes/issues/41916
+  # Ref: https://github.com/kubernetes-incubator/kube-aws/issues/598
+  node_monitor_grace_period = "2m"
+
+  pod_eviction_timeout = "220s"
+
+  cloud_config_path = ""
+}
+
+module "tectonic" {
+  source   = "../../modules/tectonic"
+  platform = "aws"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${module.dns.ingress_internal_fqdn}"
+  kube_apiserver_url = "https://${module.dns.api_internal_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "NodePort"
+  self_hosted_etcd  = ""
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../modules/net/calico"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
+
+data "archive_file" "assets" {
+  type       = "zip"
+  source_dir = "./generated/"
+
+  # Because the archive_file provider is a data source, depends_on can't be
+  # used to guarantee that the tectonic/bootkube modules have generated
+  # all the assets on disk before trying to archive them. Instead, we use their
+  # ID outputs, that are only computed once the assets have actually been
+  # written to disk. We re-hash the IDs (or dedicated module outputs, like module.bootkube.content_hash)
+  # to make the filename shorter, since there is no security nor collision risk anyways.
+  #
+  # Additionally, data sources do not support managing any lifecycle whatsoever,
+  # and therefore, the archive is never deleted. To avoid cluttering the module
+  # folder, we write it in the Terraform managed hidden folder `.terraform`.
+  output_path = "./.terraform/generated_${sha1("${module.etcd_certs.id} ${module.tectonic.id} ${module.bootkube.id} ${module.flannel_vxlan.id} ${module.calico.id} ${module.canal.id}")}.zip"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%tls.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%tls.tf
new file mode 100644
index 0000000..6e80e93
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%tls.tf
@@ -0,0 +1,40 @@
+module "kube_certs" {
+  source = "../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${module.dns.api_internal_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/self-signed"
+
+  base_address    = "${module.dns.ingress_internal_fqdn}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%variables.tf
new file mode 100644
index 0000000..40051e9
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%govcloud%variables.tf
@@ -0,0 +1,318 @@
+variable "tectonic_govcloud_config_version" {
+  description = <<EOF
+(internal) This declares the version of the AWS configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_govcloud_profile" {
+  description = <<EOF
+(optional) This declares the AWS credentials profile to use.
+EOF
+
+  type    = "string"
+  default = "default"
+}
+
+variable "tectonic_govcloud_ssh_key" {
+  type        = "string"
+  description = "Name of an SSH key located within the AWS region. Example: coreos-user."
+}
+
+variable "tectonic_govcloud_master_ec2_type" {
+  type        = "string"
+  description = "Instance size for the master node(s). Example: `t2.medium`."
+  default     = "t2.medium"
+}
+
+variable "tectonic_govcloud_worker_ec2_type" {
+  type        = "string"
+  description = "Instance size for the worker node(s). Example: `t2.medium`."
+  default     = "t2.medium"
+}
+
+variable "tectonic_govcloud_etcd_ec2_type" {
+  type = "string"
+
+  description = <<EOF
+  Instance size for the etcd node(s). Example: `t2.medium`. Read the [etcd recommended hardware](https://coreos.com/etcd/docs/latest/op-guide/hardware.html) guide for best performance
+  EOF
+
+  default = "t2.medium"
+}
+
+variable "tectonic_govcloud_etcd_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for etcd nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_govcloud_assets_s3_bucket_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Unique name under which the Amazon S3 bucket will be created. Bucket name must start with a lower case name and is limited to 63 characters.
+The Tectonic Installer uses the bucket to store tectonic assets and kubeconfig.
+If name is not provided the installer will construct the name using "tectonic_cluster_name", current AWS region and "tectonic_base_domain"
+EOF
+}
+
+variable "tectonic_govcloud_master_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for master nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_govcloud_worker_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for worker nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_govcloud_vpc_cidr_block" {
+  type    = "string"
+  default = "10.0.0.0/16"
+
+  description = <<EOF
+Block of IP addresses used by the VPC.
+This should not overlap with any other networks, such as a private datacenter connected via Direct Connect.
+EOF
+}
+
+variable "tectonic_govcloud_external_vpc_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) ID of an existing VPC to launch nodes into.
+If unset a new VPC is created.
+
+Example: `vpc-123456`
+EOF
+
+  default = ""
+}
+
+variable "tectonic_govcloud_external_private_zone" {
+  default = ""
+
+  description = <<EOF
+(optional) If set, the given Route53 zone ID will be used as the internal (private) zone.
+This zone will be used to create etcd DNS records as well as internal API and internal Ingress records.
+If set, no additional private zone will be created.
+
+Example: `"Z1ILINNUJGTAO1"`
+EOF
+}
+
+variable "tectonic_govcloud_external_master_subnet_ids" {
+  type = "list"
+
+  description = <<EOF
+(optional) List of subnet IDs within an existing VPC to deploy master nodes into.
+Required to use an existing VPC and the list must match the AZ count.
+
+Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+EOF
+
+  default = []
+}
+
+variable "tectonic_govcloud_external_worker_subnet_ids" {
+  type = "list"
+
+  description = <<EOF
+(optional) List of subnet IDs within an existing VPC to deploy worker nodes into.
+Required to use an existing VPC and the list must match the AZ count.
+
+Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+EOF
+
+  default = []
+}
+
+variable "tectonic_govcloud_extra_tags" {
+  type        = "map"
+  description = "(optional) Extra AWS tags to be applied to created resources."
+  default     = {}
+}
+
+variable "tectonic_autoscaling_group_extra_tags" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) Extra AWS tags to be applied to created autoscaling group resources.
+This is a list of maps having the keys `key`, `value` and `propagate_at_launch`.
+
+Example: `[ { key = "foo", value = "bar", propagate_at_launch = true } ]`
+EOF
+}
+
+variable "tectonic_dns_name" {
+  type        = "string"
+  default     = ""
+  description = "(optional) DNS prefix used to construct the console and API server endpoints."
+}
+
+variable "tectonic_govcloud_etcd_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of etcd nodes."
+}
+
+variable "tectonic_govcloud_etcd_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of etcd nodes."
+}
+
+variable "tectonic_govcloud_etcd_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of etcd nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_govcloud_master_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of master nodes."
+}
+
+variable "tectonic_govcloud_master_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of master nodes."
+}
+
+variable "tectonic_govcloud_master_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of master nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_govcloud_worker_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of worker nodes."
+}
+
+variable "tectonic_govcloud_worker_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of worker nodes."
+}
+
+variable "tectonic_govcloud_worker_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of worker nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_govcloud_master_custom_subnets" {
+  type    = "map"
+  default = {}
+
+  description = <<EOF
+(optional) This configures master availability zones and their corresponding subnet CIDRs directly.
+
+Example:
+`{ eu-west-1a = "10.0.0.0/20", eu-west-1b = "10.0.16.0/20" }`
+EOF
+}
+
+variable "tectonic_govcloud_worker_custom_subnets" {
+  type    = "map"
+  default = {}
+
+  description = <<EOF
+(optional) This configures worker availability zones and their corresponding subnet CIDRs directly.
+
+Example: `{ eu-west-1a = "10.0.64.0/20", eu-west-1b = "10.0.80.0/20" }`
+EOF
+}
+
+variable "tectonic_govcloud_master_iam_role_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Name of IAM role to use for the instance profiles of master nodes.
+The name is also the last part of a role's ARN.
+
+Example:
+ * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+ * Role Name = tectonic-installer
+EOF
+}
+
+variable "tectonic_govcloud_worker_iam_role_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Name of IAM role to use for the instance profiles of worker nodes.
+The name is also the last part of a role's ARN.
+
+Example:
+ * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+ * Role Name = tectonic-installer
+EOF
+}
+
+variable "tectonic_govcloud_worker_load_balancers" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) List of ELBs to attach all worker instances to.
+This is useful for exposing NodePort services via load-balancers managed separately from the cluster.
+
+Example:
+ * `["ingress-nginx"]`
+EOF
+}
+
+variable "tectonic_govcloud_dns_server_ip" {
+  description = "The resolver ip of the dns server."
+  type        = "string"
+}
+
+variable "tectonic_govcloud_dns_server_api_url" {
+  description = "The address of the dns server api to create the records."
+  type        = "string"
+}
+
+variable "tectonic_govcloud_dns_server_api_key" {
+  description = "The api key of the dns server to create the records."
+  type        = "string"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%matchers.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%matchers.tf
new file mode 100644
index 0000000..4e7faa0
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%matchers.tf
@@ -0,0 +1,154 @@
+module "container_linux" {
+  source = "../../modules/container_linux"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+// Install CoreOS to disk
+resource "matchbox_group" "coreos_install" {
+  count   = "${length(var.tectonic_metal_controller_names) + length(var.tectonic_metal_worker_names)}"
+  name    = "${format("coreos-install-%s", element(concat(var.tectonic_metal_controller_names, var.tectonic_metal_worker_names), count.index))}"
+  profile = "${matchbox_profile.coreos_install.name}"
+
+  selector {
+    mac = "${element(concat(var.tectonic_metal_controller_macs, var.tectonic_metal_worker_macs), count.index)}"
+  }
+
+  metadata {
+    coreos_channel     = "${var.tectonic_container_linux_channel}"
+    coreos_version     = "${module.container_linux.version}"
+    ignition_endpoint  = "${var.tectonic_metal_matchbox_http_url}/ignition"
+    baseurl            = "${var.tectonic_metal_matchbox_http_url}/assets/coreos"
+    ssh_authorized_key = "${var.tectonic_ssh_authorized_key}"
+  }
+}
+
+// DO NOT PLACE SECRETS IN USER-DATA
+
+module "ignition_masters" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${var.tectonic_metal_controller_domains}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_count                = "${length(var.tectonic_metal_controller_names)}"
+  etcd_initial_cluster_list = "${var.tectonic_metal_controller_domains}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+  use_metadata              = false
+}
+
+resource "matchbox_group" "controller" {
+  count   = "${length(var.tectonic_metal_controller_names)}"
+  name    = "${format("%s-%s", var.tectonic_cluster_name, element(var.tectonic_metal_controller_names, count.index))}"
+  profile = "${matchbox_profile.tectonic_controller.name}"
+
+  selector {
+    mac = "${element(var.tectonic_metal_controller_macs, count.index)}"
+    os  = "installed"
+  }
+
+  metadata {
+    domain_name        = "${element(var.tectonic_metal_controller_domains, count.index)}"
+    etcd_enabled       = "${var.tectonic_self_hosted_etcd != "" ? "false" : length(compact(var.tectonic_etcd_servers)) != 0 ? "false" : "true"}"
+    exclude_tectonic   = "${var.tectonic_vanilla_k8s}"
+    iscsi_enabled      = "${var.tectonic_iscsi_enabled ? true : false}"
+    ssh_authorized_key = "${var.tectonic_ssh_authorized_key}"
+
+    ign_bootkube_path_unit_json            = "${jsonencode(module.bootkube.systemd_path_unit_rendered)}"
+    ign_bootkube_service_json              = "${jsonencode(module.bootkube.systemd_service_rendered)}"
+    ign_docker_dropin_json                 = "${jsonencode(module.ignition_masters.docker_dropin_rendered)}"
+    ign_etcd_dropin_json                   = "${jsonencode(module.ignition_masters.etcd_dropin_rendered_list[count.index])}"
+    ign_installer_kubelet_env_json         = "${jsonencode(module.ignition_masters.installer_kubelet_env_rendered)}"
+    ign_installer_runtime_mappings_json    = "${jsonencode(module.ignition_masters.installer_runtime_mappings_rendered)}"
+    ign_k8s_node_bootstrap_service_json    = "${jsonencode(module.ignition_masters.k8s_node_bootstrap_service_rendered)}"
+    ign_kubelet_service_json               = "${jsonencode(module.ignition_masters.kubelet_service_rendered)}"
+    ign_max_user_watches_json              = "${jsonencode(module.ignition_masters.max_user_watches_rendered)}"
+    ign_nfs_config_json                    = "${var.tectonic_nfs_config_file != "" ? jsonencode(module.ignition_masters.nfs_config_rendered) : ""}"
+    ign_ntp_dropin_json                    = "${length(var.tectonic_ntp_servers) > 0 ? jsonencode(module.ignition_masters.ntp_dropin_rendered) : ""}"
+    ign_profile_env_json                   = "${jsonencode(module.ignition_masters.profile_env_rendered)}"
+    ign_systemd_default_env_json           = "${jsonencode(module.ignition_masters.systemd_default_env_rendered)}"
+    ign_tectonic_path_unit_json            = "${jsonencode(module.tectonic.systemd_path_unit_rendered)}"
+    ign_tectonic_service_json              = "${jsonencode(module.tectonic.systemd_service_rendered)}"
+    ign_update_ca_certificates_dropin_json = "${jsonencode(module.ignition_masters.update_ca_certificates_dropin_rendered)}"
+  }
+}
+
+module "ignition_workers" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+resource "matchbox_group" "worker" {
+  count   = "${length(var.tectonic_metal_worker_names)}"
+  name    = "${format("%s-%s", var.tectonic_cluster_name, element(var.tectonic_metal_worker_names, count.index))}"
+  profile = "${matchbox_profile.tectonic_worker.name}"
+
+  selector {
+    mac = "${element(var.tectonic_metal_worker_macs, count.index)}"
+    os  = "installed"
+  }
+
+  metadata {
+    domain_name        = "${element(var.tectonic_metal_worker_domains, count.index)}"
+    iscsi_enabled      = "${var.tectonic_iscsi_enabled ? true : false}"
+    ssh_authorized_key = "${var.tectonic_ssh_authorized_key}"
+
+    # extra data
+    kubelet_image_url  = "${replace(var.tectonic_container_images["hyperkube"],var.tectonic_image_re,"$1")}"
+    kubelet_image_tag  = "${replace(var.tectonic_container_images["hyperkube"],var.tectonic_image_re,"$2")}"
+    kube_version_image = "${var.tectonic_container_images["kube_version"]}"
+
+    ign_docker_dropin_json                 = "${jsonencode(module.ignition_workers.docker_dropin_rendered)}"
+    ign_installer_kubelet_env_json         = "${jsonencode(module.ignition_workers.installer_kubelet_env_rendered)}"
+    ign_installer_runtime_mappings_json    = "${jsonencode(module.ignition_workers.installer_runtime_mappings_rendered)}"
+    ign_k8s_node_bootstrap_service_json    = "${jsonencode(module.ignition_workers.k8s_node_bootstrap_service_rendered)}"
+    ign_kubelet_service_json               = "${jsonencode(module.ignition_workers.kubelet_service_rendered)}"
+    ign_max_user_watches_json              = "${jsonencode(module.ignition_workers.max_user_watches_rendered)}"
+    ign_nfs_config_json                    = "${var.tectonic_nfs_config_file != "" ? jsonencode(module.ignition_workers.nfs_config_rendered) : ""}"
+    ign_ntp_dropin_json                    = "${length(var.tectonic_ntp_servers) > 0 ? jsonencode(module.ignition_workers.ntp_dropin_rendered) : ""}"
+    ign_profile_env_json                   = "${jsonencode(module.ignition_workers.profile_env_rendered)}"
+    ign_systemd_default_env_json           = "${jsonencode(module.ignition_workers.systemd_default_env_rendered)}"
+    ign_update_ca_certificates_dropin_json = "${jsonencode(module.ignition_workers.update_ca_certificates_dropin_rendered)}"
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%profiles.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%profiles.tf
new file mode 100644
index 0000000..5fb6c73
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%profiles.tf
@@ -0,0 +1,57 @@
+// CoreOS Install Profile
+resource "matchbox_profile" "coreos_install" {
+  name   = "coreos-install"
+  kernel = "/assets/coreos/${module.container_linux.version}/coreos_production_pxe.vmlinuz"
+
+  initrd = [
+    "/assets/coreos/${module.container_linux.version}/coreos_production_pxe_image.cpio.gz",
+  ]
+
+  args = [
+    "initrd=coreos_production_pxe_image.cpio.gz",
+    "coreos.config.url=${var.tectonic_metal_matchbox_http_url}/ignition?uuid=$${uuid}&mac=$${mac:hexhyp}",
+    "coreos.first_boot=yes",
+    "console=tty0",
+    "console=ttyS0",
+  ]
+
+  container_linux_config = "${file("${path.module}/cl/coreos-install.yaml.tmpl")}"
+}
+
+data "template_file" "ign_custom_ca_certs" {
+  count    = "${local.tectonic_ca_count}"
+  template = "${file("${path.module}/cl/custom-ca.yaml.tmpl")}"
+
+  vars {
+    filename = "custom_ca_${count.index}.pem"
+    pem      = "${replace(module.ignition_masters.ca_cert_pem_list[count.index], "\n", "\n\n")}"
+  }
+}
+
+data "template_file" "bootkube_controller_profile" {
+  template = "${file("${path.module}/cl/bootkube-controller.yaml.tmpl")}"
+
+  vars {
+    ign_custom_ca_certs = "${join("", data.template_file.ign_custom_ca_certs.*.rendered)}"
+  }
+}
+
+data "template_file" "bootkube_worker_profile" {
+  template = "${file("${path.module}/cl/bootkube-worker.yaml.tmpl")}"
+
+  vars {
+    ign_custom_ca_certs = "${join("", data.template_file.ign_custom_ca_certs.*.rendered)}"
+  }
+}
+
+// Self-hosted Kubernetes Controller profile
+resource "matchbox_profile" "tectonic_controller" {
+  name                   = "tectonic-controller"
+  container_linux_config = "${data.template_file.bootkube_controller_profile.rendered}"
+}
+
+// Self-hosted Kubernetes Worker profile
+resource "matchbox_profile" "tectonic_worker" {
+  name                   = "tectonic-worker"
+  container_linux_config = "${data.template_file.bootkube_worker_profile.rendered}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%provider.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%provider.tf
new file mode 100644
index 0000000..fa9f2f8
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%provider.tf
@@ -0,0 +1,7 @@
+// Configure the matchbox provider
+provider "matchbox" {
+  endpoint    = "${var.tectonic_metal_matchbox_rpc_endpoint}"
+  client_cert = "${var.tectonic_metal_matchbox_client_cert}"
+  client_key  = "${var.tectonic_metal_matchbox_client_key}"
+  ca          = "${var.tectonic_metal_matchbox_ca}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%remote.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%remote.tf
new file mode 100644
index 0000000..0fd5620
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%remote.tf
@@ -0,0 +1,104 @@
+resource "null_resource" "etcd_secrets" {
+  count = "${var.tectonic_etcd_tls_enabled
+             && var.tectonic_self_hosted_etcd == ""
+             && length(compact(var.tectonic_etcd_servers)) == 0
+             ? length(var.tectonic_metal_controller_domains)
+             : 0
+          }"
+
+  connection {
+    type    = "ssh"
+    host    = "${element(var.tectonic_metal_controller_domains, count.index)}"
+    user    = "core"
+    timeout = "60m"
+  }
+
+  provisioner "file" {
+    content     = "${module.etcd_certs.etcd_ca_crt_pem}"
+    destination = "$HOME/etcd_ca.crt"
+  }
+
+  provisioner "file" {
+    content     = "${module.etcd_certs.etcd_server_crt_pem}"
+    destination = "$HOME/etcd_server.crt"
+  }
+
+  provisioner "file" {
+    content     = "${module.etcd_certs.etcd_server_key_pem}"
+    destination = "$HOME/etcd_server.key"
+  }
+
+  provisioner "file" {
+    content     = "${module.etcd_certs.etcd_peer_crt_pem}"
+    destination = "$HOME/etcd_peer.crt"
+  }
+
+  provisioner "file" {
+    content     = "${module.etcd_certs.etcd_peer_key_pem}"
+    destination = "$HOME/etcd_peer.key"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo mkdir -p /etc/ssl/etcd",
+      "sudo mv /home/core/etcd_ca.crt /etc/ssl/etcd/ca.crt",
+      "sudo mv /home/core/etcd_server.crt /etc/ssl/etcd/server.crt",
+      "sudo mv /home/core/etcd_server.key /etc/ssl/etcd/server.key",
+      "sudo mv /home/core/etcd_peer.crt /etc/ssl/etcd/peer.crt",
+      "sudo mv /home/core/etcd_peer.key /etc/ssl/etcd/peer.key",
+      "sudo chown etcd:etcd /etc/ssl/etcd/*",
+      "sudo chmod 0400 /etc/ssl/etcd/*",
+    ]
+  }
+}
+
+resource "null_resource" "kubeconfig" {
+  count      = "${length(var.tectonic_metal_controller_domains) + length(var.tectonic_metal_worker_domains)}"
+  depends_on = ["null_resource.etcd_secrets"]
+
+  connection {
+    type    = "ssh"
+    host    = "${element(concat(var.tectonic_metal_controller_domains, var.tectonic_metal_worker_domains), count.index)}"
+    user    = "core"
+    timeout = "60m"
+  }
+
+  provisioner "file" {
+    content     = "${module.bootkube.kubeconfig}"
+    destination = "$HOME/kubeconfig"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo mv /home/core/kubeconfig /etc/kubernetes/kubeconfig",
+    ]
+  }
+}
+
+resource "null_resource" "bootstrap" {
+  # Without depends_on, this remote-exec may start before the kubeconfig copy.
+  # Terraform only does one task at a time, so it would try to bootstrap
+  # Kubernetes and Tectonic while no Kubelets are running. Ensure all nodes
+  # receive a kubeconfig before proceeding with bootkube and tectonic.
+  depends_on = ["null_resource.kubeconfig"]
+
+  connection {
+    type    = "ssh"
+    host    = "${element(var.tectonic_metal_controller_domains, 0)}"
+    user    = "core"
+    timeout = "60m"
+  }
+
+  provisioner "file" {
+    source      = "./generated"
+    destination = "$HOME/tectonic"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo mkdir -p /opt",
+      "sudo rm -rf /opt/tectonic",
+      "sudo mv /home/core/tectonic /opt/",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%tectonic.tf
new file mode 100644
index 0000000..93cdc84
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%tectonic.tf
@@ -0,0 +1,143 @@
+module "bootkube" {
+  source = "../../modules/bootkube"
+
+  cloud_provider        = ""
+  cloud_provider_config = ""
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${var.tectonic_metal_controller_domain}:443"
+  oidc_issuer_url    = "https://${var.tectonic_metal_ingress_domain}/identity"
+
+  # platform-independent defaults
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled     = "${var.tectonic_etcd_tls_enabled}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_endpoints = "${split(",",
+    length(compact(var.tectonic_etcd_servers)) == 0
+      ? join(",", var.tectonic_metal_controller_domains)
+      : join(",", var.tectonic_etcd_servers)
+    )}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+
+  master_count = "${length(var.tectonic_metal_controller_names)}"
+
+  cloud_config_path = ""
+}
+
+module "tectonic" {
+  source   = "../../modules/tectonic"
+  platform = "bare-metal"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${var.tectonic_metal_ingress_domain}"
+  kube_apiserver_url = "https://${var.tectonic_metal_controller_domain}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Address of the Tectonic console (without protocol)
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "HostPort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${length(var.tectonic_metal_controller_names)}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../modules/net/calico"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  container_images = "${var.tectonic_container_images}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+  mtu              = "${var.tectonic_metal_calico_mtu}"
+}
+
+module "canal" {
+  source = "../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
+
+data "archive_file" "assets" {
+  type       = "zip"
+  source_dir = "./generated/"
+
+  # Because the archive_file provider is a data source, depends_on can't be
+  # used to guarantee that the tectonic/bootkube modules have generated
+  # all the assets on disk before trying to archive them. Instead, we use their
+  # ID outputs, that are only computed once the assets have actually been
+  # written to disk. We re-hash the IDs to make the filename shorter, since
+  # there is no security nor collision risk anyways.
+  #
+  # Additionally, data sources do not support managing any lifecycle whatsoever,
+  # and therefore, the archive is never deleted. To avoid cluttering the module
+  # folder, we write it in the Terraform managed hidden folder `.terraform`.
+  output_path = "./.terraform/generated_${sha1("${module.tectonic.id} ${module.bootkube.id} ${module.flannel_vxlan.id} ${module.calico.id} ${module.canal.id}")}.zip"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%tls.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%tls.tf
new file mode 100644
index 0000000..dcc34dc
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%tls.tf
@@ -0,0 +1,41 @@
+module "kube_certs" {
+  source = "../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${var.tectonic_metal_controller_domain}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+
+  etcd_cert_dns_names = "${var.tectonic_metal_controller_domains}"
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/self-signed"
+
+  base_address    = "${var.tectonic_metal_ingress_domain}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%variables.tf
new file mode 100644
index 0000000..de567cd
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%metal%variables.tf
@@ -0,0 +1,186 @@
+variable "tectonic_metal_config_version" {
+  description = <<EOF
+(internal) This declares the version of the Matchbox configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_metal_matchbox_http_url" {
+  type = "string"
+
+  description = <<EOF
+Matchbox HTTP read-only URL.
+
+Example: `e.g. http://matchbox.example.com:8080`
+EOF
+}
+
+variable "tectonic_metal_matchbox_rpc_endpoint" {
+  type = "string"
+
+  description = <<EOF
+The Matchbox gRPC API endpoint.
+
+Example: `matchbox.example.com:8081`
+EOF
+}
+
+variable "tectonic_metal_matchbox_client_cert" {
+  type = "string"
+
+  description = <<EOF
+The content of the Matchbox client TLS certificate.
+
+Example:
+```
+<<EOD
+-----BEGIN CERTIFICATE-----
+MIIEYDCCAkigAwIBAgICEAEwDQYJKoZIhvcNAQELBQAwEjEQMA4GA1UEAwwHZmFr
+...
+jyXQv9IZPMTwOndF6AVLH7l1F0E=
+-----END CERTIFICATE-----
+EOD
+```
+EOF
+}
+
+variable "tectonic_metal_matchbox_client_key" {
+  type = "string"
+
+  description = <<EOF
+The content of the Matchbox client TLS key.
+
+Example:
+```
+<<EOD
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEAr8S7x/tAS6W+aRW3X833OvNfxXjUJAiRkUV85Raln7tqVcTG
+...
+Pikk0rvNVB/vrPeVjAdGY9TJC/vpz3om92DRDmUifu8rCFxIHE0GrQ0=
+-----END RSA PRIVATE KEY-----
+EOD
+```
+EOF
+}
+
+variable "tectonic_metal_matchbox_ca" {
+  type = "string"
+
+  description = <<EOF
+The content of the Matchbox CA certificate to trust.
+
+Example:
+```
+<<EOD
+-----BEGIN CERTIFICATE-----
+MIIFDTCCAvWgAwIBAgIJAIuXq10k2OFlMA0GCSqGSIb3DQEBCwUAMBIxEDAOBgNV
+...
+Od27a+1We/P5ey7WRlwCfuEcFV7nYS/qMykYdQ9fxHSPgTPlrGrSwKstaaIIqOkE
+kA==
+-----END CERTIFICATE-----
+EOD
+```
+EOF
+}
+
+variable "tectonic_metal_controller_domain" {
+  type = "string"
+
+  description = <<EOF
+The domain name which resolves to controller node(s)
+
+Example: `cluster.example.com`
+EOF
+}
+
+variable "tectonic_metal_ingress_domain" {
+  type = "string"
+
+  description = <<EOF
+The domain name which resolves to Tectonic Ingress (i.e. worker node(s))
+
+Example: `tectonic.example.com`
+EOF
+}
+
+variable "tectonic_metal_controller_names" {
+  type = "list"
+
+  description = <<EOF
+Ordered list of controller names.
+
+Example: `["node1"]`
+EOF
+}
+
+variable "tectonic_metal_controller_domains" {
+  type = "list"
+
+  description = <<EOF
+Ordered list of controller domain names.
+
+Example: `["node2.example.com", "node3.example.com"]`
+EOF
+}
+
+variable "tectonic_metal_controller_macs" {
+  type = "list"
+
+  description = <<EOF
+Ordered list of controller MAC addresses for matching machines.
+
+Example: `["52:54:00:a1:9c:ae"]`
+EOF
+}
+
+variable "tectonic_metal_worker_names" {
+  type = "list"
+
+  description = <<EOF
+Ordered list of worker names.
+
+Example: `["node2", "node3"]`
+EOF
+}
+
+variable "tectonic_metal_worker_domains" {
+  type = "list"
+
+  description = <<EOF
+Ordered list of worker domain names.
+
+Example: `["node2.example.com", "node3.example.com"]`
+EOF
+}
+
+variable "tectonic_metal_worker_macs" {
+  type = "list"
+
+  description = <<EOF
+Ordered list of worker MAC addresses for matching machines.
+
+Example: `["52:54:00:b2:2f:86", "52:54:00:c3:61:77"]`
+EOF
+}
+
+variable "tectonic_ssh_authorized_key" {
+  type = "string"
+
+  description = <<EOF
+SSH public key to use as an authorized key.
+
+Example: `ssh-rsa AAAB3N...`
+EOF
+}
+
+variable "tectonic_metal_calico_mtu" {
+  default = "1500"
+
+  description = <<EOF
+(optional) Sets the MTU size for workload interfaces and the IP-in-IP tunnel device.
+
+Note: This setting is only effective, if tectonic_networking is set to `calico`.
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%lbaas.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%lbaas.tf
new file mode 100644
index 0000000..7a17fe2
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%lbaas.tf
@@ -0,0 +1,37 @@
+resource "openstack_lb_loadbalancer_v2" "master_lb" {
+  vip_subnet_id         = "${openstack_networking_subnet_v2.subnet.id}"
+  name                  = "${var.tectonic_cluster_name}_master"
+  loadbalancer_provider = "${var.tectonic_openstack_lb_provider}"
+}
+
+resource "openstack_lb_pool_v2" "master_lb_pool" {
+  lb_method       = "ROUND_ROBIN"
+  protocol        = "TCP"
+  name            = "https"
+  loadbalancer_id = "${openstack_lb_loadbalancer_v2.master_lb.id}"
+}
+
+resource "openstack_lb_listener_v2" "master_lb_listener" {
+  default_pool_id = "${openstack_lb_pool_v2.master_lb_pool.id}"
+  loadbalancer_id = "${openstack_lb_loadbalancer_v2.master_lb.id}"
+  protocol        = "TCP"
+  protocol_port   = 443
+  name            = "https"
+}
+
+resource "openstack_lb_monitor_v2" "master_lb_monitor" {
+  delay       = 30
+  max_retries = 3
+  pool_id     = "${openstack_lb_pool_v2.master_lb_pool.id}"
+  timeout     = 5
+  type        = "TCP"
+  name        = "https"
+}
+
+resource "openstack_lb_member_v2" "master_lb_members" {
+  count         = "${var.tectonic_master_count}"
+  address       = "${element(openstack_networking_port_v2.master.*.all_fixed_ips[count.index], 0)}"
+  pool_id       = "${openstack_lb_pool_v2.master_lb_pool.id}"
+  protocol_port = 443
+  subnet_id     = "${openstack_networking_subnet_v2.subnet.id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%main.tf
new file mode 100644
index 0000000..bcb795d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%main.tf
@@ -0,0 +1,350 @@
+provider "openstack" {
+  version = "1.0.0"
+}
+
+data "template_file" "etcd_hostname_list" {
+  count    = "${var.tectonic_etcd_count}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}.${var.tectonic_base_domain}"
+}
+
+module "kube_certs" {
+  source = "../../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${var.tectonic_cluster_name}-k8s.${var.tectonic_base_domain}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "../../../modules/tls/ingress/self-signed"
+
+  base_address    = "${var.tectonic_cluster_name}.${var.tectonic_base_domain}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "bootkube" {
+  source = "../../../modules/bootkube"
+
+  cloud_provider        = ""
+  cloud_provider_config = ""
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${var.tectonic_cluster_name}-k8s.${var.tectonic_base_domain}:443"
+  oidc_issuer_url    = "https://${var.tectonic_cluster_name}.${var.tectonic_base_domain}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "${openstack_networking_floatingip_v2.loadbalancer.address}"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${module.dns.etcd_a_nodes}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+
+  master_count = "${var.tectonic_master_count}"
+
+  cloud_config_path = ""
+}
+
+module "tectonic" {
+  source   = "../../../modules/tectonic"
+  platform = "openstack"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${var.tectonic_cluster_name}.${var.tectonic_base_domain}"
+  kube_apiserver_url = "https://${var.tectonic_cluster_name}-k8s.${var.tectonic_base_domain}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "HostPort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "etcd" {
+  source = "../../../modules/openstack/etcd"
+
+  resolv_conf_content = <<EOF
+search ${var.tectonic_base_domain}
+${join("\n", formatlist("nameserver %s", var.tectonic_openstack_dns_nameservers))}
+EOF
+
+  base_domain                   = "${var.tectonic_base_domain}"
+  cluster_name                  = "${var.tectonic_cluster_name}"
+  container_image               = "${var.tectonic_container_images["etcd"]}"
+  core_public_keys              = ["${module.secrets.core_public_key_openssh}"]
+  ign_coreos_metadata_dropin_id = "${module.ignition_masters.coreos_metadata_dropin_id}"
+  ign_etcd_crt_id_list          = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list       = "${module.ignition_masters.etcd_dropin_id_list}"
+  ign_profile_env_id            = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id    = "${module.ignition_masters.systemd_default_env_id}"
+  ign_ntp_dropin_id             = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  instance_count                = "${var.tectonic_etcd_count}"
+  self_hosted_etcd              = "${var.tectonic_self_hosted_etcd}"
+  tls_enabled                   = "${var.tectonic_etcd_tls_enabled}"
+}
+
+module "ignition_masters" {
+  source = "../../../modules/ignition"
+
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${var.tectonic_etcd_count}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  metadata_provider         = "openstack-metadata"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "master_nodes" {
+  source = "../../../modules/openstack/nodes"
+
+  resolv_conf_content = <<EOF
+search ${var.tectonic_base_domain}
+${join("\n", formatlist("nameserver %s", var.tectonic_openstack_dns_nameservers))}
+EOF
+
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  core_public_keys                     = ["${module.secrets.core_public_key_openssh}"]
+  hostname_infix                       = "master"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_masters.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_masters.nfs_config_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_masters.systemd_default_env_id}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  instance_count                       = "${var.tectonic_master_count}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+}
+
+module "ignition_workers" {
+  source = "../../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "worker_nodes" {
+  source = "../../../modules/openstack/nodes"
+
+  resolv_conf_content = <<EOF
+search ${var.tectonic_base_domain}
+${join("\n", formatlist("nameserver %s", var.tectonic_openstack_dns_nameservers))}
+EOF
+
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  core_public_keys                     = ["${module.secrets.core_public_key_openssh}"]
+  hostname_infix                       = "worker"
+  ign_ca_cert_id_list                  = "${module.ignition_workers.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_workers.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_workers.nfs_config_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_workers.ntp_dropin_id : ""}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  instance_count                       = "${var.tectonic_worker_count}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+}
+
+module "secrets" {
+  source       = "../../../modules/openstack/secrets"
+  cluster_name = "${var.tectonic_cluster_name}"
+}
+
+module "secgroups" {
+  source           = "../../../modules/openstack/secgroups"
+  cluster_name     = "${var.tectonic_cluster_name}"
+  cluster_cidr     = "${var.tectonic_openstack_subnet_cidr}"
+  self_hosted_etcd = "${var.tectonic_self_hosted_etcd}"
+}
+
+module "dns" {
+  source = "../../../modules/dns/designate"
+
+  api_ip_addresses          = "${openstack_networking_floatingip_v2.loadbalancer.*.address}"
+  base_domain               = "${var.tectonic_base_domain}"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  etcd_count                = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count}"
+  etcd_ip_addresses         = "${flatten(openstack_networking_port_v2.etcd.*.all_fixed_ips)}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  master_count              = "${var.tectonic_master_count}"
+  master_ip_addresses       = "${flatten(openstack_networking_port_v2.master.*.all_fixed_ips)}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+  worker_count              = "${var.tectonic_worker_count}"
+  worker_ip_addresses       = "${flatten(openstack_networking_port_v2.worker.*.all_fixed_ips)}"
+  worker_public_ips         = "${openstack_networking_floatingip_v2.worker.*.address}"
+  worker_public_ips_enabled = "${var.tectonic_openstack_disable_floatingip ? false : true}"
+}
+
+module "flannel_vxlan" {
+  source = "../../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../../modules/net/calico"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "../../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%network.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%network.tf
new file mode 100644
index 0000000..8d9e423
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%network.tf
@@ -0,0 +1,97 @@
+resource "openstack_networking_router_v2" "router" {
+  name             = "${var.tectonic_cluster_name}_router"
+  admin_state_up   = "true"
+  external_gateway = "${var.tectonic_openstack_external_gateway_id}"
+}
+
+resource "openstack_networking_network_v2" "network" {
+  name           = "${var.tectonic_cluster_name}_network"
+  admin_state_up = "true"
+}
+
+resource "openstack_networking_subnet_v2" "subnet" {
+  name       = "${var.tectonic_cluster_name}_subnet"
+  network_id = "${openstack_networking_network_v2.network.id}"
+  cidr       = "${var.tectonic_openstack_subnet_cidr}"
+  ip_version = 4
+
+  dns_nameservers = "${var.tectonic_openstack_dns_nameservers}"
+}
+
+resource "openstack_networking_router_interface_v2" "interface" {
+  router_id = "${openstack_networking_router_v2.router.id}"
+  subnet_id = "${openstack_networking_subnet_v2.subnet.id}"
+}
+
+# etcd
+
+resource "openstack_networking_port_v2" "etcd" {
+  count              = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count}"
+  name               = "${var.tectonic_cluster_name}_port_etcd_${count.index}"
+  network_id         = "${openstack_networking_network_v2.network.id}"
+  security_group_ids = ["${module.secgroups.secgroup_etcd_ids}"]
+  admin_state_up     = "true"
+
+  fixed_ip {
+    subnet_id = "${openstack_networking_subnet_v2.subnet.id}"
+  }
+}
+
+# master
+
+resource "openstack_networking_port_v2" "master" {
+  count              = "${var.tectonic_master_count}"
+  name               = "${var.tectonic_cluster_name}_port_master_${count.index}"
+  network_id         = "${openstack_networking_network_v2.network.id}"
+  security_group_ids = ["${module.secgroups.secgroup_master_ids}"]
+  admin_state_up     = "true"
+
+  fixed_ip {
+    subnet_id = "${openstack_networking_subnet_v2.subnet.id}"
+  }
+
+  allowed_address_pairs {
+    ip_address = "${var.tectonic_service_cidr}"
+  }
+
+  allowed_address_pairs {
+    ip_address = "${var.tectonic_cluster_cidr}"
+  }
+}
+
+resource "openstack_networking_floatingip_v2" "master" {
+  count = "${var.tectonic_master_count}"
+  pool  = "${var.tectonic_openstack_floatingip_pool}"
+}
+
+# worker
+
+resource "openstack_networking_port_v2" "worker" {
+  count              = "${var.tectonic_worker_count}"
+  name               = "${var.tectonic_cluster_name}_port_worker_${count.index}"
+  network_id         = "${openstack_networking_network_v2.network.id}"
+  security_group_ids = ["${module.secgroups.secgroup_node_ids}"]
+  admin_state_up     = "true"
+
+  fixed_ip {
+    subnet_id = "${openstack_networking_subnet_v2.subnet.id}"
+  }
+
+  allowed_address_pairs {
+    ip_address = "${var.tectonic_service_cidr}"
+  }
+
+  allowed_address_pairs {
+    ip_address = "${var.tectonic_cluster_cidr}"
+  }
+}
+
+resource "openstack_networking_floatingip_v2" "worker" {
+  count = "${var.tectonic_openstack_disable_floatingip ? 0 : var.tectonic_worker_count}"
+  pool  = "${var.tectonic_openstack_floatingip_pool}"
+}
+
+resource "openstack_networking_floatingip_v2" "loadbalancer" {
+  pool    = "${var.tectonic_openstack_floatingip_pool}"
+  port_id = "${openstack_lb_loadbalancer_v2.master_lb.vip_port_id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%nodes.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%nodes.tf
new file mode 100644
index 0000000..9d3e420
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%nodes.tf
@@ -0,0 +1,149 @@
+# etcd
+
+resource "openstack_compute_servergroup_v2" "etcd_group" {
+  count    = "${var.tectonic_self_hosted_etcd != "" ? 0 : 1}"
+  name     = "${var.tectonic_cluster_name}-etcd-group"
+  policies = ["anti-affinity"]
+}
+
+resource "openstack_compute_instance_v2" "etcd_node" {
+  count = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count}"
+  name  = "${var.tectonic_cluster_name}_etcd_node_${count.index}"
+
+  image_name = "${var.tectonic_openstack_image_name}"
+  image_id   = "${var.tectonic_openstack_image_id}"
+
+  flavor_name = "${var.tectonic_openstack_etcd_flavor_name}"
+  flavor_id   = "${var.tectonic_openstack_etcd_flavor_id}"
+
+  metadata {
+    role = "etcd"
+  }
+
+  network {
+    port = "${openstack_networking_port_v2.etcd.*.id[count.index]}"
+  }
+
+  scheduler_hints {
+    group = "${openstack_compute_servergroup_v2.etcd_group.id}"
+  }
+
+  user_data    = "${module.etcd.user_data[count.index]}"
+  config_drive = false
+}
+
+# master
+
+resource "openstack_compute_servergroup_v2" "master_group" {
+  name     = "${var.tectonic_cluster_name}-master-group"
+  policies = ["anti-affinity"]
+}
+
+resource "openstack_compute_instance_v2" "master_node" {
+  count = "${var.tectonic_master_count}"
+  name  = "${var.tectonic_cluster_name}-master-${count.index}"
+
+  image_name = "${var.tectonic_openstack_image_name}"
+  image_id   = "${var.tectonic_openstack_image_id}"
+
+  flavor_name = "${var.tectonic_openstack_master_flavor_name}"
+  flavor_id   = "${var.tectonic_openstack_master_flavor_id}"
+
+  metadata {
+    role = "master"
+  }
+
+  network {
+    port = "${openstack_networking_port_v2.master.*.id[count.index]}"
+  }
+
+  scheduler_hints {
+    group = "${openstack_compute_servergroup_v2.master_group.id}"
+  }
+
+  user_data    = "${module.master_nodes.user_data[count.index]}"
+  config_drive = false
+}
+
+resource "openstack_compute_floatingip_associate_v2" "master" {
+  count = "${var.tectonic_master_count}"
+
+  floating_ip = "${openstack_networking_floatingip_v2.master.*.address[count.index]}"
+  instance_id = "${openstack_compute_instance_v2.master_node.*.id[count.index]}"
+}
+
+# worker
+
+resource "openstack_compute_servergroup_v2" "worker_group" {
+  name     = "${var.tectonic_cluster_name}-worker-group"
+  policies = ["anti-affinity"]
+}
+
+resource "openstack_compute_instance_v2" "worker_node" {
+  count = "${var.tectonic_worker_count}"
+  name  = "${var.tectonic_cluster_name}-worker-${count.index}"
+
+  image_name = "${var.tectonic_openstack_image_name}"
+  image_id   = "${var.tectonic_openstack_image_id}"
+
+  flavor_name = "${var.tectonic_openstack_worker_flavor_name}"
+  flavor_id   = "${var.tectonic_openstack_worker_flavor_id}"
+
+  metadata {
+    role = "worker"
+  }
+
+  network {
+    port = "${openstack_networking_port_v2.worker.*.id[count.index]}"
+  }
+
+  scheduler_hints {
+    group = "${openstack_compute_servergroup_v2.worker_group.id}"
+  }
+
+  user_data    = "${module.worker_nodes.user_data[count.index]}"
+  config_drive = false
+}
+
+resource "openstack_compute_floatingip_associate_v2" "worker" {
+  count = "${var.tectonic_openstack_disable_floatingip ? 0 : var.tectonic_worker_count}"
+
+  floating_ip = "${openstack_networking_floatingip_v2.worker.*.address[count.index]}"
+  instance_id = "${openstack_compute_instance_v2.worker_node.*.id[count.index]}"
+}
+
+# tectonic assets
+
+resource "null_resource" "tectonic" {
+  depends_on = [
+    "module.bootkube",
+    "module.tectonic",
+    "module.dns",
+    "module.flannel_vxlan",
+    "module.calico",
+    "module.canal",
+    "openstack_compute_instance_v2.master_node",
+    "openstack_networking_port_v2.master",
+    "openstack_networking_floatingip_v2.master",
+    "openstack_networking_floatingip_v2.loadbalancer",
+  ]
+
+  connection {
+    host        = "${openstack_networking_floatingip_v2.master.*.address[0]}"
+    private_key = "${module.secrets.core_private_key_pem}"
+    user        = "core"
+  }
+
+  provisioner "file" {
+    source      = "./generated"
+    destination = "$HOME/tectonic"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo mkdir -p /opt",
+      "sudo rm -rf /opt/tectonic",
+      "sudo mv /home/core/tectonic /opt/",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%variables.tf
new file mode 100644
index 0000000..b95af2e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%openstack%neutron%variables.tf
@@ -0,0 +1,163 @@
+variable "tectonic_openstack_neutron_config_version" {
+  description = <<EOF
+(internal) This declares the version of the OpenStack Neutron configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_openstack_master_flavor_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The flavor name for master instances as given in `openstack flavor list`. Specifies the size (CPU/Memory/Drive) of the VM.
+
+Note: Set either tectonic_openstack_master_flavor_name or tectonic_openstack_master_flavor_id.
+EOF
+}
+
+variable "tectonic_openstack_worker_flavor_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The flavor name for worker instances as given in `openstack flavor list`. Specifies the size (CPU/Memory/Drive) of the VM.
+
+Note: Set either tectonic_openstack_worker_flavor_name or tectonic_openstack_worker_flavor_id.
+EOF
+}
+
+variable "tectonic_openstack_etcd_flavor_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The flavor name for etcd instances as given in `openstack flavor list`. Specifies the size (CPU/Memory/Drive) of the VM.
+
+Note: Set either tectonic_openstack_etcd_flavor_name or tectonic_openstack_etcd_flavor_id.
+Note: This value is ignored for self-hosted etcd.
+EOF
+}
+
+variable "tectonic_openstack_master_flavor_id" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The flavor id for master instances as given in `openstack flavor list`. Specifies the size (CPU/Memory/Drive) of the VM.
+
+Note: Set either tectonic_openstack_master_flavor_name or tectonic_openstack_master_flavor_id.
+EOF
+}
+
+variable "tectonic_openstack_worker_flavor_id" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The flavor id for worker instances as given in `openstack flavor list`. Specifies the size (CPU/Memory/Drive) of the VM.
+
+Note: Set either tectonic_openstack_worker_flavor_name or tectonic_openstack_worker_flavor_id.
+EOF
+}
+
+variable "tectonic_openstack_etcd_flavor_id" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The flavor id for etcd instances as given in `openstack flavor list`. Specifies the size (CPU/Memory/Drive) of the VM.
+
+Note: Set either tectonic_openstack_etcd_flavor_name or tectonic_openstack_etcd_flavor_id.
+Note: This value is ignored for self-hosted etcd.
+EOF
+}
+
+variable "tectonic_openstack_image_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The image ID as given in `openstack image list`. Specifies the OS image of the VM.
+
+Note: Set either tectonic_openstack_image_name or tectonic_openstack_image_id.
+EOF
+}
+
+variable "tectonic_openstack_image_id" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The image ID as given in `openstack image list`. Specifies the OS image of the VM.
+
+Note: Set either tectonic_openstack_image_name or tectonic_openstack_image_id.
+EOF
+}
+
+variable "tectonic_openstack_external_gateway_id" {
+  type = "string"
+
+  description = <<EOF
+The ID of the network to be used as the external internet gateway as given in `openstack network list`.
+EOF
+}
+
+variable "tectonic_openstack_floatingip_pool" {
+  type    = "string"
+  default = "public"
+
+  description = <<EOF
+The name name of the floating IP pool
+as given in `openstack floating ip list`.
+This pool will be used to assign floating IPs to worker and master nodes.
+EOF
+}
+
+variable "tectonic_openstack_subnet_cidr" {
+  type    = "string"
+  default = "192.168.1.0/24"
+
+  description = <<EOF
+The subnet CIDR for the master/worker/etcd compute nodes.
+This CIDR will also be assigned to the created the OpenStack subnet resource.
+EOF
+}
+
+variable "tectonic_openstack_dns_nameservers" {
+  type    = "list"
+  default = ["8.8.8.8", "8.8.4.4"]
+
+  description = <<EOF
+The nameservers used by the nodes and the generated OpenStack subnet resource.
+
+Example: `["8.8.8.8", "8.8.4.4"]`
+EOF
+}
+
+variable "tectonic_openstack_lb_provider" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The name of a valid provider to provision the load balancer. This will depend on
+how your OpenStack environment is configured.
+
+Common options are: octavia, haproxy, f5, brocade, etc.
+
+Please look at the OpenStack documentation for more details:
+https://developer.openstack.org/api-ref/networking/v2/index.html?expanded=create-a-load-balancer-detail#lbaas-2-0-stable
+EOF
+}
+
+variable "tectonic_openstack_disable_floatingip" {
+  default = false
+
+  description = <<EOF
+Disable floating ip assignments for k8s nodes.
+Warning: Enabling this option removes direct internet access,
+which prevents NodePorts from working.
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%main.tf
new file mode 100644
index 0000000..5b3c659
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%main.tf
@@ -0,0 +1,183 @@
+module "etcd" {
+  source = "../../modules/vmware/etcd"
+
+  base_domain                = "${var.tectonic_base_domain}"
+  cluster_name               = "${var.tectonic_cluster_name}"
+  container_image            = "${var.tectonic_container_images["etcd"]}"
+  core_public_keys           = ["${var.tectonic_vmware_ssh_authorized_key}"]
+  dns_server                 = "${var.tectonic_vmware_node_dns}"
+  external_endpoints         = ["${compact(var.tectonic_etcd_servers)}"]
+  gateways                   = "${var.tectonic_vmware_etcd_gateways}"
+  hostname                   = "${var.tectonic_vmware_etcd_hostnames}"
+  ign_etcd_crt_id_list       = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list    = "${module.ignition_masters.etcd_dropin_id_list}"
+  ign_ntp_dropin_id          = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id         = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id = "${module.ignition_masters.systemd_default_env_id}"
+  instance_count             = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count }"
+  ip_address                 = "${var.tectonic_vmware_etcd_ip}"
+  vm_disk_datastores         = "${var.tectonic_vmware_etcd_datastores}"
+  vm_disk_template           = "${var.tectonic_vmware_vm_template}"
+  vm_disk_template_folder    = "${var.tectonic_vmware_vm_template_folder}"
+  vm_memory                  = "${var.tectonic_vmware_etcd_memory}"
+  vm_network_labels          = "${var.tectonic_vmware_etcd_networks}"
+  vm_vcpu                    = "${var.tectonic_vmware_etcd_vcpu}"
+  vmware_clusters            = "${var.tectonic_vmware_etcd_clusters}"
+  vmware_datacenters         = "${var.tectonic_vmware_etcd_datacenters}"
+  vmware_folder              = "${vsphere_folder.tectonic_vsphere_folder.path}"
+  vmware_resource_pool       = "${var.tectonic_vmware_etcd_resource_pool}"
+}
+
+data "template_file" "etcd_hostname_list" {
+  count    = "${var.tectonic_etcd_count}"
+  template = "${var.tectonic_vmware_etcd_hostnames[count.index]}.${var.tectonic_base_domain}"
+}
+
+module "ignition_masters" {
+  source = "../../modules/ignition"
+
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${length(data.template_file.etcd_hostname_list.*.rendered)}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  http_proxy                = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled        = "${local.tectonic_http_proxy_enabled}"
+  https_proxy               = "${var.tectonic_https_proxy_address}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled             = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  nfs_config_file           = "${local._tectonic_nfs_config_file}"
+  no_proxy                  = "${var.tectonic_no_proxy}"
+  ntp_servers               = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units     = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+  use_metadata              = false
+}
+
+module "masters" {
+  source = "../../modules/vmware/node"
+
+  base_domain                          = "${var.tectonic_base_domain}"
+  container_images                     = "${var.tectonic_container_images}"
+  core_public_keys                     = ["${var.tectonic_vmware_ssh_authorized_key}"]
+  dns_server                           = "${var.tectonic_vmware_node_dns}"
+  gateways                             = "${var.tectonic_vmware_master_gateways}"
+  hostname                             = "${var.tectonic_vmware_master_hostnames}"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_masters.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_masters.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_masters.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_masters.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_masters.systemd_default_env_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  image_re                             = "${var.tectonic_image_re}"
+  instance_count                       = "${var.tectonic_master_count}"
+  ip_address                           = "${var.tectonic_vmware_master_ip}"
+  kubeconfig                           = "${module.bootkube.kubeconfig}"
+  private_key                          = "${var.tectonic_vmware_ssh_private_key_path}"
+  vm_disk_datastores                   = "${var.tectonic_vmware_master_datastores}"
+  vm_disk_template                     = "${var.tectonic_vmware_vm_template}"
+  vm_disk_template_folder              = "${var.tectonic_vmware_vm_template_folder}"
+  vm_memory                            = "${var.tectonic_vmware_master_memory}"
+  vm_network_labels                    = "${var.tectonic_vmware_master_networks}"
+  vm_vcpu                              = "${var.tectonic_vmware_master_vcpu}"
+  vmware_clusters                      = "${var.tectonic_vmware_master_clusters}"
+  vmware_datacenters                   = "${var.tectonic_vmware_master_datacenters}"
+  vmware_folder                        = "${vsphere_folder.tectonic_vsphere_folder.path}"
+  vmware_resource_pool                 = "${var.tectonic_vmware_master_resource_pool}"
+}
+
+module "ignition_workers" {
+  source = "../../modules/ignition"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  http_proxy              = "${var.tectonic_http_proxy_address}"
+  http_proxy_enabled      = "${local.tectonic_http_proxy_enabled}"
+  https_proxy             = "${var.tectonic_https_proxy_address}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  iscsi_enabled           = "${var.tectonic_iscsi_enabled}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  nfs_config_file         = "${local._tectonic_nfs_config_file}"
+  no_proxy                = "${var.tectonic_no_proxy}"
+  ntp_servers             = "${var.tectonic_ntp_servers}"
+  proxy_exclusive_units   = "${var.tectonic_proxy_exclusive_units}"
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "workers" {
+  source = "../../modules/vmware/node"
+
+  base_domain                          = "${var.tectonic_base_domain}"
+  container_images                     = "${var.tectonic_container_images}"
+  core_public_keys                     = ["${var.tectonic_vmware_ssh_authorized_key}"]
+  dns_server                           = "${var.tectonic_vmware_node_dns}"
+  gateways                             = "${var.tectonic_vmware_worker_gateways}"
+  hostname                             = "${var.tectonic_vmware_worker_hostnames}"
+  ign_ca_cert_id_list                  = "${module.ignition_workers.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_iscsi_service_id                 = "${module.ignition_workers.iscsi_service_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_nfs_config_id                    = "${var.tectonic_nfs_config_file != "" ? module.ignition_workers.nfs_config_id : ""}"
+  ign_ntp_dropin_id                    = "${length(var.tectonic_ntp_servers) > 0 ? module.ignition_workers.ntp_dropin_id : ""}"
+  ign_profile_env_id                   = "${module.ignition_workers.profile_env_id}"
+  ign_systemd_default_env_id           = "${module.ignition_workers.systemd_default_env_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  image_re                             = "${var.tectonic_image_re}"
+  instance_count                       = "${var.tectonic_worker_count}"
+  ip_address                           = "${var.tectonic_vmware_worker_ip}"
+  kubeconfig                           = "${module.bootkube.kubeconfig}"
+  private_key                          = "${var.tectonic_vmware_ssh_private_key_path}"
+  vm_disk_datastores                   = "${var.tectonic_vmware_worker_datastores}"
+  vm_disk_template                     = "${var.tectonic_vmware_vm_template}"
+  vm_disk_template_folder              = "${var.tectonic_vmware_vm_template_folder}"
+  vm_memory                            = "${var.tectonic_vmware_worker_memory}"
+  vm_network_labels                    = "${var.tectonic_vmware_worker_networks}"
+  vm_vcpu                              = "${var.tectonic_vmware_worker_vcpu}"
+  vmware_clusters                      = "${var.tectonic_vmware_worker_clusters}"
+  vmware_datacenters                   = "${var.tectonic_vmware_worker_datacenters}"
+  vmware_folder                        = "${vsphere_folder.tectonic_vsphere_folder.path}"
+  vmware_resource_pool                 = "${var.tectonic_vmware_worker_resource_pool}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%provider.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%provider.tf
new file mode 100644
index 0000000..c31036e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%provider.tf
@@ -0,0 +1,10 @@
+provider "vsphere" {
+  version              = "0.2.2"
+  vsphere_server       = "${var.tectonic_vmware_server}"
+  allow_unverified_ssl = "${var.tectonic_vmware_sslselfsigned}"
+}
+
+resource "vsphere_folder" "tectonic_vsphere_folder" {
+  path       = "${var.tectonic_vmware_folder}"
+  datacenter = "${var.tectonic_vmware_worker_datacenters[0]}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%remote.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%remote.tf
new file mode 100644
index 0000000..6e5f9c4
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%remote.tf
@@ -0,0 +1,22 @@
+resource "null_resource" "bootstrap" {
+  connection {
+    type        = "ssh"
+    host        = "${module.masters.ip_address[0]}"
+    user        = "core"
+    timeout     = "60m"
+    private_key = "${file(var.tectonic_vmware_ssh_private_key_path != "" ? pathexpand(var.tectonic_vmware_ssh_private_key_path) : "/dev/null")}"
+  }
+
+  provisioner "file" {
+    source      = "./generated"
+    destination = "$HOME/tectonic"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo mkdir -p /opt",
+      "sudo rm -rf /opt/tectonic",
+      "sudo mv /home/core/tectonic /opt/",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%tectonic.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%tectonic.tf
new file mode 100644
index 0000000..54e952c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%tectonic.tf
@@ -0,0 +1,181 @@
+module "kube_certs" {
+  source = "../../modules/tls/kube/self-signed"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${var.tectonic_vmware_controller_domain}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/signed"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+
+  etcd_cert_dns_names = ["${formatlist("%s.%s",
+        values(var.tectonic_vmware_etcd_hostnames),
+        var.tectonic_base_domain
+  )}"]
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/self-signed"
+
+  base_address    = "${var.tectonic_vmware_ingress_domain}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/self-signed"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "bootkube" {
+  source = "../../modules/bootkube"
+
+  cloud_provider        = ""
+  cloud_provider_config = ""
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${var.tectonic_vmware_controller_domain}:443"
+  oidc_issuer_url    = "https://${var.tectonic_vmware_ingress_domain}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${formatlist("%s.%s", values(var.tectonic_vmware_etcd_hostnames), var.tectonic_base_domain)}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+
+  master_count = "${var.tectonic_master_count}"
+
+  cloud_config_path = ""
+}
+
+module "tectonic" {
+  source   = "../../modules/tectonic"
+  platform = "vsphere"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${var.tectonic_vmware_ingress_domain}"
+  kube_apiserver_url = "https://${var.tectonic_vmware_controller_domain}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "NodePort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "../../modules/net/flannel_vxlan"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "../../modules/net/calico"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "../../modules/net/canal"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
+
+data "archive_file" "assets" {
+  type       = "zip"
+  source_dir = "./generated/"
+
+  # Because the archive_file provider is a data source, depends_on can't be
+  # used to guarantee that the tectonic/bootkube modules have generated
+  # all the assets on disk before trying to archive them. Instead, we use their
+  # ID outputs, that are only computed once the assets have actually been
+  # written to disk. We re-hash the IDs (or dedicated module outputs, like module.bootkube.content_hash)
+  # to make the filename shorter, since there is no security nor collision risk anyways.
+  #
+  # Additionally, data sources do not support managing any lifecycle whatsoever,
+  # and therefore, the archive is never deleted. To avoid cluttering the module
+  # folder, we write it in the Terraform managed hidden folder `.terraform`.
+  output_path = "./.terraform/generated_${sha1("${module.etcd_certs.id} ${module.tectonic.id} ${module.bootkube.id} ${module.flannel_vxlan.id} ${module.calico.id} ${module.canal.id}")}.zip"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%variables.tf
new file mode 100644
index 0000000..b2d5940
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%platforms%vmware%variables.tf
@@ -0,0 +1,407 @@
+// # VMware Connectivity
+
+variable "tectonic_vmware_vm_template" {
+  type        = "string"
+  description = "Virtual Machine template of CoreOS Container Linux."
+}
+
+variable "tectonic_vmware_vm_template_folder" {
+  type        = "string"
+  description = "Folder for VM template of CoreOS Container Linux."
+}
+
+variable "tectonic_vmware_server" {
+  type        = "string"
+  description = "vCenter Server IP/FQDN"
+}
+
+variable "tectonic_vmware_sslselfsigned" {
+  type        = "string"
+  description = "Is the vCenter certificate Self-Signed? Example: `tectonic_vmware_sslselfsigned = \"true\"` "
+}
+
+variable "tectonic_vmware_folder" {
+  type        = "string"
+  description = "vSphere Folder to create and add the Tectonic nodes"
+}
+
+variable "tectonic_vmware_type" {
+  type        = "string"
+  description = "The type of folder to create. Allowed options: datacenter, host, vm, datastore, and network."
+  default     = "vm"
+}
+
+// # Global
+
+variable "tectonic_vmware_ssh_authorized_key" {
+  type        = "string"
+  description = "SSH public key to use as an authorized key. Example: `\"ssh-rsa AAAB3N...\"`"
+}
+
+variable "tectonic_vmware_ssh_private_key_path" {
+  type        = "string"
+  description = "SSH private key file in .pem format corresponding to tectonic_vmware_ssh_authorized_key. If not provided, SSH agent will be used."
+  default     = ""
+}
+
+variable "tectonic_vmware_node_dns" {
+  type        = "string"
+  description = "DNS Server to be used by Virtual Machine(s). Multiple DNS servers can be separated by whitespace. Example: `\"192.168.1.1 192.168.2.1\"`"
+}
+
+variable "tectonic_vmware_controller_domain" {
+  type        = "string"
+  description = "The domain name which resolves to controller node(s)"
+}
+
+variable "tectonic_vmware_ingress_domain" {
+  type        = "string"
+  description = "The domain name which resolves to Tectonic Ingress (i.e. worker node(s))"
+}
+
+// # Node Settings
+
+// ## ETCD
+
+variable "tectonic_vmware_etcd_vcpu" {
+  type        = "string"
+  default     = "1"
+  description = "etcd node(s) VM vCPU count"
+}
+
+variable "tectonic_vmware_etcd_memory" {
+  type        = "string"
+  default     = "4096"
+  description = "etcd node(s) VM Memory Size in MB"
+}
+
+variable "tectonic_vmware_etcd_hostnames" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of etcd node(s) Hostnames, Example:
+  tectonic_vmware_etcd_hostnames = {
+  "0" = "mycluster-etcd-0"
+  "1" = "mycluster-etcd-1"
+  "2" = "mycluster-etcd-2"
+}
+EOF
+}
+
+variable "tectonic_vmware_etcd_clusters" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of etcd node(s) vSphere Clusters, Example:
+  tectonic_vmware_etcd_clusters = {
+  "0" = "myvmwarecluster-0"
+  "1" = "myvmwarecluster-1"
+  "2" = "myvmwarecluster-2"
+}
+EOF
+}
+
+variable "tectonic_vmware_etcd_datacenters" {
+  type = "map"
+
+  description = <<EOF
+  terraform map of etcd node(s) Virtual DataCenters, example:
+  tectonic_vmware_etcd_datacenters = {
+  "0" = "myvmwaredc-0"
+  "1" = "myvmwaredc-1"
+  "2" = "myvmwaredc-2"
+}
+EOF
+}
+
+variable "tectonic_vmware_etcd_resource_pool" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of etcd node(s) vSphere Resource Pools, Example:
+  tectonic_vmware_etcd_resource_pool = {
+  "0" = "myresourcepool-0"
+  "1" = "myresourcepool-1"
+  "2" = "myresourcepool-2"
+}
+EOF
+}
+
+variable "tectonic_vmware_etcd_gateways" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of etcd node(s) network gateway IP, Example:
+  tectonic_vmware_etcd_gateways = {
+  "0" = "192.168.246.99"
+  "1" = "192.168.246.99"
+  "2" = "192.168.246.99"
+}
+EOF
+}
+
+variable "tectonic_vmware_etcd_ip" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of etcd node(s) IP Addresses, Example:
+  tectonic_vmware_etcd_ip = {
+  "0" = "192.168.246.10/24"
+  "1" = "192.168.246.11/24"
+  "2" = "192.168.246.12/24"
+}
+EOF
+}
+
+variable "tectonic_vmware_etcd_datastores" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of etcd node(s) vSphere datastores.
+  In order to use vSphere Datastore Cluster use the syntax DatastoreClusterName/datastore.
+  Example:
+  tectonic_vmware_etcd_datastores = {
+  "0" = "mydatastore-0"
+  "1" = "mydatastore-1"
+  "2" = "mydatastore-2"
+}
+EOF
+}
+
+variable "tectonic_vmware_etcd_networks" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of etcd node(s) vSphere network portgroups, Example:
+  tectonic_vmware_etcd_networks = {
+  "0" = "mynet-0"
+  "1" = "mynet-1"
+  "2" = "mynet-2"
+}
+EOF
+}
+
+// ## Masters
+
+variable "tectonic_vmware_master_vcpu" {
+  type        = "string"
+  default     = "1"
+  description = "Master node(s) vCPU count"
+}
+
+variable "tectonic_vmware_master_memory" {
+  type        = "string"
+  default     = "4096"
+  description = "Master node(s) Memory Size in MB"
+}
+
+variable "tectonic_vmware_master_hostnames" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of Master node(s) Hostnames, Example:
+  tectonic_vmware_master_hostnames = {
+  "0" = "mycluster-master-0"
+  "1" = "mycluster-master-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_master_clusters" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of master node(s) vSphere Clusters, Example:
+  tectonic_vmware_master_clusters = {
+  "0" = "myvmwarecluster-0"
+  "1" = "myvmwarecluster-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_master_datacenters" {
+  type = "map"
+
+  description = <<EOF
+  terraform map of master node(s) Virtual DataCenters, example:
+  tectonic_vmware_master_datacenters = {
+  "0" = "myvmwaredc-0"
+  "1" = "myvmwaredc-1"
+  "2" = "myvmwaredc-2"
+}
+EOF
+}
+
+variable "tectonic_vmware_master_resource_pool" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of master node(s) vSphere Resource pools, Example:
+  tectonic_vmware_master_resource_pool = {
+  "0" = "myresourcepool-0"
+  "1" = "myresourcepool-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_master_gateways" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of master node(s) network gateway IP, Example:
+  tectonic_vmware_master_gateways = {
+  "0" = "192.168.246.99"
+  "1" = "192.168.246.99"
+}
+EOF
+}
+
+variable "tectonic_vmware_master_ip" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of Master node(s) IP Addresses, Example:
+  tectonic_vmware_master_ip = {
+  "0" = "192.168.246.20/24"
+  "1" = "192.168.246.21/24"
+}
+EOF
+}
+
+variable "tectonic_vmware_master_datastores" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of master node(s) vSphere datastores.
+  In order to use vSphere Datastore Cluster use the syntax DatastoreClusterName/datastore.
+  Example:
+  tectonic_vmware_master_datastores = {
+  "0" = "mydatastore-0"
+  "1" = "mydatastore-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_master_networks" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of master node(s) vSphere network portgroups, Example:
+  tectonic_vmware_master_networks = {
+  "0" = "mynet-0"
+  "1" = "mynet-1"
+}
+EOF
+}
+
+// ## Workers
+
+variable "tectonic_vmware_worker_vcpu" {
+  type        = "string"
+  default     = "1"
+  description = "Worker node(s) vCPU count"
+}
+
+variable "tectonic_vmware_worker_memory" {
+  type        = "string"
+  default     = "4096"
+  description = "Worker node(s) Memory Size in MB"
+}
+
+variable "tectonic_vmware_worker_hostnames" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of Worker node(s) Hostnames, Example:
+  tectonic_vmware_worker_hostnames = {
+  "0" = "mycluster-worker-0"
+  "1" = "mycluster-worker-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_worker_clusters" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of worker node(s) vSphere Clusters, Example:
+  tectonic_vmware_worker_clusters = {
+  "0" = "myvmwarecluster-0"
+  "1" = "myvmwarecluster-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_worker_datacenters" {
+  type = "map"
+
+  description = <<EOF
+  terraform map of worker node(s) Virtual DataCenters, example:
+  tectonic_vmware_worker_datacenters = {
+  "0" = "myvmwaredc-0"
+  "1" = "myvmwaredc-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_worker_resource_pool" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of worker node(s) vSphere Resource Pools, Example:
+  tectonic_vmware_worker_resource_pool = {
+  "0" = "myresourcepool-0"
+  "1" = "myresourcepool-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_worker_gateways" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of worker node(s) network gateway IP, Example:
+  tectonic_vmware_worker_gateways = {
+  "0" = "192.168.246.99"
+  "1" = "192.168.246.99"
+}
+EOF
+}
+
+variable "tectonic_vmware_worker_ip" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of Worker node(s) IP Addresses, Example:
+  tectonic_vmware_worker_ip = {
+  "0" = "192.168.246.30/24"
+  "1" = "192.168.246.31/24"
+}
+EOF
+}
+
+variable "tectonic_vmware_worker_networks" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of worker node(s) vSphere network portgroups, Example:
+  tectonic_vmware_worker_networks = {
+  "0" = "mynet-0"
+  "1" = "mynet-1"
+}
+EOF
+}
+
+variable "tectonic_vmware_worker_datastores" {
+  type = "map"
+
+  description = <<EOF
+  Terraform map of worker node(s) vSphere datastores.
+  In order to use vSphere Datastore Cluster use the syntax DatastoreClusterName/datastore.
+  Example:
+  tectonic_vmware_worker_datastores = {
+  "0" = "mydatastore-0"
+  "1" = "mydatastore-1"
+}
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%external-dns%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%external-dns%main.tf
new file mode 100644
index 0000000..042e9bf
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%external-dns%main.tf
@@ -0,0 +1,23 @@
+variable "tectonic_azure_location" {
+  default = "eastus"
+}
+
+variable "tectonic_base_domain" {}
+
+resource "azurerm_resource_group" "integ_external_dns" {
+  name     = "integ_external_dns"
+  location = "${var.tectonic_azure_location}"
+}
+
+resource "azurerm_dns_zone" "integ_external_dns" {
+  name                = "${var.tectonic_base_domain}"
+  resource_group_name = "${azurerm_resource_group.integ_external_dns.name}"
+}
+
+output "tectonic_azure_external_dns_zone_id" {
+  value = "${azurerm_dns_zone.integ_external_dns.id}"
+}
+
+output "tectonic_azure_external_dns_ns_servers" {
+  value = "${azurerm_dns_zone.integ_external_dns.name_servers}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%external-vnet%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%external-vnet%main.tf
new file mode 100644
index 0000000..98a8868
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%external-vnet%main.tf
@@ -0,0 +1,753 @@
+variable "tectonic_azure_location" {
+  default = "eastus"
+}
+
+variable "tectonic_azure_vnet_cidr_block" {
+  default = "10.0.0.0/16"
+}
+
+resource "azurerm_resource_group" "integ_external_net" {
+  name     = "integ_external_net"
+  location = "${var.tectonic_azure_location}"
+}
+
+resource "azurerm_virtual_network" "integ_external_net" {
+  name                = "integ_external_net"
+  resource_group_name = "${azurerm_resource_group.integ_external_net.name}"
+  address_space       = ["${var.tectonic_azure_vnet_cidr_block}"]
+  location            = "${var.tectonic_azure_location}"
+}
+
+resource "azurerm_subnet" "integ_external_master_subnet" {
+  name                      = "integ_external_master_subnet"
+  resource_group_name       = "${azurerm_resource_group.integ_external_net.name}"
+  virtual_network_name      = "${azurerm_virtual_network.integ_external_net.name}"
+  address_prefix            = "${cidrsubnet(var.tectonic_azure_vnet_cidr_block, 4, 0)}"
+  network_security_group_id = "${azurerm_network_security_group.integ_external_sg_master.id}"
+}
+
+resource "azurerm_subnet" "integ_external_worker_subnet" {
+  name                      = "integ_external_worker_subnet"
+  resource_group_name       = "${azurerm_resource_group.integ_external_net.name}"
+  virtual_network_name      = "${azurerm_virtual_network.integ_external_net.name}"
+  address_prefix            = "${cidrsubnet(var.tectonic_azure_vnet_cidr_block, 4, 1)}"
+  network_security_group_id = "${azurerm_network_security_group.integ_external_sg_worker.id}"
+}
+
+resource "azurerm_network_security_group" "integ_external_sg_master" {
+  name                = "integ_external_sg_master"
+  location            = "${var.tectonic_azure_location}"
+  resource_group_name = "${azurerm_resource_group.integ_external_net.name}"
+}
+
+resource "azurerm_network_security_group" "integ_external_sg_worker" {
+  name                = "integ_external_sg_worker"
+  location            = "${var.tectonic_azure_location}"
+  resource_group_name = "${azurerm_resource_group.integ_external_net.name}"
+}
+
+resource "azurerm_network_security_group" "integ_external_sg_api" {
+  name                = "integ_external_sg_api"
+  location            = "${var.tectonic_azure_location}"
+  resource_group_name = "${azurerm_resource_group.integ_external_net.name}"
+}
+
+resource "azurerm_network_security_group" "integ_external_sg_console" {
+  name                = "integ_external_sg_console"
+  location            = "${var.tectonic_azure_location}"
+  resource_group_name = "${azurerm_resource_group.integ_external_net.name}"
+}
+
+resource "azurerm_network_security_rule" "master_egress" {
+  name                        = "integ_external-master_egress"
+  priority                    = 2005
+  direction                   = "Outbound"
+  access                      = "Allow"
+  protocol                    = "*"
+  source_port_range           = "*"
+  destination_port_range      = "*"
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_ssh" {
+  name                        = "integ_external-master_ingress_ssh"
+  priority                    = 500
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "22"
+  source_address_prefix       = "VirtualNetwork"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+# TODO: Add external SSH rule
+resource "azurerm_network_security_rule" "master_ingress_ssh_admin" {
+  name                        = "integ_external-master_ingress_ssh_admin"
+  priority                    = 505
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "22"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_flannel" {
+  name                   = "integ_external-master_ingress_flannel"
+  priority               = 510
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "udp"
+  source_port_range      = "*"
+  destination_port_range = "4789"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_flannel_from_worker" {
+  name                   = "integ_external-master_ingress_flannel_from_worker"
+  priority               = 515
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "udp"
+  source_port_range      = "*"
+  destination_port_range = "4789"
+
+  # TODO: Need to allow traffic from worker
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+# TODO: Add rule(s) for Tectonic ingress
+
+resource "azurerm_network_security_rule" "master_ingress_node_exporter" {
+  name                   = "integ_external-master_ingress_node_exporter"
+  priority               = 520
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "9100"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_node_exporter_from_worker" {
+  name                   = "integ_external-master_ingress_node_exporter_from_worker"
+  priority               = 525
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "9100"
+
+  # TODO: Need to allow traffic from worker
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_services" {
+  name                   = "integ_external-master_ingress_services"
+  priority               = 530
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "30000-32767"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "VirtualNetwork"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_services_from_console" {
+  name                   = "integ_external-master_ingress_services_from_console"
+  priority               = 535
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "30000-32767"
+
+  # TODO: Need to allow traffic from console
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_etcd_lb" {
+  name                   = "integ_external-master_ingress_etcd"
+  priority               = 540
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "2379"
+
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_etcd_self" {
+  name                   = "integ_external-master_ingress_etcd_self"
+  priority               = 545
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "2379-2380"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_bootstrap_etcd" {
+  name                   = "integ_external-master_ingress_bootstrap_etcd"
+  priority               = 550
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "12379-12380"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_kubelet_insecure" {
+  name                   = "integ_external-master_ingress_kubelet_insecure"
+  priority               = 555
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10250"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_kubelet_insecure_from_worker" {
+  name                   = "integ_external-master_ingress_kubelet_insecure_from_worker"
+  priority               = 560
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10250"
+
+  # TODO: Need to allow traffic from worker
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_kubelet_secure" {
+  name                   = "integ_external-master_ingress_kubelet_secure"
+  priority               = 565
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10255"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_kubelet_secure_from_worker" {
+  name                   = "integ_external-master_ingress_kubelet_secure_from_worker"
+  priority               = 570
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10255"
+
+  # TODO: Need to allow traffic from worker
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "master_ingress_http" {
+  name                        = "integ_external-master_ingress_http"
+  priority                    = 575
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "80"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+# TODO: Review NSG
+resource "azurerm_network_security_rule" "master_ingress_https" {
+  name                        = "integ_external-master_ingress_https"
+  priority                    = 580
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "443"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+# TODO: Review NSG
+resource "azurerm_network_security_rule" "master_ingress_heapster" {
+  name                   = "integ_external-master_ingress_heapster"
+  priority               = 585
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "4194"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+# TODO: Review NSG
+resource "azurerm_network_security_rule" "master_ingress_heapster_from_worker" {
+  name                   = "integ_external-master_ingress_heapster_from_worker"
+  priority               = 590
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "4194"
+
+  # TODO: Need to allow traffic from worker
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_master.name}"
+}
+
+resource "azurerm_network_security_rule" "alb_probe" {
+  name                        = "integ_external-alb_probe"
+  priority                    = 295
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "*"
+  source_address_prefix       = "AzureLoadBalancer"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_api.name}"
+}
+
+resource "azurerm_network_security_rule" "api_egress" {
+  name                        = "integ_external-api_egress"
+  priority                    = 1990
+  direction                   = "Outbound"
+  access                      = "Allow"
+  protocol                    = "*"
+  source_port_range           = "*"
+  destination_port_range      = "*"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_api.name}"
+}
+
+resource "azurerm_network_security_rule" "api_ingress_https" {
+  name                        = "integ_external-api_ingress_https"
+  priority                    = 300
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "443"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_api.name}"
+}
+
+resource "azurerm_network_security_rule" "console_egress" {
+  name                        = "integ_external-console_egress"
+  priority                    = 1995
+  direction                   = "Outbound"
+  access                      = "Allow"
+  protocol                    = "*"
+  source_port_range           = "*"
+  destination_port_range      = "*"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_console.name}"
+}
+
+resource "azurerm_network_security_rule" "console_ingress_https" {
+  name                        = "integ_external-console_ingress_https"
+  priority                    = 305
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "443"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_console.name}"
+}
+
+resource "azurerm_network_security_rule" "console_ingress_http" {
+  name                        = "integ_external-console_ingress_http"
+  priority                    = 310
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "80"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_console.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_egress" {
+  name                        = "integ_external-worker_egress"
+  priority                    = 2010
+  direction                   = "Outbound"
+  access                      = "Allow"
+  protocol                    = "*"
+  source_port_range           = "*"
+  destination_port_range      = "*"
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_ssh" {
+  name                        = "integ_external-worker_ingress_ssh"
+  priority                    = 600
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "22"
+  source_address_prefix       = "VirtualNetwork"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+# TODO: Add external SSH rule
+resource "azurerm_network_security_rule" "worker_ingress_ssh_admin" {
+  name                        = "integ_external-worker_ingress_ssh_admin"
+  priority                    = 605
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "22"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_services" {
+  name                   = "integ_external-worker_ingress_services"
+  priority               = 610
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "30000-32767"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_services_from_console" {
+  name                   = "integ_external-worker_ingress_services_from_console"
+  priority               = 615
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "30000-32767"
+
+  # TODO: Need to allow traffic from console
+  source_address_prefix       = "VirtualNetwork"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_flannel" {
+  name                   = "integ_external-worker_ingress_flannel"
+  priority               = 620
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "udp"
+  source_port_range      = "*"
+  destination_port_range = "4789"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_flannel_from_master" {
+  name                   = "integ_external-worker_ingress_flannel_from_master"
+  priority               = 625
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "udp"
+  source_port_range      = "*"
+  destination_port_range = "4789"
+
+  # TODO: Need to allow traffic from master
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_kubelet_insecure" {
+  name                   = "integ_external-worker_ingress_kubelet_insecure"
+  priority               = 630
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10250"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_kubelet_insecure_from_master" {
+  name                   = "integ_external-worker_ingress_kubelet_insecure_from_master"
+  priority               = 635
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10250"
+
+  # TODO: Need to allow traffic from master
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_kubelet_secure" {
+  name                   = "integ_external-worker_ingress_kubelet_secure"
+  priority               = 640
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10255"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_kubelet_secure_from_master" {
+  name                   = "integ_external-worker_ingress_kubelet_secure_from_master"
+  priority               = 645
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "10255"
+
+  # TODO: Need to allow traffic from master
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_node_exporter" {
+  name                   = "integ_external-worker_ingress_node_exporter"
+  priority               = 650
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "9100"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_node_exporter_from_master" {
+  name                   = "integ_external-worker_ingress_node_exporter_from_master"
+  priority               = 655
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "9100"
+
+  # TODO: Need to allow traffic from master
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_heapster" {
+  name                   = "integ_external-worker_ingress_heapster"
+  priority               = 660
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "4194"
+
+  # TODO: Need to allow traffic from self
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+resource "azurerm_network_security_rule" "worker_ingress_heapster_from_master" {
+  name                   = "integ_external-worker_ingress_heapster_from_master"
+  priority               = 665
+  direction              = "Inbound"
+  access                 = "Allow"
+  protocol               = "tcp"
+  source_port_range      = "*"
+  destination_port_range = "4194"
+
+  # TODO: Need to allow traffic from master
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+# TODO: Add rules for self-hosted etcd (etcd-operator)
+
+# TODO: Review NSG
+resource "azurerm_network_security_rule" "worker_ingress_http" {
+  name                        = "integ_external-worker_ingress_http"
+  priority                    = 670
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "80"
+  source_address_prefix       = "VirtualNetwork"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+# TODO: Review NSG
+resource "azurerm_network_security_rule" "worker_ingress_https" {
+  name                        = "integ_external-worker_ingress_https"
+  priority                    = 675
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "443"
+  source_address_prefix       = "VirtualNetwork"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.integ_external_net.name}"
+  network_security_group_name = "${azurerm_network_security_group.integ_external_sg_worker.name}"
+}
+
+output "tectonic_azure_external_resource_group" {
+  value = "${azurerm_resource_group.integ_external_net.id}"
+}
+
+output "tectonic_azure_external_vnet_id" {
+  value = "${azurerm_virtual_network.integ_external_net.id}"
+}
+
+output "tectonic_azure_external_master_subnet_id" {
+  value = "${azurerm_subnet.integ_external_master_subnet.id}"
+}
+
+output "tectonic_azure_external_worker_subnet_id" {
+  value = "${azurerm_subnet.integ_external_worker_subnet.id}"
+}
+
+output "tectonic_azure_external_nsg_api_id" {
+  value = "${azurerm_network_security_group.integ_external_sg_api.id}"
+}
+
+output "tectonic_azure_external_nsg_master_id" {
+  value = "${azurerm_network_security_group.integ_external_sg_master.id}"
+}
+
+output "tectonic_azure_external_nsg_worker_id" {
+  value = "${azurerm_network_security_group.integ_external_sg_worker.id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%outputs.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%outputs.tf
new file mode 100644
index 0000000..dc641a9
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%outputs.tf
@@ -0,0 +1,23 @@
+/***
+    Outputs
+***/
+
+output "vpn_gw_endpoint" {
+  value = "${azurerm_public_ip.vpn_gw_ip.fqdn}"
+}
+
+output "vpn_gw_private_ip" {
+  value = "${azurerm_network_interface.vpn_gw.private_ip_address}"
+}
+
+output "vpn_gw_dns_servers" {
+  value = "${azurerm_network_interface.vpn_gw.applied_dns_servers}"
+}
+
+output "tectonic_azure_external_resource_group" {
+  value = "${azurerm_resource_group.tectonic_cluster.id}"
+}
+
+output "tectonic_azure_external_vnet_id" {
+  value = "${azurerm_virtual_network.tectonic_private_vnet.id}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%private-vnet-vpn.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%private-vnet-vpn.tf
new file mode 100644
index 0000000..728652d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%private-vnet-vpn.tf
@@ -0,0 +1,214 @@
+/***
+  Resources
+***/
+
+resource "azurerm_resource_group" "tectonic_cluster" {
+  location = "${var.tectonic_azure_location}"
+  name     = "tectonic-priv-cluster-${var.tectonic_cluster_name}"
+
+  tags = "${merge(map(
+    "Name", "tectonic-cluster-${var.tectonic_cluster_name}"),
+    var.tectonic_azure_extra_tags)}"
+}
+
+resource "azurerm_public_ip" "vpn_gw_ip" {
+  name                         = "${var.tectonic_cluster_name}_vpn_gw_ip"
+  location                     = "${var.tectonic_azure_location}"
+  resource_group_name          = "${azurerm_resource_group.tectonic_cluster.name}"
+  public_ip_address_allocation = "dynamic"
+  domain_name_label            = "${var.tectonic_cluster_name}-vpngw"
+
+  tags = "${merge(map(
+    "Name", "tectonic-cluster-${var.tectonic_cluster_name}"),
+    var.tectonic_azure_extra_tags)}"
+}
+
+resource "azurerm_virtual_network" "tectonic_private_vnet" {
+  name                = "${var.tectonic_cluster_name}"
+  resource_group_name = "${azurerm_resource_group.tectonic_cluster.name}"
+  address_space       = ["${var.tectonic_azure_vnet_cidr_block}"]
+  location            = "${var.tectonic_azure_location}"
+
+  tags = "${merge(map(
+    "Name", "tectonic-cluster-${var.tectonic_cluster_name}"),
+    var.tectonic_azure_extra_tags)}"
+}
+
+resource "azurerm_subnet" "vpngw_subnet" {
+  name                 = "${var.tectonic_cluster_name}_vpngw_subnet"
+  resource_group_name  = "${azurerm_resource_group.tectonic_cluster.name}"
+  virtual_network_name = "${azurerm_virtual_network.tectonic_private_vnet.name}"
+  address_prefix       = "${cidrsubnet(var.tectonic_azure_vnet_cidr_block, 4, 2)}"
+}
+
+resource "azurerm_network_interface" "vpn_gw" {
+  name                      = "${var.tectonic_cluster_name}-vpn-gw"
+  location                  = "${var.tectonic_azure_location}"
+  resource_group_name       = "${azurerm_resource_group.tectonic_cluster.name}"
+  network_security_group_id = "${azurerm_network_security_group.vpn_gw.id}"
+  enable_ip_forwarding      = true
+
+  ip_configuration {
+    public_ip_address_id          = "${azurerm_public_ip.vpn_gw_ip.id}"
+    private_ip_address_allocation = "dynamic"
+    name                          = "${var.tectonic_cluster_name}-VPN-Endpoint"
+    subnet_id                     = "${azurerm_subnet.vpngw_subnet.id}"
+  }
+
+  tags = "${merge(map(
+    "Name", "tectonic-cluster-${var.tectonic_cluster_name}"),
+    var.tectonic_azure_extra_tags)}"
+}
+
+resource "azurerm_virtual_machine" "vpn_gw" {
+  name                          = "${var.tectonic_cluster_name}-vpn-gw"
+  location                      = "${var.tectonic_azure_location}"
+  resource_group_name           = "${azurerm_resource_group.tectonic_cluster.name}"
+  network_interface_ids         = ["${azurerm_network_interface.vpn_gw.id}"]
+  vm_size                       = "${var.tectonic_azure_worker_vm_size}"
+  delete_os_disk_on_termination = true
+
+  storage_image_reference {
+    publisher = "Canonical"
+    offer     = "UbuntuServer"
+    sku       = "16.04.0-LTS"
+    version   = "latest"
+  }
+
+  storage_os_disk {
+    name              = "vpn-gw-os-${var.tectonic_cluster_name}"
+    managed_disk_type = "Standard_LRS"
+    create_option     = "FromImage"
+    caching           = "ReadWrite"
+    os_type           = "linux"
+  }
+
+  os_profile {
+    computer_name  = "${var.tectonic_cluster_name}-vpn-gw"
+    admin_username = "${var.admin_username}"
+    admin_password = ""
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = true
+
+    ssh_keys {
+      path     = "/home/${var.admin_username}/.ssh/authorized_keys"
+      key_data = "${file(var.tectonic_azure_ssh_key)}"
+    }
+  }
+
+  tags = "${merge(map(
+    "Name", "tectonic-cluster-${var.tectonic_cluster_name}"),
+    var.tectonic_azure_extra_tags)}"
+}
+
+resource "null_resource" "openvpn_as_bootstrap" {
+  triggers {
+    vm_id = "${azurerm_virtual_machine.vpn_gw.id}"
+  }
+
+  connection {
+    type  = "ssh"
+    user  = "${var.admin_username}"
+    agent = true
+    host  = "${azurerm_public_ip.vpn_gw_ip.fqdn}"
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "cd ~",
+      "while ( ! curl --silent --fail -I http://swupdate.openvpn.org/as/openvpn-as-2.1.9-Ubuntu16.amd_64.deb); do echo 'Waiting for network...'; sleep 1; done",
+      "curl -O http://swupdate.openvpn.org/as/openvpn-as-2.1.9-Ubuntu16.amd_64.deb",
+      "sudo dpkg -i openvpn-as-2.1.9-Ubuntu16.amd_64.deb",
+      "sudo echo '${var.admin_username}:${var.admin_password}' | sudo chpasswd",
+      "sleep 60",
+      "sudo /usr/local/openvpn_as/scripts/sacli -k 'host.name' -v '${azurerm_public_ip.vpn_gw_ip.fqdn}' ConfigPut",
+      "sudo /usr/local/openvpn_as/scripts/sacli -k 'vpn.server.routing.private_network.1' -v '${var.tectonic_azure_vnet_cidr_block}' ConfigPut",
+      "sudo /usr/local/openvpn_as/scripts/sacli -k 'vpn.server.routing.private_access' -v 'nat' ConfigPut",
+      "sudo /usr/local/openvpn_as/scripts/sacli -k 'vpn.client.routing.reroute_dns' -v 'true' ConfigPut",
+      "sudo /usr/local/openvpn_as/scripts/sacli -k 'vpn.client.routing.reroute_gw' -v 'false' ConfigPut",
+      "sudo systemctl restart openvpnas",
+    ]
+  }
+}
+
+resource "azurerm_network_security_group" "vpn_gw" {
+  name                = "${var.tectonic_cluster_name}-vpn-gw"
+  location            = "${var.tectonic_azure_location}"
+  resource_group_name = "${azurerm_resource_group.tectonic_cluster.name}"
+
+  tags = "${merge(map(
+    "Name", "tectonic-cluster-${var.tectonic_cluster_name}"),
+    var.tectonic_azure_extra_tags)}"
+}
+
+resource "azurerm_network_security_rule" "vpn_egress" {
+  name                        = "${var.tectonic_cluster_name}-vpn-egress"
+  priority                    = 2005
+  direction                   = "Outbound"
+  access                      = "Allow"
+  protocol                    = "*"
+  source_port_range           = "*"
+  destination_port_range      = "*"
+  source_address_prefix       = "${var.tectonic_azure_vnet_cidr_block}"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.tectonic_cluster.name}"
+  network_security_group_name = "${azurerm_network_security_group.vpn_gw.name}"
+}
+
+resource "azurerm_network_security_rule" "vpn_gw_ingress_ssh" {
+  name                        = "${var.tectonic_cluster_name}-vpn-ingress-ssh"
+  priority                    = 1000
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "22"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.tectonic_cluster.name}"
+  network_security_group_name = "${azurerm_network_security_group.vpn_gw.name}"
+}
+
+resource "azurerm_network_security_rule" "vpn_gw_ingress_OpenVPN_WebServer" {
+  name                        = "${var.tectonic_cluster_name}-vpn-openvpn-webserver"
+  priority                    = 1200
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "943"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.tectonic_cluster.name}"
+  network_security_group_name = "${azurerm_network_security_group.vpn_gw.name}"
+}
+
+resource "azurerm_network_security_rule" "vpn_gw_ingress_OpenVPN_1194" {
+  name                        = "${var.tectonic_cluster_name}-vpn-openvpn-1194"
+  priority                    = 1100
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "*"
+  source_port_range           = "*"
+  destination_port_range      = "1194"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.tectonic_cluster.name}"
+  network_security_group_name = "${azurerm_network_security_group.vpn_gw.name}"
+}
+
+resource "azurerm_network_security_rule" "vpn_gw_ingress_OpenVPN_HTTPS" {
+  name                        = "${var.tectonic_cluster_name}-vpn-openvpn-https"
+  priority                    = 1300
+  direction                   = "Inbound"
+  access                      = "Allow"
+  protocol                    = "tcp"
+  source_port_range           = "*"
+  destination_port_range      = "443"
+  source_address_prefix       = "*"
+  destination_address_prefix  = "*"
+  resource_group_name         = "${azurerm_resource_group.tectonic_cluster.name}"
+  network_security_group_name = "${azurerm_network_security_group.vpn_gw.name}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%variables.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%variables.tf
new file mode 100644
index 0000000..dc59072
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%fixtures%private-cluster%variables.tf
@@ -0,0 +1,20 @@
+/***
+  Variables
+***/
+
+variable "tectonic_cluster_name" {}
+variable "tectonic_azure_location" {}
+variable "tectonic_azure_ssh_key" {}
+
+variable "admin_username" {}
+variable "admin_password" {}
+
+variable "tectonic_azure_vnet_cidr_block" {}
+
+variable "tectonic_azure_worker_vm_size" {
+  default = "Standard_D2_v2"
+}
+
+variable "tectonic_azure_extra_tags" {
+  default = {}
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%basic.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%basic.tfvars
new file mode 100644
index 0000000..e6246a2
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%basic.tfvars
@@ -0,0 +1,16 @@
+{
+    "tectonic_azure_etcd_storage_type": "Standard_LRS",
+    "tectonic_azure_etcd_vm_size": "Standard_D2_v2",
+    "tectonic_azure_master_storage_type": "Standard_LRS",
+    "tectonic_azure_master_vm_size": "Standard_D2_v2",
+    "tectonic_azure_private_cluster": "false",
+    "tectonic_azure_worker_storage_type": "Standard_LRS",
+    "tectonic_azure_worker_vm_size": "Standard_D2_v2",
+    "tectonic_cluster_cidr": "10.2.0.0/16",
+    "tectonic_container_linux_channel": "stable",
+    "tectonic_etcd_count": "1",
+    "tectonic_master_count": "1",
+    "tectonic_service_cidr": "10.3.0.0/16",
+    "tectonic_vanilla_k8s": "false",
+    "tectonic_worker_count": "1"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%dns.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%dns.tfvars
new file mode 100644
index 0000000..60e8c3e
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%dns.tfvars
@@ -0,0 +1,18 @@
+{
+    "tectonic_azure_etcd_storage_type": "Standard_LRS",
+    "tectonic_azure_etcd_vm_size": "Standard_D2_v2",
+    "tectonic_azure_external_dns_zone_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/long-term-dns-records-tectonic-ci/providers/Microsoft.Network/dnszones/azure.tectonic-ci.de",
+    "tectonic_azure_master_storage_type": "Standard_LRS",
+    "tectonic_azure_master_vm_size": "Standard_D2_v2",
+    "tectonic_azure_private_cluster": "false",
+    "tectonic_azure_worker_storage_type": "Standard_LRS",
+    "tectonic_azure_worker_vm_size": "Standard_D2_v2",
+    "tectonic_base_domain": "azure.tectonic-ci.de",
+    "tectonic_cluster_cidr": "10.2.0.0/16",
+    "tectonic_container_linux_channel": "stable",
+    "tectonic_etcd_count": "1",
+    "tectonic_master_count": "1",
+    "tectonic_service_cidr": "10.3.0.0/16",
+    "tectonic_vanilla_k8s": "false",
+    "tectonic_worker_count": "1"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%example.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%example.tfvars
new file mode 100644
index 0000000..aba938c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%example.tfvars
@@ -0,0 +1,12 @@
+{
+    "tectonic_azure_private_cluster": "false",
+    "tectonic_cluster_cidr": "10.2.0.0/16",
+    "tectonic_container_linux_channel": "stable",
+    "tectonic_etcd_count": "0",
+    "tectonic_experimental": "false",
+    "tectonic_master_count": "1",
+    "tectonic_service_cidr": "10.3.0.0/16",
+    "tectonic_stats_url": "https://stats-collector.tectonic.com",
+    "tectonic_vanilla_k8s": "false",
+    "tectonic_worker_count": "1"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%external-self-hosted-etcd.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%external-self-hosted-etcd.tfvars
new file mode 100644
index 0000000..18510a1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%external-self-hosted-etcd.tfvars
@@ -0,0 +1,25 @@
+{
+    "tectonic_azure_etcd_storage_type": "Standard_LRS",
+    "tectonic_azure_etcd_vm_size": "Standard_D2_v2",
+    "tectonic_azure_external_master_subnet_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/virtualNetworks/integ_external_net/subnets/integ_external_master_subnet",
+    "tectonic_azure_external_nsg_api_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/networkSecurityGroups/integ_external_sg_api",
+    "tectonic_azure_external_nsg_master_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/networkSecurityGroups/integ_external_sg_master",
+    "tectonic_azure_external_nsg_worker_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/networkSecurityGroups/integ_external_sg_worker",
+    "tectonic_azure_external_resource_group": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net",
+    "tectonic_azure_external_vnet_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/virtualNetworks/integ_external_net",
+    "tectonic_azure_external_worker_subnet_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/virtualNetworks/integ_external_net/subnets/integ_external_worker_subnet",
+    "tectonic_azure_location": "eastus",
+    "tectonic_azure_master_storage_type": "Standard_LRS",
+    "tectonic_azure_master_vm_size": "Standard_D2_v2",
+    "tectonic_azure_private_cluster": "false",
+    "tectonic_azure_worker_storage_type": "Standard_LRS",
+    "tectonic_azure_worker_vm_size": "Standard_D2_v2",
+    "tectonic_cluster_cidr": "10.2.0.0/16",
+    "tectonic_container_linux_channel": "stable",
+    "tectonic_etcd_count": "0",
+    "tectonic_self_hosted_etcd": "enabled",
+    "tectonic_master_count": "1",
+    "tectonic_service_cidr": "10.3.0.0/16",
+    "tectonic_vanilla_k8s": "false",
+    "tectonic_worker_count": "1"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%external.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%external.tfvars
new file mode 100644
index 0000000..44a3d54
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%external.tfvars
@@ -0,0 +1,23 @@
+{
+    "tectonic_azure_etcd_storage_type": "Standard_LRS",
+    "tectonic_azure_etcd_vm_size": "Standard_D2_v2",
+    "tectonic_azure_external_master_subnet_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/virtualNetworks/integ_external_net/subnets/integ_external_master_subnet",
+    "tectonic_azure_external_nsg_api_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/networkSecurityGroups/integ_external_sg_api",
+    "tectonic_azure_external_nsg_master_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/networkSecurityGroups/integ_external_sg_master",
+    "tectonic_azure_external_nsg_worker_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/networkSecurityGroups/integ_external_sg_worker",
+    "tectonic_azure_external_resource_group": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net",
+    "tectonic_azure_external_vnet_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/virtualNetworks/integ_external_net",
+    "tectonic_azure_external_worker_subnet_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/integ_external_net/providers/Microsoft.Network/virtualNetworks/integ_external_net/subnets/integ_external_worker_subnet",
+    "tectonic_azure_location": "eastus",
+    "tectonic_azure_master_storage_type": "Standard_LRS",
+    "tectonic_azure_master_vm_size": "Standard_D2_v2",
+    "tectonic_azure_worker_storage_type": "Standard_LRS",
+    "tectonic_azure_worker_vm_size": "Standard_D2_v2",
+    "tectonic_cluster_cidr": "10.2.0.0/16",
+    "tectonic_container_linux_channel": "stable",
+    "tectonic_etcd_count": "2",
+    "tectonic_master_count": "2",
+    "tectonic_service_cidr": "10.3.0.0/16",
+    "tectonic_vanilla_k8s": "false",
+    "tectonic_worker_count": "1"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%private-cluster.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%private-cluster.tfvars
new file mode 100644
index 0000000..481e1f5
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%private-cluster.tfvars
@@ -0,0 +1,10 @@
+{
+  "tectonic_azure_external_dns_zone_id": "/subscriptions/060bce24-f340-4249-a6c6-51a765e2e4c0/resourceGroups/long-term-dns-records-tectonic-ci/providers/Microsoft.Network/dnszones/azure.tectonic-ci.de",
+  "tectonic_azure_private_cluster": "true",
+  "tectonic_base_domain": "azure.tectonic-ci.de",
+  "tectonic_container_linux_channel": "stable",
+  "tectonic_azure_vnet_cidr_block": "10.0.0.0/16",
+  "tectonic_etcd_count": "1",
+  "tectonic_master_count": "2",
+  "tectonic_worker_count": "1"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%self-hosted-etcd.tfvars b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%self-hosted-etcd.tfvars
new file mode 100644
index 0000000..42422ab
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%azure%vars%self-hosted-etcd.tfvars
@@ -0,0 +1,17 @@
+{
+    "tectonic_azure_etcd_storage_type": "Standard_LRS",
+    "tectonic_azure_etcd_vm_size": "Standard_D2_v2",
+    "tectonic_azure_master_storage_type": "Standard_LRS",
+    "tectonic_azure_master_vm_size": "Standard_D2_v2",
+    "tectonic_azure_private_cluster": "false",
+    "tectonic_azure_worker_storage_type": "Standard_LRS",
+    "tectonic_azure_worker_vm_size": "Standard_D2_v2",
+    "tectonic_cluster_cidr": "10.2.0.0/16",
+    "tectonic_container_linux_channel": "stable",
+    "tectonic_etcd_count": "0",
+    "tectonic_self_hosted_etcd": "enabled",
+    "tectonic_master_count": "1",
+    "tectonic_service_cidr": "10.3.0.0/16",
+    "tectonic_vanilla_k8s": "false",
+    "tectonic_worker_count": "1"
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%bare-metal%packet%main.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%bare-metal%packet%main.tf
new file mode 100644
index 0000000..3d2b523
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%bare-metal%packet%main.tf
@@ -0,0 +1,147 @@
+// variables
+
+variable "project_id" {
+  type    = "string"
+  default = ""
+}
+
+variable "facility" {
+  type    = "string"
+  default = "ams1"
+}
+
+variable "plan" {
+  type    = "string"
+  default = "baremetal_1"
+}
+
+variable "hostname" {
+  type    = "string"
+  default = "tf"
+}
+
+variable "auth_token" {
+  type    = "string"
+  default = ""
+}
+
+variable "tectonic_pull_secret_path" {
+  type    = "string"
+  default = ""
+}
+
+variable "tectonic_license_path" {
+  type    = "string"
+  default = ""
+}
+
+variable "smoke_test" {
+  type    = "string"
+  default = ""
+}
+
+// output
+
+output "ip" {
+  value = "${lookup(packet_device.machine.network[0], "address")}"
+}
+
+// resources/datasources/providers
+
+resource "random_id" "hostname" {
+  byte_length = 4
+}
+
+provider "packet" {
+  auth_token = "${var.auth_token}"
+}
+
+resource "packet_device" "machine" {
+  hostname         = "${var.hostname}-${var.facility}-${random_id.hostname.hex}"
+  plan             = "${var.plan}"
+  facility         = "${var.facility}"
+  operating_system = "ubuntu_16_04"
+  billing_cycle    = "hourly"
+  project_id       = "${var.project_id}"
+}
+
+resource "null_resource" "tectonic" {
+  depends_on = ["packet_device.machine"]
+
+  connection {
+    type    = "ssh"
+    host    = "${lookup(packet_device.machine.network[0], "address")}"
+    user    = "root"
+    timeout = "60m"
+  }
+
+  provisioner "file" {
+    source      = "${var.tectonic_license_path}"
+    destination = "$HOME/tectonic-license"
+  }
+
+  provisioner "file" {
+    source      = "${var.tectonic_pull_secret_path}"
+    destination = "$HOME/pull-secret"
+  }
+
+  provisioner "file" {
+    destination = "$HOME/.bashrc"
+
+    content = <<EOF
+export BRANCH_NAME=master
+export BUILD_ID=1
+
+export TF_VAR_tectonic_pull_secret_path=/root/pull-secret
+export TF_VAR_tectonic_license_path=/root/tectonic-license
+
+export KUBECONFIG=/root/go/src/github.com/coreos/tectonic-installer/build/tf-metal-master-1/generated/auth/kubeconfig
+
+export PATH=$PATH:/root/go/src/github.com/coreos/tectonic-installer/bin_test
+which kubectl >/dev/null && source <(kubectl completion bash)
+EOF
+  }
+
+  provisioner "file" {
+    destination = "$HOME/install.sh"
+
+    content = <<EOF
+#/usr/bin/env bash
+
+set -e -x
+
+curl -OL https://github.com/rkt/rkt/releases/download/v1.26.0/rkt_1.26.0-1_amd64.deb
+dpkg -i $HOME/rkt_1.26.0-1_amd64.deb
+
+apt-get update -y
+apt-get install --no-install-recommends -y git unzip qemu-kvm qemu-utils libvirt-bin virtinst
+
+curl -sL https://deb.nodesource.com/setup_8.x | bash -
+apt-get install -y nodejs
+npm install -g yarn
+
+curl -O https://storage.googleapis.com/golang/go1.8.linux-amd64.tar.gz
+tar xzf $HOME/go1.8.linux-amd64.tar.gz
+mv $HOME/go /usr/local/go
+ln -sf /usr/local/go/bin/go /usr/bin/go
+
+mkdir -p $HOME/go/bin $HOME/go/pkg $HOME/go/src/github.com/coreos
+git clone https://github.com/coreos/tectonic-installer $HOME/go/src/github.com/coreos/tectonic-installer
+
+cd $HOME/go/src/github.com/coreos/tectonic-installer/installer
+make tools
+EOF
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "/bin/sh $HOME/install.sh",
+    ]
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "${var.smoke_test == "" ? "echo smoke test skipped" : "cd $HOME/go/src/github.com/coreos/tectonic-installer && ./tests/smoke/bare-metal/smoke.sh vars/${var.smoke_test}"}",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%user_provided_tls%tls.tf b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%user_provided_tls%tls.tf
new file mode 100644
index 0000000..afb0a4a
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%tectonic-installer%tests%smoke%user_provided_tls%tls.tf
@@ -0,0 +1,38 @@
+module "etcd_certs" {
+  source = "../../modules/tls/etcd/user-provided"
+
+  etcd_ca_crt_pem_path     = "../../tests/smoke/user_provided_tls/certs/etcd/etcd-ca.crt"
+  etcd_server_crt_pem_path = "../../tests/smoke/user_provided_tls/certs/etcd/etcd-server.crt"
+  etcd_server_key_pem_path = "../../tests/smoke/user_provided_tls/certs/etcd/etcd-server.key"
+  etcd_peer_crt_pem_path   = "../../tests/smoke/user_provided_tls/certs/etcd/etcd-peer.crt"
+  etcd_peer_key_pem_path   = "../../tests/smoke/user_provided_tls/certs/etcd/etcd-peer.key"
+  etcd_client_crt_pem_path = "../../tests/smoke/user_provided_tls/certs/etcd/etcd-client.crt"
+  etcd_client_key_pem_path = "../../tests/smoke/user_provided_tls/certs/etcd/etcd-client.key"
+}
+
+module "identity_certs" {
+  source = "../../modules/tls/identity/user-provided"
+
+  client_key_pem_path  = "../../tests/smoke/user_provided_tls/certs/identity/identity-client.key"
+  client_cert_pem_path = "../../tests/smoke/user_provided_tls/certs/identity/identity-client.crt"
+  server_key_pem_path  = "../../tests/smoke/user_provided_tls/certs/identity/identity-server.key"
+  server_cert_pem_path = "../../tests/smoke/user_provided_tls/certs/identity/identity-server.crt"
+}
+
+module "ingress_certs" {
+  source = "../../modules/tls/ingress/user-provided"
+
+  ca_cert_pem_path = "../../tests/smoke/user_provided_tls/certs/ingress/ca.crt"
+  cert_pem_path    = "../../tests/smoke/user_provided_tls/certs/ingress/ingress.crt"
+  key_pem_path     = "../../tests/smoke/user_provided_tls/certs/ingress/ingress.key"
+}
+
+module "kube_certs" {
+  source = "../../modules/tls/kube/user-provided"
+
+  ca_cert_pem_path        = "../../tests/smoke/user_provided_tls/certs/kube/ca.crt"
+  kubelet_cert_pem_path   = "../../tests/smoke/user_provided_tls/certs/kube/kubelet.crt"
+  kubelet_key_pem_path    = "../../tests/smoke/user_provided_tls/certs/kube/kubelet.key"
+  apiserver_cert_pem_path = "../../tests/smoke/user_provided_tls/certs/kube/apiserver.crt"
+  apiserver_key_pem_path  = "../../tests/smoke/user_provided_tls/certs/kube/apiserver.key"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%config.tf b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%config.tf
new file mode 100644
index 0000000..2c7636b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%config.tf
@@ -0,0 +1,533 @@
+terraform {
+  required_version = ">= 0.10.7"
+}
+
+provider "archive" {
+  version = "1.0.0"
+}
+
+provider "external" {
+  version = "1.0.0"
+}
+
+provider "ignition" {
+  version = "1.0.0"
+}
+
+provider "local" {
+  version = "1.0.0"
+}
+
+provider "null" {
+  version = "1.0.0"
+}
+
+provider "random" {
+  version = "1.0.0"
+}
+
+provider "template" {
+  version = "1.0.0"
+}
+
+provider "tls" {
+  version = "1.0.0"
+}
+
+locals {
+  // The total amount of public CA certificates present in Tectonic.
+  // That is all custom CAs + kube CA + etcd CA + ingress CA
+  // This is a local constant, which needs to be dependency inject because TF cannot handle length() on computed values,
+  // see https://github.com/hashicorp/terraform/issues/10857#issuecomment-268289775.
+  tectonic_ca_count = "${length(var.tectonic_custom_ca_pem_list) + 3}"
+}
+
+variable "tectonic_config_version" {
+  description = <<EOF
+(internal) This declares the version of the global configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_image_re" {
+  description = <<EOF
+(internal) Regular expression used to extract repo and tag components
+EOF
+
+  type    = "string"
+  default = "/^([^/]+/[^/]+/[^/]+):(.*)$/"
+}
+
+variable "tectonic_container_images" {
+  description = "(internal) Container images to use"
+  type        = "map"
+
+  default = {
+    addon_resizer                = "gcr.io/google_containers/addon-resizer:2.1"
+    awscli                       = "quay.io/coreos/awscli:025a357f05242fdad6a81e8a6b520098aa65a600"
+    gcloudsdk                    = "google/cloud-sdk:178.0.0-alpine"
+    bootkube                     = "quay.io/coreos/bootkube:v0.8.1"
+    calico                       = "quay.io/calico/node:v2.6.3"
+    calico_cni                   = "quay.io/calico/cni:v1.11.1"
+    console                      = "quay.io/coreos/tectonic-console:v2.4.0"
+    error_server                 = "quay.io/coreos/tectonic-error-server:1.0"
+    etcd                         = "quay.io/coreos/etcd:v3.1.8"
+    etcd_operator                = "quay.io/coreos/etcd-operator:v0.5.0"
+    flannel                      = "quay.io/coreos/flannel:v0.8.0-amd64"
+    flannel_cni                  = "quay.io/coreos/flannel-cni:v0.2.0"
+    heapster                     = "gcr.io/google_containers/heapster:v1.4.1"
+    hyperkube                    = "quay.io/coreos/hyperkube:v1.8.2_coreos.0"
+    identity                     = "quay.io/coreos/dex:v2.8.1"
+    ingress_controller           = "quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.9.0-beta.17"
+    kenc                         = "quay.io/coreos/kenc:0.0.2"
+    kubedns                      = "gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5"
+    kubednsmasq                  = "gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5"
+    kubedns_sidecar              = "gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5"
+    kube_version                 = "quay.io/coreos/kube-version:0.1.0"
+    kube_version_operator        = "quay.io/coreos/kube-version-operator:v1.7.9-kvo.6"
+    node_agent                   = "quay.io/coreos/node-agent:cd69b4a0f65b0d3a3b30edfce3bb184fd2a22c26"
+    pod_checkpointer             = "quay.io/coreos/pod-checkpointer:e22cc0e3714378de92f45326474874eb602ca0ac"
+    stats_emitter                = "quay.io/coreos/tectonic-stats:6e882361357fe4b773adbf279cddf48cb50164c1"
+    stats_extender               = "quay.io/coreos/tectonic-stats-extender:487b3da4e175da96dabfb44fba65cdb8b823db2e"
+    tectonic_channel_operator    = "quay.io/coreos/tectonic-channel-operator:0.5.4"
+    tectonic_etcd_operator       = "quay.io/coreos/tectonic-etcd-operator:v0.0.2"
+    tectonic_prometheus_operator = "quay.io/coreos/tectonic-prometheus-operator:v1.8.0"
+    tectonic_cluo_operator       = "quay.io/coreos/tectonic-cluo-operator:v0.2.5"
+    tectonic_torcx               = "quay.io/coreos/tectonic-torcx:v0.2.0"
+    kubernetes_addon_operator    = "quay.io/coreos/kubernetes-addon-operator:54a613dae60a068aa83c0361319c804ee366a228"
+  }
+}
+
+variable "tectonic_container_base_images" {
+  description = "(internal) Base images of the components to use"
+  type        = "map"
+
+  default = {
+    tectonic_monitoring_auth = "quay.io/coreos/tectonic-monitoring-auth"
+    config_reload            = "quay.io/coreos/configmap-reload"
+    addon_resizer            = "quay.io/coreos/addon-resizer"
+    kube_state_metrics       = "quay.io/coreos/kube-state-metrics"
+    grafana                  = "quay.io/coreos/grafana-monitoring"
+    grafana_watcher          = "quay.io/coreos/grafana-watcher"
+    prometheus_operator      = "quay.io/coreos/prometheus-operator"
+    prometheus_config_reload = "quay.io/coreos/prometheus-config-reloader"
+    prometheus               = "quay.io/prometheus/prometheus"
+    alertmanager             = "quay.io/prometheus/alertmanager"
+    node_exporter            = "quay.io/prometheus/node-exporter"
+  }
+}
+
+variable "tectonic_versions" {
+  description = "(internal) Versions of the components to use"
+  type        = "map"
+
+  default = {
+    etcd             = "3.1.8"
+    kubernetes       = "1.7.9+tectonic.2"
+    monitoring       = "1.8.0"
+    tectonic         = "1.8.2-tectonic.1"
+    tectonic-etcd    = "0.0.1"
+    cluo             = "0.2.5"
+    kubernetes_addon = "0.0.0"
+  }
+}
+
+variable "tectonic_service_cidr" {
+  type    = "string"
+  default = "10.3.0.0/16"
+
+  description = <<EOF
+(optional) This declares the IP range to assign Kubernetes service cluster IPs in CIDR notation.
+The maximum size of this IP range is /12
+EOF
+}
+
+variable "tectonic_cluster_cidr" {
+  type    = "string"
+  default = "10.2.0.0/16"
+
+  description = "(optional) This declares the IP range to assign Kubernetes pod IPs in CIDR notation."
+}
+
+variable "tectonic_master_count" {
+  type    = "string"
+  default = "1"
+
+  description = <<EOF
+The number of master nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_worker_count" {
+  type    = "string"
+  default = "3"
+
+  description = <<EOF
+The number of worker nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_etcd_count" {
+  type    = "string"
+  default = "0"
+
+  description = <<EOF
+The number of etcd nodes to be created.
+If set to zero, the count of etcd nodes will be determined automatically.
+
+Note: This is not supported on bare metal.
+EOF
+}
+
+variable "tectonic_etcd_servers" {
+  description = <<EOF
+(optional) List of external etcd v3 servers to connect with (hostnames/IPs only).
+Needs to be set if using an external etcd cluster.
+Note: If this variable is defined, the installer will not create self-signed certs.
+To provide a CA certificate to trust the etcd servers, set "tectonic_etcd_ca_cert_path".
+
+Example: `["etcd1", "etcd2", "etcd3"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_etcd_tls_enabled" {
+  default = true
+
+  description = <<EOF
+(optional) If set to `true`, all etcd endpoints will be configured to use the "https" scheme.
+
+Note: If `tectonic_experimental` is set to `true` this variable has no effect, because the experimental self-hosted etcd always uses TLS.
+EOF
+}
+
+variable "tectonic_etcd_ca_cert_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the CA certificate for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variable `tectonic_etcd_servers` must also be set.
+EOF
+}
+
+variable "tectonic_etcd_client_cert_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the client certificate for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_key_path` must also be set.
+EOF
+}
+
+variable "tectonic_etcd_client_key_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the client key for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_cert_path` must also be set.
+EOF
+}
+
+variable "tectonic_base_domain" {
+  type = "string"
+
+  description = <<EOF
+The base DNS domain of the cluster. It must NOT contain a trailing period. Some
+DNS providers will automatically add this if necessary.
+
+Example: `openstack.dev.coreos.systems`.
+
+Note: This field MUST be set manually prior to creating the cluster.
+This applies only to cloud platforms.
+
+[Azure-specific NOTE]
+To use Azure-provided DNS, `tectonic_base_domain` should be set to `""`
+If using DNS records, ensure that `tectonic_base_domain` is set to a properly configured external DNS zone.
+Instructions for configuring delegated domains for Azure DNS can be found here: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
+EOF
+}
+
+variable "tectonic_cluster_name" {
+  type = "string"
+
+  description = <<EOF
+The name of the cluster.
+If used in a cloud-environment, this will be prepended to `tectonic_base_domain` resulting in the URL to the Tectonic console.
+
+Note: This field MUST be set manually prior to creating the cluster.
+Warning: Special characters in the name like '.' may cause errors on OpenStack platforms due to resource name constraints.
+EOF
+}
+
+variable "tectonic_pull_secret_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path the pull secret file in JSON format.
+This is known to be a "Docker pull secret" as produced by the docker login [1] command.
+A sample JSON content is shown in [2].
+You can download the pull secret from your Account overview page at [3].
+
+[1] https://docs.docker.com/engine/reference/commandline/login/
+
+[2] https://coreos.com/os/docs/latest/registry-authentication.html#manual-registry-auth-setup
+
+[3] https://account.coreos.com/overview
+
+Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+EOF
+}
+
+variable "tectonic_license_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path to the tectonic licence file.
+You can download the Tectonic license file from your Account overview page at [1].
+
+[1] https://account.coreos.com/overview
+
+Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+EOF
+}
+
+variable "tectonic_container_linux_channel" {
+  type    = "string"
+  default = "stable"
+
+  description = <<EOF
+(optional) The Container Linux update channel.
+
+Examples: `stable`, `beta`, `alpha`
+EOF
+}
+
+variable "tectonic_container_linux_version" {
+  type    = "string"
+  default = "latest"
+
+  description = <<EOF
+The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+
+Examples: `latest`, `1465.6.0`
+EOF
+}
+
+variable "tectonic_update_server" {
+  type        = "string"
+  default     = "https://tectonic.update.core-os.net"
+  description = "(internal) The URL of the Tectonic Omaha update server"
+}
+
+variable "tectonic_update_channel" {
+  type        = "string"
+  default     = "tectonic-1.7-production"
+  description = "(internal) The Tectonic Omaha update channel"
+}
+
+variable "tectonic_update_app_id" {
+  type        = "string"
+  default     = "6bc7b986-4654-4a0f-94b3-84ce6feb1db4"
+  description = "(internal) The Tectonic Omaha update App ID"
+}
+
+variable "tectonic_admin_email" {
+  type = "string"
+
+  description = <<EOF
+(internal) The e-mail address used to:
+1. login as the admin user to the Tectonic Console.
+2. generate DNS zones for some providers.
+
+Note: This field MUST be in all lower-case e-mail address format and set manually prior to creating the cluster.
+EOF
+}
+
+variable "tectonic_admin_password" {
+  type = "string"
+
+  description = <<EOF
+(internal) The admin user password to login to the Tectonic Console.
+
+Note: This field MUST be set manually prior to creating the cluster. Backslashes and double quotes must
+also be escaped.
+EOF
+}
+
+variable "tectonic_ca_cert" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA certificate, used to generate Tectonic Console's server certificate.
+If left blank, a CA certificate will be automatically generated.
+EOF
+}
+
+variable "tectonic_ca_key" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA key, used to generate Tectonic Console's server certificate.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_ca_key_alg" {
+  type    = "string"
+  default = "RSA"
+
+  description = <<EOF
+(optional) The algorithm used to generate tectonic_ca_key.
+The default value is currently recommended.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_tls_validity_period" {
+  type    = "string"
+  default = "26280"
+
+  description = <<EOF
+Validity period of the self-signed certificates (in hours).
+Default is 3 years.
+This setting is ignored if user provided certificates are used.
+EOF
+}
+
+variable "tectonic_vanilla_k8s" {
+  default = false
+
+  description = <<EOF
+If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+EOF
+}
+
+variable "tectonic_stats_url" {
+  type        = "string"
+  default     = "https://stats-collector.tectonic.com"
+  description = "(internal) The Tectonic statistics collection URL to which to report."
+}
+
+variable "tectonic_ddns_server" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server IP/host to register IP addresses to.
+EOF
+}
+
+variable "tectonic_ddns_key_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key name.
+EOF
+}
+
+variable "tectonic_ddns_key_algorithm" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key algorithm.
+EOF
+}
+
+variable "tectonic_ddns_key_secret" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key secret.
+EOF
+}
+
+variable "tectonic_networking" {
+  default = "flannel"
+
+  description = <<EOF
+(optional) Configures the network to be used in Tectonic. One of the following values can be used:
+
+- "flannel": enables overlay networking only. This is implemented by flannel using VXLAN.
+
+- "canal": [ALPHA] enables overlay networking including network policy. Overlay is implemented by flannel using VXLAN. Network policy is implemented by Calico.
+
+- "calico": [ALPHA] enables BGP based networking. Routing and network policy is implemented by Calico. Note this has been tested on baremetal installations only.
+EOF
+}
+
+variable "tectonic_self_hosted_etcd" {
+  default = ""
+
+  description = <<EOF
+(internal) [ALPHA] If set to one of the following values, self-hosted etcd is deployed:
+
+- "enabled": Deploys a self-hosted etcd cluster.
+
+- "pv_backup": Deploys a self-hosted etcd cluster including backups to Persistence Volumes.
+`tectonic_etcd_backup_size` and `tectonic_etcd_backup_storage_class` must be configured when using this setting.
+EOF
+}
+
+variable "tectonic_etcd_backup_size" {
+  type        = "string"
+  description = "(optional) The size in MB of the PersistentVolume used for handling etcd backups."
+  default     = "512"
+}
+
+variable "tectonic_etcd_backup_storage_class" {
+  type        = "string"
+  default     = ""
+  description = "(optional) The name of an existing Kubernetes StorageClass that will be used for handling etcd backups."
+}
+
+variable "tectonic_bootstrap_upgrade_cl" {
+  type        = "string"
+  default     = "true"
+  description = "(internal) Whether to trigger a ContainerLinux upgrade on node bootstrap."
+}
+
+variable "tectonic_kubelet_debug_config" {
+  type    = "string"
+  default = ""
+
+  description = "(internal) debug flags for the kubelet (used in CI only)"
+}
+
+variable "tectonic_custom_ca_pem_list" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) A list of PEM encoded CA files that will be installed in /etc/ssl/certs on etcd, master, and worker nodes.
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%examples%kubernetes.tf b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%examples%kubernetes.tf
new file mode 100644
index 0000000..1ce8e0b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%examples%kubernetes.tf
@@ -0,0 +1,332 @@
+# DO NOT EDIT. THIS FILE IS GENERATED BY THE MAKEFILE.
+module "kubernetes" {
+  source = "coreos/kubernetes/aws"
+
+  // (optional) Extra AWS tags to be applied to created autoscaling group resources.
+  // This is a list of maps having the keys `key`, `value` and `propagate_at_launch`.
+  // 
+  // Example: `[ { key = "foo", value = "bar", propagate_at_launch = true } ]`
+  // tectonic_autoscaling_group_extra_tags = ""
+
+
+  // (optional) Unique name under which the Amazon S3 bucket will be created. Bucket name must start with a lower case name and is limited to 63 characters.
+  // The Tectonic Installer uses the bucket to store tectonic assets and kubeconfig.
+  // If name is not provided the installer will construct the name using "tectonic_cluster_name", current AWS region and "tectonic_base_domain"
+  // tectonic_aws_assets_s3_bucket_name = ""
+
+  // Instance size for the etcd node(s). Example: `t2.medium`. Read the [etcd recommended hardware](https://coreos.com/etcd/docs/latest/op-guide/hardware.html) guide for best performance
+  tectonic_aws_etcd_ec2_type = "t2.medium"
+
+  // (optional) List of additional security group IDs for etcd nodes.
+  // 
+  // Example: `["sg-51530134", "sg-b253d7cc"]`
+  // tectonic_aws_etcd_extra_sg_ids = ""
+
+  // The amount of provisioned IOPS for the root block device of etcd nodes.
+  // Ignored if the volume type is not io1.
+  tectonic_aws_etcd_root_volume_iops = "100"
+  // The size of the volume in gigabytes for the root block device of etcd nodes.
+  tectonic_aws_etcd_root_volume_size = "30"
+  // The type of volume for the root block device of etcd nodes.
+  tectonic_aws_etcd_root_volume_type = "gp2"
+
+  // (optional) List of subnet IDs within an existing VPC to deploy master nodes into.
+  // Required to use an existing VPC and the list must match the AZ count.
+  // 
+  // Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+  // tectonic_aws_external_master_subnet_ids = ""
+
+
+  // (optional) If set, the given Route53 zone ID will be used as the internal (private) zone.
+  // This zone will be used to create etcd DNS records as well as internal API and internal Ingress records.
+  // If set, no additional private zone will be created.
+  // 
+  // Example: `"Z1ILINNUJGTAO1"`
+  // tectonic_aws_external_private_zone = ""
+
+
+  // (optional) ID of an existing VPC to launch nodes into.
+  // If unset a new VPC is created.
+  // 
+  // Example: `vpc-123456`
+  // tectonic_aws_external_vpc_id = ""
+
+
+  // (optional) List of subnet IDs within an existing VPC to deploy worker nodes into.
+  // Required to use an existing VPC and the list must match the AZ count.
+  // 
+  // Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+  // tectonic_aws_external_worker_subnet_ids = ""
+
+
+  // (optional) Extra AWS tags to be applied to created resources.
+  // tectonic_aws_extra_tags = ""
+
+
+  // (optional) This configures master availability zones and their corresponding subnet CIDRs directly.
+  // 
+  // Example:
+  // `{ eu-west-1a = "10.0.0.0/20", eu-west-1b = "10.0.16.0/20" }`
+  // tectonic_aws_master_custom_subnets = ""
+
+  // Instance size for the master node(s). Example: `t2.medium`.
+  tectonic_aws_master_ec2_type = "t2.medium"
+
+  // (optional) List of additional security group IDs for master nodes.
+  // 
+  // Example: `["sg-51530134", "sg-b253d7cc"]`
+  // tectonic_aws_master_extra_sg_ids = ""
+
+
+  // (optional) Name of IAM role to use for the instance profiles of master nodes.
+  // The name is also the last part of a role's ARN.
+  // 
+  // Example:
+  //  * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+  //  * Role Name = tectonic-installer
+  // tectonic_aws_master_iam_role_name = ""
+
+  // The amount of provisioned IOPS for the root block device of master nodes.
+  // Ignored if the volume type is not io1.
+  tectonic_aws_master_root_volume_iops = "100"
+  // The size of the volume in gigabytes for the root block device of master nodes.
+  tectonic_aws_master_root_volume_size = "30"
+  // The type of volume for the root block device of master nodes.
+  tectonic_aws_master_root_volume_type = "gp2"
+
+  // (optional) If set to true, create private-facing ingress resources (ELB, A-records).
+  // If set to false, no private-facing ingress resources will be provisioned and all DNS records will be created in the public Route53 zone.
+  // tectonic_aws_private_endpoints = true
+
+
+  // (optional) This declares the AWS credentials profile to use.
+  // tectonic_aws_profile = "default"
+
+
+  // (optional) If set to true, create public-facing ingress resources (ELB, A-records).
+  // If set to false, no public-facing ingress resources will be created.
+  // tectonic_aws_public_endpoints = true
+
+  // The target AWS region for the cluster.
+  tectonic_aws_region = "eu-west-1"
+  // Name of an SSH key located within the AWS region. Example: coreos-user.
+  tectonic_aws_ssh_key = ""
+  // Block of IP addresses used by the VPC.
+  // This should not overlap with any other networks, such as a private datacenter connected via Direct Connect.
+  tectonic_aws_vpc_cidr_block = "10.0.0.0/16"
+
+  // (optional) This configures worker availability zones and their corresponding subnet CIDRs directly.
+  // 
+  // Example: `{ eu-west-1a = "10.0.64.0/20", eu-west-1b = "10.0.80.0/20" }`
+  // tectonic_aws_worker_custom_subnets = ""
+
+  // Instance size for the worker node(s). Example: `t2.medium`.
+  tectonic_aws_worker_ec2_type = "t2.medium"
+
+  // (optional) List of additional security group IDs for worker nodes.
+  // 
+  // Example: `["sg-51530134", "sg-b253d7cc"]`
+  // tectonic_aws_worker_extra_sg_ids = ""
+
+
+  // (optional) Name of IAM role to use for the instance profiles of worker nodes.
+  // The name is also the last part of a role's ARN.
+  // 
+  // Example:
+  //  * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+  //  * Role Name = tectonic-installer
+  // tectonic_aws_worker_iam_role_name = ""
+
+
+  // (optional) List of ELBs to attach all worker instances to.
+  // This is useful for exposing NodePort services via load-balancers managed separately from the cluster.
+  // 
+  // Example:
+  //  * `["ingress-nginx"]`
+  // tectonic_aws_worker_load_balancers = ""
+
+  // The amount of provisioned IOPS for the root block device of worker nodes.
+  // Ignored if the volume type is not io1.
+  tectonic_aws_worker_root_volume_iops = "100"
+  // The size of the volume in gigabytes for the root block device of worker nodes.
+  tectonic_aws_worker_root_volume_size = "30"
+  // The type of volume for the root block device of worker nodes.
+  tectonic_aws_worker_root_volume_type = "gp2"
+  // The base DNS domain of the cluster. It must NOT contain a trailing period. Some
+  // DNS providers will automatically add this if necessary.
+  // 
+  // Example: `openstack.dev.coreos.systems`.
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster.
+  // This applies only to cloud platforms.
+  // 
+  // [Azure-specific NOTE]
+  // To use Azure-provided DNS, `tectonic_base_domain` should be set to `""`
+  // If using DNS records, ensure that `tectonic_base_domain` is set to a properly configured external DNS zone.
+  // Instructions for configuring delegated domains for Azure DNS can be found here: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
+  tectonic_base_domain = ""
+
+  // (optional) The content of the PEM-encoded CA certificate, used to generate Tectonic Console's server certificate.
+  // If left blank, a CA certificate will be automatically generated.
+  // tectonic_ca_cert = ""
+
+
+  // (optional) The content of the PEM-encoded CA key, used to generate Tectonic Console's server certificate.
+  // This field is mandatory if `tectonic_ca_cert` is set.
+  // tectonic_ca_key = ""
+
+
+  // (optional) The algorithm used to generate tectonic_ca_key.
+  // The default value is currently recommended.
+  // This field is mandatory if `tectonic_ca_cert` is set.
+  // tectonic_ca_key_alg = "RSA"
+
+
+  // (optional) This declares the IP range to assign Kubernetes pod IPs in CIDR notation.
+  // tectonic_cluster_cidr = "10.2.0.0/16"
+
+  // The name of the cluster.
+  // If used in a cloud-environment, this will be prepended to `tectonic_base_domain` resulting in the URL to the Tectonic console.
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster.
+  // Warning: Special characters in the name like '.' may cause errors on OpenStack platforms due to resource name constraints.
+  tectonic_cluster_name = ""
+
+  // (optional) The Container Linux update channel.
+  // 
+  // Examples: `stable`, `beta`, `alpha`
+  // tectonic_container_linux_channel = "stable"
+
+  // The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+  // 
+  // Examples: `latest`, `1465.6.0`
+  tectonic_container_linux_version = "latest"
+
+  // (optional) A list of PEM encoded CA files that will be installed in /etc/ssl/certs on etcd, master, and worker nodes.
+  // tectonic_custom_ca_pem_list = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server key algorithm.
+  // tectonic_ddns_key_algorithm = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server key name.
+  // tectonic_ddns_key_name = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server key secret.
+  // tectonic_ddns_key_secret = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server IP/host to register IP addresses to.
+  // tectonic_ddns_server = ""
+
+
+  // (optional) DNS prefix used to construct the console and API server endpoints.
+  // tectonic_dns_name = ""
+
+
+  // (optional) The size in MB of the PersistentVolume used for handling etcd backups.
+  // tectonic_etcd_backup_size = "512"
+
+
+  // (optional) The name of an existing Kubernetes StorageClass that will be used for handling etcd backups.
+  // tectonic_etcd_backup_storage_class = ""
+
+
+  // (optional) The path of the file containing the CA certificate for TLS communication with etcd.
+  // 
+  // Note: This works only when used in conjunction with an external etcd cluster.
+  // If set, the variable `tectonic_etcd_servers` must also be set.
+  // tectonic_etcd_ca_cert_path = "/dev/null"
+
+
+  // (optional) The path of the file containing the client certificate for TLS communication with etcd.
+  // 
+  // Note: This works only when used in conjunction with an external etcd cluster.
+  // If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_key_path` must also be set.
+  // tectonic_etcd_client_cert_path = "/dev/null"
+
+
+  // (optional) The path of the file containing the client key for TLS communication with etcd.
+  // 
+  // Note: This works only when used in conjunction with an external etcd cluster.
+  // If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_cert_path` must also be set.
+  // tectonic_etcd_client_key_path = "/dev/null"
+
+  // The number of etcd nodes to be created.
+  // If set to zero, the count of etcd nodes will be determined automatically.
+  // 
+  // Note: This is not supported on bare metal.
+  tectonic_etcd_count = "0"
+
+  // (optional) List of external etcd v3 servers to connect with (hostnames/IPs only).
+  // Needs to be set if using an external etcd cluster.
+  // Note: If this variable is defined, the installer will not create self-signed certs.
+  // To provide a CA certificate to trust the etcd servers, set "tectonic_etcd_ca_cert_path".
+  // 
+  // Example: `["etcd1", "etcd2", "etcd3"]`
+  // tectonic_etcd_servers = ""
+
+
+  // (optional) If set to `true`, all etcd endpoints will be configured to use the "https" scheme.
+  // 
+  // Note: If `tectonic_experimental` is set to `true` this variable has no effect, because the experimental self-hosted etcd always uses TLS.
+  // tectonic_etcd_tls_enabled = true
+
+  // The path to the tectonic licence file.
+  // You can download the Tectonic license file from your Account overview page at [1].
+  // 
+  // [1] https://account.coreos.com/overview
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+  tectonic_license_path = ""
+  // The number of master nodes to be created.
+  // This applies only to cloud platforms.
+  tectonic_master_count = "1"
+
+  // (optional) Configures the network to be used in Tectonic. One of the following values can be used:
+  // 
+  // - "flannel": enables overlay networking only. This is implemented by flannel using VXLAN.
+  // 
+  // - "canal": [ALPHA] enables overlay networking including network policy. Overlay is implemented by flannel using VXLAN. Network policy is implemented by Calico.
+  // 
+  // - "calico": [ALPHA] enables BGP based networking. Routing and network policy is implemented by Calico. Note this has been tested on baremetal installations only.
+  // tectonic_networking = "flannel"
+
+  // The path the pull secret file in JSON format.
+  // This is known to be a "Docker pull secret" as produced by the docker login [1] command.
+  // A sample JSON content is shown in [2].
+  // You can download the pull secret from your Account overview page at [3].
+  // 
+  // [1] https://docs.docker.com/engine/reference/commandline/login/
+  // 
+  // [2] https://coreos.com/os/docs/latest/registry-authentication.html#manual-registry-auth-setup
+  // 
+  // [3] https://account.coreos.com/overview
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+  tectonic_pull_secret_path = ""
+
+  // (optional) This declares the IP range to assign Kubernetes service cluster IPs in CIDR notation.
+  // The maximum size of this IP range is /12
+  // tectonic_service_cidr = "10.3.0.0/16"
+
+  // Validity period of the self-signed certificates (in hours).
+  // Default is 3 years.
+  // This setting is ignored if user provided certificates are used.
+  tectonic_tls_validity_period = "26280"
+  // If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+  tectonic_vanilla_k8s = false
+  // The number of worker nodes to be created.
+  // This applies only to cloud platforms.
+  tectonic_worker_count = "3"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%main.tf b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%main.tf
new file mode 100644
index 0000000..1db8637
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%main.tf
@@ -0,0 +1,246 @@
+provider "aws" {
+  region  = "${var.tectonic_aws_region}"
+  profile = "${var.tectonic_aws_profile}"
+  version = "1.1.0"
+}
+
+data "aws_availability_zones" "azs" {}
+
+module "container_linux" {
+  source = "github.com/coreos/tectonic-installer//modules/container_linux?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+module "vpc" {
+  source = "github.com/coreos/tectonic-installer//modules/aws/vpc?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  base_domain              = "${var.tectonic_base_domain}"
+  cidr_block               = "${var.tectonic_aws_vpc_cidr_block}"
+  cluster_id               = "${module.tectonic.cluster_id}"
+  cluster_name             = "${var.tectonic_cluster_name}"
+  custom_dns_name          = "${var.tectonic_dns_name}"
+  enable_etcd_sg           = "${var.tectonic_self_hosted_etcd == "" && length(compact(var.tectonic_etcd_servers)) == 0 ? 1 : 0}"
+  external_master_subnets  = "${compact(var.tectonic_aws_external_master_subnet_ids)}"
+  external_vpc_id          = "${var.tectonic_aws_external_vpc_id}"
+  external_worker_subnets  = "${compact(var.tectonic_aws_external_worker_subnet_ids)}"
+  extra_tags               = "${var.tectonic_aws_extra_tags}"
+  private_master_endpoints = "${var.tectonic_aws_private_endpoints}"
+  public_master_endpoints  = "${var.tectonic_aws_public_endpoints}"
+
+  # VPC layout settings.
+  #
+  # The following parameters control the layout of the VPC accross availability zones.
+  # Two modes are available:
+  # A. Explicitly configure a list of AZs + associated subnet CIDRs
+  # B. Let the module calculate subnets accross a set number of AZs
+  #
+  # To enable mode A, configure a set of AZs + CIDRs for masters and workers using the
+  # "tectonic_aws_master_custom_subnets" and "tectonic_aws_worker_custom_subnets" variables.
+  #
+  # To enable mode B, make sure that "tectonic_aws_master_custom_subnets" and "tectonic_aws_worker_custom_subnets"
+  # ARE NOT SET.
+
+  # These counts could be deducted by length(keys(var.tectonic_aws_master_custom_subnets))
+  # but there is a restriction on passing computed values as counts. This approach works around that.
+  master_az_count = "${length(keys(var.tectonic_aws_master_custom_subnets)) > 0 ? "${length(keys(var.tectonic_aws_master_custom_subnets))}" : "${length(data.aws_availability_zones.azs.names)}"}"
+  worker_az_count = "${length(keys(var.tectonic_aws_worker_custom_subnets)) > 0 ? "${length(keys(var.tectonic_aws_worker_custom_subnets))}" : "${length(data.aws_availability_zones.azs.names)}"}"
+  # The appending of the "padding" element is required as workaround since the function
+  # element() won't work on empty lists. See https://github.com/hashicorp/terraform/issues/11210
+  master_subnets = "${concat(values(var.tectonic_aws_master_custom_subnets),list("padding"))}"
+  worker_subnets = "${concat(values(var.tectonic_aws_worker_custom_subnets),list("padding"))}"
+  # The split() / join() trick works around the limitation of ternary operator expressions
+  # only being able to return strings.
+  master_azs = "${ split("|", "${length(keys(var.tectonic_aws_master_custom_subnets))}" > 0 ?
+    join("|", keys(var.tectonic_aws_master_custom_subnets)) :
+    join("|", data.aws_availability_zones.azs.names)
+  )}"
+  worker_azs = "${ split("|", "${length(keys(var.tectonic_aws_worker_custom_subnets))}" > 0 ?
+    join("|", keys(var.tectonic_aws_worker_custom_subnets)) :
+    join("|", data.aws_availability_zones.azs.names)
+  )}"
+}
+
+module "etcd" {
+  source = "github.com/coreos/tectonic-installer//modules/aws/etcd?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  base_domain             = "${var.tectonic_base_domain}"
+  cluster_id              = "${module.tectonic.cluster_id}"
+  cluster_name            = "${var.tectonic_cluster_name}"
+  container_image         = "${var.tectonic_container_images["etcd"]}"
+  container_linux_channel = "${var.tectonic_container_linux_channel}"
+  container_linux_version = "${module.container_linux.version}"
+  ec2_type                = "${var.tectonic_aws_etcd_ec2_type}"
+  external_endpoints      = "${compact(var.tectonic_etcd_servers)}"
+  extra_tags              = "${var.tectonic_aws_extra_tags}"
+  ign_etcd_crt_id_list    = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list = "${module.ignition_masters.etcd_dropin_id_list}"
+  instance_count          = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  root_volume_iops        = "${var.tectonic_aws_etcd_root_volume_iops}"
+  root_volume_size        = "${var.tectonic_aws_etcd_root_volume_size}"
+  root_volume_type        = "${var.tectonic_aws_etcd_root_volume_type}"
+  s3_bucket               = "${aws_s3_bucket.tectonic.bucket}"
+  sg_ids                  = "${concat(var.tectonic_aws_etcd_extra_sg_ids, list(module.vpc.etcd_sg_id))}"
+  ssh_key                 = "${var.tectonic_aws_ssh_key}"
+  subnets                 = "${module.vpc.worker_subnet_ids}"
+  tls_enabled             = "${var.tectonic_etcd_tls_enabled}"
+}
+
+module "ignition_masters" {
+  source = "github.com/coreos/tectonic-installer//modules/ignition?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  assets_location           = "${aws_s3_bucket_object.tectonic_assets.bucket}/${aws_s3_bucket_object.tectonic_assets.key}"
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider            = "aws"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubeconfig_fetch_cmd      = "/opt/s3-puller.sh ${aws_s3_bucket_object.kubeconfig.bucket}/${aws_s3_bucket_object.kubeconfig.key} /etc/kubernetes/kubeconfig"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "masters" {
+  source = "github.com/coreos/tectonic-installer//modules/aws/master-asg?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  assets_s3_location                   = "${aws_s3_bucket_object.tectonic_assets.bucket}/${aws_s3_bucket_object.tectonic_assets.key}"
+  autoscaling_group_extra_tags         = "${var.tectonic_autoscaling_group_extra_tags}"
+  aws_lbs                              = "${module.vpc.aws_lbs}"
+  base_domain                          = "${var.tectonic_base_domain}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_images                     = "${var.tectonic_container_images}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  ec2_type                             = "${var.tectonic_aws_master_ec2_type}"
+  extra_tags                           = "${var.tectonic_aws_extra_tags}"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_init_assets_service_id           = "${module.ignition_masters.init_assets_service_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_rm_assets_path_unit_id           = "${module.ignition_masters.rm_assets_path_unit_id}"
+  ign_rm_assets_service_id             = "${module.ignition_masters.rm_assets_service_id}"
+  ign_s3_puller_id                     = "${module.ignition_masters.s3_puller_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  image_re                             = "${var.tectonic_image_re}"
+  instance_count                       = "${var.tectonic_master_count}"
+  master_iam_role                      = "${var.tectonic_aws_master_iam_role_name}"
+  master_sg_ids                        = "${concat(var.tectonic_aws_master_extra_sg_ids, list(module.vpc.master_sg_id))}"
+  private_endpoints                    = "${var.tectonic_aws_private_endpoints}"
+  public_endpoints                     = "${var.tectonic_aws_public_endpoints}"
+  root_volume_iops                     = "${var.tectonic_aws_master_root_volume_iops}"
+  root_volume_size                     = "${var.tectonic_aws_master_root_volume_size}"
+  root_volume_type                     = "${var.tectonic_aws_master_root_volume_type}"
+  s3_bucket                            = "${aws_s3_bucket.tectonic.bucket}"
+  ssh_key                              = "${var.tectonic_aws_ssh_key}"
+  subnet_ids                           = "${module.vpc.master_subnet_ids}"
+}
+
+module "ignition_workers" {
+  source = "github.com/coreos/tectonic-installer//modules/ignition?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider          = "aws"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  image_re                = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kubeconfig_fetch_cmd    = "/opt/s3-puller.sh ${aws_s3_bucket_object.kubeconfig.bucket}/${aws_s3_bucket_object.kubeconfig.key} /etc/kubernetes/kubeconfig"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "workers" {
+  source = "github.com/coreos/tectonic-installer//modules/aws/worker-asg?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  autoscaling_group_extra_tags         = "${var.tectonic_autoscaling_group_extra_tags}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  ec2_type                             = "${var.tectonic_aws_worker_ec2_type}"
+  extra_tags                           = "${var.tectonic_aws_extra_tags}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_s3_puller_id                     = "${module.ignition_workers.s3_puller_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  instance_count                       = "${var.tectonic_worker_count}"
+  load_balancers                       = "${var.tectonic_aws_worker_load_balancers}"
+  root_volume_iops                     = "${var.tectonic_aws_worker_root_volume_iops}"
+  root_volume_size                     = "${var.tectonic_aws_worker_root_volume_size}"
+  root_volume_type                     = "${var.tectonic_aws_worker_root_volume_type}"
+  s3_bucket                            = "${aws_s3_bucket.tectonic.bucket}"
+  sg_ids                               = "${concat(var.tectonic_aws_worker_extra_sg_ids, list(module.vpc.worker_sg_id))}"
+  ssh_key                              = "${var.tectonic_aws_ssh_key}"
+  subnet_ids                           = "${module.vpc.worker_subnet_ids}"
+  vpc_id                               = "${module.vpc.vpc_id}"
+  worker_iam_role                      = "${var.tectonic_aws_worker_iam_role_name}"
+}
+
+module "dns" {
+  source = "github.com/coreos/tectonic-installer//modules/dns/route53?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  api_external_elb_dns_name      = "${module.vpc.aws_api_external_dns_name}"
+  api_external_elb_zone_id       = "${module.vpc.aws_elb_api_external_zone_id}"
+  api_internal_elb_dns_name      = "${module.vpc.aws_api_internal_dns_name}"
+  api_internal_elb_zone_id       = "${module.vpc.aws_elb_api_internal_zone_id}"
+  api_ip_addresses               = "${module.vpc.aws_lbs}"
+  base_domain                    = "${var.tectonic_base_domain}"
+  cluster_id                     = "${module.tectonic.cluster_id}"
+  cluster_name                   = "${var.tectonic_cluster_name}"
+  console_elb_dns_name           = "${module.vpc.aws_console_dns_name}"
+  console_elb_zone_id            = "${module.vpc.aws_elb_onsole_zone_id}"
+  custom_dns_name                = "${var.tectonic_dns_name}"
+  elb_alias_enabled              = true
+  etcd_count                     = "${length(data.template_file.etcd_hostname_list.*.id)}"
+  etcd_ip_addresses              = "${module.etcd.ip_addresses}"
+  external_endpoints             = ["${compact(var.tectonic_etcd_servers)}"]
+  master_count                   = "${var.tectonic_master_count}"
+  tectonic_external_private_zone = "${var.tectonic_aws_external_private_zone}"
+  tectonic_external_vpc_id       = "${module.vpc.vpc_id}"
+  tectonic_extra_tags            = "${var.tectonic_aws_extra_tags}"
+  tectonic_private_endpoints     = "${var.tectonic_aws_private_endpoints}"
+  tectonic_public_endpoints      = "${var.tectonic_aws_public_endpoints}"
+  tectonic_vanilla_k8s           = "${var.tectonic_vanilla_k8s}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%s3.tf b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%s3.tf
new file mode 100644
index 0000000..9fa6d7c
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%s3.tf
@@ -0,0 +1,65 @@
+data "aws_region" "current" {
+  current = true
+}
+
+resource "aws_s3_bucket" "tectonic" {
+  # Buckets must start with a lower case name and are limited to 63 characters,
+  # so we prepend the letter 'a' and use the md5 hex digest for the case of a long domain
+  # leaving 29 chars for the cluster name.
+  bucket = "${var.tectonic_aws_assets_s3_bucket_name == "" ? format("%s%s-%s", "a", var.tectonic_cluster_name, md5(format("%s-%s", data.aws_region.current.name , var.tectonic_base_domain))) : var.tectonic_aws_assets_s3_bucket_name }"
+
+  acl = "private"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-tectonic",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_aws_extra_tags)}"
+
+  lifecycle {
+    ignore_changes = ["*"]
+  }
+}
+
+# Bootkube / Tectonic assets
+resource "aws_s3_bucket_object" "tectonic_assets" {
+  bucket = "${aws_s3_bucket.tectonic.bucket}"
+  key    = "assets.zip"
+  source = "${data.archive_file.assets.output_path}"
+  acl    = "private"
+
+  # To be on par with the current Tectonic installer, we only do server-side
+  # encryption, using AES256. Eventually, we should start using KMS-based
+  # client-side encryption.
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-tectonic-assets",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_aws_extra_tags)}"
+
+  lifecycle {
+    ignore_changes = ["*"]
+  }
+}
+
+# kubeconfig
+resource "aws_s3_bucket_object" "kubeconfig" {
+  bucket  = "${aws_s3_bucket.tectonic.bucket}"
+  key     = "kubeconfig"
+  content = "${module.bootkube.kubeconfig}"
+  acl     = "private"
+
+  # The current Tectonic installer stores bits of the kubeconfig in KMS. As we
+  # do not support KMS yet, we at least offload it to S3 for now. Eventually,
+  # we should consider using KMS-based client-side encryption, or uploading it
+  # to KMS.
+  server_side_encryption = "AES256"
+
+  tags = "${merge(map(
+      "Name", "${var.tectonic_cluster_name}-kubeconfig",
+      "KubernetesCluster", "${var.tectonic_cluster_name}",
+      "tectonicClusterID", "${module.tectonic.cluster_id}"
+    ), var.tectonic_aws_extra_tags)}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%tectonic.tf b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%tectonic.tf
new file mode 100644
index 0000000..bf67b7f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%tectonic.tf
@@ -0,0 +1,201 @@
+data "template_file" "etcd_hostname_list" {
+  count    = "${var.tectonic_self_hosted_etcd != "" ? 0 : var.tectonic_etcd_count > 0 ? var.tectonic_etcd_count : length(data.aws_availability_zones.azs.names) == 5 ? 5 : 3}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}.${var.tectonic_base_domain}"
+}
+
+module "kube_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/kube/self-signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${var.tectonic_aws_private_endpoints ? module.dns.api_internal_fqdn : module.dns.api_external_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/etcd/signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/ingress/self-signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  base_address    = "${var.tectonic_aws_private_endpoints ? module.dns.ingress_internal_fqdn : module.dns.ingress_external_fqdn}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/identity/self-signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "bootkube" {
+  source         = "github.com/coreos/tectonic-installer//modules/bootkube?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+  cloud_provider = "aws"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${var.tectonic_aws_private_endpoints ? module.dns.api_internal_fqdn : module.dns.api_external_fqdn}:443"
+  oidc_issuer_url    = "https://${var.tectonic_aws_private_endpoints ? module.dns.ingress_internal_fqdn : module.dns.ingress_external_fqdn}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+  self_hosted_etcd = "${var.tectonic_self_hosted_etcd}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${module.dns.etcd_endpoints}"
+  master_count              = "${var.tectonic_master_count}"
+
+  # The default behavior of Kubernetes's controller manager is to mark a node
+  # as Unhealthy after 40s without an update from the node's kubelet. However,
+  # AWS ELB's Route53 records have a fixed TTL of 60s. Therefore, when an ELB's
+  # node disappears (e.g. scaled down or crashed), kubelet might fail to report
+  # for a period of time that exceed the default grace period of 40s and the
+  # node might become Unhealthy. While the eviction process won't start until
+  # the pod_eviction_timeout is reached, 5min by default, certain operators
+  # might already have taken action. This is the case for the etcd operator as
+  # of v0.3.3, which removes the likely-healthy etcd pods from the the
+  # cluster, potentially leading to a loss-of-quorum as generally all kubelets
+  # are affected simultaneously.
+  #
+  # To cope with this issue, we increase the grace period, and reduce the
+  # pod eviction time-out accordingly so pods still get evicted after an total
+  # time of 340s after the first post-status failure.
+  #
+  # Ref: https://github.com/kubernetes/kubernetes/issues/41916
+  # Ref: https://github.com/kubernetes-incubator/kube-aws/issues/598
+  node_monitor_grace_period = "2m"
+
+  pod_eviction_timeout = "220s"
+
+  cloud_config_path = ""
+}
+
+module "tectonic" {
+  source   = "github.com/coreos/tectonic-installer//modules/tectonic?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+  platform = "aws"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${var.tectonic_aws_private_endpoints ? module.dns.ingress_internal_fqdn : module.dns.ingress_external_fqdn}"
+  kube_apiserver_url = "https://${var.tectonic_aws_private_endpoints ? module.dns.api_internal_fqdn : module.dns.api_external_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "NodePort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "github.com/coreos/tectonic-installer//modules/net/flannel_vxlan?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "github.com/coreos/tectonic-installer//modules/net/calico?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "github.com/coreos/tectonic-installer//modules/net/canal?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
+
+data "archive_file" "assets" {
+  type       = "zip"
+  source_dir = "./generated/"
+
+  # Because the archive_file provider is a data source, depends_on can't be
+  # used to guarantee that the tectonic/bootkube modules have generated
+  # all the assets on disk before trying to archive them. Instead, we use their
+  # ID outputs, that are only computed once the assets have actually been
+  # written to disk. We re-hash the IDs (or dedicated module outputs, like module.bootkube.content_hash)
+  # to make the filename shorter, since there is no security nor collision risk anyways.
+  #
+  # Additionally, data sources do not support managing any lifecycle whatsoever,
+  # and therefore, the archive is never deleted. To avoid cluttering the module
+  # folder, we write it in the Terraform managed hidden folder `.terraform`.
+  output_path = "./.terraform/generated_${sha1("${module.etcd_certs.id} ${module.tectonic.id} ${module.bootkube.id} ${module.flannel_vxlan.id} ${module.calico.id} ${module.canal.id}")}.zip"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%variables.tf b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%variables.tf
new file mode 100644
index 0000000..75e476f
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-aws-kubernetes%variables.tf
@@ -0,0 +1,327 @@
+variable "tectonic_aws_config_version" {
+  description = <<EOF
+(internal) This declares the version of the AWS configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_aws_profile" {
+  description = <<EOF
+(optional) This declares the AWS credentials profile to use.
+EOF
+
+  type    = "string"
+  default = "default"
+}
+
+variable "tectonic_aws_ssh_key" {
+  type        = "string"
+  description = "Name of an SSH key located within the AWS region. Example: coreos-user."
+}
+
+variable "tectonic_aws_master_ec2_type" {
+  type        = "string"
+  description = "Instance size for the master node(s). Example: `t2.medium`."
+  default     = "t2.medium"
+}
+
+variable "tectonic_aws_worker_ec2_type" {
+  type        = "string"
+  description = "Instance size for the worker node(s). Example: `t2.medium`."
+  default     = "t2.medium"
+}
+
+variable "tectonic_aws_etcd_ec2_type" {
+  type = "string"
+
+  description = <<EOF
+  Instance size for the etcd node(s). Example: `t2.medium`. Read the [etcd recommended hardware](https://coreos.com/etcd/docs/latest/op-guide/hardware.html) guide for best performance
+  EOF
+
+  default = "t2.medium"
+}
+
+variable "tectonic_aws_etcd_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for etcd nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_aws_assets_s3_bucket_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Unique name under which the Amazon S3 bucket will be created. Bucket name must start with a lower case name and is limited to 63 characters.
+The Tectonic Installer uses the bucket to store tectonic assets and kubeconfig.
+If name is not provided the installer will construct the name using "tectonic_cluster_name", current AWS region and "tectonic_base_domain"
+EOF
+}
+
+variable "tectonic_aws_master_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for master nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_aws_worker_extra_sg_ids" {
+  description = <<EOF
+(optional) List of additional security group IDs for worker nodes.
+
+Example: `["sg-51530134", "sg-b253d7cc"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_aws_vpc_cidr_block" {
+  type    = "string"
+  default = "10.0.0.0/16"
+
+  description = <<EOF
+Block of IP addresses used by the VPC.
+This should not overlap with any other networks, such as a private datacenter connected via Direct Connect.
+EOF
+}
+
+variable "tectonic_aws_external_vpc_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) ID of an existing VPC to launch nodes into.
+If unset a new VPC is created.
+
+Example: `vpc-123456`
+EOF
+
+  default = ""
+}
+
+variable "tectonic_aws_private_endpoints" {
+  default = true
+
+  description = <<EOF
+(optional) If set to true, create private-facing ingress resources (ELB, A-records).
+If set to false, no private-facing ingress resources will be provisioned and all DNS records will be created in the public Route53 zone.
+EOF
+}
+
+variable "tectonic_aws_public_endpoints" {
+  default = true
+
+  description = <<EOF
+(optional) If set to true, create public-facing ingress resources (ELB, A-records).
+If set to false, no public-facing ingress resources will be created.
+EOF
+}
+
+variable "tectonic_aws_external_private_zone" {
+  default = ""
+
+  description = <<EOF
+(optional) If set, the given Route53 zone ID will be used as the internal (private) zone.
+This zone will be used to create etcd DNS records as well as internal API and internal Ingress records.
+If set, no additional private zone will be created.
+
+Example: `"Z1ILINNUJGTAO1"`
+EOF
+}
+
+variable "tectonic_aws_external_master_subnet_ids" {
+  type = "list"
+
+  description = <<EOF
+(optional) List of subnet IDs within an existing VPC to deploy master nodes into.
+Required to use an existing VPC and the list must match the AZ count.
+
+Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+EOF
+
+  default = []
+}
+
+variable "tectonic_aws_external_worker_subnet_ids" {
+  type = "list"
+
+  description = <<EOF
+(optional) List of subnet IDs within an existing VPC to deploy worker nodes into.
+Required to use an existing VPC and the list must match the AZ count.
+
+Example: `["subnet-111111", "subnet-222222", "subnet-333333"]`
+EOF
+
+  default = []
+}
+
+variable "tectonic_aws_extra_tags" {
+  type        = "map"
+  description = "(optional) Extra AWS tags to be applied to created resources."
+  default     = {}
+}
+
+variable "tectonic_autoscaling_group_extra_tags" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) Extra AWS tags to be applied to created autoscaling group resources.
+This is a list of maps having the keys `key`, `value` and `propagate_at_launch`.
+
+Example: `[ { key = "foo", value = "bar", propagate_at_launch = true } ]`
+EOF
+}
+
+variable "tectonic_dns_name" {
+  type        = "string"
+  default     = ""
+  description = "(optional) DNS prefix used to construct the console and API server endpoints."
+}
+
+variable "tectonic_aws_etcd_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of etcd nodes."
+}
+
+variable "tectonic_aws_etcd_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of etcd nodes."
+}
+
+variable "tectonic_aws_etcd_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of etcd nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_aws_master_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of master nodes."
+}
+
+variable "tectonic_aws_master_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of master nodes."
+}
+
+variable "tectonic_aws_master_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of master nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_aws_worker_root_volume_type" {
+  type        = "string"
+  default     = "gp2"
+  description = "The type of volume for the root block device of worker nodes."
+}
+
+variable "tectonic_aws_worker_root_volume_size" {
+  type        = "string"
+  default     = "30"
+  description = "The size of the volume in gigabytes for the root block device of worker nodes."
+}
+
+variable "tectonic_aws_worker_root_volume_iops" {
+  type    = "string"
+  default = "100"
+
+  description = <<EOF
+The amount of provisioned IOPS for the root block device of worker nodes.
+Ignored if the volume type is not io1.
+EOF
+}
+
+variable "tectonic_aws_master_custom_subnets" {
+  type    = "map"
+  default = {}
+
+  description = <<EOF
+(optional) This configures master availability zones and their corresponding subnet CIDRs directly.
+
+Example:
+`{ eu-west-1a = "10.0.0.0/20", eu-west-1b = "10.0.16.0/20" }`
+EOF
+}
+
+variable "tectonic_aws_worker_custom_subnets" {
+  type    = "map"
+  default = {}
+
+  description = <<EOF
+(optional) This configures worker availability zones and their corresponding subnet CIDRs directly.
+
+Example: `{ eu-west-1a = "10.0.64.0/20", eu-west-1b = "10.0.80.0/20" }`
+EOF
+}
+
+variable "tectonic_aws_region" {
+  type        = "string"
+  default     = "eu-west-1"
+  description = "The target AWS region for the cluster."
+}
+
+variable "tectonic_aws_master_iam_role_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Name of IAM role to use for the instance profiles of master nodes.
+The name is also the last part of a role's ARN.
+
+Example:
+ * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+ * Role Name = tectonic-installer
+EOF
+}
+
+variable "tectonic_aws_worker_iam_role_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Name of IAM role to use for the instance profiles of worker nodes.
+The name is also the last part of a role's ARN.
+
+Example:
+ * Role ARN  = arn:aws:iam::123456789012:role/tectonic-installer
+ * Role Name = tectonic-installer
+EOF
+}
+
+variable "tectonic_aws_worker_load_balancers" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) List of ELBs to attach all worker instances to.
+This is useful for exposing NodePort services via load-balancers managed separately from the cluster.
+
+Example:
+ * `["ingress-nginx"]`
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%bootstrap.tf b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%bootstrap.tf
new file mode 100644
index 0000000..0a168a4
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%bootstrap.tf
@@ -0,0 +1,22 @@
+locals {
+  "bootstrapping_host" = "${var.tectonic_azure_private_cluster ?
+    module.vnet.master_private_ip_addresses[0] :
+    module.vnet.api_fqdn}"
+}
+
+module "bootstrapper" {
+  source = "github.com/coreos/tectonic-installer//modules/bootstrap-ssh?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  _dependencies = [
+    "${module.masters.master_vm_ids}",
+    "${module.etcd.etcd_vm_ids}",
+    "${module.etcd_certs.id}",
+    "${module.bootkube.id}",
+    "${module.tectonic.id}",
+    "${module.flannel_vxlan.id}",
+    "${module.calico.id}",
+    "${module.canal.id}",
+  ]
+
+  bootstrapping_host = "${local.bootstrapping_host}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%config.tf b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%config.tf
new file mode 100644
index 0000000..2c7636b
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%config.tf
@@ -0,0 +1,533 @@
+terraform {
+  required_version = ">= 0.10.7"
+}
+
+provider "archive" {
+  version = "1.0.0"
+}
+
+provider "external" {
+  version = "1.0.0"
+}
+
+provider "ignition" {
+  version = "1.0.0"
+}
+
+provider "local" {
+  version = "1.0.0"
+}
+
+provider "null" {
+  version = "1.0.0"
+}
+
+provider "random" {
+  version = "1.0.0"
+}
+
+provider "template" {
+  version = "1.0.0"
+}
+
+provider "tls" {
+  version = "1.0.0"
+}
+
+locals {
+  // The total amount of public CA certificates present in Tectonic.
+  // That is all custom CAs + kube CA + etcd CA + ingress CA
+  // This is a local constant, which needs to be dependency inject because TF cannot handle length() on computed values,
+  // see https://github.com/hashicorp/terraform/issues/10857#issuecomment-268289775.
+  tectonic_ca_count = "${length(var.tectonic_custom_ca_pem_list) + 3}"
+}
+
+variable "tectonic_config_version" {
+  description = <<EOF
+(internal) This declares the version of the global configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.0"
+}
+
+variable "tectonic_image_re" {
+  description = <<EOF
+(internal) Regular expression used to extract repo and tag components
+EOF
+
+  type    = "string"
+  default = "/^([^/]+/[^/]+/[^/]+):(.*)$/"
+}
+
+variable "tectonic_container_images" {
+  description = "(internal) Container images to use"
+  type        = "map"
+
+  default = {
+    addon_resizer                = "gcr.io/google_containers/addon-resizer:2.1"
+    awscli                       = "quay.io/coreos/awscli:025a357f05242fdad6a81e8a6b520098aa65a600"
+    gcloudsdk                    = "google/cloud-sdk:178.0.0-alpine"
+    bootkube                     = "quay.io/coreos/bootkube:v0.8.1"
+    calico                       = "quay.io/calico/node:v2.6.3"
+    calico_cni                   = "quay.io/calico/cni:v1.11.1"
+    console                      = "quay.io/coreos/tectonic-console:v2.4.0"
+    error_server                 = "quay.io/coreos/tectonic-error-server:1.0"
+    etcd                         = "quay.io/coreos/etcd:v3.1.8"
+    etcd_operator                = "quay.io/coreos/etcd-operator:v0.5.0"
+    flannel                      = "quay.io/coreos/flannel:v0.8.0-amd64"
+    flannel_cni                  = "quay.io/coreos/flannel-cni:v0.2.0"
+    heapster                     = "gcr.io/google_containers/heapster:v1.4.1"
+    hyperkube                    = "quay.io/coreos/hyperkube:v1.8.2_coreos.0"
+    identity                     = "quay.io/coreos/dex:v2.8.1"
+    ingress_controller           = "quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.9.0-beta.17"
+    kenc                         = "quay.io/coreos/kenc:0.0.2"
+    kubedns                      = "gcr.io/google_containers/k8s-dns-kube-dns-amd64:1.14.5"
+    kubednsmasq                  = "gcr.io/google_containers/k8s-dns-dnsmasq-nanny-amd64:1.14.5"
+    kubedns_sidecar              = "gcr.io/google_containers/k8s-dns-sidecar-amd64:1.14.5"
+    kube_version                 = "quay.io/coreos/kube-version:0.1.0"
+    kube_version_operator        = "quay.io/coreos/kube-version-operator:v1.7.9-kvo.6"
+    node_agent                   = "quay.io/coreos/node-agent:cd69b4a0f65b0d3a3b30edfce3bb184fd2a22c26"
+    pod_checkpointer             = "quay.io/coreos/pod-checkpointer:e22cc0e3714378de92f45326474874eb602ca0ac"
+    stats_emitter                = "quay.io/coreos/tectonic-stats:6e882361357fe4b773adbf279cddf48cb50164c1"
+    stats_extender               = "quay.io/coreos/tectonic-stats-extender:487b3da4e175da96dabfb44fba65cdb8b823db2e"
+    tectonic_channel_operator    = "quay.io/coreos/tectonic-channel-operator:0.5.4"
+    tectonic_etcd_operator       = "quay.io/coreos/tectonic-etcd-operator:v0.0.2"
+    tectonic_prometheus_operator = "quay.io/coreos/tectonic-prometheus-operator:v1.8.0"
+    tectonic_cluo_operator       = "quay.io/coreos/tectonic-cluo-operator:v0.2.5"
+    tectonic_torcx               = "quay.io/coreos/tectonic-torcx:v0.2.0"
+    kubernetes_addon_operator    = "quay.io/coreos/kubernetes-addon-operator:54a613dae60a068aa83c0361319c804ee366a228"
+  }
+}
+
+variable "tectonic_container_base_images" {
+  description = "(internal) Base images of the components to use"
+  type        = "map"
+
+  default = {
+    tectonic_monitoring_auth = "quay.io/coreos/tectonic-monitoring-auth"
+    config_reload            = "quay.io/coreos/configmap-reload"
+    addon_resizer            = "quay.io/coreos/addon-resizer"
+    kube_state_metrics       = "quay.io/coreos/kube-state-metrics"
+    grafana                  = "quay.io/coreos/grafana-monitoring"
+    grafana_watcher          = "quay.io/coreos/grafana-watcher"
+    prometheus_operator      = "quay.io/coreos/prometheus-operator"
+    prometheus_config_reload = "quay.io/coreos/prometheus-config-reloader"
+    prometheus               = "quay.io/prometheus/prometheus"
+    alertmanager             = "quay.io/prometheus/alertmanager"
+    node_exporter            = "quay.io/prometheus/node-exporter"
+  }
+}
+
+variable "tectonic_versions" {
+  description = "(internal) Versions of the components to use"
+  type        = "map"
+
+  default = {
+    etcd             = "3.1.8"
+    kubernetes       = "1.7.9+tectonic.2"
+    monitoring       = "1.8.0"
+    tectonic         = "1.8.2-tectonic.1"
+    tectonic-etcd    = "0.0.1"
+    cluo             = "0.2.5"
+    kubernetes_addon = "0.0.0"
+  }
+}
+
+variable "tectonic_service_cidr" {
+  type    = "string"
+  default = "10.3.0.0/16"
+
+  description = <<EOF
+(optional) This declares the IP range to assign Kubernetes service cluster IPs in CIDR notation.
+The maximum size of this IP range is /12
+EOF
+}
+
+variable "tectonic_cluster_cidr" {
+  type    = "string"
+  default = "10.2.0.0/16"
+
+  description = "(optional) This declares the IP range to assign Kubernetes pod IPs in CIDR notation."
+}
+
+variable "tectonic_master_count" {
+  type    = "string"
+  default = "1"
+
+  description = <<EOF
+The number of master nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_worker_count" {
+  type    = "string"
+  default = "3"
+
+  description = <<EOF
+The number of worker nodes to be created.
+This applies only to cloud platforms.
+EOF
+}
+
+variable "tectonic_etcd_count" {
+  type    = "string"
+  default = "0"
+
+  description = <<EOF
+The number of etcd nodes to be created.
+If set to zero, the count of etcd nodes will be determined automatically.
+
+Note: This is not supported on bare metal.
+EOF
+}
+
+variable "tectonic_etcd_servers" {
+  description = <<EOF
+(optional) List of external etcd v3 servers to connect with (hostnames/IPs only).
+Needs to be set if using an external etcd cluster.
+Note: If this variable is defined, the installer will not create self-signed certs.
+To provide a CA certificate to trust the etcd servers, set "tectonic_etcd_ca_cert_path".
+
+Example: `["etcd1", "etcd2", "etcd3"]`
+EOF
+
+  type    = "list"
+  default = []
+}
+
+variable "tectonic_etcd_tls_enabled" {
+  default = true
+
+  description = <<EOF
+(optional) If set to `true`, all etcd endpoints will be configured to use the "https" scheme.
+
+Note: If `tectonic_experimental` is set to `true` this variable has no effect, because the experimental self-hosted etcd always uses TLS.
+EOF
+}
+
+variable "tectonic_etcd_ca_cert_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the CA certificate for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variable `tectonic_etcd_servers` must also be set.
+EOF
+}
+
+variable "tectonic_etcd_client_cert_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the client certificate for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_key_path` must also be set.
+EOF
+}
+
+variable "tectonic_etcd_client_key_path" {
+  type    = "string"
+  default = "/dev/null"
+
+  description = <<EOF
+(optional) The path of the file containing the client key for TLS communication with etcd.
+
+Note: This works only when used in conjunction with an external etcd cluster.
+If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_cert_path` must also be set.
+EOF
+}
+
+variable "tectonic_base_domain" {
+  type = "string"
+
+  description = <<EOF
+The base DNS domain of the cluster. It must NOT contain a trailing period. Some
+DNS providers will automatically add this if necessary.
+
+Example: `openstack.dev.coreos.systems`.
+
+Note: This field MUST be set manually prior to creating the cluster.
+This applies only to cloud platforms.
+
+[Azure-specific NOTE]
+To use Azure-provided DNS, `tectonic_base_domain` should be set to `""`
+If using DNS records, ensure that `tectonic_base_domain` is set to a properly configured external DNS zone.
+Instructions for configuring delegated domains for Azure DNS can be found here: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
+EOF
+}
+
+variable "tectonic_cluster_name" {
+  type = "string"
+
+  description = <<EOF
+The name of the cluster.
+If used in a cloud-environment, this will be prepended to `tectonic_base_domain` resulting in the URL to the Tectonic console.
+
+Note: This field MUST be set manually prior to creating the cluster.
+Warning: Special characters in the name like '.' may cause errors on OpenStack platforms due to resource name constraints.
+EOF
+}
+
+variable "tectonic_pull_secret_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path the pull secret file in JSON format.
+This is known to be a "Docker pull secret" as produced by the docker login [1] command.
+A sample JSON content is shown in [2].
+You can download the pull secret from your Account overview page at [3].
+
+[1] https://docs.docker.com/engine/reference/commandline/login/
+
+[2] https://coreos.com/os/docs/latest/registry-authentication.html#manual-registry-auth-setup
+
+[3] https://account.coreos.com/overview
+
+Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+EOF
+}
+
+variable "tectonic_license_path" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+The path to the tectonic licence file.
+You can download the Tectonic license file from your Account overview page at [1].
+
+[1] https://account.coreos.com/overview
+
+Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+EOF
+}
+
+variable "tectonic_container_linux_channel" {
+  type    = "string"
+  default = "stable"
+
+  description = <<EOF
+(optional) The Container Linux update channel.
+
+Examples: `stable`, `beta`, `alpha`
+EOF
+}
+
+variable "tectonic_container_linux_version" {
+  type    = "string"
+  default = "latest"
+
+  description = <<EOF
+The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+
+Examples: `latest`, `1465.6.0`
+EOF
+}
+
+variable "tectonic_update_server" {
+  type        = "string"
+  default     = "https://tectonic.update.core-os.net"
+  description = "(internal) The URL of the Tectonic Omaha update server"
+}
+
+variable "tectonic_update_channel" {
+  type        = "string"
+  default     = "tectonic-1.7-production"
+  description = "(internal) The Tectonic Omaha update channel"
+}
+
+variable "tectonic_update_app_id" {
+  type        = "string"
+  default     = "6bc7b986-4654-4a0f-94b3-84ce6feb1db4"
+  description = "(internal) The Tectonic Omaha update App ID"
+}
+
+variable "tectonic_admin_email" {
+  type = "string"
+
+  description = <<EOF
+(internal) The e-mail address used to:
+1. login as the admin user to the Tectonic Console.
+2. generate DNS zones for some providers.
+
+Note: This field MUST be in all lower-case e-mail address format and set manually prior to creating the cluster.
+EOF
+}
+
+variable "tectonic_admin_password" {
+  type = "string"
+
+  description = <<EOF
+(internal) The admin user password to login to the Tectonic Console.
+
+Note: This field MUST be set manually prior to creating the cluster. Backslashes and double quotes must
+also be escaped.
+EOF
+}
+
+variable "tectonic_ca_cert" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA certificate, used to generate Tectonic Console's server certificate.
+If left blank, a CA certificate will be automatically generated.
+EOF
+}
+
+variable "tectonic_ca_key" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) The content of the PEM-encoded CA key, used to generate Tectonic Console's server certificate.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_ca_key_alg" {
+  type    = "string"
+  default = "RSA"
+
+  description = <<EOF
+(optional) The algorithm used to generate tectonic_ca_key.
+The default value is currently recommended.
+This field is mandatory if `tectonic_ca_cert` is set.
+EOF
+}
+
+variable "tectonic_tls_validity_period" {
+  type    = "string"
+  default = "26280"
+
+  description = <<EOF
+Validity period of the self-signed certificates (in hours).
+Default is 3 years.
+This setting is ignored if user provided certificates are used.
+EOF
+}
+
+variable "tectonic_vanilla_k8s" {
+  default = false
+
+  description = <<EOF
+If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+EOF
+}
+
+variable "tectonic_stats_url" {
+  type        = "string"
+  default     = "https://stats-collector.tectonic.com"
+  description = "(internal) The Tectonic statistics collection URL to which to report."
+}
+
+variable "tectonic_ddns_server" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server IP/host to register IP addresses to.
+EOF
+}
+
+variable "tectonic_ddns_key_name" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key name.
+EOF
+}
+
+variable "tectonic_ddns_key_algorithm" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key algorithm.
+EOF
+}
+
+variable "tectonic_ddns_key_secret" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) This only applies if you use the modules/dns/ddns module.
+
+Specifies the RFC2136 Dynamic DNS server key secret.
+EOF
+}
+
+variable "tectonic_networking" {
+  default = "flannel"
+
+  description = <<EOF
+(optional) Configures the network to be used in Tectonic. One of the following values can be used:
+
+- "flannel": enables overlay networking only. This is implemented by flannel using VXLAN.
+
+- "canal": [ALPHA] enables overlay networking including network policy. Overlay is implemented by flannel using VXLAN. Network policy is implemented by Calico.
+
+- "calico": [ALPHA] enables BGP based networking. Routing and network policy is implemented by Calico. Note this has been tested on baremetal installations only.
+EOF
+}
+
+variable "tectonic_self_hosted_etcd" {
+  default = ""
+
+  description = <<EOF
+(internal) [ALPHA] If set to one of the following values, self-hosted etcd is deployed:
+
+- "enabled": Deploys a self-hosted etcd cluster.
+
+- "pv_backup": Deploys a self-hosted etcd cluster including backups to Persistence Volumes.
+`tectonic_etcd_backup_size` and `tectonic_etcd_backup_storage_class` must be configured when using this setting.
+EOF
+}
+
+variable "tectonic_etcd_backup_size" {
+  type        = "string"
+  description = "(optional) The size in MB of the PersistentVolume used for handling etcd backups."
+  default     = "512"
+}
+
+variable "tectonic_etcd_backup_storage_class" {
+  type        = "string"
+  default     = ""
+  description = "(optional) The name of an existing Kubernetes StorageClass that will be used for handling etcd backups."
+}
+
+variable "tectonic_bootstrap_upgrade_cl" {
+  type        = "string"
+  default     = "true"
+  description = "(internal) Whether to trigger a ContainerLinux upgrade on node bootstrap."
+}
+
+variable "tectonic_kubelet_debug_config" {
+  type    = "string"
+  default = ""
+
+  description = "(internal) debug flags for the kubelet (used in CI only)"
+}
+
+variable "tectonic_custom_ca_pem_list" {
+  type    = "list"
+  default = []
+
+  description = <<EOF
+(optional) A list of PEM encoded CA files that will be installed in /etc/ssl/certs on etcd, master, and worker nodes.
+EOF
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%examples%kubernetes.tf b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%examples%kubernetes.tf
new file mode 100644
index 0000000..56c960d
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%examples%kubernetes.tf
@@ -0,0 +1,304 @@
+# DO NOT EDIT. THIS FILE IS GENERATED BY THE MAKEFILE.
+module "kubernetes" {
+  source = "coreos/kubernetes/azurerm"
+
+  // (optional) Azure cloud environment to use. See
+  // https://github.com/Azure/go-autorest/blob/ec5f4903f77ed9927ac95b19ab8e44ada64c1356/autorest/azure/environments.go#L13
+  // for available environments.
+  // tectonic_azure_cloud_environment = "AZUREPUBLICCLOUD"
+
+
+  // (optional) Storage account type for the etcd node(s). Example: Premium_LRS.
+  // Using Premium storage is constrained by the of instance specified in 'tectonic_azure_etcd_vm_size'.
+  // See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+  // tectonic_azure_etcd_storage_type = "Premium_LRS"
+
+
+  // (optional) Instance size for the etcd node(s). Example: Standard_DS2_v2.
+  // tectonic_azure_etcd_vm_size = "Standard_DS2_v2"
+
+
+  // (optional) The ID of the external Azure DNS zone used for nodes & endpoints FQDNs.
+  // Required when 'tectonic_base_domain' is set.
+  // This must be a pre-existing, properly configured Azure DNS zone that the Azure service principal running the Tectonic installer has permission to perform operations on.
+  // 
+  // Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+  // 
+  // Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/dnszones/my-k8s-dns
+  // tectonic_azure_external_dns_zone_id = ""
+
+
+  // (optional) Subnet ID within an existing VNet to deploy master nodes into.
+  // Required to use an existing VNet.
+  // 
+  // Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+  // 
+  // Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/test-pre-vnet/subnets/my-k8s-subnet
+  // tectonic_azure_external_master_subnet_id = ""
+
+
+  // (optional) The ID of the external Network Security Group used for masters.
+  // Leave blank to have a new one created.
+  // 
+  // Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+  // 
+  // Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/networkSecurityGroups/my-master-nsg
+  // tectonic_azure_external_nsg_master_id = ""
+
+
+  // (optional) The ID of the external Network Security Group used for workers.
+  // Leave blank to have a new one created.
+  // 
+  // Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+  // 
+  // Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/networkSecurityGroups/my-worker-nsg
+  // tectonic_azure_external_nsg_worker_id = ""
+
+
+  // (optional) Name of an external resource group to place created resources in.
+  // Leave blank to have a new one created.
+  // tectonic_azure_external_resource_group = ""
+
+
+  // (optional) Resource ID of an existing Virtual Network to launch nodes into.
+  // Leave blank to create a new Virtual Network.
+  // 
+  // Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+  // 
+  // Example: /subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/my-k8s-vnet
+  // tectonic_azure_external_vnet_id = ""
+
+
+  // (optional) Subnet ID within an existing VNet to deploy worker nodes into.
+  // Required to use an existing VNet.
+  // 
+  // Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+  // 
+  // Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/test-pre-vnet/subnets/my-k8s-subnet
+  // tectonic_azure_external_worker_subnet_id = ""
+
+
+  // (optional) A map of extra Azure tags to be applied to created resources.
+  // NOTE: Tags MUST NOT contain reserved characters '<,>,%,&,\,?,/' or control characters.
+  // tectonic_azure_extra_tags = ""
+
+
+  // (optional) Storage account type for the master node(s). Example: Premium_LRS.
+  // Using Premium storage is constrained by the of instance specified in 'tectonic_azure_master_vm_size'.
+  // See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+  // tectonic_azure_master_storage_type = "Premium_LRS"
+
+
+  // (optional) Instance size for the master node(s). Example: Standard_DS2_v2.
+  // tectonic_azure_master_vm_size = "Standard_DS2_v2"
+
+
+  // (optional) Setting this to true will result in NO public facing endpoints being created. All traffic is contained within the VNET.
+  // A VNET with an already configured and active VPN connection is required and needs to be supplied via 'tectonic_azure_external_vnet_id'.
+  // DNS is currently required, either the Azure managed one or configured via the generic DNS module.
+  // tectonic_azure_private_cluster = false
+
+  // (required) Path to an SSH public key file to be provisioned as the SSH key for the 'core' user.
+  tectonic_azure_ssh_key = ""
+
+  // (optional) Network (external) to allow SSH access from. Maps to `source_address_prefix` in Azure.
+  // Defaults to `*`. Can be external to Azure environment.
+  // Allowed values: [network CIDR (i.e., 10.0.0.0/16) \| `VirtualNetwork` \| `Internet` \| `*` ]
+  // tectonic_azure_ssh_network_external = "*"
+
+
+  // (optional) Network (internal) to allow SSH access from. Maps to `source_address_prefix` in Azure.
+  // Defaults to `VirtualNetwork`. Should be internal to Azure environment.
+  // Allowed values: [network CIDR (i.e., 10.0.0.0/16) \| `VirtualNetwork` \| `Internet` \| `*` ]
+  // tectonic_azure_ssh_network_internal = "VirtualNetwork"
+
+
+  // (optional) Range of IP addresses assigned to the Virtual Network in which the cluster nodes run.
+  // This should not overlap with any other networks, such as the Kubernetes cluster (pod) range,
+  // service range or a private datacenter connected via ExpressRoute."
+  // tectonic_azure_vnet_cidr_block = "10.0.0.0/16"
+
+
+  // (optional) Storage account type for the worker node(s). Example: Premium_LRS.
+  // Using Premium storage is constrained by the of instance specified in 'tectonic_azure_worker_vm_size'.
+  // See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+  // tectonic_azure_worker_storage_type = "Premium_LRS"
+
+
+  // (optional) Instance size for the worker node(s). Example: Standard_DS2_v2.
+  // tectonic_azure_worker_vm_size = "Standard_DS2_v2"
+
+  // The base DNS domain of the cluster. It must NOT contain a trailing period. Some
+  // DNS providers will automatically add this if necessary.
+  // 
+  // Example: `openstack.dev.coreos.systems`.
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster.
+  // This applies only to cloud platforms.
+  // 
+  // [Azure-specific NOTE]
+  // To use Azure-provided DNS, `tectonic_base_domain` should be set to `""`
+  // If using DNS records, ensure that `tectonic_base_domain` is set to a properly configured external DNS zone.
+  // Instructions for configuring delegated domains for Azure DNS can be found here: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
+  tectonic_base_domain = ""
+
+  // (optional) The content of the PEM-encoded CA certificate, used to generate Tectonic Console's server certificate.
+  // If left blank, a CA certificate will be automatically generated.
+  // tectonic_ca_cert = ""
+
+
+  // (optional) The content of the PEM-encoded CA key, used to generate Tectonic Console's server certificate.
+  // This field is mandatory if `tectonic_ca_cert` is set.
+  // tectonic_ca_key = ""
+
+
+  // (optional) The algorithm used to generate tectonic_ca_key.
+  // The default value is currently recommended.
+  // This field is mandatory if `tectonic_ca_cert` is set.
+  // tectonic_ca_key_alg = "RSA"
+
+
+  // (optional) This declares the IP range to assign Kubernetes pod IPs in CIDR notation.
+  // tectonic_cluster_cidr = "10.2.0.0/16"
+
+  // The name of the cluster.
+  // If used in a cloud-environment, this will be prepended to `tectonic_base_domain` resulting in the URL to the Tectonic console.
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster.
+  // Warning: Special characters in the name like '.' may cause errors on OpenStack platforms due to resource name constraints.
+  tectonic_cluster_name = ""
+
+  // (optional) The Container Linux update channel.
+  // 
+  // Examples: `stable`, `beta`, `alpha`
+  // tectonic_container_linux_channel = "stable"
+
+  // The Container Linux version to use. Set to `latest` to select the latest available version for the selected update channel.
+  // 
+  // Examples: `latest`, `1465.6.0`
+  tectonic_container_linux_version = "latest"
+
+  // (optional) A list of PEM encoded CA files that will be installed in /etc/ssl/certs on etcd, master, and worker nodes.
+  // tectonic_custom_ca_pem_list = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server key algorithm.
+  // tectonic_ddns_key_algorithm = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server key name.
+  // tectonic_ddns_key_name = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server key secret.
+  // tectonic_ddns_key_secret = ""
+
+
+  // (optional) This only applies if you use the modules/dns/ddns module.
+  // 
+  // Specifies the RFC2136 Dynamic DNS server IP/host to register IP addresses to.
+  // tectonic_ddns_server = ""
+
+
+  // (optional) The size in MB of the PersistentVolume used for handling etcd backups.
+  // tectonic_etcd_backup_size = "512"
+
+
+  // (optional) The name of an existing Kubernetes StorageClass that will be used for handling etcd backups.
+  // tectonic_etcd_backup_storage_class = ""
+
+
+  // (optional) The path of the file containing the CA certificate for TLS communication with etcd.
+  // 
+  // Note: This works only when used in conjunction with an external etcd cluster.
+  // If set, the variable `tectonic_etcd_servers` must also be set.
+  // tectonic_etcd_ca_cert_path = "/dev/null"
+
+
+  // (optional) The path of the file containing the client certificate for TLS communication with etcd.
+  // 
+  // Note: This works only when used in conjunction with an external etcd cluster.
+  // If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_key_path` must also be set.
+  // tectonic_etcd_client_cert_path = "/dev/null"
+
+
+  // (optional) The path of the file containing the client key for TLS communication with etcd.
+  // 
+  // Note: This works only when used in conjunction with an external etcd cluster.
+  // If set, the variables `tectonic_etcd_servers`, `tectonic_etcd_ca_cert_path`, and `tectonic_etcd_client_cert_path` must also be set.
+  // tectonic_etcd_client_key_path = "/dev/null"
+
+  // The number of etcd nodes to be created.
+  // If set to zero, the count of etcd nodes will be determined automatically.
+  // 
+  // Note: This is not supported on bare metal.
+  tectonic_etcd_count = "0"
+
+  // (optional) List of external etcd v3 servers to connect with (hostnames/IPs only).
+  // Needs to be set if using an external etcd cluster.
+  // Note: If this variable is defined, the installer will not create self-signed certs.
+  // To provide a CA certificate to trust the etcd servers, set "tectonic_etcd_ca_cert_path".
+  // 
+  // Example: `["etcd1", "etcd2", "etcd3"]`
+  // tectonic_etcd_servers = ""
+
+
+  // (optional) If set to `true`, all etcd endpoints will be configured to use the "https" scheme.
+  // 
+  // Note: If `tectonic_experimental` is set to `true` this variable has no effect, because the experimental self-hosted etcd always uses TLS.
+  // tectonic_etcd_tls_enabled = true
+
+  // The path to the tectonic licence file.
+  // You can download the Tectonic license file from your Account overview page at [1].
+  // 
+  // [1] https://account.coreos.com/overview
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+  tectonic_license_path = ""
+  // The number of master nodes to be created.
+  // This applies only to cloud platforms.
+  tectonic_master_count = "1"
+
+  // (optional) Configures the network to be used in Tectonic. One of the following values can be used:
+  // 
+  // - "flannel": enables overlay networking only. This is implemented by flannel using VXLAN.
+  // 
+  // - "canal": [ALPHA] enables overlay networking including network policy. Overlay is implemented by flannel using VXLAN. Network policy is implemented by Calico.
+  // 
+  // - "calico": [ALPHA] enables BGP based networking. Routing and network policy is implemented by Calico. Note this has been tested on baremetal installations only.
+  // tectonic_networking = "flannel"
+
+  // The path the pull secret file in JSON format.
+  // This is known to be a "Docker pull secret" as produced by the docker login [1] command.
+  // A sample JSON content is shown in [2].
+  // You can download the pull secret from your Account overview page at [3].
+  // 
+  // [1] https://docs.docker.com/engine/reference/commandline/login/
+  // 
+  // [2] https://coreos.com/os/docs/latest/registry-authentication.html#manual-registry-auth-setup
+  // 
+  // [3] https://account.coreos.com/overview
+  // 
+  // Note: This field MUST be set manually prior to creating the cluster unless `tectonic_vanilla_k8s` is set to `true`.
+  tectonic_pull_secret_path = ""
+
+  // (optional) This declares the IP range to assign Kubernetes service cluster IPs in CIDR notation.
+  // The maximum size of this IP range is /12
+  // tectonic_service_cidr = "10.3.0.0/16"
+
+  // Validity period of the self-signed certificates (in hours).
+  // Default is 3 years.
+  // This setting is ignored if user provided certificates are used.
+  tectonic_tls_validity_period = "26280"
+  // If set to true, a vanilla Kubernetes cluster will be deployed, omitting any Tectonic assets.
+  tectonic_vanilla_k8s = false
+  // The number of worker nodes to be created.
+  // This applies only to cloud platforms.
+  tectonic_worker_count = "3"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%main.tf b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%main.tf
new file mode 100644
index 0000000..4df74a3
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%main.tf
@@ -0,0 +1,245 @@
+provider "azurerm" {
+  version       = "0.3.1"
+  environment   = "${var.tectonic_azure_cloud_environment}"
+  client_secret = "${var.tectonic_azure_client_secret}"
+}
+
+data "azurerm_client_config" "current" {}
+
+module "container_linux" {
+  source = "github.com/coreos/tectonic-installer//modules/container_linux?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  release_channel = "${var.tectonic_container_linux_channel}"
+  release_version = "${var.tectonic_container_linux_version}"
+}
+
+module "resource_group" {
+  source = "github.com/coreos/tectonic-installer//modules/azure/resource-group?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  external_rsg_id = "${var.tectonic_azure_external_resource_group}"
+  azure_location  = "${var.tectonic_azure_location}"
+  cluster_name    = "${var.tectonic_cluster_name}"
+  cluster_id      = "${module.tectonic.cluster_id}"
+  extra_tags      = "${var.tectonic_azure_extra_tags}"
+}
+
+module "vnet" {
+  source = "github.com/coreos/tectonic-installer//modules/azure/vnet?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  location            = "${var.tectonic_azure_location}"
+  resource_group_name = "${module.resource_group.name}"
+  cluster_name        = "${var.tectonic_cluster_name}"
+  cluster_id          = "${module.tectonic.cluster_id}"
+  base_domain         = "${var.tectonic_base_domain}"
+  vnet_cidr_block     = "${var.tectonic_azure_vnet_cidr_block}"
+
+  etcd_count           = "${local.etcd_count}"
+  master_count         = "${var.tectonic_master_count}"
+  worker_count         = "${var.tectonic_worker_count}"
+  etcd_cidr            = "${module.vnet.etcd_cidr}"
+  master_cidr          = "${module.vnet.master_cidr}"
+  worker_cidr          = "${module.vnet.worker_cidr}"
+  ssh_network_internal = "${var.tectonic_azure_ssh_network_internal}"
+  ssh_network_external = "${var.tectonic_azure_ssh_network_external}"
+
+  external_vnet_id          = "${var.tectonic_azure_external_vnet_id}"
+  external_master_subnet_id = "${var.tectonic_azure_external_master_subnet_id}"
+  external_worker_subnet_id = "${var.tectonic_azure_external_worker_subnet_id}"
+  external_nsg_master_id    = "${var.tectonic_azure_external_nsg_master_id}"
+  external_nsg_worker_id    = "${var.tectonic_azure_external_nsg_worker_id}"
+
+  extra_tags = "${var.tectonic_azure_extra_tags}"
+
+  private_cluster = "${var.tectonic_azure_private_cluster}"
+}
+
+module "etcd" {
+  source = "github.com/coreos/tectonic-installer//modules/azure/etcd?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  base_domain             = "${var.tectonic_base_domain}"
+  cluster_id              = "${module.tectonic.cluster_id}"
+  cluster_name            = "${var.tectonic_cluster_name}"
+  container_image         = "${var.tectonic_container_images["etcd"]}"
+  container_linux_channel = "${var.tectonic_container_linux_channel}"
+  container_linux_version = "${module.container_linux.version}"
+  etcd_count              = "${local.etcd_count}"
+  extra_tags              = "${var.tectonic_azure_extra_tags}"
+  fault_domains           = "${var.tectonic_azure_location_fault_domains["${var.tectonic_azure_location}"]}"
+  ign_etcd_crt_id_list    = "${module.ignition_masters.etcd_crt_id_list}"
+  ign_etcd_dropin_id_list = "${module.ignition_masters.etcd_dropin_id_list}"
+  location                = "${var.tectonic_azure_location}"
+  network_interface_ids   = "${module.vnet.etcd_network_interface_ids}"
+  public_ssh_key          = "${var.tectonic_azure_ssh_key}"
+  resource_group_name     = "${module.resource_group.name}"
+  storage_id              = "${module.resource_group.storage_id}"
+  storage_type            = "${var.tectonic_azure_etcd_storage_type}"
+  tls_enabled             = "${var.tectonic_etcd_tls_enabled}"
+  versions                = "${var.tectonic_versions}"
+  vm_size                 = "${var.tectonic_azure_etcd_vm_size}"
+}
+
+# Workaround for https://github.com/hashicorp/terraform/issues/4084
+data "null_data_source" "cloud_provider" {
+  inputs = {
+    "cloud"                      = "${var.tectonic_azure_cloud_environment}"
+    "tenantId"                   = "${data.azurerm_client_config.current.tenant_id}"
+    "subscriptionId"             = "${data.azurerm_client_config.current.subscription_id}"
+    "aadClientId"                = "${data.azurerm_client_config.current.client_id}"
+    "aadClientSecret"            = "${var.tectonic_azure_client_secret}"
+    "resourceGroup"              = "${module.resource_group.name}"
+    "location"                   = "${var.tectonic_azure_location}"
+    "subnetName"                 = "${module.vnet.worker_subnet_name}"
+    "securityGroupName"          = "${module.vnet.worker_nsg_name}"
+    "vnetName"                   = "${module.vnet.vnet_id}"
+    "primaryAvailabilitySetName" = "${module.workers.availability_set_name}"
+  }
+}
+
+data "template_file" "etcd_advertise_name_list" {
+  count    = "${local.etcd_count}"
+  template = "$$$$$$$${COREOS_AZURE_IPV4_DYNAMIC}"
+}
+
+module "ignition_masters" {
+  source = "github.com/coreos/tectonic-installer//modules/ignition?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  base_domain               = "${var.tectonic_base_domain}"
+  bootstrap_upgrade_cl      = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider            = "azure"
+  cloud_provider_config     = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  cluster_name              = "${var.tectonic_cluster_name}"
+  container_images          = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list   = "${var.tectonic_custom_ca_pem_list}"
+  etcd_advertise_name_list  = "${data.template_file.etcd_advertise_name_list.*.rendered}"
+  etcd_ca_cert_pem          = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_crt_pem       = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem       = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_count                = "${local.etcd_count}"
+  etcd_initial_cluster_list = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_peer_crt_pem         = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem         = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_crt_pem       = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem       = "${module.etcd_certs.etcd_server_key_pem}"
+  etcd_tls_enabled          = "${var.tectonic_etcd_tls_enabled}"
+  image_re                  = "${var.tectonic_image_re}"
+  ingress_ca_cert_pem       = "${module.ingress_certs.ca_cert_pem}"
+  kube_ca_cert_pem          = "${module.kube_certs.ca_cert_pem}"
+  kube_dns_service_ip       = "${module.bootkube.kube_dns_service_ip}"
+  kubelet_cni_bin_dir       = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config      = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label        = "node-role.kubernetes.io/master"
+  kubelet_node_taints       = "node-role.kubernetes.io/master=:NoSchedule"
+  tectonic_vanilla_k8s      = "${var.tectonic_vanilla_k8s}"
+}
+
+module "masters" {
+  source = "github.com/coreos/tectonic-installer//modules/azure/master-as?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  cloud_provider_config                = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  extra_tags                           = "${var.tectonic_azure_extra_tags}"
+  fault_domains                        = "${var.tectonic_azure_location_fault_domains["${var.tectonic_azure_location}"]}"
+  ign_azure_udev_rules_id              = "${module.ignition_masters.azure_udev_rules_id}"
+  ign_bootkube_path_unit_id            = "${module.bootkube.systemd_path_unit_id}"
+  ign_bootkube_service_id              = "${module.bootkube.systemd_service_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_masters.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_masters.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_masters.installer_runtime_mappings_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_masters.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_masters.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_masters.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_masters.max_user_watches_id}"
+  ign_tectonic_path_unit_id            = "${var.tectonic_vanilla_k8s ? "" : module.tectonic.systemd_path_unit_id}"
+  ign_tectonic_service_id              = "${module.tectonic.systemd_service_id}"
+  ign_tx_off_service_id                = "${module.ignition_masters.tx_off_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_masters.update_ca_certificates_dropin_id}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+  location                             = "${var.tectonic_azure_location}"
+  master_count                         = "${var.tectonic_master_count}"
+  network_interface_ids                = "${module.vnet.master_network_interface_ids}"
+  public_ssh_key                       = "${var.tectonic_azure_ssh_key}"
+  resource_group_name                  = "${module.resource_group.name}"
+  storage_id                           = "${module.resource_group.storage_id}"
+  storage_type                         = "${var.tectonic_azure_master_storage_type}"
+  vm_size                              = "${var.tectonic_azure_master_vm_size}"
+}
+
+module "ignition_workers" {
+  source = "github.com/coreos/tectonic-installer//modules/ignition?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  bootstrap_upgrade_cl    = "${var.tectonic_bootstrap_upgrade_cl}"
+  cloud_provider          = "azure"
+  cloud_provider_config   = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  container_images        = "${var.tectonic_container_images}"
+  custom_ca_cert_pem_list = "${var.tectonic_custom_ca_pem_list}"
+  etcd_ca_cert_pem        = "${module.etcd_certs.etcd_ca_crt_pem}"
+  ingress_ca_cert_pem     = "${module.ingress_certs.ca_cert_pem}"
+  image_re                = "${var.tectonic_image_re}"
+  kube_dns_service_ip     = "${module.bootkube.kube_dns_service_ip}"
+  kube_ca_cert_pem        = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cni_bin_dir     = "${var.tectonic_networking == "calico" || var.tectonic_networking == "canal" ? "/var/lib/cni/bin" : "" }"
+  kubelet_debug_config    = "${var.tectonic_kubelet_debug_config}"
+  kubelet_node_label      = "node-role.kubernetes.io/node"
+  kubelet_node_taints     = ""
+  tectonic_vanilla_k8s    = "${var.tectonic_vanilla_k8s}"
+}
+
+module "workers" {
+  source = "github.com/coreos/tectonic-installer//modules/azure/worker-as?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  cloud_provider_config                = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+  cluster_id                           = "${module.tectonic.cluster_id}"
+  cluster_name                         = "${var.tectonic_cluster_name}"
+  container_linux_channel              = "${var.tectonic_container_linux_channel}"
+  container_linux_version              = "${module.container_linux.version}"
+  extra_tags                           = "${var.tectonic_azure_extra_tags}"
+  fault_domains                        = "${var.tectonic_azure_location_fault_domains["${var.tectonic_azure_location}"]}"
+  ign_azure_udev_rules_id              = "${module.ignition_workers.azure_udev_rules_id}"
+  ign_ca_cert_id_list                  = "${module.ignition_masters.ca_cert_id_list}"
+  ign_docker_dropin_id                 = "${module.ignition_workers.docker_dropin_id}"
+  ign_installer_kubelet_env_id         = "${module.ignition_workers.installer_kubelet_env_id}"
+  ign_installer_runtime_mappings_id    = "${module.ignition_workers.installer_runtime_mappings_id}"
+  ign_k8s_node_bootstrap_service_id    = "${module.ignition_workers.k8s_node_bootstrap_service_id}"
+  ign_kubelet_service_id               = "${module.ignition_workers.kubelet_service_id}"
+  ign_locksmithd_service_id            = "${module.ignition_workers.locksmithd_service_id}"
+  ign_max_user_watches_id              = "${module.ignition_workers.max_user_watches_id}"
+  ign_tx_off_service_id                = "${module.ignition_workers.tx_off_service_id}"
+  ign_update_ca_certificates_dropin_id = "${module.ignition_workers.update_ca_certificates_dropin_id}"
+  kubeconfig_content                   = "${module.bootkube.kubeconfig}"
+  location                             = "${var.tectonic_azure_location}"
+  network_interface_ids                = "${module.vnet.worker_network_interface_ids}"
+  public_ssh_key                       = "${var.tectonic_azure_ssh_key}"
+  resource_group_name                  = "${module.resource_group.name}"
+  storage_id                           = "${module.resource_group.storage_id}"
+  storage_type                         = "${var.tectonic_azure_worker_storage_type}"
+  tectonic_kube_dns_service_ip         = "${module.bootkube.kube_dns_service_ip}"
+  vm_size                              = "${var.tectonic_azure_worker_vm_size}"
+  worker_count                         = "${var.tectonic_worker_count}"
+}
+
+module "dns" {
+  source = "github.com/coreos/tectonic-installer//modules/dns/azure?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  etcd_count   = "${local.etcd_count}"
+  master_count = "${var.tectonic_master_count}"
+  worker_count = "${var.tectonic_worker_count}"
+
+  etcd_ip_addresses    = "${module.vnet.etcd_endpoints}"
+  master_ip_addresses  = "${module.vnet.master_private_ip_addresses}"
+  worker_ip_addresses  = "${module.vnet.worker_private_ip_addresses}"
+  api_ip_addresses     = "${module.vnet.api_ip_addresses}"
+  console_ip_addresses = "${module.vnet.console_ip_addresses}"
+
+  base_domain  = "${var.tectonic_base_domain}"
+  cluster_name = "${var.tectonic_cluster_name}"
+  cluster_id   = "${module.tectonic.cluster_id}"
+
+  location             = "${var.tectonic_azure_location}"
+  external_dns_zone_id = "${var.tectonic_azure_external_dns_zone_id}"
+
+  extra_tags = "${var.tectonic_azure_extra_tags}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%tectonic.tf b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%tectonic.tf
new file mode 100644
index 0000000..7d0a0c1
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%tectonic.tf
@@ -0,0 +1,169 @@
+locals {
+  etcd_count = "${var.tectonic_self_hosted_etcd != "" ? 0 : max(var.tectonic_etcd_count, 1)}"
+}
+
+data "template_file" "etcd_hostname_list" {
+  count    = "${local.etcd_count}"
+  template = "${var.tectonic_cluster_name}-etcd-${count.index}${var.tectonic_base_domain == "" ? "" : ".${var.tectonic_base_domain}"}"
+}
+
+module "kube_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/kube/self-signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  ca_cert_pem        = "${var.tectonic_ca_cert}"
+  ca_key_alg         = "${var.tectonic_ca_key_alg}"
+  ca_key_pem         = "${var.tectonic_ca_key}"
+  kube_apiserver_url = "https://${module.vnet.api_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+  validity_period    = "${var.tectonic_tls_validity_period}"
+}
+
+module "etcd_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/etcd/signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  etcd_ca_cert_path     = "${var.tectonic_etcd_ca_cert_path}"
+  etcd_cert_dns_names   = "${data.template_file.etcd_hostname_list.*.rendered}"
+  etcd_client_cert_path = "${var.tectonic_etcd_client_cert_path}"
+  etcd_client_key_path  = "${var.tectonic_etcd_client_key_path}"
+  self_signed           = "${var.tectonic_self_hosted_etcd != "" ? "true" : length(compact(var.tectonic_etcd_servers)) == 0 ? "true" : "false"}"
+  service_cidr          = "${var.tectonic_service_cidr}"
+}
+
+module "ingress_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/ingress/self-signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  base_address    = "${module.vnet.ingress_fqdn}"
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "identity_certs" {
+  source = "github.com/coreos/tectonic-installer//modules/tls/identity/self-signed?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  ca_key_alg      = "${module.kube_certs.ca_key_alg}"
+  ca_key_pem      = "${module.kube_certs.ca_key_pem}"
+  validity_period = "${var.tectonic_tls_validity_period}"
+}
+
+module "bootkube" {
+  source = "github.com/coreos/tectonic-installer//modules/bootkube?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  cloud_provider        = "azure"
+  cloud_provider_config = "${jsonencode(data.null_data_source.cloud_provider.inputs)}"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  kube_apiserver_url = "https://${module.vnet.api_fqdn}:443"
+  oidc_issuer_url    = "https://${module.vnet.ingress_fqdn}/identity"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images = "${var.tectonic_container_images}"
+  versions         = "${var.tectonic_versions}"
+
+  service_cidr = "${var.tectonic_service_cidr}"
+  cluster_cidr = "${var.tectonic_cluster_cidr}"
+
+  advertise_address = "0.0.0.0"
+  anonymous_auth    = "false"
+
+  oidc_username_claim = "email"
+  oidc_groups_claim   = "groups"
+  oidc_client_id      = "tectonic-kubectl"
+  oidc_ca_cert        = "${module.ingress_certs.ca_cert_pem}"
+
+  apiserver_cert_pem   = "${module.kube_certs.apiserver_cert_pem}"
+  apiserver_key_pem    = "${module.kube_certs.apiserver_key_pem}"
+  etcd_ca_cert_pem     = "${module.etcd_certs.etcd_ca_crt_pem}"
+  etcd_client_cert_pem = "${module.etcd_certs.etcd_client_crt_pem}"
+  etcd_client_key_pem  = "${module.etcd_certs.etcd_client_key_pem}"
+  etcd_peer_cert_pem   = "${module.etcd_certs.etcd_peer_crt_pem}"
+  etcd_peer_key_pem    = "${module.etcd_certs.etcd_peer_key_pem}"
+  etcd_server_cert_pem = "${module.etcd_certs.etcd_server_crt_pem}"
+  etcd_server_key_pem  = "${module.etcd_certs.etcd_server_key_pem}"
+  kube_ca_cert_pem     = "${module.kube_certs.ca_cert_pem}"
+  kubelet_cert_pem     = "${module.kube_certs.kubelet_cert_pem}"
+  kubelet_key_pem      = "${module.kube_certs.kubelet_key_pem}"
+
+  etcd_backup_size          = "${var.tectonic_etcd_backup_size}"
+  etcd_backup_storage_class = "${var.tectonic_etcd_backup_storage_class}"
+  etcd_endpoints            = "${data.template_file.etcd_hostname_list.*.rendered}"
+  self_hosted_etcd          = "${var.tectonic_self_hosted_etcd}"
+
+  master_count = "${var.tectonic_master_count}"
+
+  cloud_config_path = "/etc/kubernetes/cloud"
+}
+
+module "tectonic" {
+  source   = "github.com/coreos/tectonic-installer//modules/tectonic?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+  platform = "azure"
+
+  cluster_name = "${var.tectonic_cluster_name}"
+
+  base_address       = "${module.vnet.ingress_fqdn}"
+  kube_apiserver_url = "https://${module.vnet.api_fqdn}:443"
+  service_cidr       = "${var.tectonic_service_cidr}"
+
+  # Platform-independent variables wiring, do not modify.
+  container_images      = "${var.tectonic_container_images}"
+  container_base_images = "${var.tectonic_container_base_images}"
+  versions              = "${var.tectonic_versions}"
+
+  license_path     = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_license_path)}"
+  pull_secret_path = "${var.tectonic_vanilla_k8s ? "/dev/null" : pathexpand(var.tectonic_pull_secret_path)}"
+
+  admin_email    = "${var.tectonic_admin_email}"
+  admin_password = "${var.tectonic_admin_password}"
+
+  update_channel = "${var.tectonic_update_channel}"
+  update_app_id  = "${var.tectonic_update_app_id}"
+  update_server  = "${var.tectonic_update_server}"
+
+  ca_generated = "${var.tectonic_ca_cert == "" ? false : true}"
+  ca_cert      = "${module.kube_certs.ca_cert_pem}"
+
+  ingress_ca_cert_pem = "${module.ingress_certs.ca_cert_pem}"
+  ingress_cert_pem    = "${module.ingress_certs.cert_pem}"
+  ingress_key_pem     = "${module.ingress_certs.key_pem}"
+
+  identity_client_cert_pem = "${module.identity_certs.client_cert_pem}"
+  identity_client_key_pem  = "${module.identity_certs.client_key_pem}"
+  identity_server_cert_pem = "${module.identity_certs.server_cert_pem}"
+  identity_server_key_pem  = "${module.identity_certs.server_key_pem}"
+
+  console_client_id = "tectonic-console"
+  kubectl_client_id = "tectonic-kubectl"
+  ingress_kind      = "NodePort"
+  self_hosted_etcd  = "${var.tectonic_self_hosted_etcd}"
+  master_count      = "${var.tectonic_master_count}"
+  stats_url         = "${var.tectonic_stats_url}"
+
+  image_re = "${var.tectonic_image_re}"
+}
+
+module "flannel_vxlan" {
+  source = "github.com/coreos/tectonic-installer//modules/net/flannel_vxlan?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "flannel"}"
+  container_images = "${var.tectonic_container_images}"
+}
+
+module "calico" {
+  source = "github.com/coreos/tectonic-installer//modules/net/calico?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "calico"}"
+}
+
+module "canal" {
+  source = "github.com/coreos/tectonic-installer//modules/net/canal?ref=0a22c73d39f67ba4bb99106a9e72322a47179736"
+
+  container_images = "${var.tectonic_container_images}"
+  cluster_cidr     = "${var.tectonic_cluster_cidr}"
+  enabled          = "${var.tectonic_networking == "canal"}"
+}
diff --git a/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%variables.tf b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%variables.tf
new file mode 100644
index 0000000..80c5f76
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%terraform-azurerm-kubernetes%variables.tf
@@ -0,0 +1,296 @@
+variable "tectonic_azure_config_version" {
+  description = <<EOF
+(internal) This declares the version of the Azure configuration variables.
+It has no impact on generated assets but declares the version contract of the configuration.
+EOF
+
+  default = "1.1"
+}
+
+variable "tectonic_azure_ssh_network_internal" {
+  type = "string"
+
+  description = <<EOF
+(optional) Network (internal) to allow SSH access from. Maps to `source_address_prefix` in Azure.
+Defaults to `VirtualNetwork`. Should be internal to Azure environment.
+Allowed values: [network CIDR (i.e., 10.0.0.0/16) \| `VirtualNetwork` \| `Internet` \| `*` ]
+EOF
+
+  default = "VirtualNetwork"
+}
+
+variable "tectonic_azure_ssh_network_external" {
+  type = "string"
+
+  description = <<EOF
+(optional) Network (external) to allow SSH access from. Maps to `source_address_prefix` in Azure.
+Defaults to `*`. Can be external to Azure environment.
+Allowed values: [network CIDR (i.e., 10.0.0.0/16) \| `VirtualNetwork` \| `Internet` \| `*` ]
+EOF
+
+  default = "*"
+}
+
+variable "tectonic_azure_location" {
+  type = "string"
+
+  description = <<EOF
+(internal) An Azure location where the cluster will be built.
+Use the location name as returned in the *Name* column by `az account list-locations` CLI command.
+Lowercase string with no spaces between words. Example: southcentralus
+EOF
+}
+
+variable "tectonic_azure_ssh_key" {
+  type        = "string"
+  description = "(required) Path to an SSH public key file to be provisioned as the SSH key for the 'core' user."
+}
+
+variable "tectonic_azure_master_vm_size" {
+  type        = "string"
+  description = "(optional) Instance size for the master node(s). Example: Standard_DS2_v2."
+  default     = "Standard_DS2_v2"
+}
+
+variable "tectonic_azure_worker_vm_size" {
+  type        = "string"
+  description = "(optional) Instance size for the worker node(s). Example: Standard_DS2_v2."
+  default     = "Standard_DS2_v2"
+}
+
+variable "tectonic_azure_etcd_vm_size" {
+  type        = "string"
+  description = "(optional) Instance size for the etcd node(s). Example: Standard_DS2_v2."
+  default     = "Standard_DS2_v2"
+}
+
+variable "tectonic_azure_master_storage_type" {
+  type = "string"
+
+  description = <<EOF
+(optional) Storage account type for the master node(s). Example: Premium_LRS.
+Using Premium storage is constrained by the of instance specified in 'tectonic_azure_master_vm_size'.
+See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+EOF
+
+  default = "Premium_LRS"
+}
+
+variable "tectonic_azure_worker_storage_type" {
+  type = "string"
+
+  description = <<EOF
+(optional) Storage account type for the worker node(s). Example: Premium_LRS.
+Using Premium storage is constrained by the of instance specified in 'tectonic_azure_worker_vm_size'.
+See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+EOF
+
+  default = "Premium_LRS"
+}
+
+variable "tectonic_azure_etcd_storage_type" {
+  type = "string"
+
+  description = <<EOF
+(optional) Storage account type for the etcd node(s). Example: Premium_LRS.
+Using Premium storage is constrained by the of instance specified in 'tectonic_azure_etcd_vm_size'.
+See https://docs.microsoft.com/en-us/azure/storage/storage-premium-storage#supported-vms
+EOF
+
+  default = "Premium_LRS"
+}
+
+variable "tectonic_azure_vnet_cidr_block" {
+  type    = "string"
+  default = "10.0.0.0/16"
+
+  description = <<EOF
+(optional) Range of IP addresses assigned to the Virtual Network in which the cluster nodes run.
+This should not overlap with any other networks, such as the Kubernetes cluster (pod) range,
+service range or a private datacenter connected via ExpressRoute."
+EOF
+}
+
+variable "tectonic_azure_external_vnet_id" {
+  type    = "string"
+  default = ""
+
+  description = <<EOF
+(optional) Resource ID of an existing Virtual Network to launch nodes into.
+Leave blank to create a new Virtual Network.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: /subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/my-k8s-vnet
+EOF
+}
+
+variable "tectonic_azure_external_master_subnet_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) Subnet ID within an existing VNet to deploy master nodes into.
+Required to use an existing VNet.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/test-pre-vnet/subnets/my-k8s-subnet
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_worker_subnet_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) Subnet ID within an existing VNet to deploy worker nodes into.
+Required to use an existing VNet.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/virtualNetworks/test-pre-vnet/subnets/my-k8s-subnet
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_resource_group" {
+  type = "string"
+
+  description = <<EOF
+(optional) Name of an external resource group to place created resources in.
+Leave blank to have a new one created.
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_nsg_master_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) The ID of the external Network Security Group used for masters.
+Leave blank to have a new one created.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/networkSecurityGroups/my-master-nsg
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_nsg_worker_id" {
+  type = "string"
+
+  description = <<EOF
+(optional) The ID of the external Network Security Group used for workers.
+Leave blank to have a new one created.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/networkSecurityGroups/my-worker-nsg
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_external_dns_zone_id" {
+  description = <<EOF
+(optional) The ID of the external Azure DNS zone used for nodes & endpoints FQDNs.
+Required when 'tectonic_base_domain' is set.
+This must be a pre-existing, properly configured Azure DNS zone that the Azure service principal running the Tectonic installer has permission to perform operations on.
+
+Note this is the complete ID as returned in the "id" field by the Azure client, not just the name of the resource.
+
+Example: "/subscriptions/b520eabf-d6c0-4757-8a5e-0fa7d2fe12b5/resourceGroups/my-k8s-cluster/providers/Microsoft.Network/dnszones/my-k8s-dns
+EOF
+
+  default = ""
+}
+
+variable "tectonic_azure_cloud_environment" {
+  type = "string"
+
+  description = <<EOF
+(optional) Azure cloud environment to use. See
+https://github.com/Azure/go-autorest/blob/ec5f4903f77ed9927ac95b19ab8e44ada64c1356/autorest/azure/environments.go#L13
+for available environments.
+EOF
+
+  default = "AZUREPUBLICCLOUD"
+}
+
+variable "tectonic_azure_client_secret" {
+  type = "string"
+
+  description = "(internal) The client secret to use."
+}
+
+variable "tectonic_azure_extra_tags" {
+  type = "map"
+
+  description = <<EOF
+(optional) A map of extra Azure tags to be applied to created resources.
+NOTE: Tags MUST NOT contain reserved characters '<,>,%,&,\,?,/' or control characters.
+EOF
+
+  default = {}
+}
+
+variable "tectonic_azure_private_cluster" {
+  description = <<EOF
+(optional) Setting this to true will result in NO public facing endpoints being created. All traffic is contained within the VNET.
+A VNET with an already configured and active VPN connection is required and needs to be supplied via 'tectonic_azure_external_vnet_id'.
+DNS is currently required, either the Azure managed one or configured via the generic DNS module.
+EOF
+
+  default = false
+}
+
+variable "tectonic_azure_location_fault_domains" {
+  description = <<EOF
+(internal) This mapping is for internal use only. It should not be overriden by users.
+It holds the correspondent number of fault domains for each location,
+because Azure doesn't provide an API call to query this data per location.
+The latest version of this data is always available at this location:
+https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability
+EOF
+
+  type = "map"
+
+  default = {
+    eastus             = 3
+    eastus2            = 3
+    westus             = 3
+    westus2            = 2
+    centralus          = 3
+    northcentralus     = 3
+    southcentralus     = 3
+    westcentralus      = 2
+    canadacentral      = 2
+    canadaeast         = 2
+    northeurope        = 3
+    westeurope         = 3
+    uksouth            = 2
+    ukwest             = 2
+    eastasia           = 2
+    southeastasia      = 2
+    japaneast          = 2
+    japanwest          = 2
+    southindia         = 2
+    centralindia       = 2
+    westindia          = 2
+    koreacentral       = 2
+    koreasouth         = 2
+    australiaeast      = 2
+    australiasoutheast = 2
+    brazilsouth        = 2
+    usgovvirginia      = 2
+    usgovtexas         = 2
+    usgovarizona       = 2
+    usdodcentral       = 2
+    usdodeast          = 2
+  }
+}
diff --git a/example/real_world_stuff/coreos/coreos%vault-operator%example%k8s_auth%policy.hcl b/example/real_world_stuff/coreos/coreos%vault-operator%example%k8s_auth%policy.hcl
new file mode 100644
index 0000000..49fc630
--- /dev/null
+++ b/example/real_world_stuff/coreos/coreos%vault-operator%example%k8s_auth%policy.hcl
@@ -0,0 +1,3 @@
+path "secret/demo/*" {
+    capabilities = ["create", "read", "update", "delete", "list"]
+}
diff --git a/example/real_world_stuff/hashicorp%JaseEKS%backend.tf b/example/real_world_stuff/hashicorp%JaseEKS%backend.tf
deleted file mode 100644
index 15b03c3..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS%backend.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS%eks-cluster.tf b/example/real_world_stuff/hashicorp%JaseEKS%eks-cluster.tf
deleted file mode 100644
index f870c49..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS%eks-cluster.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS%kubernetes.tf b/example/real_world_stuff/hashicorp%JaseEKS%kubernetes.tf
deleted file mode 100644
index f248654..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS%kubernetes.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS%template.hcl b/example/real_world_stuff/hashicorp%JaseEKS%template.hcl
deleted file mode 100644
index a9983b2..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS%template.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS%versions.tf b/example/real_world_stuff/hashicorp%JaseEKS%versions.tf
deleted file mode 100644
index f27945b..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS%vpc.tf b/example/real_world_stuff/hashicorp%JaseEKS%vpc.tf
deleted file mode 100644
index 3780608..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS%vpc.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS-TF%eks-cluster.tf b/example/real_world_stuff/hashicorp%JaseEKS-TF%eks-cluster.tf
deleted file mode 100644
index 4e59b24..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS-TF%eks-cluster.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS-TF%kubernetes.tf b/example/real_world_stuff/hashicorp%JaseEKS-TF%kubernetes.tf
deleted file mode 100644
index cfff394..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS-TF%kubernetes.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS-TF%outputs.tf b/example/real_world_stuff/hashicorp%JaseEKS-TF%outputs.tf
deleted file mode 100644
index ac34329..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS-TF%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS-TF%security-groups.tf b/example/real_world_stuff/hashicorp%JaseEKS-TF%security-groups.tf
deleted file mode 100644
index d14693f..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS-TF%security-groups.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS-TF%versions.tf b/example/real_world_stuff/hashicorp%JaseEKS-TF%versions.tf
deleted file mode 100644
index 88835dc..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS-TF%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseEKS-TF%vpc.tf b/example/real_world_stuff/hashicorp%JaseEKS-TF%vpc.tf
deleted file mode 100644
index e4959c8..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseEKS-TF%vpc.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%main.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%main.tf
deleted file mode 100644
index 1d9a1db..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%aws.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%aws.tf
deleted file mode 100644
index e4e17ac..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%aws.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%boundary-lb.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%boundary-lb.tf
deleted file mode 100644
index 864893e..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%boundary-lb.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%consul-lb.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%consul-lb.tf
deleted file mode 100644
index 261ce43..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%consul-lb.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%dns.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%dns.tf
deleted file mode 100644
index d8d7cbf..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%dns.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%ebs.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%ebs.tf
deleted file mode 100644
index be3b406..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%ebs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%eks.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%eks.tf
deleted file mode 100644
index 5864e1d..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%eks.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%fabio-lb.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%fabio-lb.tf
deleted file mode 100644
index e989507..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%fabio-lb.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%nomad-lb.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%nomad-lb.tf
deleted file mode 100644
index 29228c8..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%nomad-lb.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%outputs.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%outputs.tf
deleted file mode 100644
index b349767..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%server.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%server.tf
deleted file mode 100644
index 7326122..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%server.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%tls.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%tls.tf
deleted file mode 100644
index d69f0ef..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%tls.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%traefik.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%traefik.tf
deleted file mode 100644
index fb9d913..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%traefik.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%variables.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%variables.tf
deleted file mode 100644
index f4830fd..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%vault-lb.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%vault-lb.tf
deleted file mode 100644
index a799069..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%vault-lb.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%workers.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%workers.tf
deleted file mode 100644
index 96d9c80..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%modules%workers.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%outputs.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%outputs.tf
deleted file mode 100644
index 62e9ffa..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%variables.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%variables.tf
deleted file mode 100644
index a659ffe..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%versions.tf b/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%versions.tf
deleted file mode 100644
index e158c6e..0000000
Binary files a/example/real_world_stuff/hashicorp%JaseTeraform-AWS-demostack%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%Jaseexamples%data-sources%scaffolding_data_source%data-source.tf b/example/real_world_stuff/hashicorp%Jaseexamples%data-sources%scaffolding_data_source%data-source.tf
deleted file mode 100644
index 909e04b..0000000
Binary files a/example/real_world_stuff/hashicorp%Jaseexamples%data-sources%scaffolding_data_source%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%Jaseexamples%provider%provider.tf b/example/real_world_stuff/hashicorp%Jaseexamples%provider%provider.tf
deleted file mode 100644
index 8ef15e2..0000000
Binary files a/example/real_world_stuff/hashicorp%Jaseexamples%provider%provider.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%Jaseexamples%resources%scaffolding_resource%resource.tf b/example/real_world_stuff/hashicorp%Jaseexamples%resources%scaffolding_resource%resource.tf
deleted file mode 100644
index 6342e3e..0000000
Binary files a/example/real_world_stuff/hashicorp%Jaseexamples%resources%scaffolding_resource%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%boundary.hcl b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%boundary.hcl
deleted file mode 100644
index 9786368..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%boundary.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%config.hcl b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%config.hcl
deleted file mode 100644
index 11c7f35..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%config.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%main.tf b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%main.tf
deleted file mode 100644
index d4524eb..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%variables.tf b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%variables.tf
deleted file mode 100644
index 93f700c..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%main.tf b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%main.tf
deleted file mode 100644
index de6d293..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%variables.tf b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%variables.tf
deleted file mode 100644
index 7953eb4..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%main.tf b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%main.tf
deleted file mode 100644
index de6d293..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%variables.tf b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%variables.tf
deleted file mode 100644
index b406a0c..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%terraform%main.tf b/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%terraform%main.tf
deleted file mode 100644
index 41e16be..0000000
Binary files a/example/real_world_stuff/hashicorp%boundary-reference-architecturedeployment%docker_cts%terraform%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-defaults.hcl b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-defaults.hcl
deleted file mode 100644
index 2421de5..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-defaults.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-resolver.hcl b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-resolver.hcl
deleted file mode 100644
index 16cc256..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-resolver.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-router.hcl b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-router.hcl
deleted file mode 100644
index 3f9c17a..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-router.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-splitter.hcl b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-splitter.hcl
deleted file mode 100644
index c168399..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-splitter.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%ingress.hcl b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%ingress.hcl
deleted file mode 100644
index 7e4ea29..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%ingress.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetshashicups-waypoint%waypoint.hcl b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetshashicups-waypoint%waypoint.hcl
deleted file mode 100644
index 5f90d3e..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetshashicups-waypoint%waypoint.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmain.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmain.tf
deleted file mode 100644
index 4eef5b4..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%kubernetes%main.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%kubernetes%main.tf
deleted file mode 100644
index 08cd47e..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%kubernetes%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%main.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%main.tf
deleted file mode 100644
index bb15747..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%main.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%main.tf
deleted file mode 100644
index 6882e70..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%outputs.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%outputs.tf
deleted file mode 100644
index ed67fb3..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%variables.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%variables.tf
deleted file mode 100644
index 9bab557..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%outputs.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%outputs.tf
deleted file mode 100644
index 0a0ec76..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%variables.tf b/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%variables.tf
deleted file mode 100644
index 6849b1a..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetscost-estimation-policy%sentinel.hcl b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetscost-estimation-policy%sentinel.hcl
deleted file mode 100644
index 9bca501..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetscost-estimation-policy%sentinel.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%main.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%main.tf
deleted file mode 100644
index d1431a5..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%outputs.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%outputs.tf
deleted file mode 100644
index 0049dba..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%ssh.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%ssh.tf
deleted file mode 100644
index d2c8a69..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%ssh.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%outputs.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%outputs.tf
deleted file mode 100644
index 3ce17ce..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%sg.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%sg.tf
deleted file mode 100644
index b1dae9e..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%sg.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%variables.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%variables.tf
deleted file mode 100644
index b5cd08f..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%vpc.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%vpc.tf
deleted file mode 100644
index 2ec1b14..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%vpc.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%outputs.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%outputs.tf
deleted file mode 100644
index c417722..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%rds.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%rds.tf
deleted file mode 100644
index 745f0f9..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%rds.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%variables.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%variables.tf
deleted file mode 100644
index 1ff7e18..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%iam.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%iam.tf
deleted file mode 100644
index a053b26..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%iam.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%instances.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%instances.tf
deleted file mode 100644
index f58cfaa..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%instances.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%outputs.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%outputs.tf
deleted file mode 100644
index 7ba06c6..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%variables.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%variables.tf
deleted file mode 100644
index 0cf913f..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%variables.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%variables.tf
deleted file mode 100644
index 47396be..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%sentinel-policies%sentinel.hcl b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%sentinel-policies%sentinel.hcl
deleted file mode 100644
index 4f4392a..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%sentinel-policies%sentinel.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%main.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%main.tf
deleted file mode 100644
index 9575578..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%variables.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%variables.tf
deleted file mode 100644
index 28a3237..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%main.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%main.tf
deleted file mode 100644
index c205394..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%variables.tf b/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%variables.tf
deleted file mode 100644
index 6475f41..0000000
Binary files a/example/real_world_stuff/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%go-tfetest-fixtures%config-version%main.tf b/example/real_world_stuff/hashicorp%go-tfetest-fixtures%config-version%main.tf
deleted file mode 100644
index 4d1e2cc..0000000
Binary files a/example/real_world_stuff/hashicorp%go-tfetest-fixtures%config-version%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%go-tfetest-fixtures%policy-set-version%sentinel.hcl b/example/real_world_stuff/hashicorp%go-tfetest-fixtures%policy-set-version%sentinel.hcl
deleted file mode 100644
index 6810ac3..0000000
Binary files a/example/real_world_stuff/hashicorp%go-tfetest-fixtures%policy-set-version%sentinel.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%hashicat-azuremain.tf b/example/real_world_stuff/hashicorp%hashicat-azuremain.tf
deleted file mode 100644
index d1efcae..0000000
Binary files a/example/real_world_stuff/hashicorp%hashicat-azuremain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-consul-kubernetesenvironments%terraform%eks%main.tf b/example/real_world_stuff/hashicorp%learn-consul-kubernetesenvironments%terraform%eks%main.tf
deleted file mode 100644
index 83344f1..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-consul-kubernetesenvironments%terraform%eks%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%.terraform.lock.hcl b/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%.terraform.lock.hcl
deleted file mode 100644
index fae843a..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%.terraform.lock.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%dc1.tf b/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%dc1.tf
deleted file mode 100644
index d0d8488..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%dc1.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%versions.tf b/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%versions.tf
deleted file mode 100644
index b55be55..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-consul-kuberneteslayer7-observability%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-terraform-localsmain.tf b/example/real_world_stuff/hashicorp%learn-terraform-localsmain.tf
deleted file mode 100644
index c796213..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-terraform-localsmain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-terraform-localsoutputs.tf b/example/real_world_stuff/hashicorp%learn-terraform-localsoutputs.tf
deleted file mode 100644
index 97f3af3..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-terraform-localsoutputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-terraform-localsvariables.tf b/example/real_world_stuff/hashicorp%learn-terraform-localsvariables.tf
deleted file mode 100644
index 3a53d2b..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-terraform-localsvariables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-terraform-refresh.terraform.lock.hcl b/example/real_world_stuff/hashicorp%learn-terraform-refresh.terraform.lock.hcl
deleted file mode 100644
index a10dbfc..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-terraform-refresh.terraform.lock.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-terraform-refreshmain.tf b/example/real_world_stuff/hashicorp%learn-terraform-refreshmain.tf
deleted file mode 100644
index a87794d..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-terraform-refreshmain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-terraform-refreshvariables.tf b/example/real_world_stuff/hashicorp%learn-terraform-refreshvariables.tf
deleted file mode 100644
index d01adf3..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-terraform-refreshvariables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%learn-tfc-state-apimain.tf b/example/real_world_stuff/hashicorp%learn-tfc-state-apimain.tf
deleted file mode 100644
index 6778983..0000000
Binary files a/example/real_world_stuff/hashicorp%learn-tfc-state-apimain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%.terraform.lock.hcl b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%.terraform.lock.hcl
deleted file mode 100644
index 54571b0..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%.terraform.lock.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%infrastructure.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%infrastructure.tf
deleted file mode 100644
index 4cc0598..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%infrastructure.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%main.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%main.tf
deleted file mode 100644
index 7b5b060..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%variables.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%variables.tf
deleted file mode 100644
index f85535f..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%packer%aws-packer.pkr.hcl b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%packer%aws-packer.pkr.hcl
deleted file mode 100644
index 5123b31..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%packer%aws-packer.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%asg.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%asg.tf
deleted file mode 100644
index 5c8dc8f..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%asg.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%variables.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%variables.tf
deleted file mode 100644
index c791f8c..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%image.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%image.tf
deleted file mode 100644
index f1b0f5e..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%image.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%variables.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%variables.tf
deleted file mode 100644
index cfc9ab4..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%elb.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%elb.tf
deleted file mode 100644
index 70b6288..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%elb.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%outputs.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%outputs.tf
deleted file mode 100644
index 39578ac..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%sg.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%sg.tf
deleted file mode 100644
index 1569a99..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%sg.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%variables.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%variables.tf
deleted file mode 100644
index 33cb491..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%vpc.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%vpc.tf
deleted file mode 100644
index 81d3d8d..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%vpc.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%instances.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%instances.tf
deleted file mode 100644
index 988f4aa..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%instances.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%variables.tf b/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%variables.tf
deleted file mode 100644
index 2e5e05d..0000000
Binary files a/example/real_world_stuff/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%.terraform.lock.hcl b/example/real_world_stuff/hashicorp%nomade2e%terraform%.terraform.lock.hcl
deleted file mode 100644
index e40d664..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%.terraform.lock.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%network.tf b/example/real_world_stuff/hashicorp%nomade2e%terraform%network.tf
deleted file mode 100644
index 97acd51..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%network.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%nomad.tf b/example/real_world_stuff/hashicorp%nomade2e%terraform%nomad.tf
deleted file mode 100644
index c1fb87d..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%nomad.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%outputs.tf b/example/real_world_stuff/hashicorp%nomade2e%terraform%outputs.tf
deleted file mode 100644
index 97d1ff9..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%provision-nomad%main.tf b/example/real_world_stuff/hashicorp%nomade2e%terraform%provision-nomad%main.tf
deleted file mode 100644
index 91a3e41..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%provision-nomad%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%provision-nomad%variables.tf b/example/real_world_stuff/hashicorp%nomade2e%terraform%provision-nomad%variables.tf
deleted file mode 100644
index 07fa54b..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%provision-nomad%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%terraform.tfvars b/example/real_world_stuff/hashicorp%nomade2e%terraform%terraform.tfvars
deleted file mode 100644
index dbcb875..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%terraform.tfvars and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%nomade2e%terraform%variables.tf b/example/real_world_stuff/hashicorp%nomade2e%terraform%variables.tf
deleted file mode 100644
index 9d44ea8..0000000
Binary files a/example/real_world_stuff/hashicorp%nomade2e%terraform%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-alicloudexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-alicloudexample%build.pkr.hcl
deleted file mode 100644
index 9d4465b..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-alicloudexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-amazonexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-amazonexample%build.pkr.hcl
deleted file mode 100644
index fa1d6be..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-amazonexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-ansibleexample%docker.json.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-ansibleexample%docker.json.pkr.hcl
deleted file mode 100644
index 4451468..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-ansibleexample%docker.json.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-chefexample%chef-solo.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-chefexample%chef-solo.pkr.hcl
deleted file mode 100644
index ffb3edc..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-chefexample%chef-solo.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-cloudstackexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-cloudstackexample%build.pkr.hcl
deleted file mode 100644
index 16e23a9..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-cloudstackexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-digitaloceanexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-digitaloceanexample%build.pkr.hcl
deleted file mode 100644
index f9dbd35..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-digitaloceanexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-googlecomputeexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-googlecomputeexample%build.pkr.hcl
deleted file mode 100644
index 49e555c..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-googlecomputeexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-hashicupsexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-hashicupsexample%build.pkr.hcl
deleted file mode 100644
index f54d27a..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-hashicupsexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-linodeexample%basic_linode.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-linodeexample%basic_linode.pkr.hcl
deleted file mode 100644
index 59acc4b..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-linodeexample%basic_linode.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-oneandoneexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-oneandoneexample%build.pkr.hcl
deleted file mode 100644
index 75bfe15..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-oneandoneexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-parallelsexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-parallelsexample%build.pkr.hcl
deleted file mode 100644
index 48ccd0c..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-parallelsexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-puppetexample%puppet-masterless.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-puppetexample%puppet-masterless.pkr.hcl
deleted file mode 100644
index c3e1c26..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-puppetexample%puppet-masterless.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-qemuexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-qemuexample%build.pkr.hcl
deleted file mode 100644
index 2ae6454..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-qemuexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_builder.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_builder.pkr.hcl
deleted file mode 100644
index e56decd..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_builder.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_cloud_postprocessor.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_cloud_postprocessor.pkr.hcl
deleted file mode 100644
index ce7645a..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_cloud_postprocessor.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_postprocessor.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_postprocessor.pkr.hcl
deleted file mode 100644
index 6f49865..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-vagrantexample%vagrant_postprocessor.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-vmwareexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-vmwareexample%build.pkr.hcl
deleted file mode 100644
index 91a40a4..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-vmwareexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%packer-plugin-vsphereexample%build.pkr.hcl b/example/real_world_stuff/hashicorp%packer-plugin-vsphereexample%build.pkr.hcl
deleted file mode 100644
index 53098e0..0000000
Binary files a/example/real_world_stuff/hashicorp%packer-plugin-vsphereexample%build.pkr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%consul-server.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%consul-server.tf
deleted file mode 100644
index d044c16..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%consul-server.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%ecs-cluster.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%ecs-cluster.tf
deleted file mode 100644
index 403d25b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%ecs-cluster.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%iam.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%iam.tf
deleted file mode 100644
index d14710e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%iam.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%main.tf
deleted file mode 100644
index cec8968..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%outputs.tf
deleted file mode 100644
index 2127b4f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%variables.tf
deleted file mode 100644
index 54e4ee9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%vpc.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%vpc.tf
deleted file mode 100644
index 5278c3a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%vpc.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%main.tf
deleted file mode 100644
index 54d81cd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%outputs.tf
deleted file mode 100644
index f2ef8e8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%variables.tf
deleted file mode 100644
index 7e98396..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%dev-server%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%main.tf
deleted file mode 100644
index ac08c7e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%outputs.tf
deleted file mode 100644
index 9b55da8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%validation.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%validation.tf
deleted file mode 100644
index 19baa05..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%validation.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%variables.tf
deleted file mode 100644
index 3b3b7cd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%main.tf
deleted file mode 100644
index 0266045..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%outputs.tf
deleted file mode 100644
index 29a7ff1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%variables.tf
deleted file mode 100644
index 452dac1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%basic-install%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%basic-install%main.tf
deleted file mode 100644
index 4eeb464..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%basic-install%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%retry-join-validate%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%retry-join-validate%main.tf
deleted file mode 100644
index 0b4b4fe..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%retry-join-validate%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprise.tflint.hcl b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprise.tflint.hcl
deleted file mode 100644
index 0180928..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprise.tflint.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%outputs.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%variables.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%versions.tf
deleted file mode 100644
index 03d4c95..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%main.tf
deleted file mode 100644
index 9a086d4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%outputs.tf
deleted file mode 100644
index ca0549b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%variables.tf
deleted file mode 100644
index 4dc8199..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%versions.tf
deleted file mode 100644
index 561622f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%main.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%outputs.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%variables.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%versions.tf
deleted file mode 100644
index 03d4c95..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%main.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%outputs.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%variables.tf
deleted file mode 100644
index 91c61b0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%versions.tf
deleted file mode 100644
index 03d4c95..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemain.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemain.tf
deleted file mode 100644
index 577d37b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%main.tf
deleted file mode 100644
index c7a147b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%outputs.tf
deleted file mode 100644
index 2141b04..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%variables.tf
deleted file mode 100644
index 35a6679..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%versions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%main.tf
deleted file mode 100644
index c2fd2c5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%outputs.tf
deleted file mode 100644
index 3ff897a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%variables.tf
deleted file mode 100644
index 7d49a0d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%versions.tf
deleted file mode 100644
index 87b44d8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%database%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%main.tf
deleted file mode 100644
index d2137b8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%outputs.tf
deleted file mode 100644
index 2c81c18..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%variables.tf
deleted file mode 100644
index 27d5a0c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%versions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%main.tf
deleted file mode 100644
index 783c051..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%outputs.tf
deleted file mode 100644
index 060914b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%variables.tf
deleted file mode 100644
index a436dac..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%versions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%networking%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%main.tf
deleted file mode 100644
index d3cca61..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%outputs.tf
deleted file mode 100644
index 426f8dd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%variables.tf
deleted file mode 100644
index 798e72c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%versions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%main.tf
deleted file mode 100644
index 85eee53..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%outputs.tf
deleted file mode 100644
index bf74c32..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%variables.tf
deleted file mode 100644
index 6858da7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%versions.tf
deleted file mode 100644
index 87b44d8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%redis%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%main.tf
deleted file mode 100644
index 33747fd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%outputs.tf
deleted file mode 100644
index 5219a1e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%variables.tf
deleted file mode 100644
index b9f40fc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%versions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%main.tf
deleted file mode 100644
index a063f73..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%outputs.tf
deleted file mode 100644
index 8ea1bc0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%variables.tf
deleted file mode 100644
index 95c8a1a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%versions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%main.tf
deleted file mode 100644
index 9b91b35..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%outputs.tf
deleted file mode 100644
index f978985..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%variables.tf
deleted file mode 100644
index 323837d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%versions.tf
deleted file mode 100644
index b548523..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%main.tf
deleted file mode 100644
index 9e6784f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%outputs.tf
deleted file mode 100644
index 6035558..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%variables.tf
deleted file mode 100644
index 6dd3de7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%versions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisemodules%vm%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseoutputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseoutputs.tf
deleted file mode 100644
index a7aa6e9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseoutputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%locals.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%locals.tf
deleted file mode 100644
index 519d8f1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%locals.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%main.tf
deleted file mode 100644
index cfeb5d7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%outputs.tf
deleted file mode 100644
index 9cdfb88..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%proxy.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%proxy.tf
deleted file mode 100644
index c3c7360..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%proxy.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%variables.tf
deleted file mode 100644
index 6f30ec5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%versions.tf
deleted file mode 100644
index 65c917a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%certificates.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%certificates.tf
deleted file mode 100644
index 9d39c38..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%certificates.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%locals.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%locals.tf
deleted file mode 100644
index 562d387..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%locals.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%main.tf
deleted file mode 100644
index 58d0194..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%outputs.tf
deleted file mode 100644
index 2da8e83..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%proxy.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%proxy.tf
deleted file mode 100644
index 6ddce47..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%proxy.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%variables.tf
deleted file mode 100644
index c8840d4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%versions.tf
deleted file mode 100644
index d44486a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%locals.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%locals.tf
deleted file mode 100644
index 6762e0b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%locals.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%main.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%main.tf
deleted file mode 100644
index 0c6ef74..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%outputs.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%outputs.tf
deleted file mode 100644
index 071116c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%variables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%variables.tf
deleted file mode 100644
index 165789c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%versions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%versions.tf
deleted file mode 100644
index 0d95b7e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisevariables.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisevariables.tf
deleted file mode 100644
index 3880e37..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterprisevariables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseversions.tf b/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseversions.tf
deleted file mode 100644
index 773b3bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-aws-terraform-enterpriseversions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisedata.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisedata.tf
deleted file mode 100644
index 07a5499..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisedata.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%main.tf
deleted file mode 100644
index 72ba761..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%variables.tf
deleted file mode 100644
index 04f8a26..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%main.tf
deleted file mode 100644
index 4985a87..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%variables.tf
deleted file mode 100644
index e4f6d2e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%main.tf
deleted file mode 100644
index 1b9848f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%main.tf
deleted file mode 100644
index 84e57a1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%outputs.tf
deleted file mode 100644
index 9b2fc27..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%variables.tf
deleted file mode 100644
index 66fdb48..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%variables.tf
deleted file mode 100644
index 7d35b83..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%main.tf
deleted file mode 100644
index 552c4ed..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%variables.tf
deleted file mode 100644
index 7fb684a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%main.tf
deleted file mode 100644
index 90db946..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%main.tf
deleted file mode 100644
index 5c43791..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%outputs.tf
deleted file mode 100644
index 573d907..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%variables.tf
deleted file mode 100644
index a3500a2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%variables.tf
deleted file mode 100644
index 0434fd6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%main.tf
deleted file mode 100644
index c579ac3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%outputs.tf
deleted file mode 100644
index 1f29a32..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%variables.tf
deleted file mode 100644
index fda2ea7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%main.tf
deleted file mode 100644
index 3b5455c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main-bastion.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main-bastion.tf
deleted file mode 100644
index 1c5bfbb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main-bastion.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main.tf
deleted file mode 100644
index d170275..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%outputs.tf
deleted file mode 100644
index fecbeed..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%variables.tf
deleted file mode 100644
index 6f49440..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%variables.tf
deleted file mode 100644
index bf0cb23..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%main.tf
deleted file mode 100644
index f71d51e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main-bastion.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main-bastion.tf
deleted file mode 100644
index 188e4f6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main-bastion.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main.tf
deleted file mode 100644
index bba593e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%outputs.tf
deleted file mode 100644
index 7736f94..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%variables.tf
deleted file mode 100644
index 5a7f909..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%variables.tf
deleted file mode 100644
index 211ec35..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%main.tf
deleted file mode 100644
index e628aa7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%outputs.tf
deleted file mode 100644
index f401da0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%main.tf
deleted file mode 100644
index 1327529..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%outputs.tf
deleted file mode 100644
index 2d30f6d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%variables.tf
deleted file mode 100644
index 04f8a26..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemain.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemain.tf
deleted file mode 100644
index c939909..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%main.tf
deleted file mode 100644
index cff67c8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%outputs.tf
deleted file mode 100644
index 6101470..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%variables.tf
deleted file mode 100644
index 16352ca..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%data.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%data.tf
deleted file mode 100644
index c72d860..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%data.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%main.tf
deleted file mode 100644
index 0bdc8a0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%outputs.tf
deleted file mode 100644
index 1f4e7cf..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%variables.tf
deleted file mode 100644
index a4bb173..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%main.tf
deleted file mode 100644
index b0f7533..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%outputs.tf
deleted file mode 100644
index a2f6abb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%variables.tf
deleted file mode 100644
index 4b03f5d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%main.tf
deleted file mode 100644
index 9040fac..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%outputs.tf
deleted file mode 100644
index e82ec4b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%variables.tf
deleted file mode 100644
index 0b188ca..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%main.tf
deleted file mode 100644
index 5877beb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%outputs.tf
deleted file mode 100644
index 31167d4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%variables.tf
deleted file mode 100644
index 1b6741d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%main.tf
deleted file mode 100644
index 2d46ce2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%outputs.tf
deleted file mode 100644
index 4a6889c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%variables.tf
deleted file mode 100644
index c76e0f4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%main.tf
deleted file mode 100644
index 46cbcd5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%outputs.tf
deleted file mode 100644
index bdd648a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%storage.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%storage.tf
deleted file mode 100644
index 61a8993..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%storage.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%variables.tf
deleted file mode 100644
index 6f661f6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%main.tf
deleted file mode 100644
index 03fb564..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%outputs.tf
deleted file mode 100644
index 90ba204..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%variables.tf
deleted file mode 100644
index 88a1ba9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%main.tf
deleted file mode 100644
index 353313d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%outputs.tf
deleted file mode 100644
index 0db0852..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%variables.tf
deleted file mode 100644
index e2e1c0e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%main.tf
deleted file mode 100644
index 157cc7a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%outputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%outputs.tf
deleted file mode 100644
index 1e806c4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%variables.tf
deleted file mode 100644
index 3a56a56..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%main.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%main.tf
deleted file mode 100644
index 28747f2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%variables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%variables.tf
deleted file mode 100644
index b5888b3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseoutputs.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseoutputs.tf
deleted file mode 100644
index 52358ae..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterpriseoutputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisevariables.tf b/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisevariables.tf
deleted file mode 100644
index ee9dbf6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-azurerm-terraform-enterprisevariables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%main.tf
deleted file mode 100644
index 498f9ca..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%outputs.tf
deleted file mode 100644
index d5806a5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%variables.tf
deleted file mode 100644
index 7e4dca8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%main.tf
deleted file mode 100644
index f2373c3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%outputs.tf
deleted file mode 100644
index f9c598f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%variables.tf
deleted file mode 100644
index 083744f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%versions.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%versions.tf
deleted file mode 100644
index 7a889f5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%main.tf
deleted file mode 100644
index 6a9ce24..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%outputs.tf
deleted file mode 100644
index d5806a5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%variables.tf
deleted file mode 100644
index 224086f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%main.tf
deleted file mode 100644
index f206688..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%outputs.tf
deleted file mode 100644
index b1af231..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%variables.tf
deleted file mode 100644
index 42365af..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%main.tf
deleted file mode 100644
index fb82f76..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%outputs.tf
deleted file mode 100644
index 92823e4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%variables.tf
deleted file mode 100644
index d2d1d2b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%main.tf
deleted file mode 100644
index 0a47572..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%outputs.tf
deleted file mode 100644
index f9c598f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%variables.tf
deleted file mode 100644
index 083744f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%versions.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%versions.tf
deleted file mode 100644
index a5309ce..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%main.tf
deleted file mode 100644
index 6a9ce24..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%outputs.tf
deleted file mode 100644
index d5806a5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%variables.tf
deleted file mode 100644
index 76864f9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%main.tf
deleted file mode 100644
index 8a8f7d7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%outputs.tf
deleted file mode 100644
index 92823e4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%variables.tf
deleted file mode 100644
index f9667d1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%main.tf
deleted file mode 100644
index 702ec23..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%outputs.tf
deleted file mode 100644
index f9c598f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%variables.tf
deleted file mode 100644
index 855b027..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%versions.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%versions.tf
deleted file mode 100644
index 3f9c7a4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemain.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemain.tf
deleted file mode 100644
index ff5c85b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%main.tf
deleted file mode 100644
index 94f3128..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%outputs.tf
deleted file mode 100644
index 103a659..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%variables.tf
deleted file mode 100644
index b516c18..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%database%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%main.tf
deleted file mode 100644
index d0006e8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%outputs.tf
deleted file mode 100644
index 19e1b8f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%variables.tf
deleted file mode 100644
index c5f5fa7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%main.tf
deleted file mode 100644
index 6b74ced..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%outputs.tf
deleted file mode 100644
index dce207c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%variables.tf
deleted file mode 100644
index 8573d38..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%networking%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%main.tf
deleted file mode 100644
index 2a7f5d3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%outputs.tf
deleted file mode 100644
index 62869f6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%variables.tf
deleted file mode 100644
index 78a6916..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%main.tf
deleted file mode 100644
index 87e9d7c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%outputs.tf
deleted file mode 100644
index eeb4670..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%variables.tf
deleted file mode 100644
index c5f5fa7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%main.tf
deleted file mode 100644
index 0374f2a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%outputs.tf
deleted file mode 100644
index eeb4670..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%variables.tf
deleted file mode 100644
index e0cb466..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%main.tf
deleted file mode 100644
index 34cc2f5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%outputs.tf
deleted file mode 100644
index 345c65f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%variables.tf
deleted file mode 100644
index d369bab..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%redis%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%main.tf
deleted file mode 100644
index 9f841cd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%outputs.tf
deleted file mode 100644
index 4897147..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%variables.tf
deleted file mode 100644
index aefdd14..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%main.tf
deleted file mode 100644
index 119575d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%outputs.tf
deleted file mode 100644
index b1bf718..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%variables.tf
deleted file mode 100644
index 0629265..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%user_data%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%main.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%main.tf
deleted file mode 100644
index 8152bdc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%outputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%outputs.tf
deleted file mode 100644
index a00f9cf..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%outputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%variables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%variables.tf
deleted file mode 100644
index 64c7d76..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisemodules%vm%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseoutputs.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseoutputs.tf
deleted file mode 100644
index e1354f1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseoutputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisevariables.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisevariables.tf
deleted file mode 100644
index 1c92d96..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterprisevariables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseversions.tf b/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseversions.tf
deleted file mode 100644
index ffcc622..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-google-terraform-enterpriseversions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-awsinfrastructure%repository%labels-service.tf b/example/real_world_stuff/hashicorp%terraform-provider-awsinfrastructure%repository%labels-service.tf
deleted file mode 100644
index 7e00c4a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-awsinfrastructure%repository%labels-service.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-awsinfrastructure%repository%main.tf b/example/real_world_stuff/hashicorp%terraform-provider-awsinfrastructure%repository%main.tf
deleted file mode 100644
index 7fc411c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-awsinfrastructure%repository%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%application%locals.tf b/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%application%locals.tf
deleted file mode 100644
index 606ab2d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%application%locals.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%application%main.tf b/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%application%main.tf
deleted file mode 100644
index 00cb6b6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%application%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%create-for-rbac%main.tf b/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%create-for-rbac%main.tf
deleted file mode 100644
index bdb1404..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-azureadexamples%create-for-rbac%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspace.github%infra%gcp.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspace.github%infra%gcp.tf
deleted file mode 100644
index f9d494a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspace.github%infra%gcp.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspace.github%infra%vault.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspace.github%infra%vault.tf
deleted file mode 100644
index cedeee8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspace.github%infra%vault.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_domain%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_domain%data-source.tf
deleted file mode 100644
index 8f11805..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_domain%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group%data-source.tf
deleted file mode 100644
index 6d25db5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_member%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_member%data-source.tf
deleted file mode 100644
index ebc1433..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_member%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_settings%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_settings%data-source.tf
deleted file mode 100644
index 6bd3d30..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_settings%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_privileges%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_privileges%data-source.tf
deleted file mode 100644
index 9ccbd5e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_privileges%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_role%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_role%data-source.tf
deleted file mode 100644
index a93b4bf..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_role%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_schema%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_schema%data-source.tf
deleted file mode 100644
index 742b1f9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_schema%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_user%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_user%data-source.tf
deleted file mode 100644
index d737219..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_user%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%provider%provider.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%provider%provider.tf
deleted file mode 100644
index f520f26..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%provider%provider.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_domain%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_domain%resource.tf
deleted file mode 100644
index 6ed41af..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_domain%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group%resource.tf
deleted file mode 100644
index a21225f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_member%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_member%resource.tf
deleted file mode 100644
index 00a241d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_member%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_settings%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_settings%resource.tf
deleted file mode 100644
index 313a53f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_settings%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role%resource.tf
deleted file mode 100644
index 189e63a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role_assignment%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role_assignment%resource.tf
deleted file mode 100644
index 4cb062e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role_assignment%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_schema%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_schema%resource.tf
deleted file mode 100644
index dba7bbc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_schema%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_user%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_user%resource.tf
deleted file mode 100644
index e8f598c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_user%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%data-source.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%data-source.tf
deleted file mode 100644
index ffa5a51..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%data-source.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%variables.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%variables.tf
deleted file mode 100644
index 66957ea..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-peering.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-peering.tf
deleted file mode 100644
index fe24111..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-peering.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-tgw.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-tgw.tf
deleted file mode 100644
index d343da5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-tgw.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-peering.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-peering.tf
deleted file mode 100644
index 6845512..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-peering.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-tgw.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-tgw.tf
deleted file mode 100644
index 71bcb9a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-tgw.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%peering%main.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%peering%main.tf
deleted file mode 100644
index e56e6c6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%peering%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%peering%variables.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%peering%variables.tf
deleted file mode 100644
index 2a190b2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%guides%peering%variables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%provider%provider.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%provider%provider.tf
deleted file mode 100644
index 76dc2d5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%provider%provider.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_network_peering%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_network_peering%resource.tf
deleted file mode 100644
index 7c29109..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_network_peering%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_transit_gateway_attachment%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_transit_gateway_attachment%resource.tf
deleted file mode 100644
index 7a4f8a9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_transit_gateway_attachment%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_hvn_route%resource.tf b/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_hvn_route%resource.tf
deleted file mode 100644
index 0a8495b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraform-provider-hcpexamples%resources%hcp_hvn_route%resource.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%basic%main.tf
deleted file mode 100644
index 9eb572d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%module%main.tf
deleted file mode 100644
index 171fd00..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%module%module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%module%module%main.tf
deleted file mode 100644
index 014da75..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%add%module%module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%providers-lock%basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%providers-lock%basic%main.tf
deleted file mode 100644
index bfa938e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%providers-lock%basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%show-json%drift%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%show-json%drift%main.tf
deleted file mode 100644
index afc08f1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%command%testdata%show-json%drift%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%child_a%child_a.tf b/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%child_a%child_a.tf
deleted file mode 100644
index 4a3939b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%child_a%child_a.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%child_b%child_b.tf b/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%child_b%child_b.tf
deleted file mode 100644
index 4a3939b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%child_b%child_b.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%root.tf b/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%root.tf
deleted file mode 100644
index 85373a0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%config-build%root.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%nested-errors%child_a%child_a.tf b/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%nested-errors%child_a%child_a.tf
deleted file mode 100644
index 52552d9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%nested-errors%child_a%child_a.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%nested-errors%root.tf b/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%nested-errors%root.tf
deleted file mode 100644
index ddc4696..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%configs%testdata%nested-errors%root.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%child%package-escape-child.tf b/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%child%package-escape-child.tf
deleted file mode 100644
index c00dd77..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%child%package-escape-child.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%package-escape.tf b/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%package-escape.tf
deleted file mode 100644
index f15428d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%package-escape.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package%child%package-prefix-child.tf b/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package%child%package-prefix-child.tf
deleted file mode 100644
index df239b5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package%child%package-prefix-child.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package-prefix.tf b/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package-prefix.tf
deleted file mode 100644
index db64522..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package-prefix.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-module%child%main.tf
deleted file mode 100644
index acabe86..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref%main.tf
deleted file mode 100644
index 22193d6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref-single%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref-single%main.tf
deleted file mode 100644
index 74faa9a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref-single%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-self-ref%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-self-ref%main.tf
deleted file mode 100644
index 6b357d9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-self-ref%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-sensitive%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-sensitive%main.tf
deleted file mode 100644
index 0153bdc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-sensitive%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-count%main.tf
deleted file mode 100644
index 3f6cc41..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%child%main.tf
deleted file mode 100644
index 3221f33..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%main.tf
deleted file mode 100644
index 963e635..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-count-zero-list%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-count-zero-list%main.tf
deleted file mode 100644
index e53a21c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-count-zero-list%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%child%main.tf
deleted file mode 100644
index c34c07d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%main.tf
deleted file mode 100644
index 83b7888..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%child%main.tf
deleted file mode 100644
index 7e3a620..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%main.tf
deleted file mode 100644
index 3953102..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%main.tf
deleted file mode 100644
index 83b7888..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-empty%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-empty%main.tf
deleted file mode 100644
index c64c938..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-empty%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%child%main.tf
deleted file mode 100644
index 7e3a620..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%main.tf
deleted file mode 100644
index ac5cd0d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-scale-in%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-scale-in%main.tf
deleted file mode 100644
index e2e420d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-resource-scale-in%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint%main.tf
deleted file mode 100644
index e5a385f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep%main.tf
deleted file mode 100644
index 932c7b8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep-requires-new%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep-requires-new%main.tf
deleted file mode 100644
index e644761..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep-requires-new%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-tainted-targets%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-tainted-targets%main.tf
deleted file mode 100644
index 01e86d7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-tainted-targets%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted%main.tf
deleted file mode 100644
index 58490e4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-count%main.tf
deleted file mode 100644
index 65c24bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%child%main.tf
deleted file mode 100644
index afffdfc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%main.tf
deleted file mode 100644
index e7ef989..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%child%main.tf
deleted file mode 100644
index 862dc2f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%main.tf
deleted file mode 100644
index 8321bca..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%child%main.tf
deleted file mode 100644
index afffdfc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%main.tf
deleted file mode 100644
index 2245bbf..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child1%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child1%main.tf
deleted file mode 100644
index c723598..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child1%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child2%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child2%main.tf
deleted file mode 100644
index 289dd0b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child2%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%main.tf
deleted file mode 100644
index 0b6ec95..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-terraform-workspace%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-terraform-workspace%main.tf
deleted file mode 100644
index 258aa92..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-terraform-workspace%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%child%main.tf
deleted file mode 100644
index 7834d68..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%main.tf
deleted file mode 100644
index 4fed821..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unstable%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unstable%main.tf
deleted file mode 100644
index 880cb71..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-unstable%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-vars%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-vars%main.tf
deleted file mode 100644
index 33c4257..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-vars%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-vars-env%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-vars-env%main.tf
deleted file mode 100644
index 4dd7b70..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%apply-vars-env%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%context-required-version%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%context-required-version%main.tf
deleted file mode 100644
index 9cc44c2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%context-required-version%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%context-required-version-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%context-required-version-module%child%main.tf
deleted file mode 100644
index 02b628d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%context-required-version-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%main.tf
deleted file mode 100644
index b8ee85d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%mod%main.tf
deleted file mode 100644
index d34458a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%child%main.tf
deleted file mode 100644
index 920061e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%main.tf
deleted file mode 100644
index 28904a9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%empty%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%empty%main.tf
deleted file mode 100644
index 9fa56d1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%empty%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%child%main.tf
deleted file mode 100644
index 3effd4f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%main.tf
deleted file mode 100644
index 39ed55c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-basic%main.tf
deleted file mode 100644
index 93d90ae..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%child%main.tf
deleted file mode 100644
index 6ff88ad..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%main.tf
deleted file mode 100644
index 249d1cc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-count%main.tf
deleted file mode 100644
index ae1764b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-dep-cbd%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-dep-cbd%main.tf
deleted file mode 100644
index 3050bc7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-dep-cbd%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-double-cbd%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-double-cbd%main.tf
deleted file mode 100644
index 57d5ce1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-double-cbd%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%A%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%A%main.tf
deleted file mode 100644
index 3ffddf2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%A%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%main.tf
deleted file mode 100644
index 8f33ec9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-provisioner%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-provisioner%main.tf
deleted file mode 100644
index 73d06d2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-provisioner%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%child1%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%child1%main.tf
deleted file mode 100644
index 4e0d37c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%child1%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%main.tf
deleted file mode 100644
index f108146..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-attr-as-blocks%attr-as-blocks.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-attr-as-blocks%attr-as-blocks.tf
deleted file mode 100644
index 6dc7fb5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-attr-as-blocks%attr-as-blocks.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-basic%main.tf
deleted file mode 100644
index 0f66a6b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-dynblock%dynblock.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-dynblock%dynblock.tf
deleted file mode 100644
index debea88..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-dynblock%dynblock.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child1%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child1%main.tf
deleted file mode 100644
index 72f9191..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child1%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child2%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child2%main.tf
deleted file mode 100644
index 72f9191..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child2%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%main.tf
deleted file mode 100644
index 65f7b86..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%child%main.tf
deleted file mode 100644
index 285ce3f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%child%submodule%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%child%submodule%main.tf
deleted file mode 100644
index e954161..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%child%submodule%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%main.tf
deleted file mode 100644
index d61fecb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider%main.tf
deleted file mode 100644
index 3206610..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-locals%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-locals%main.tf
deleted file mode 100644
index 19a1046..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-locals%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-resources%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-resources%main.tf
deleted file mode 100644
index a44e238..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-resources%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-vars%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-vars%main.tf
deleted file mode 100644
index d5ddb63..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%import-provider-vars%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%child%main.tf
deleted file mode 100644
index ce7bd75..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%main.tf
deleted file mode 100644
index dd948a4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%source%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%source%main.tf
deleted file mode 100644
index 90f62bd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%source%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-module-data-vars%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-module-data-vars%child%main.tf
deleted file mode 100644
index 2d89eda..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-module-data-vars%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-multi%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-multi%main.tf
deleted file mode 100644
index 57ce482..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-multi%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-once%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-once%child%main.tf
deleted file mode 100644
index a2ccdfc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-once%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-vars%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-vars%main.tf
deleted file mode 100644
index 2c856fa..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-vars%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars%main.tf
deleted file mode 100644
index 8f3dff5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%child%main.tf
deleted file mode 100644
index 5d3632a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%main.tf
deleted file mode 100644
index 05bf3d3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%main.tf
deleted file mode 100644
index 3ade10f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%main.tf
deleted file mode 100644
index c5aabb1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%submod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%submod%main.tf
deleted file mode 100644
index b31eeb4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%submod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-variables%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-variables%main.tf
deleted file mode 100644
index ee5b89e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%input-variables%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-0%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-0%main.tf
deleted file mode 100644
index e109922..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-0%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-1%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-1%main.tf
deleted file mode 100644
index e2974bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-1%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-7824%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-7824%main.tf
deleted file mode 100644
index 5fce7e7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-7824%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-9549%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-9549%main.tf
deleted file mode 100644
index 1719320..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-9549%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-9549%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-9549%mod%main.tf
deleted file mode 100644
index 5e475d1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%issue-9549%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%nested-resource-count-plan%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%nested-resource-count-plan%main.tf
deleted file mode 100644
index 5741128..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%nested-resource-count-plan%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd%main.tf
deleted file mode 100644
index e76be83..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd-depends-datasource%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd-depends-datasource%main.tf
deleted file mode 100644
index 9a44906..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd-depends-datasource%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd-maintain-root%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd-maintain-root%main.tf
deleted file mode 100644
index c9c10de..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-cbd-maintain-root%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-close-module-provider%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-close-module-provider%mod%main.tf
deleted file mode 100644
index d3d0e52..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-close-module-provider%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed%main.tf
deleted file mode 100644
index e0b4c0b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-attr-ref-type-mismatch%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-attr-ref-type-mismatch%main.tf
deleted file mode 100644
index ae0b0c0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-attr-ref-type-mismatch%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-count%main.tf
deleted file mode 100644
index 02dc161..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-resource%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-resource%main.tf
deleted file mode 100644
index 5c95bab..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-resource%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-in-function%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-in-function%main.tf
deleted file mode 100644
index 2a9d7ed..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-in-function%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-list%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-list%main.tf
deleted file mode 100644
index c76940f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-list%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-multi-index%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-multi-index%main.tf
deleted file mode 100644
index 4d93d69..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-multi-index%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%main.tf
deleted file mode 100644
index a61c1bf..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%mod%main.tf
deleted file mode 100644
index 9d070e2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed%main.tf
deleted file mode 100644
index 3d7b1f6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%child%main.tf
deleted file mode 100644
index 22a1147..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%main.tf
deleted file mode 100644
index 1c4a7ed..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-dec%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-dec%main.tf
deleted file mode 100644
index 85a79b7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-dec%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-inc%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-inc%main.tf
deleted file mode 100644
index ca6b9bd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-inc%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-index%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-index%main.tf
deleted file mode 100644
index b66e4e7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-index%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%child%main.tf
deleted file mode 100644
index d579164..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%main.tf
deleted file mode 100644
index 1496c26..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%child%main.tf
deleted file mode 100644
index d579164..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%main.tf
deleted file mode 100644
index 2c7be0a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%main.tf
deleted file mode 100644
index 1496c26..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-one-index%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-one-index%main.tf
deleted file mode 100644
index 8eb8d95..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-one-index%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-splat-reference%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-splat-reference%main.tf
deleted file mode 100644
index 30879f9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-splat-reference%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-var%main.tf
deleted file mode 100644
index 6bcbc52..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-zero%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-zero%main.tf
deleted file mode 100644
index 687c94c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-count-zero%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-data-depends-on%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-data-depends-on%main.tf
deleted file mode 100644
index 70e9c38..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-data-depends-on%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-data-resource-becomes-computed%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-data-resource-becomes-computed%main.tf
deleted file mode 100644
index 3648167..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-data-resource-becomes-computed%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%main.tf
deleted file mode 100644
index 7670fdd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%mod%main.tf
deleted file mode 100644
index 228cffe..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-diffvar%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-diffvar%main.tf
deleted file mode 100644
index b7a9bee..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-diffvar%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-escaped-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-escaped-var%main.tf
deleted file mode 100644
index 5857eff..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-escaped-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-for-each%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-for-each%main.tf
deleted file mode 100644
index 8f877c0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-for-each%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-for-each-unknown-value%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-for-each-unknown-value%main.tf
deleted file mode 100644
index ccb7aac..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-for-each-unknown-value%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes%main.tf
deleted file mode 100644
index 096018a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-in-map%ignore-changes-in-map.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-in-map%ignore-changes-in-map.tf
deleted file mode 100644
index eb3a25e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-in-map%ignore-changes-in-map.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-sensitive%ignore-changes-sensitive.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-sensitive%ignore-changes-sensitive.tf
deleted file mode 100644
index 638b44a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-sensitive%ignore-changes-sensitive.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-wildcard%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-wildcard%main.tf
deleted file mode 100644
index cac452b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-wildcard%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-with-flatmaps%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-with-flatmaps%main.tf
deleted file mode 100644
index fe5cbca..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-with-flatmaps%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-list-order%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-list-order%main.tf
deleted file mode 100644
index a596eec..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-list-order%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-local-value-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-local-value-count%main.tf
deleted file mode 100644
index 6150400..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-local-value-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%child%main.tf
deleted file mode 100644
index 3013c3d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%main.tf
deleted file mode 100644
index 22e14d7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy%main.tf
deleted file mode 100644
index 0576cdc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%a%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%a%main.tf
deleted file mode 100644
index 007c84d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%a%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%b%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%b%main.tf
deleted file mode 100644
index 0ead8ee..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%b%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%main.tf
deleted file mode 100644
index 3026bf8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%child%main.tf
deleted file mode 100644
index 5c0822d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%main.tf
deleted file mode 100644
index 4f15169..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input%child%main.tf
deleted file mode 100644
index b70d8ef..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input%main.tf
deleted file mode 100644
index 019bfa1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%child%main.tf
deleted file mode 100644
index b70d8ef..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%main.tf
deleted file mode 100644
index 760438a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%child%main.tf
deleted file mode 100644
index b70d8ef..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%main.tf
deleted file mode 100644
index ed77cbb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%child%main.tf
deleted file mode 100644
index 63a1b71..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%main.tf
deleted file mode 100644
index cc0e4ba..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%child%main.tf
deleted file mode 100644
index d3d8ffc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%main.tf
deleted file mode 100644
index 1d94c97..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%child%main.tf
deleted file mode 100644
index 384b90c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%main.tf
deleted file mode 100644
index aceea73..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%child%main.tf
deleted file mode 100644
index 384b90c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%main.tf
deleted file mode 100644
index 3d362ca..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%child%main.tf
deleted file mode 100644
index eb629a1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%main.tf
deleted file mode 100644
index aceea73..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%A%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%A%main.tf
deleted file mode 100644
index a11b342..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%A%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%B%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%B%main.tf
deleted file mode 100644
index 34a4c14..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%B%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%main.tf
deleted file mode 100644
index 75a3a11..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%child%main.tf
deleted file mode 100644
index f2d5d43..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%main.tf
deleted file mode 100644
index 3937a60..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var%child%main.tf
deleted file mode 100644
index f1f2fb0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var%main.tf
deleted file mode 100644
index 1ac79da..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-computed%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-computed%main.tf
deleted file mode 100644
index d33e3de..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-computed%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%inner%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%inner%main.tf
deleted file mode 100644
index 492ede7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%inner%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%main.tf
deleted file mode 100644
index 6cfdc2b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%main.tf
deleted file mode 100644
index 923120e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%mod%main.tf
deleted file mode 100644
index bf11345..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%inner%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%inner%main.tf
deleted file mode 100644
index ad01022..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%inner%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%main.tf
deleted file mode 100644
index 7fcf980..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%inner%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%inner%main.tf
deleted file mode 100644
index 8665b10..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%inner%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%main.tf
deleted file mode 100644
index d4cfffc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%middle%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%middle%main.tf
deleted file mode 100644
index bbe9d1b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%middle%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules%main.tf
deleted file mode 100644
index 5d88a5e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-expand%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-expand%child%main.tf
deleted file mode 100644
index b9d9253..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-expand%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%main.tf
deleted file mode 100644
index d8b9234..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%child%main.tf
deleted file mode 100644
index 4c2a212..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%main.tf
deleted file mode 100644
index 69e0d69..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-path-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-path-var%main.tf
deleted file mode 100644
index 4f7d234..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-path-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-bad%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-bad%main.tf
deleted file mode 100644
index da2f803..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-bad%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-bad%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-bad%main.tf
deleted file mode 100644
index af59bd6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-bad%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-good%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-good%main.tf
deleted file mode 100644
index 6a6cf6c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-good%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-good%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-good%main.tf
deleted file mode 100644
index 04720f0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-good%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-provider%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-provider%main.tf
deleted file mode 100644
index 1fdecee..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-provider%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-provisioner-cycle%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-provisioner-cycle%main.tf
deleted file mode 100644
index 7b14895..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-provisioner-cycle%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-output%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-output%mod%main.tf
deleted file mode 100644
index 4c750a3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-output%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%main.tf
deleted file mode 100644
index c3a4481..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%mod%main.tf
deleted file mode 100644
index 4c750a3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref%main.tf
deleted file mode 100644
index c3350bb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi%main.tf
deleted file mode 100644
index eef3b27..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi-all%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi-all%main.tf
deleted file mode 100644
index 6cceadb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi-all%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-shadow-uuid%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-shadow-uuid%main.tf
deleted file mode 100644
index c9a787e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-shadow-uuid%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-taint-ignore-changes%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-taint-ignore-changes%main.tf
deleted file mode 100644
index 89df8f3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-taint-ignore-changes%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-taint-interpolated-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-taint-interpolated-count%main.tf
deleted file mode 100644
index ef0d15e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-taint-interpolated-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted%main.tf
deleted file mode 100644
index b88d361..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%A%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%A%main.tf
deleted file mode 100644
index c6e925b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%A%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%B%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%B%main.tf
deleted file mode 100644
index e083c7c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%B%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%main.tf
deleted file mode 100644
index b12bdf8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-orphan%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-orphan%main.tf
deleted file mode 100644
index a6a0e72..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-orphan%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%child%main.tf
deleted file mode 100644
index eb86e09..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%main.tf
deleted file mode 100644
index 98fffbb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child1%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child1%main.tf
deleted file mode 100644
index eb87b52..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child1%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child2%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child2%main.tf
deleted file mode 100644
index eb87b52..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child2%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-orphan%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-orphan%main.tf
deleted file mode 100644
index 64d3ec4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-orphan%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-over-ten%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-over-ten%main.tf
deleted file mode 100644
index a3f26ba..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-targeted-over-ten%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%main.tf
deleted file mode 100644
index b7a51f2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%mod%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%mod%main.tf
deleted file mode 100644
index 68b0542..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%mod%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-var-list-err%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-var-list-err%main.tf
deleted file mode 100644
index b31a1e1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-var-list-err%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%child%main.tf
deleted file mode 100644
index b5b369a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%main.tf
deleted file mode 100644
index f901cac..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%main.tf
deleted file mode 100644
index eb3c44a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%my-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%my-module%main.tf
deleted file mode 100644
index fab7b88..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%my-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%main.tf
deleted file mode 100644
index 1e262d5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%my-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%my-module%main.tf
deleted file mode 100644
index 4e4363c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%my-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%main.tf
deleted file mode 100644
index 927d312..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%my-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%my-module%main.tf
deleted file mode 100644
index abe31cb..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%my-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-unset%my-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-unset%my-module%main.tf
deleted file mode 100644
index 2f57922..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-meta-unset%my-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-with-locals%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-with-locals%main.tf
deleted file mode 100644
index c534aa6..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%provider-with-locals%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-basic%main.tf
deleted file mode 100644
index 7fff6cc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-count%refresh-data-count.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-count%refresh-data-count.tf
deleted file mode 100644
index da1e7ea..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-count%refresh-data-count.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%child%main.tf
deleted file mode 100644
index e057628..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%main.tf
deleted file mode 100644
index 1d64999..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-ref-data%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-ref-data%main.tf
deleted file mode 100644
index 5c8569f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-ref-data%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-resource-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-resource-basic%main.tf
deleted file mode 100644
index e62d33e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-data-resource-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-dynamic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-dynamic%main.tf
deleted file mode 100644
index 418f5ae..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-dynamic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%child%main.tf
deleted file mode 100644
index 3aeacc3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%main.tf
deleted file mode 100644
index a501b7f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%child%main.tf
deleted file mode 100644
index df7159d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%main.tf
deleted file mode 100644
index 8e385c8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%grandchild%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%grandchild%main.tf
deleted file mode 100644
index 0e90a8a..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%grandchild%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%main.tf
deleted file mode 100644
index e1e41ae..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%bar%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%bar%main.tf
deleted file mode 100644
index a74fa1b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%bar%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%foo%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%foo%main.tf
deleted file mode 100644
index a367277..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%foo%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%main.tf
deleted file mode 100644
index 67d02a4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-modules%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-modules%child%main.tf
deleted file mode 100644
index 7fff6cc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-modules%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-modules%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-modules%main.tf
deleted file mode 100644
index b44e51d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-modules%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-no-state%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-no-state%main.tf
deleted file mode 100644
index 71f0613..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-no-state%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-output%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-output%main.tf
deleted file mode 100644
index 07cf257..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-output%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-output-partial%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-output-partial%main.tf
deleted file mode 100644
index 98b10a8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-output-partial%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-schema-upgrade%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-schema-upgrade%main.tf
deleted file mode 100644
index 6d85066..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-schema-upgrade%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-targeted%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-targeted%main.tf
deleted file mode 100644
index 631a572..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-targeted%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-targeted-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-targeted-count%main.tf
deleted file mode 100644
index faad950..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-targeted-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-unknown-provider%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-unknown-provider%main.tf
deleted file mode 100644
index dec734c..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-unknown-provider%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-vars%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-vars%main.tf
deleted file mode 100644
index e68a29d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%refresh-vars%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%static-validate-refs%static-validate-refs.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%static-validate-refs%static-validate-refs.tf
deleted file mode 100644
index 0db2ca2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%static-validate-refs%static-validate-refs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-both-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-both-count%main.tf
deleted file mode 100644
index a700c36..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-both-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-count%main.tf
deleted file mode 100644
index 5c5134b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-config-mode-data%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-config-mode-data%main.tf
deleted file mode 100644
index 5a48c77..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-config-mode-data%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-basic%main.tf
deleted file mode 100644
index 4397fbd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-multi%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-multi%main.tf
deleted file mode 100644
index 6fb30d3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-multi%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-basic%main.tf
deleted file mode 100644
index d59dc78..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%child%main.tf
deleted file mode 100644
index b152cfe..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%main.tf
deleted file mode 100644
index 612b46e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module-only%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module-only%main.tf
deleted file mode 100644
index 0752438..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module-only%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-multi%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-multi%main.tf
deleted file mode 100644
index 6beaf07..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-multi%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-self-ref%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-self-ref%main.tf
deleted file mode 100644
index 6553f09..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-self-ref%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-basic%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-basic%child%main.tf
deleted file mode 100644
index 3edf815..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-basic%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%child%main.tf
deleted file mode 100644
index 3edf815..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%main.tf
deleted file mode 100644
index 37b1827..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%main.tf
deleted file mode 100644
index 26de8ba..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-basic%main.tf
deleted file mode 100644
index 7fff6cc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count%main.tf
deleted file mode 100644
index a8d2823..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count-empty%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count-empty%main.tf
deleted file mode 100644
index 24dc0a5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count-empty%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-basic%main.tf
deleted file mode 100644
index 8f808ec..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns%main.tf
deleted file mode 100644
index 4b56a62..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%child%main.tf
deleted file mode 100644
index 0e4884b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%main.tf
deleted file mode 100644
index 4b56a62..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%grandchild%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%grandchild%main.tf
deleted file mode 100644
index b64519e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%grandchild%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%main.tf
deleted file mode 100644
index 4a15c55..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%main.tf
deleted file mode 100644
index ad58197..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%child%main.tf
deleted file mode 100644
index 86d0a21..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%main.tf
deleted file mode 100644
index ad58197..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing%main.tf
deleted file mode 100644
index ef05b76..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%main.tf
deleted file mode 100644
index cf52575..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%main.tf
deleted file mode 100644
index 3c3bf23..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%subsub%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%subsub%main.tf
deleted file mode 100644
index b180b6b..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%subsub%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-prune%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-prune%main.tf
deleted file mode 100644
index 42517b4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provider-prune%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-basic%main.tf
deleted file mode 100644
index 3cf63be..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-module%main.tf
deleted file mode 100644
index a7c12d7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-root-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-root-basic%main.tf
deleted file mode 100644
index da145b4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-root-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-basic%main.tf
deleted file mode 100644
index 8590bfd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%child.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%child.tf
deleted file mode 100644
index 7817c59..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%child.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%grandchild%grandchild.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%grandchild%grandchild.tf
deleted file mode 100644
index a3e7f84..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%grandchild%grandchild.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%main.tf
deleted file mode 100644
index 7022d48..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-trans-reduce-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-trans-reduce-basic%main.tf
deleted file mode 100644
index cd84ec4..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%transform-trans-reduce-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%update-resource-provider%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%update-resource-provider%main.tf
deleted file mode 100644
index dc8398f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%update-resource-provider%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-count%main.tf
deleted file mode 100644
index 2e583d1..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-module-output%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-module-output%main.tf
deleted file mode 100644
index e1fac70..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-module-output%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-pc%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-pc%main.tf
deleted file mode 100644
index 54c4bc9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-pc%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-conf%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-conf%main.tf
deleted file mode 100644
index 49a9414..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-conf%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-connection%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-connection%main.tf
deleted file mode 100644
index ee53e34..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-connection%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-rc%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-rc%main.tf
deleted file mode 100644
index 9cd3124..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-rc%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-connection%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-connection%main.tf
deleted file mode 100644
index 003d205..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-connection%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-count%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-count%main.tf
deleted file mode 100644
index a3d60f7..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-count%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-var%main.tf
deleted file mode 100644
index 408626f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-bad-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-in-function%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-in-function%main.tf
deleted file mode 100644
index 4c66733..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-in-function%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%dest%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%dest%main.tf
deleted file mode 100644
index a4e3095..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%dest%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%main.tf
deleted file mode 100644
index a00cce5..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%source%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%source%main.tf
deleted file mode 100644
index 3eca05f..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%source%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-computed%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-computed%main.tf
deleted file mode 100644
index 66c5e27..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-computed%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-negative%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-negative%main.tf
deleted file mode 100644
index 479bae2..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-negative%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-variable%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-variable%main.tf
deleted file mode 100644
index 99a8641..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-count-variable%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good%main.tf
deleted file mode 100644
index c8570de..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good-module%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good-module%child%main.tf
deleted file mode 100644
index 4fcded8..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good-module%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good-module%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good-module%main.tf
deleted file mode 100644
index fd75809..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-good-module%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%a%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%a%main.tf
deleted file mode 100644
index 6835c25..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%a%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%main.tf
deleted file mode 100644
index 2db4d83..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%child%main.tf
deleted file mode 100644
index 1f1e408..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%main.tf
deleted file mode 100644
index c09d5c0..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit-unused%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit-unused%main.tf
deleted file mode 100644
index 589adb3..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit-unused%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%child%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%child%main.tf
deleted file mode 100644
index 145d6bc..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%child%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%main.tf
deleted file mode 100644
index 8928011..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-required-provider-config%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-required-provider-config%main.tf
deleted file mode 100644
index 457b9b9..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-required-provider-config%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-required-var%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-required-var%main.tf
deleted file mode 100644
index 3208196..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-required-var%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-sensitive-provisioner-config%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-sensitive-provisioner-config%main.tf
deleted file mode 100644
index 0e2ab49..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-sensitive-provisioner-config%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-skipped-pc-empty%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-skipped-pc-empty%main.tf
deleted file mode 100644
index 4ce0abe..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-skipped-pc-empty%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-targeted%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-targeted%main.tf
deleted file mode 100644
index 5e53c14..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-targeted%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-var-no-default-explicit-type%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-var-no-default-explicit-type%main.tf
deleted file mode 100644
index 1aab43e..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-var-no-default-explicit-type%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child%validate-variable-custom-validations.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child%validate-variable-custom-validations.tf
deleted file mode 100644
index 769b26d..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child%validate-variable-custom-validations.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child-sensitive%validate-variable-custom-validations.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child-sensitive%validate-variable-custom-validations.tf
deleted file mode 100644
index 06c8d05..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child-sensitive%validate-variable-custom-validations.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-ref%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-ref%main.tf
deleted file mode 100644
index 8bf9059..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%validate-variable-ref%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%vars-basic%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%vars-basic%main.tf
deleted file mode 100644
index 8287d53..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%vars-basic%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%vars-basic-bool%main.tf b/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%vars-basic-bool%main.tf
deleted file mode 100644
index a962ccd..0000000
Binary files a/example/real_world_stuff/hashicorp%terraforminternal%terraform%testdata%vars-basic-bool%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%tfc-getting-startedprovider.tf b/example/real_world_stuff/hashicorp%tfc-getting-startedprovider.tf
deleted file mode 100644
index 24bbdca..0000000
Binary files a/example/real_world_stuff/hashicorp%tfc-getting-startedprovider.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsmain.tf b/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsmain.tf
deleted file mode 100644
index 68d25c7..0000000
Binary files a/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsmain.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsoutputs.tf b/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsoutputs.tf
deleted file mode 100644
index e2d5c11..0000000
Binary files a/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsoutputs.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsvariables.tf b/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsvariables.tf
deleted file mode 100644
index 6ad5b5a..0000000
Binary files a/example/real_world_stuff/hashicorp%tfe-lab-module-install-awsvariables.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vault-lambda-extensionquick-start%terraform%aws.tf b/example/real_world_stuff/hashicorp%vault-lambda-extensionquick-start%terraform%aws.tf
deleted file mode 100644
index b43ad65..0000000
Binary files a/example/real_world_stuff/hashicorp%vault-lambda-extensionquick-start%terraform%aws.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vault-lambda-extensionquick-start%terraform%versions.tf b/example/real_world_stuff/hashicorp%vault-lambda-extensionquick-start%terraform%versions.tf
deleted file mode 100644
index 7dfa3a2..0000000
Binary files a/example/real_world_stuff/hashicorp%vault-lambda-extensionquick-start%terraform%versions.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultapi%test-fixtures%agent_config.hcl b/example/real_world_stuff/hashicorp%vaultapi%test-fixtures%agent_config.hcl
deleted file mode 100644
index e1916f9..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultapi%test-fixtures%agent_config.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-nosinks-nocache-notemplates.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-nosinks-nocache-notemplates.hcl
deleted file mode 100644
index 415193d..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-nosinks-nocache-notemplates.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-wrapped-multiple-sinks.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-wrapped-multiple-sinks.hcl
deleted file mode 100644
index f588a83..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-wrapped-multiple-sinks.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-auto_auth-method-wrapping.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-auto_auth-method-wrapping.hcl
deleted file mode 100644
index b7a71f6..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-auto_auth-method-wrapping.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-force-token-no-auth-method.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-force-token-no-auth-method.hcl
deleted file mode 100644
index 710979c..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-force-token-no-auth-method.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-inconsistent-auto_auth.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-inconsistent-auto_auth.hcl
deleted file mode 100644
index 47b7d85..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-inconsistent-auto_auth.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-no-listeners.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-no-listeners.hcl
deleted file mode 100644
index 0bd7316..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-no-listeners.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-method-wrapping-and-sink-wrapping.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-method-wrapping-and-sink-wrapping.hcl
deleted file mode 100644
index 0af8e66..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-method-wrapping-and-sink-wrapping.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-false.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-false.hcl
deleted file mode 100644
index ca77571..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-false.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-force.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-force.hcl
deleted file mode 100644
index f43f4b4..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-force.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-no-sink.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-no-sink.hcl
deleted file mode 100644
index f6d28f4..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-no-sink.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-true.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-true.hcl
deleted file mode 100644
index e8a30c3..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-true.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-embedded-type.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-embedded-type.hcl
deleted file mode 100644
index 5fef5b4..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-embedded-type.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-no-auto_auth.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-no-auto_auth.hcl
deleted file mode 100644
index 1b1e677..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-no-auto_auth.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-empty-type.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-empty-type.hcl
deleted file mode 100644
index be72ed3..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-empty-type.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-false.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-false.hcl
deleted file mode 100644
index 02bb2ce..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-false.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache.hcl
deleted file mode 100644
index 1f1b7b3..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-consistency.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-consistency.hcl
deleted file mode 100644
index 7150a12..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-consistency.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-embedded-type.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-embedded-type.hcl
deleted file mode 100644
index b547f86..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-embedded-type.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-method-wrapping.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-method-wrapping.hcl
deleted file mode 100644
index 7cbd723..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-method-wrapping.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full-nosink.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full-nosink.hcl
deleted file mode 100644
index 24074f8..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full-nosink.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full.hcl
deleted file mode 100644
index 5fbb513..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many-nosink.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many-nosink.hcl
deleted file mode 100644
index 0161129..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many-nosink.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many.hcl
deleted file mode 100644
index e3204d2..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min-nosink.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min-nosink.hcl
deleted file mode 100644
index 704e72f..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min-nosink.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min.hcl
deleted file mode 100644
index 4bde354..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry-empty.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry-empty.hcl
deleted file mode 100644
index 0996ced..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry-empty.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry.hcl
deleted file mode 100644
index 0a4ee83..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config.hcl b/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config.hcl
deleted file mode 100644
index d761d3a..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%agent%config%test-fixtures%config.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config-dir%baz.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config-dir%baz.hcl
deleted file mode 100644
index dac778f..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config-dir%baz.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config-dir%foo.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config-dir%foo.hcl
deleted file mode 100644
index 61cf80f..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config-dir%foo.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config.hcl
deleted file mode 100644
index 669b854..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config2.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config2.hcl
deleted file mode 100644
index 5abb41c..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config2.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config3.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config3.hcl
deleted file mode 100644
index 131e467..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config3.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config4.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config4.hcl
deleted file mode 100644
index fa79d83..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config4.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config5.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config5.hcl
deleted file mode 100644
index 93d6572..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config5.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_bad_https_storage.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_bad_https_storage.hcl
deleted file mode 100644
index d4a53c2..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_bad_https_storage.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_hastorage_bad_https.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_hastorage_bad_https.hcl
deleted file mode 100644
index 6bf847c..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_hastorage_bad_https.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_ok.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_ok.hcl
deleted file mode 100644
index 1f9c5dc..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_ok.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_raft.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_raft.hcl
deleted file mode 100644
index 2bcd91b..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_raft.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_seals.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_seals.hcl
deleted file mode 100644
index 737278c..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%config_seals.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%diagnose_bad_https_consul_sr.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%diagnose_bad_https_consul_sr.hcl
deleted file mode 100644
index 68da0e5..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%diagnose_bad_https_consul_sr.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%diagnose_ok_storage_direct_access.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%diagnose_ok_storage_direct_access.hcl
deleted file mode 100644
index 0e3e53e..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%diagnose_ok_storage_direct_access.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%nostore_config.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%nostore_config.hcl
deleted file mode 100644
index b1ecf71..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%nostore_config.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%raft_retry_join.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%raft_retry_join.hcl
deleted file mode 100644
index 5689aac..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%raft_retry_join.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%tls_config_ok.hcl b/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%tls_config_ok.hcl
deleted file mode 100644
index 80ac68b..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%server%test-fixtures%tls_config_ok.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%test-fixtures%config.hcl b/example/real_world_stuff/hashicorp%vaultcommand%test-fixtures%config.hcl
deleted file mode 100644
index 6345a3e..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%test-fixtures%config.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vaultcommand%test-fixtures%policy.hcl b/example/real_world_stuff/hashicorp%vaultcommand%test-fixtures%policy.hcl
deleted file mode 100644
index a91d84d..0000000
Binary files a/example/real_world_stuff/hashicorp%vaultcommand%test-fixtures%policy.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%vscode-terraformtestFixture%sample.tf b/example/real_world_stuff/hashicorp%vscode-terraformtestFixture%sample.tf
deleted file mode 100644
index fb52f98..0000000
Binary files a/example/real_world_stuff/hashicorp%vscode-terraformtestFixture%sample.tf and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp%waypoint-exampleskubernetes%nodejs-apply%waypoint.hcl b/example/real_world_stuff/hashicorp%waypoint-exampleskubernetes%nodejs-apply%waypoint.hcl
deleted file mode 100644
index 6f66838..0000000
Binary files a/example/real_world_stuff/hashicorp%waypoint-exampleskubernetes%nodejs-apply%waypoint.hcl and /dev/null differ
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%backend.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%backend.tf
new file mode 100644
index 0000000..1c0cd06
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%backend.tf
@@ -0,0 +1,9 @@
+terraform {
+  backend "remote" {
+    organization = "emea-se-playground-2019"
+
+    workspaces {
+      name = "Jason-EKS"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%eks-cluster.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%eks-cluster.tf
new file mode 100644
index 0000000..c694d21
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%eks-cluster.tf
@@ -0,0 +1,35 @@
+module "eks" {
+  source          = "terraform-aws-modules/eks/aws"
+  cluster_name    = local.cluster_name
+  cluster_version = "1.18"
+  subnets         = module.vpc.public_subnets
+
+  vpc_id = module.vpc.vpc_id
+
+  workers_group_defaults = {
+    root_volume_type = "gp2"
+  }
+
+  worker_groups = [
+    {
+      name                          = "jasonb-test-group-1"
+      instance_type                 = "t2.small"
+      asg_desired_capacity          = 2
+      additional_security_group_ids = [aws_security_group.external_connection.id]
+    },
+    {
+      name                          = "jasonb-test-group-2"
+      instance_type                 = "t2.medium"
+      additional_security_group_ids = [aws_security_group.external_connection.id]
+      asg_desired_capacity          = 1
+    },
+  ]
+}
+
+data "aws_eks_cluster" "cluster" {
+  name = module.eks.cluster_id
+}
+
+data "aws_eks_cluster_auth" "cluster" {
+  name = module.eks.cluster_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%kubernetes.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%kubernetes.tf
new file mode 100644
index 0000000..ba927ae
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%kubernetes.tf
@@ -0,0 +1,12 @@
+# Kubernetes provider
+# https://learn.hashicorp.com/terraform/kubernetes/provision-eks-cluster#optional-configure-terraform-kubernetes-provider
+# To learn how to schedule deployments and services using the provider, go here: https://learn.hashicorp.com/terraform/kubernetes/deploy-nginx-kubernetes
+
+# The Kubernetes provider is included in this file so the EKS module can complete successfully. Otherwise, it throws an error when creating `kubernetes_config_map.aws_auth`.
+# You should absolutely **not** schedule deployments and services in this workspace. This keeps workspaces modular (one for provision EKS, another for scheduling Kubernetes resources) as per best practices.
+
+provider "kubernetes" {
+  host                   = data.aws_eks_cluster.cluster.endpoint
+  token                  = data.aws_eks_cluster_auth.cluster.token
+  cluster_ca_certificate = base64decode(data.aws_eks_cluster.cluster.certificate_authority.0.data)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%template.hcl b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%template.hcl
new file mode 100644
index 0000000..287bcc6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%template.hcl
@@ -0,0 +1,7 @@
+# token= "a5c882f6-02b5-95ea-8698-8189b55abacc"
+template {
+  source = "dns.tmpl"
+  destination = "zone.db"
+  # command= "named-checkconf && named-checkzone methridge.dev zone.db && rndc reload"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%versions.tf
new file mode 100644
index 0000000..de3ab41
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%versions.tf
@@ -0,0 +1,30 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 3.20.0"
+    }
+    local = {
+      source  = "hashicorp/local"
+      version = "2.0.0"
+    }
+
+    null = {
+      source  = "hashicorp/null"
+      version = "3.0.0"
+    }
+
+    template = {
+      source  = "hashicorp/template"
+      version = "2.2.0"
+    }
+
+    kubernetes = {
+      source  = "hashicorp/kubernetes"
+      version = ">= 2.0.1"
+    }
+  }
+
+  required_version = "~> 0.14"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%vpc.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%vpc.tf
new file mode 100644
index 0000000..8a08db0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS%vpc.tf
@@ -0,0 +1,39 @@
+
+
+provider "aws" {
+  region = "eu-west-1"
+}
+
+data "aws_availability_zones" "available" {}
+
+locals {
+  cluster_name = "jasonb-eks"
+}
+
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "2.66.0"
+
+  name                 = "jasonb-vpc"
+  cidr                 = "10.0.0.0/16"
+  azs                  = data.aws_availability_zones.available.names
+  public_subnets       = ["10.0.4.0/24", "10.0.5.0/24", "10.0.6.0/24"]
+  enable_dns_hostnames = true
+}
+
+
+resource "aws_security_group" "external_connection" {
+  name_prefix = "all_worker_management"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress {
+    from_port = 22
+    to_port   = 22
+    protocol  = "tcp"
+
+    cidr_blocks = [
+      "0.0.0.0/0",
+    ]
+  }
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%eks-cluster.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%eks-cluster.tf
new file mode 100644
index 0000000..666291c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%eks-cluster.tf
@@ -0,0 +1,43 @@
+module "eks" {
+  source          = "terraform-aws-modules/eks/aws"
+  cluster_name    = local.cluster_name
+  cluster_version = "1.20"
+  subnets         = module.vpc.private_subnets
+
+  tags = {
+    Environment = "training"
+    GithubRepo  = "terraform-aws-eks"
+    GithubOrg   = "terraform-aws-modules"
+  }
+
+  vpc_id = module.vpc.vpc_id
+
+  workers_group_defaults = {
+    root_volume_type = "gp2"
+  }
+
+  worker_groups = [
+    {
+      name                          = "worker-group-1"
+      instance_type                 = "t2.small"
+      additional_userdata           = "echo foo bar"
+      asg_desired_capacity          = 2
+      additional_security_group_ids = [aws_security_group.worker_group_mgmt_one.id]
+    },
+    {
+      name                          = "worker-group-2"
+      instance_type                 = "t2.medium"
+      additional_userdata           = "echo foo bar"
+      additional_security_group_ids = [aws_security_group.worker_group_mgmt_two.id]
+      asg_desired_capacity          = 1
+    },
+  ]
+}
+
+data "aws_eks_cluster" "cluster" {
+  name = module.eks.cluster_id
+}
+
+data "aws_eks_cluster_auth" "cluster" {
+  name = module.eks.cluster_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%kubernetes.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%kubernetes.tf
new file mode 100644
index 0000000..97e0324
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%kubernetes.tf
@@ -0,0 +1,12 @@
+# Kubernetes provider
+# https://learn.hashicorp.com/terraform/kubernetes/provision-eks-cluster#optional-configure-terraform-kubernetes-provider
+# To learn how to schedule deployments and services using the provider, go here: https://learn.hashicorp.com/terraform/kubernetes/deploy-nginx-kubernetes
+
+# The Kubernetes provider is included in this file so the EKS module can complete successfully. Otherwise, it throws an error when creating `kubernetes_config_map.aws_auth`.
+# You should **not** schedule deployments and services in this workspace. This keeps workspaces modular (one for provision EKS, another for scheduling Kubernetes resources) as per best practices.
+
+provider "kubernetes" {
+  host                   = data.aws_eks_cluster.cluster.endpoint
+  token                  = data.aws_eks_cluster_auth.cluster.token
+  cluster_ca_certificate = base64decode(data.aws_eks_cluster.cluster.certificate_authority.0.data)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%outputs.tf
new file mode 100644
index 0000000..8823d2a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%outputs.tf
@@ -0,0 +1,34 @@
+output "cluster_id" {
+  description = "EKS cluster ID."
+  value       = module.eks.cluster_id
+}
+
+output "cluster_endpoint" {
+  description = "Endpoint for EKS control plane."
+  value       = module.eks.cluster_endpoint
+}
+
+output "cluster_security_group_id" {
+  description = "Security group ids attached to the cluster control plane."
+  value       = module.eks.cluster_security_group_id
+}
+
+output "kubectl_config" {
+  description = "kubectl config as generated by the module."
+  value       = module.eks.kubeconfig
+}
+
+output "config_map_aws_auth" {
+  description = "A kubernetes configuration to authenticate to this EKS cluster."
+  value       = module.eks.config_map_aws_auth
+}
+
+output "region" {
+  description = "AWS region"
+  value       = var.region
+}
+
+output "cluster_name" {
+  description = "Kubernetes Cluster Name"
+  value       = local.cluster_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%security-groups.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%security-groups.tf
new file mode 100644
index 0000000..9538cf9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%security-groups.tf
@@ -0,0 +1,47 @@
+
+resource "aws_security_group" "worker_group_mgmt_one" {
+  name_prefix = "worker_group_mgmt_one"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress {
+    from_port = 22
+    to_port   = 22
+    protocol  = "tcp"
+
+    cidr_blocks = [
+      "10.0.0.0/8",
+    ]
+  }
+}
+
+resource "aws_security_group" "worker_group_mgmt_two" {
+  name_prefix = "worker_group_mgmt_two"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress {
+    from_port = 22
+    to_port   = 22
+    protocol  = "tcp"
+
+    cidr_blocks = [
+      "192.168.0.0/16",
+    ]
+  }
+}
+
+resource "aws_security_group" "all_worker_mgmt" {
+  name_prefix = "all_worker_management"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress {
+    from_port = 22
+    to_port   = 22
+    protocol  = "tcp"
+
+    cidr_blocks = [
+      "10.0.0.0/8",
+      "172.16.0.0/12",
+      "192.168.0.0/16",
+    ]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%versions.tf
new file mode 100644
index 0000000..bbe19c7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%versions.tf
@@ -0,0 +1,36 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 3.20.0"
+    }
+
+    random = {
+      source  = "hashicorp/random"
+      version = "3.0.0"
+    }
+
+    local = {
+      source  = "hashicorp/local"
+      version = "2.0.0"
+    }
+
+    null = {
+      source  = "hashicorp/null"
+      version = "3.0.0"
+    }
+
+    template = {
+      source  = "hashicorp/template"
+      version = "2.2.0"
+    }
+
+    kubernetes = {
+      source  = "hashicorp/kubernetes"
+      version = ">= 2.0.1"
+    }
+  }
+
+  required_version = "~> 0.14"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%vpc.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%vpc.tf
new file mode 100644
index 0000000..da366d7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseEKS-TF%vpc.tf
@@ -0,0 +1,47 @@
+variable "region" {
+  default     = "eu-west-1"
+  description = "AWS region"
+}
+
+provider "aws" {
+  region = "eu-west-1"
+}
+
+data "aws_availability_zones" "available" {}
+
+locals {
+  cluster_name = "education-eks-${random_string.suffix.result}"
+}
+
+resource "random_string" "suffix" {
+  length  = 8
+  special = false
+}
+
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "2.66.0"
+
+  name                 = "jasonb-vpc"
+  cidr                 = "10.0.0.0/16"
+  azs                  = data.aws_availability_zones.available.names
+  private_subnets      = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
+  public_subnets       = ["10.0.4.0/24", "10.0.5.0/24", "10.0.6.0/24"]
+  enable_nat_gateway   = true
+  single_nat_gateway   = true
+  enable_dns_hostnames = true
+
+  tags = {
+    "kubernetes.io/cluster/${local.cluster_name}" = "shared"
+  }
+
+  public_subnet_tags = {
+    "kubernetes.io/cluster/${local.cluster_name}" = "shared"
+    "kubernetes.io/role/elb"                      = "1"
+  }
+
+  private_subnet_tags = {
+    "kubernetes.io/cluster/${local.cluster_name}" = "shared"
+    "kubernetes.io/role/internal-elb"             = "1"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%main.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%main.tf
new file mode 100644
index 0000000..9fe3d7d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%main.tf
@@ -0,0 +1,196 @@
+//--------------------------EMEA-SE_PLAYGROUND-2019-----------------------------------------
+# Using a single workspace:
+
+terraform {
+  backend "remote" {
+    hostname     = "app.terraform.io"
+    organization = "emea-se-playground-2019"
+    workspaces {
+      name = "Jason-AWS-Demostack"
+    }
+  }
+}
+
+// Workspace Data
+data "terraform_remote_state" "tls" {
+  backend = "remote"
+  config = {
+    hostname     = "app.terraform.io"
+    organization = "emea-se-playground-2019"
+    workspaces = {
+      name = "tls-root-certificate"
+    }
+  } //config
+}
+
+data "terraform_remote_state" "dns" {
+  backend = "remote"
+
+  config = {
+    hostname     = "app.terraform.io"
+    organization = "emea-se-playground-2019"
+    workspaces = {
+      name = "Jason-DNS-Zone"
+    }
+  } //network
+}
+//--------------------------------------------------------------------
+
+provider "aws" {
+  region  = var.primary_region
+  alias   = "primary"
+  version = "~> 2.0"
+}
+
+provider "aws" {
+  region  = var.secondary_region
+  alias   = "secondary"
+  version = "~> 2.0"
+}
+
+provider "aws" {
+  region  = var.tertiary_region
+  alias   = "tertiary"
+  version = "~> 2.0"
+}
+
+module "primarycluster" {
+  providers = {
+    aws.demostack = aws.primary
+    aws           = aws.primary
+  }
+  source               = "./modules"
+  # count   = var.create_primary_cluster ? 1 : 0
+  owner                = var.owner
+  region               = var.primary_region
+  namespace            = var.primary_namespace
+  public_key           = var.public_key
+  servers              = var.servers
+  workers              = var.workers
+  vaultlicense         = var.vaultlicense
+  consullicense        = var.consullicense
+  nomadlicense         = var.nomadlicense
+  enterprise           = var.enterprise
+  consul_url           = var.consul_url
+  consul_ent_url       = var.consul_ent_url
+  fabio_url            = var.fabio_url
+  nomad_url            = var.nomad_url
+  nomad_ent_url        = var.nomad_ent_url
+  cni_plugin_url       = var.cni_plugin_url
+  vault_url            = var.vault_url
+  vault_ent_url        = var.vault_ent_url
+  created-by           = var.created-by
+  sleep-at-night       = var.sleep-at-night
+  TTL                  = var.TTL
+  vpc_cidr_block       = var.vpc_cidr_block
+  cidr_blocks          = var.cidr_blocks
+  instance_type_server = var.instance_type_server
+  instance_type_worker = var.instance_type_worker
+  zone_id              = data.terraform_remote_state.dns.outputs.aws_sub_zone_id
+  run_nomad_jobs       = var.run_nomad_jobs
+  host_access_ip       = var.host_access_ip
+  primary_datacenter   = var.primary_namespace
+
+  # EMEA-SE-PLAYGROUND
+  ca_key_algorithm      = data.terraform_remote_state.tls.outputs.ca_key_algorithm
+  ca_private_key_pem    = data.terraform_remote_state.tls.outputs.ca_private_key_pem
+  ca_cert_pem           = data.terraform_remote_state.tls.outputs.ca_cert_pem
+  consul_join_tag_value = "${var.namespace}-${data.terraform_remote_state.tls.outputs.consul_join_tag_value}"
+  consul_gossip_key     = data.terraform_remote_state.tls.outputs.consul_gossip_key
+  consul_master_token   = data.terraform_remote_state.tls.outputs.consul_master_token
+  nomad_gossip_key      = data.terraform_remote_state.tls.outputs.nomad_gossip_key
+}
+
+
+module "secondarycluster" {
+  providers = {
+    aws.demostack = aws.secondary
+    aws           = aws.secondary
+  }
+  source               = "./modules"
+  count   = var.create_secondary_cluster ? 1 : 0
+  owner                = var.owner
+  region               = var.secondary_region
+  namespace            = var.secondary_namespace
+  public_key           = var.public_key
+  servers              = var.servers
+  workers              = var.workers
+  vaultlicense         = var.vaultlicense
+  consullicense        = var.consullicense
+  enterprise           = var.enterprise
+  consul_url           = var.consul_url
+  consul_ent_url       = var.consul_ent_url
+  fabio_url            = var.fabio_url
+  nomad_url            = var.nomad_url
+  nomad_ent_url        = var.nomad_ent_url
+  cni_plugin_url       = var.cni_plugin_url
+  vault_url            = var.vault_url
+  vault_ent_url        = var.vault_ent_url
+  created-by           = var.created-by
+  sleep-at-night       = var.sleep-at-night
+  TTL                  = var.TTL
+  vpc_cidr_block       = var.vpc_cidr_block
+  cidr_blocks          = var.cidr_blocks
+  instance_type_server = var.instance_type_server
+  instance_type_worker = var.instance_type_worker
+  zone_id              = data.terraform_remote_state.dns.outputs.aws_sub_zone_id
+  run_nomad_jobs       = var.run_nomad_jobs
+  host_access_ip       = var.host_access_ip
+  primary_datacenter   = var.primary_namespace
+  # EMEA-SE-PLAYGROUND
+  ca_key_algorithm      = data.terraform_remote_state.tls.outputs.ca_key_algorithm
+  ca_private_key_pem    = data.terraform_remote_state.tls.outputs.ca_private_key_pem
+  ca_cert_pem           = data.terraform_remote_state.tls.outputs.ca_cert_pem
+  consul_join_tag_value = "${var.namespace}-${data.terraform_remote_state.tls.outputs.consul_join_tag_value}"
+  consul_gossip_key     = data.terraform_remote_state.tls.outputs.consul_gossip_key
+  consul_master_token   = data.terraform_remote_state.tls.outputs.consul_master_token
+  nomad_gossip_key      = data.terraform_remote_state.tls.outputs.nomad_gossip_key
+}
+
+
+
+module "tertiarycluster" {
+   providers = {
+    aws.demostack = aws.tertiary
+    aws           = aws.tertiary
+  }
+   source = "./modules"
+   count   = var.create_secondary_cluster ? 1 : 0
+  owner                = var.owner
+  region              = var.tertiary_region
+  namespace           = var.tertiary_namespace
+  public_key           = var.public_key
+  servers              = var.servers
+  workers              = var.workers
+  vaultlicense         = var.vaultlicense
+  consullicense        = var.consullicense
+  enterprise           = var.enterprise
+  consul_url           = var.consul_url
+  consul_ent_url       = var.consul_ent_url
+  fabio_url            = var.fabio_url
+  nomad_url            = var.nomad_url
+  nomad_ent_url        = var.nomad_ent_url
+  cni_plugin_url       = var.cni_plugin_url
+  vault_url            = var.vault_url
+  vault_ent_url        = var.vault_ent_url
+  created-by           = var.created-by
+  sleep-at-night       = var.sleep-at-night
+  TTL                  = var.TTL
+  vpc_cidr_block       = var.vpc_cidr_block
+  cidr_blocks          = var.cidr_blocks
+  instance_type_server = var.instance_type_server
+  instance_type_worker = var.instance_type_worker
+  zone_id              = data.terraform_remote_state.dns.outputs.aws_sub_zone_id
+  run_nomad_jobs       = var.run_nomad_jobs
+  host_access_ip       = var.host_access_ip
+  primary_datacenter   = var.primary_datacenter
+  # EMEA-SE-PLAYGROUND
+  ca_key_algorithm      = data.terraform_remote_state.tls.outputs.ca_key_algorithm
+  ca_private_key_pem    = data.terraform_remote_state.tls.outputs.ca_private_key_pem
+  ca_cert_pem           = data.terraform_remote_state.tls.outputs.ca_cert_pem
+  consul_join_tag_value = "${var.namespace}-${data.terraform_remote_state.tls.outputs.consul_join_tag_value}"
+  consul_gossip_key     = data.terraform_remote_state.tls.outputs.consul_gossip_key
+  consul_master_token   = data.terraform_remote_state.tls.outputs.consul_master_token
+  nomad_gossip_key      = data.terraform_remote_state.tls.outputs.nomad_gossip_key
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%aws.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%aws.tf
new file mode 100644
index 0000000..6a0e466
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%aws.tf
@@ -0,0 +1,264 @@
+terraform {
+  required_version = ">= 0.11.0"
+}
+
+
+//Getting the Domaing name
+data "aws_route53_zone" "fdqn" {
+  zone_id = var.zone_id
+}
+
+
+data "aws_ami" "ubuntu" {
+  most_recent = true
+
+# ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*
+#ubuntu/images/hvm-ssd/ubuntu-xenial-16.04-amd64-server-*
+  filter {
+    name   = "name"
+    # values = ["ubuntu/images/hvm-ssd/ubuntu-xenial-16.04-amd64-server-*"]
+    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  owners = ["099720109477"] # Canonical
+}
+
+resource "aws_vpc" "demostack" {
+  cidr_block           = var.vpc_cidr_block
+  enable_dns_hostnames = true
+
+  tags = local.common_tags
+
+}
+
+resource "aws_internet_gateway" "demostack" {
+  vpc_id = aws_vpc.demostack.id
+
+  tags = local.common_tags
+}
+
+resource "aws_route" "internet_access" {
+  route_table_id         = aws_vpc.demostack.main_route_table_id
+  destination_cidr_block = "0.0.0.0/0"
+  gateway_id             = aws_internet_gateway.demostack.id
+
+}
+
+data "aws_availability_zones" "available" {}
+
+resource "aws_subnet" "demostack" {
+  count                   = length(var.cidr_blocks)
+  vpc_id                  = aws_vpc.demostack.id
+  availability_zone       = data.aws_availability_zones.available.names[count.index]
+  cidr_block              = var.cidr_blocks[count.index]
+  map_public_ip_on_launch = true
+
+  tags = local.common_tags
+}
+
+
+
+resource "aws_security_group" "demostack" {
+  name_prefix = var.namespace
+  vpc_id      = aws_vpc.demostack.id
+
+tags = local.common_tags
+  #Allow internal communication between nodes
+  ingress {
+    from_port   = -1
+    to_port     = -1
+    protocol    = -1
+  }
+
+
+  # SSH access if host_access_ip has CIDR blocks
+  dynamic "ingress" {
+    for_each = var.host_access_ip
+    content {
+      from_port   = 22
+      to_port     = 22
+      protocol    = "tcp"
+      cidr_blocks = [ingress.value]
+    }
+  }
+
+  #HTTP
+  ingress {
+    from_port   = 80
+    to_port     = 80
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  #Demostack LDAP
+  ingress {
+    from_port   = 389
+    to_port     = 389
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+
+  #Demostack HTTPS
+  ingress {
+    from_port   = 443
+    to_port     = 443
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+#Grafana
+  ingress {
+    from_port   = 1521
+    to_port     = 1521
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  #Grafana
+  ingress {
+    from_port   = 3000
+    to_port     = 3000
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+
+  #Demostack Postgres + pgadmin
+  ingress {
+    from_port   = 5000
+    to_port     = 5500
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+
+  #Consul and Vault and Boundary ports
+  ingress {
+    from_port   = 8000
+    to_port     = 9300
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+  #Fabio Ports
+  ingress {
+    from_port   = 9998
+    to_port     = 9999
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+  #Nomad
+  ingress {
+    from_port   = 3000
+    to_port     = 4999
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+  #More nomad ports
+  ingress {
+    from_port   = 20000
+    to_port     = 29999
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    from_port   = 30000
+    to_port     = 39999
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_key_pair" "demostack" {
+  key_name   = var.namespace
+  public_key = var.public_key
+
+  tags = local.common_tags
+}
+
+resource "aws_iam_instance_profile" "consul-join" {
+  name = "${var.namespace}-consul-join"
+  role = aws_iam_role.consul-join.name
+
+}
+
+resource "aws_kms_key" "demostackVaultKeys" {
+  description             = "KMS for the Consul Demo Vault"
+  deletion_window_in_days = 10
+
+   tags = local.common_tags
+}
+
+resource "aws_iam_policy" "consul-join" {
+  name        = "${var.namespace}-consul-join"
+  description = "Allows Consul nodes to describe instances for joining."
+
+  policy = data.aws_iam_policy_document.vault-server.json
+
+}
+
+
+resource "aws_iam_role" "consul-join" {
+  name               = "${var.namespace}-consul-join"
+  assume_role_policy = file("${path.module}/templates/policies/assume-role.json")
+
+  tags = local.common_tags
+}
+
+resource "aws_iam_policy_attachment" "consul-join" {
+  name       = "${var.namespace}-consul-join"
+  roles      = [aws_iam_role.consul-join.name]
+  policy_arn = aws_iam_policy.consul-join.arn
+
+}
+
+
+data "aws_iam_policy_document" "vault-server" {
+  statement {
+    sid    = "VaultKMSUnseal"
+    effect = "Allow"
+
+    actions = [
+      "kms:Encrypt",
+      "kms:Decrypt",
+      "kms:DescribeKey",
+    ]
+
+    resources = [aws_kms_key.demostackVaultKeys.arn]
+  }
+
+  statement {
+    effect = "Allow"
+
+    actions = [
+      "ec2:DescribeInstances",
+      "iam:PassRole",
+      "iam:ListRoles",
+      "cloudwatch:PutMetricData",
+      "ds:DescribeDirectories",
+      "ec2:DescribeInstanceStatus",
+      "logs:*",
+      "ec2messages:*",
+      "ec2:DescribeInstances",
+      "ec2:DescribeTags",
+      "ec2:DescribeVolumes",
+      "ec2:AttachVolume",
+      "ec2:DetachVolume",
+    ]
+
+    resources = ["*"]
+  }
+
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%boundary-lb.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%boundary-lb.tf
new file mode 100644
index 0000000..f7354c0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%boundary-lb.tf
@@ -0,0 +1,40 @@
+
+resource "aws_lb" "boundary-controller" {
+   name = "${var.namespace}-boundary-controller"
+  load_balancer_type = "network"
+  internal           = false
+subnets         = aws_subnet.demostack.*.id
+
+  tags = local.common_tags
+}
+
+resource "aws_lb_target_group" "boundary-controller" {
+  name     = "${var.namespace}-boundary-controller"
+  port     = 9200
+  protocol = "TCP"
+  vpc_id   = aws_vpc.demostack.id
+
+  stickiness  {
+    enabled = false
+     type    = "lb_cookie"
+  }
+   tags = local.common_tags
+}
+
+resource "aws_lb_target_group_attachment" "boundary-controller" {
+  count            = var.servers
+  target_group_arn = aws_lb_target_group.boundary-controller.arn
+  target_id        = aws_instance.servers[count.index].id
+  port             = 9200
+}
+
+resource "aws_lb_listener" "boundary-controller" {
+  load_balancer_arn = aws_lb.boundary-controller.arn
+  port              = "9200"
+  protocol          = "TCP"
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.boundary-controller.arn
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%consul-lb.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%consul-lb.tf
new file mode 100644
index 0000000..cbb961d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%consul-lb.tf
@@ -0,0 +1,51 @@
+resource "aws_alb" "consul" {
+  name = "${var.namespace}-consul"
+
+  security_groups = [aws_security_group.demostack.id]
+  subnets         = aws_subnet.demostack.*.id
+
+   tags = local.common_tags
+}
+
+resource "aws_alb_target_group" "consul" {
+  name = "${var.namespace}-consul"
+
+  port     = "8500"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTP"
+
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/v1/status/leader"
+    port              = "8500"
+    protocol          = "HTTP"
+    matcher           = "200,429"
+    healthy_threshold = 2
+  }
+}
+
+resource "aws_alb_listener" "consul" {
+  depends_on = [
+    aws_acm_certificate_validation.cert
+  ]
+
+  load_balancer_arn = aws_alb.consul.arn
+
+  port            = "8500"
+  protocol        = "HTTPS"
+  certificate_arn = aws_acm_certificate_validation.cert.certificate_arn
+  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-Ext-2018-06"
+
+  default_action {
+    target_group_arn = aws_alb_target_group.consul.arn
+    type             = "forward"
+  }
+}
+
+resource "aws_alb_target_group_attachment" "consul" {
+  count            = var.servers
+  target_group_arn = aws_alb_target_group.consul.arn
+  target_id        = element(aws_instance.servers.*.id, count.index)
+  port             = "8500"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%dns.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%dns.tf
new file mode 100644
index 0000000..97b9de2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%dns.tf
@@ -0,0 +1,85 @@
+
+
+resource "aws_route53_record" "boundary" {
+  zone_id = var.zone_id
+  name    = "boundary.${var.namespace}"
+  #name    = "traefik"
+  type    = "CNAME"
+  records = [aws_lb.boundary-controller.dns_name]
+  ttl     = "300"
+
+}
+
+
+resource "aws_route53_record" "traefik" {
+  zone_id = var.zone_id
+  name    = "traefik.${var.namespace}"
+  #name    = "traefik"
+  type    = "CNAME"
+  records = [aws_alb.traefik.dns_name]
+  ttl     = "300"
+
+}
+resource "aws_route53_record" "fabio" {
+  zone_id = var.zone_id
+  name    = "fabio.${var.namespace}"
+  #name    = "fabio"
+  type    = "CNAME"
+  records = [aws_alb.fabio.dns_name]
+  ttl     = "300"
+
+}
+resource "aws_route53_record" "consul" {
+  zone_id = var.zone_id
+  name    = "consul.${var.namespace}"
+  #name    = "consul"
+  type    = "CNAME"
+  records = [aws_alb.consul.dns_name]
+  ttl     = "300"
+}
+
+resource "aws_route53_record" "nomad" {
+  zone_id = var.zone_id
+  name    = "nomad.${var.namespace}"
+  // name    = "nomad"
+  type    = "CNAME"
+  records = [aws_alb.nomad.dns_name]
+  ttl     = "300"
+
+  
+}
+resource "aws_route53_record" "vault" {
+  zone_id = var.zone_id
+  name    = "vault.${var.namespace}"
+  // name    = "vault"
+  type    = "CNAME"
+  records = [aws_alb.vault.dns_name]
+  ttl     = "300"
+
+  
+}
+
+resource "aws_route53_record" "servers" {
+  count   = var.servers
+  zone_id = var.zone_id
+  name    = "server-${count.index}.${var.namespace}"
+  // name    = "server-${count.index}"
+  type    = "CNAME"
+  records = [element(aws_instance.servers.*.public_dns, count.index)]
+  ttl     = "300"
+
+ 
+}
+
+resource "aws_route53_record" "workers" {
+  count   = var.workers
+  zone_id = var.zone_id
+  name    = "workers-${count.index}.${var.namespace}"
+  // name    = "workers-${count.index}"
+  type    = "CNAME"
+  records = [element(aws_instance.workers.*.public_dns, count.index)]
+  ttl     = "300"
+
+ 
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%ebs.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%ebs.tf
new file mode 100644
index 0000000..4397c5b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%ebs.tf
@@ -0,0 +1,25 @@
+
+
+resource "aws_ebs_volume" "mysql" {
+  availability_zone       = data.aws_availability_zones.available.names[0]
+  size              = 40
+  tags = local.common_tags
+}
+
+resource "aws_ebs_volume" "mongodb" {
+  availability_zone       = data.aws_availability_zones.available.names[0]
+  size              = 40
+  tags = local.common_tags
+}
+
+resource "aws_ebs_volume" "prometheus" {
+  availability_zone       = data.aws_availability_zones.available.names[0]
+  size              = 40
+  tags = local.common_tags
+}
+
+resource "aws_ebs_volume" "shared" {
+  availability_zone       = data.aws_availability_zones.available.names[0]
+  size              = 40
+  tags = local.common_tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%eks.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%eks.tf
new file mode 100644
index 0000000..9ab9f22
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%eks.tf
@@ -0,0 +1,106 @@
+/*
+resource "aws_iam_role" "eks" {
+  name = "${var.namespace}-eks"
+
+  assume_role_policy = <<POLICY
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "eks.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+POLICY
+}
+
+resource "aws_iam_role_policy_attachment" "eks-AmazonEKSClusterPolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"
+  role       = aws_iam_role.eks.name
+}
+
+resource "aws_iam_role_policy_attachment" "eks-AmazonEKSServicePolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSServicePolicy"
+  role       = aws_iam_role.eks.name
+}
+
+
+
+resource "aws_eks_cluster" "eks" {
+  name     = "${var.namespace}-eks"
+  role_arn = aws_iam_role.eks.arn
+
+  vpc_config {
+    security_group_ids = [aws_security_group.demostack.id]
+    subnet_ids         = aws_subnet.demostack.*.id
+  }
+
+  depends_on = [
+    aws_iam_role_policy_attachment.eks-AmazonEKSClusterPolicy,
+    aws_iam_role_policy_attachment.eks-AmazonEKSServicePolicy,
+  ]
+}
+
+# EKS Worker Nodes Resources
+#  * IAM role allowing Kubernetes actions to access other AWS services
+#  * EKS Node Group to launch worker nodes
+#
+
+resource "aws_iam_role" "eks-node" {
+  name = "${var.namespace}-eks-nodes"
+
+  assume_role_policy = <<POLICY
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ec2.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+POLICY
+}
+
+resource "aws_iam_role_policy_attachment" "eks-node-AmazonEKSWorkerNodePolicy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
+  role       = aws_iam_role.eks-node.name
+}
+
+resource "aws_iam_role_policy_attachment" "eks-node-AmazonEKS_CNI_Policy" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
+  role       = aws_iam_role.eks-node.name
+}
+
+resource "aws_iam_role_policy_attachment" "eks-node-AmazonEC2ContainerRegistryReadOnly" {
+  policy_arn = "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
+  role       = aws_iam_role.eks-node.name
+}
+
+resource "aws_eks_node_group" "eks-node" {
+  cluster_name    = aws_eks_cluster.eks.name
+  node_group_name = "demostack"
+  node_role_arn   = aws_iam_role.eks-node.arn
+  subnet_ids      = aws_subnet.demostack.*.id
+  instance_types  =  [var.instance_type_worker]
+
+  scaling_config {
+    desired_size = 2
+    max_size     = 2
+    min_size     = 2
+  }
+
+  depends_on = [
+    aws_iam_role_policy_attachment.eks-node-AmazonEKSWorkerNodePolicy,
+    aws_iam_role_policy_attachment.eks-node-AmazonEKS_CNI_Policy,
+    aws_iam_role_policy_attachment.eks-node-AmazonEC2ContainerRegistryReadOnly,
+  ]
+}
+*/
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%fabio-lb.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%fabio-lb.tf
new file mode 100644
index 0000000..ba7771a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%fabio-lb.tf
@@ -0,0 +1,83 @@
+resource "aws_alb" "fabio" {
+  name = "${var.namespace}-fabio"
+
+  security_groups = [aws_security_group.demostack.id]
+  subnets         = aws_subnet.demostack.*.id
+
+   tags = local.common_tags
+}
+
+resource "aws_alb_target_group" "fabio" {
+  name     = "${var.namespace}-fabio"
+  port     = "9999"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTP"
+  tags = local.common_tags
+
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/health"
+    port              = "9998"
+    protocol          = "HTTP"
+    healthy_threshold = 2
+    matcher           = 200
+  }
+}
+
+resource "aws_alb_target_group" "fabio-ui" {
+  name     = "${var.namespace}-fabio-ui"
+  port     = "9998"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTP"
+  tags = local.common_tags
+
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/health"
+    port              = "9998"
+    protocol          = "HTTP"
+    healthy_threshold = 2
+    matcher           = 200
+  }
+}
+
+resource "aws_alb_listener" "fabio" {
+  load_balancer_arn = aws_alb.fabio.arn
+  
+  port     = "9999"
+  protocol = "HTTP"
+
+  default_action {
+    target_group_arn = aws_alb_target_group.fabio.arn
+    type             = "forward"
+  }
+}
+
+resource "aws_alb_listener" "fabio-ui" {
+  load_balancer_arn = aws_alb.fabio.arn
+  port     = "9998"
+  protocol = "HTTP"
+
+  default_action {
+    target_group_arn = aws_alb_target_group.fabio-ui.arn
+    type             = "forward"
+  }
+}
+
+resource "aws_alb_target_group_attachment" "fabio" {
+  count            = var.workers
+  target_group_arn = aws_alb_target_group.fabio.arn
+  target_id        = element(aws_instance.workers.*.id, count.index)
+  port             = "9999"
+  
+}
+
+resource "aws_alb_target_group_attachment" "fabio-ui" {
+  count            = var.workers
+  target_group_arn = aws_alb_target_group.fabio-ui.arn
+  target_id        = element(aws_instance.workers.*.id, count.index)
+  port             = "9998"
+  
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%nomad-lb.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%nomad-lb.tf
new file mode 100644
index 0000000..90686f9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%nomad-lb.tf
@@ -0,0 +1,52 @@
+resource "aws_alb" "nomad" {
+  name = "${var.namespace}-nomad"
+
+  security_groups = [aws_security_group.demostack.id]
+  subnets         = aws_subnet.demostack.*.id
+
+   tags = local.common_tags
+}
+
+resource "aws_alb_target_group" "nomad" {
+  name = "${var.namespace}-nomad"
+ 
+  port     = "4646"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTPS"
+
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/v1/agent/health"
+    port              = "4646"
+    protocol          = "HTTPS"
+    matcher           = "200,429"
+    healthy_threshold = 2
+  }
+}
+
+resource "aws_alb_listener" "nomad" {
+  depends_on = [
+    aws_acm_certificate_validation.cert
+  ]
+
+  load_balancer_arn = aws_alb.nomad.arn
+  
+  port            = "4646"
+  protocol        = "HTTPS"
+  certificate_arn = aws_acm_certificate_validation.cert.certificate_arn
+  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-Ext-2018-06"
+
+  default_action {
+    target_group_arn = aws_alb_target_group.nomad.arn
+    type             = "forward"
+  }
+}
+
+resource "aws_alb_target_group_attachment" "nomad" {
+  count            = var.servers
+  target_group_arn = aws_alb_target_group.nomad.arn
+  target_id        = element(aws_instance.servers.*.id, count.index)
+  port             = "4646"
+  
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%outputs.tf
new file mode 100644
index 0000000..5bf1431
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%outputs.tf
@@ -0,0 +1,61 @@
+////////////////////// Module //////////////////////////
+
+output "servers" {
+  value = aws_route53_record.servers.*.fqdn
+}
+
+output "workers" {
+  value = aws_route53_record.workers.*.fqdn
+}
+
+output "vpc_id" {
+  value = aws_vpc.demostack.id
+}
+
+output "subnet_ids" {
+  value = aws_subnet.demostack.*.id
+}
+
+output "traefik_lb" {
+  value = "http://${aws_route53_record.traefik.fqdn}:8080"
+}
+
+output "fabio_lb" {
+  value = "http://${aws_route53_record.fabio.fqdn}:9999"
+}
+
+output "vault_ui" {
+  value = "https://${aws_route53_record.vault.fqdn}:8200"
+}
+
+output "nomad_ui" {
+  value = "https://${aws_route53_record.nomad.fqdn}:4646"
+}
+
+output "consul_ui" {
+  value = "https://${aws_route53_record.consul.fqdn}:8500"
+}
+
+output "boundary_ui" {
+ value = "http://${aws_route53_record.boundary.fqdn}:9200"
+ # value = "troubleshooting"
+}
+
+
+output "nomad_tag_workers" {
+  value = data.template_file.workers.*.vars.node_name
+}
+
+output "nomad_tag_servers" {
+  value = data.template_file.servers.*.vars.node_name
+}
+
+/*
+output "eks_endpoint" {
+  value = aws_eks_cluster.eks.endpoint
+}
+output "eks_ca" {
+ // value = aws_eks_cluster.eks.endpoint
+  value = aws_eks_cluster.eks.certificate_authority.0.data
+}
+*/
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%server.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%server.tf
new file mode 100644
index 0000000..2632573
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%server.tf
@@ -0,0 +1,107 @@
+data "template_file" "servers" {
+  count = var.servers
+
+  template = join("\n", tolist([
+    file("${path.module}/templates/shared/base.sh"),
+    file("${path.module}/templates/shared/docker.sh"),
+    file("${path.module}/templates/server/consul.sh"),
+    file("${path.module}/templates/server/vault.sh"),
+    file("${path.module}/templates/server/nomad.sh"),
+  ]))
+
+  vars = {
+    region = var.region
+
+    enterprise    = var.enterprise
+    vaultlicense  = var.vaultlicense
+    consullicense = var.consullicense
+    kmskey        = aws_kms_key.demostackVaultKeys.id
+    namespace     = var.namespace
+    node_name     = "${var.namespace}-server-${count.index}"
+
+    # me_ca         = tls_self_signed_cert.root.cert_pem
+    me_ca      = var.ca_cert_pem
+    me_cert    = element(tls_locally_signed_cert.server.*.cert_pem, count.index)
+    me_key     = element(tls_private_key.server.*.private_key_pem, count.index)
+    public_key = var.public_key
+
+    # Consul
+    primary_datacenter    = var.primary_datacenter
+    consul_url            = var.consul_url
+    consul_ent_url        = var.consul_ent_url
+    consul_gossip_key     = var.consul_gossip_key
+    consul_join_tag_key   = "ConsulJoin"
+    consul_join_tag_value = var.consul_join_tag_value
+    consul_master_token   = var.consul_master_token
+    consul_servers        = var.servers
+    meta_zone_tag = "${var.namespace}-${count.index}"
+
+    # Nomad
+    nomad_url        = var.nomad_url
+    nomad_ent_url    = var.nomad_ent_url
+    nomad_gossip_key = var.nomad_gossip_key
+    nomad_servers    = var.servers
+    cni_plugin_url   = var.cni_plugin_url
+    nomadlicense     = var.nomadlicense
+
+    # Nomad jobs
+    fabio_url = var.fabio_url
+
+    # Vault
+    vault_oracle_client_url = var.vault_oracle_client_url
+    vault_url        = var.vault_url
+    vault_ent_url    = var.vault_ent_url
+    vault_root_token = random_id.vault-root-token.hex
+    vault_servers    = var.servers
+    vault_api_addr = "https://${aws_route53_record.vault.fqdn}:8200"
+
+  }
+}
+
+# Gzip cloud-init config
+data "template_cloudinit_config" "servers" {
+  count = var.servers
+
+  gzip          = true
+  base64_encode = true
+
+  part {
+    content_type = "text/x-shellscript"
+    content      = element(data.template_file.servers.*.rendered, count.index)
+  }
+}
+
+
+resource "aws_instance" "servers" {
+  count = var.servers
+
+  ami           = data.aws_ami.ubuntu.id
+  instance_type = var.instance_type_server
+  key_name      = aws_key_pair.demostack.id
+
+  subnet_id              = element(aws_subnet.demostack.*.id, count.index)
+  iam_instance_profile   = aws_iam_instance_profile.consul-join.name
+  vpc_security_group_ids = [aws_security_group.demostack.id]
+  root_block_device {
+    volume_size           = "240"
+    delete_on_termination = "true"
+  }
+
+  ebs_block_device {
+    device_name           = "/dev/xvdd"
+    volume_type           = "gp2"
+    volume_size           = "240"
+    delete_on_termination = "true"
+  }
+
+ 
+  tags = merge(local.common_tags ,{
+   ConsulJoin     = "${var.consul_join_tag_value}" ,
+   Purpose        = "demostack" ,
+   function       = "server" ,
+   name            = "demostack-server-${count.index}" ,
+   }
+  )
+
+  user_data = element(data.template_cloudinit_config.servers.*.rendered, count.index)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%tls.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%tls.tf
new file mode 100644
index 0000000..17eeac6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%tls.tf
@@ -0,0 +1,196 @@
+
+
+# Server private key
+resource "tls_private_key" "server" {
+  count       = var.servers
+  algorithm   = "ECDSA"
+  ecdsa_curve = "P521"
+}
+
+# Server signing request
+resource "tls_cert_request" "server" {
+  count           = var.servers
+  key_algorithm   = element(tls_private_key.server.*.algorithm, count.index)
+  private_key_pem = element(tls_private_key.server.*.private_key_pem, count.index)
+
+  subject {
+    common_name  = "${var.namespace}-server-${count.index}.node.consul"
+    organization = "HashiCorp Demostack"
+  }
+
+  dns_names = [
+    # Consul
+    "${var.namespace}-server-${count.index}.node.consul",
+    "${var.namespace}-server-${count.index}.node.${var.region}.consul",
+
+    "*.service.consul",
+    "*.service.${var.region}.consul",
+    "*.query.consul",
+    "consul.service.consul",
+
+    # Nomad
+    "nomad.service.consul",
+    "nomad.service.${var.region}.consul",
+
+
+    "client.global.nomad",
+    "server.global.nomad",
+
+    # Vault
+    "vault.service.consul",
+    "vault.query.consul",
+    "active.vault.service.consul",
+    "active.vault.service.${var.region}.consul",
+    "standby.vault.service.consul",
+    "standby.vault.service.${var.region}.consul",
+    "performance-standby.vault.service.consul",
+    "performance-standby.vault.service.${var.region}.consul",
+
+    # Common
+    "localhost",
+    "*.${var.namespace}.${data.aws_route53_zone.fdqn.name}",
+    "server-0.eu-guystack.original.aws.hashidemos.io",
+    "server-1.eu-guystack.original.aws.hashidemos.io",
+    "server-2.eu-guystack.original.aws.hashidemos.io",
+  ]
+
+  // ip_addresses = ["${aws_eip.server_ips.*.public_ip }"]
+}
+
+# Server certificate
+resource "tls_locally_signed_cert" "server" {
+  count              = var.servers
+  cert_request_pem   = element(tls_cert_request.server.*.cert_request_pem, count.index)
+  ca_key_algorithm   = var.ca_key_algorithm
+  ca_private_key_pem = var.ca_private_key_pem
+  ca_cert_pem        = var.ca_cert_pem
+
+  validity_period_hours = 720 # 30 days
+
+  allowed_uses = [
+    "client_auth",
+    "digital_signature",
+    "key_agreement",
+    "key_encipherment",
+    "server_auth",
+  ]
+}
+
+# Vault initial root token
+resource "random_id" "vault-root-token" {
+  byte_length = 8
+  prefix      = "${var.namespace}-"
+}
+
+# Client private key
+
+resource "tls_private_key" "workers" {
+  count       = var.workers
+  algorithm   = "ECDSA"
+  ecdsa_curve = "P521"
+}
+
+# Client signing request
+resource "tls_cert_request" "workers" {
+  count           = var.workers
+  key_algorithm   = element(tls_private_key.workers.*.algorithm, count.index)
+  private_key_pem = element(tls_private_key.workers.*.private_key_pem, count.index)
+
+  subject {
+    common_name  = "${var.namespace}-worker-${count.index}.node.consul"
+    organization = "HashiCorp Demostack"
+  }
+
+  dns_names = [
+    # Consul
+    "${var.namespace}-worker-${count.index}.node.consul",
+    "${var.namespace}-worker-${count.index}.node.${var.region}.consul",
+
+    "*.service.consul",
+    "*.service.${var.region}.consul",
+    "*.query.consul",
+    "consul.service.consul",
+
+    # Nomad
+    "nomad.service.consul",
+    "nomad.service.${var.region}.consul",
+
+    "client.global.nomad",
+    "server.global.nomad",
+
+    # Vault
+    "vault.service.consul",
+    "vault.query.consul",
+    "active.vault.service.consul",
+    "active.vault.service.${var.region}.consul",
+    "standby.vault.service.consul",
+    "standby.vault.service.${var.region}.consul",
+    "performance-standby.vault.service.consul",
+    "performance-standby.vault.service.${var.region}.consul",
+
+    # Common
+    "localhost",
+    "*.${var.namespace}.${data.aws_route53_zone.fdqn.name}",
+  ]
+
+  /*
+  ip_addresses = [
+    "127.0.0.1",
+  ]
+  */
+  // ip_addresses = ["${aws_eip.server_ips.*.public_ip }"]
+}
+
+# Client certificate
+
+resource "tls_locally_signed_cert" "workers" {
+  count            = var.workers
+  cert_request_pem = element(tls_cert_request.workers.*.cert_request_pem, count.index)
+
+  ca_key_algorithm   = var.ca_key_algorithm
+  ca_private_key_pem = var.ca_private_key_pem
+  ca_cert_pem        = var.ca_cert_pem
+
+  validity_period_hours = 720 # 30 days
+
+  allowed_uses = [
+    "client_auth",
+    "digital_signature",
+    "key_agreement",
+    "key_encipherment",
+    "server_auth",
+  ]
+}
+
+
+// ALB certs
+resource "aws_acm_certificate" "cert" {
+  domain_name       = "*.${var.namespace}.${data.aws_route53_zone.fdqn.name}"
+  validation_method = "DNS"
+
+   tags = local.common_tags
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_route53_record" "validation_record" {
+  name            = aws_acm_certificate.cert.domain_validation_options.0.resource_record_name
+  type            = aws_acm_certificate.cert.domain_validation_options.0.resource_record_type
+  zone_id         = var.zone_id
+  records         = [aws_acm_certificate.cert.domain_validation_options.0.resource_record_value]
+  ttl             = "60"
+  allow_overwrite = true
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_acm_certificate_validation" "cert" {
+  certificate_arn = aws_acm_certificate.cert.arn
+  validation_record_fqdns = [
+    aws_route53_record.validation_record.fqdn,
+  ]
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%traefik.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%traefik.tf
new file mode 100644
index 0000000..47c640d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%traefik.tf
@@ -0,0 +1,80 @@
+resource "aws_alb" "traefik" {
+  name = "${var.namespace}-traefik"
+
+  security_groups = [aws_security_group.demostack.id]
+  subnets         = aws_subnet.demostack.*.id
+
+   tags = local.common_tags
+}
+
+resource "aws_alb_target_group" "traefik" {
+  name     = "${var.namespace}-traefik"
+  port     = "8080"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTP"
+  
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/ping"
+    port              = "8080"
+    protocol          = "HTTP"
+    healthy_threshold = 2
+    matcher           = 200
+  }
+}
+
+resource "aws_alb_target_group" "traefik-ui" {
+  name     = "${var.namespace}-traefik-ui"
+  port     = "8081"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTP"
+
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/ping"
+    port              = "8080"
+    protocol          = "HTTP"
+    healthy_threshold = 2
+    matcher           = 200
+  }
+}
+
+resource "aws_alb_listener" "traefik" {
+  load_balancer_arn = aws_alb.traefik.arn
+
+  port     = "8080"
+  protocol = "HTTP"
+
+  default_action {
+    target_group_arn = aws_alb_target_group.traefik.arn
+    type             = "forward"
+  }
+}
+
+resource "aws_alb_listener" "traefik-ui" {
+  load_balancer_arn = aws_alb.traefik.arn
+
+  port     = "8081"
+  protocol = "HTTP"
+
+  default_action {
+    target_group_arn = aws_alb_target_group.traefik-ui.arn
+    type             = "forward"
+  }
+}
+
+resource "aws_alb_target_group_attachment" "traefik" {
+  count            = var.workers
+  target_group_arn = aws_alb_target_group.traefik.arn
+  target_id        = element(aws_instance.workers.*.id, count.index)
+  port             = "8080"
+}
+
+resource "aws_alb_target_group_attachment" "traefik-ui" {
+  count            = var.workers
+  target_group_arn = aws_alb_target_group.traefik-ui.arn
+  target_id        = element(aws_instance.workers.*.id, count.index)
+  port             = "8081"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%variables.tf
new file mode 100644
index 0000000..d75b2aa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%variables.tf
@@ -0,0 +1,197 @@
+
+locals {
+  # Common tags to be assigned to all resources
+  common_tags = {
+    name            = var.namespace
+    owner           = var.owner
+    created-by      = var.created-by
+    sleep-at-night  = var.sleep-at-night
+    ttl             = var.TTL
+    se-region      = var.region
+    terraform      = true
+    purpose        = "SE Demostack"
+  }
+}
+variable "vault_oracle_client_url" {
+  description = "The url to download vault."
+  default     = "https://releases.hashicorp.com/vault-plugin-database-oracle/0.2.1/vault-plugin-database-oracle_0.2.1_linux_amd64.zip"
+}
+
+variable "region" {
+  description = "The region to create resources."
+  default     = "eu-west-2"
+}
+
+variable "namespace" {
+  description = <<EOH
+this is the differantiates different demostack deployment on the same subscription, everycluster should have a different value
+EOH
+  default     = "connectdemo"
+}
+
+variable "servers" {
+  description = "The number of data servers (consul, nomad, etc)."
+  default     = "3"
+}
+
+variable "workers" {
+  description = "The number of nomad worker vms to create."
+  default     = "3"
+}
+
+variable "consul_url" {
+  description = "The url to download Consul."
+  default     = "https://releases.hashicorp.com/consul/1.2.3/consul_1.2.3_linux_amd64.zip"
+}
+
+variable "consul_ent_url" {
+  description = "The url to download Consul."
+  default     = "https://s3-us-west-2.amazonaws.com/hc-enterprise-binaries/consul/ent/1.2.3/consul-enterprise_1.2.3%2Bent_linux_amd64.zip"
+}
+
+variable "fabio_url" {
+  description = "The url download fabio."
+  default     = "https://github.com/fabiolb/fabio/releases/download/v1.5.7/fabio-1.5.7-go1.9.2-linux_amd64"
+}
+
+variable "nomad_url" {
+  description = "The url to download nomad."
+  default     = "https://releases.hashicorp.com/nomad/0.8.6/nomad_0.8.6_linux_amd64.zip"
+}
+
+variable "nomad_ent_url" {
+  description = "The url to download nomad."
+  default     = "https://releases.hashicorp.com/nomad/0.8.6/nomad_0.8.6_linux_amd64.zip"
+}
+
+variable "cni_plugin_url" {
+  description = "The url to download teh CNI plugin for nomad."
+  default     = "https://github.com/containernetworking/plugins/releases/download/v0.8.2/cni-plugins-linux-amd64-v0.8.2.tgz"
+}
+
+variable "vault_url" {
+  description = "The url to download vault."
+  default     = "https://releases.hashicorp.com/vault/0.11.1/vault_0.11.1_linux_amd64.zip"
+}
+
+variable "vault_ent_url" {
+  description = "The url to download vault."
+  default     = "https://s3-us-west-2.amazonaws.com/hc-enterprise-binaries/vault/ent/0.11.1/vault-enterprise_0.11.1%2Bent_linux_amd64.zip"
+}
+
+variable "owner" {
+  description = "Email address of the user responsible for lifecycle of cloud resources used for training."
+}
+
+variable "hashi_region" {
+  description = "the region the owner belongs in.  e.g. NA-WEST-ENT, EU-CENTRAL"
+  default = "EMEA"
+}
+
+variable "created-by" {
+  description = "Tag used to identify resources created programmatically by Terraform"
+  default     = "Terraform"
+}
+
+variable "sleep-at-night" {
+  description = "Tag used by reaper to identify resources that can be shutdown at night"
+  default     = true
+}
+
+variable "TTL" {
+  description = "Hours after which resource expires, used by reaper. Do not use any unit. -1 is infinite."
+  default     = "240"
+}
+
+variable "vpc_cidr_block" {
+  description = "The top-level CIDR block for the VPC."
+  default     = "10.1.0.0/16"
+}
+
+variable "cidr_blocks" {
+  description = "The CIDR blocks to create the workstations in."
+  default     = ["10.1.1.0/24", "10.1.2.0/24"]
+}
+
+variable "zone_id" {
+  description = "The CIDR blocks to create the workstations in."
+  default     = ""
+}
+
+variable "public_key" {
+  description = "The contents of the SSH public key to use for connecting to the cluster."
+}
+
+variable "enterprise" {
+  description = "do you want to use the enterprise version of the binaries"
+  default     = false
+}
+
+variable "vaultlicense" {
+  description = "Enterprise License for Vault"
+  default     = ""
+}
+
+variable "consullicense" {
+  description = "Enterprise License for Consul"
+  default     = ""
+}
+
+variable "nomadlicense" {
+  description = "Enterprise License for Nomad"
+  default     = ""
+}
+
+
+
+variable "instance_type_server" {
+  description = "The type(size) of data servers (consul, nomad, etc)."
+  default     = "r4.large"
+}
+
+variable "instance_type_worker" {
+  description = "The type(size) of data servers (consul, nomad, etc)."
+  default     = "t2.xlarge"
+}
+
+variable "ca_key_algorithm" {
+  default = ""
+}
+
+variable "ca_private_key_pem" {
+  default = ""
+}
+
+variable "ca_cert_pem" {
+  default = ""
+}
+
+variable "consul_gossip_key" {
+  default = ""
+}
+
+variable "consul_master_token" {
+  default = ""
+}
+
+variable "consul_join_tag_value" {
+  default = ""
+}
+
+variable "nomad_gossip_key" {
+  default = ""
+}
+
+variable "run_nomad_jobs" {
+  default = "0"
+}
+
+variable "host_access_ip" {
+  description = "CIDR blocks allowed to connect via SSH on port 22"
+  default     = []
+}
+
+variable "primary_datacenter" {
+  description = "the primary datacenter for mesh gateways"
+  default     = ""
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%vault-lb.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%vault-lb.tf
new file mode 100644
index 0000000..9f56a76
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%vault-lb.tf
@@ -0,0 +1,116 @@
+resource "aws_alb" "vault" {
+  name = "${var.namespace}-vault"
+
+  security_groups = [aws_security_group.demostack.id]
+  subnets         = aws_subnet.demostack.*.id
+
+    tags = local.common_tags
+}
+
+resource "aws_alb_target_group" "vault" {
+  name = "${var.namespace}-vault"
+  tags = local.common_tags
+
+  port     = "8200"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTPS"
+
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/v1/sys/health"
+    port              = "8200"
+    protocol          = "HTTPS"
+    matcher           = "200,472,473"
+    healthy_threshold = 2
+  }
+}
+
+
+resource "aws_alb_listener" "vault" {
+  depends_on = [
+    aws_acm_certificate_validation.cert
+  ]
+
+  load_balancer_arn = aws_alb.vault.arn
+
+  port            = "8200"
+  protocol        = "HTTPS"
+  certificate_arn = aws_acm_certificate_validation.cert.certificate_arn
+  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-Ext-2018-06"
+  default_action {
+    target_group_arn = aws_alb_target_group.vault.arn
+    type             = "forward"
+  }
+
+}
+
+
+resource "aws_alb_target_group_attachment" "vault" {
+  count            = var.servers
+  target_group_arn = aws_alb_target_group.vault.arn
+  target_id        = element(aws_instance.servers.*.id, count.index)
+  port             = "8200"
+  
+}
+
+##########################################################
+
+
+resource "aws_alb" "vault_cluster" {
+  name = "${var.namespace}-vault-cluster"
+
+  security_groups = [aws_security_group.demostack.id]
+  subnets         = aws_subnet.demostack.*.id
+
+   tags = local.common_tags
+}
+
+
+
+resource "aws_alb_target_group" "vault_cluster" {
+  name = "${var.namespace}-vault-cluster"
+  tags = local.common_tags
+
+  port     = "8201"
+  vpc_id   = aws_vpc.demostack.id
+  protocol = "HTTPS"
+
+  health_check {
+    interval          = "5"
+    timeout           = "2"
+    path              = "/v1/sys/health"
+    port              = "8200"
+    protocol          = "HTTPS"
+    matcher           = "200"
+    healthy_threshold = 2
+  }
+}
+
+
+resource "aws_alb_listener" "vault_cluster" {
+  depends_on = [
+    aws_acm_certificate_validation.cert
+  ]
+
+  load_balancer_arn = aws_alb.vault.arn
+  
+  port            = "8201"
+  protocol        = "HTTPS"
+  certificate_arn = aws_acm_certificate_validation.cert.certificate_arn
+  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-Ext-2018-06"
+  default_action {
+    target_group_arn = aws_alb_target_group.vault_cluster.arn
+    type             = "forward"
+  }
+
+}
+
+
+resource "aws_alb_target_group_attachment" "vault_cluster" {
+  count            = var.servers
+  target_group_arn = aws_alb_target_group.vault_cluster.arn
+  target_id        = element(aws_instance.servers.*.id, count.index)
+  port             = "8201"
+  
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%workers.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%workers.tf
new file mode 100644
index 0000000..f5f744f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%modules%workers.tf
@@ -0,0 +1,107 @@
+data "template_file" "workers" {
+  count = var.workers
+
+  template = join("\n", tolist([
+    file("${path.module}/templates/shared/base.sh"),
+    file("${path.module}/templates/shared/docker.sh"),
+    file("${path.module}/templates/workers/consul.sh"),
+    file("${path.module}/templates/workers/vault.sh"),
+    file("${path.module}/templates/workers/nomad.sh"),
+    file("${path.module}/templates/workers/ebs_volumes.sh"),
+  ]))
+
+  vars = {
+    namespace  = var.namespace
+    region     = var.region
+    node_name  = "${var.namespace}-worker-${count.index}"
+    enterprise = var.enterprise
+
+    #me_ca     = tls_self_signed_cert.root.cert_pem
+    me_ca      = var.ca_cert_pem
+    me_cert    = element(tls_locally_signed_cert.workers.*.cert_pem, count.index)
+    me_key     = element(tls_private_key.workers.*.private_key_pem, count.index)
+    public_key = var.public_key
+
+    # Consul
+    consul_url            = var.consul_url
+    consul_ent_url        = var.consul_ent_url
+    consul_gossip_key     = var.consul_gossip_key
+    consul_join_tag_key   = "ConsulJoin"
+    consul_join_tag_value = var.consul_join_tag_value
+    meta_zone_tag = "${var.namespace}-${count.index}"
+
+    # Vault
+    vault_url        = var.vault_url
+    vault_ent_url    = var.vault_ent_url
+    vault_root_token = random_id.vault-root-token.hex
+    vault_servers    = var.workers
+
+    # Nomad
+    nomad_url      = var.nomad_url
+    nomad_ent_url  = var.nomad_ent_url
+    cni_plugin_url = var.cni_plugin_url
+    run_nomad_jobs = var.run_nomad_jobs
+
+    # Nomad EBS Volumes
+    index      = count.index+1
+    count      = var.workers
+    dc1       = data.aws_availability_zones.available.names[0]
+    dc2       = data.aws_availability_zones.available.names[1]
+    dc3       = data.aws_availability_zones.available.names[2]
+    aws_ebs_volume_mysql_id = aws_ebs_volume.shared.id
+    aws_ebs_volume_mongodb_id = aws_ebs_volume.mongodb.id
+    aws_ebs_volume_prometheus_id = aws_ebs_volume.prometheus.id
+    aws_ebs_volume_shared_id = aws_ebs_volume.shared.id
+    
+ 
+  }
+}
+
+# Gzip cloud-init config
+data "template_cloudinit_config" "workers" {
+  count = var.workers
+
+  gzip          = true
+  base64_encode = true
+
+  part {
+    content_type = "text/x-shellscript"
+    content      = element(data.template_file.workers.*.rendered, count.index)
+  }
+}
+
+resource "aws_instance" "workers" {
+  count = var.workers
+
+  ami           = data.aws_ami.ubuntu.id
+  instance_type = var.instance_type_worker
+  key_name      = aws_key_pair.demostack.id
+
+  subnet_id              = element(aws_subnet.demostack.*.id, count.index)
+  iam_instance_profile   = aws_iam_instance_profile.consul-join.name
+  vpc_security_group_ids = [aws_security_group.demostack.id]
+
+
+  root_block_device {
+    volume_size           = "240"
+    delete_on_termination = "true"
+  }
+
+  ebs_block_device {
+    device_name           = "/dev/xvdd"
+    volume_type           = "gp2"
+    volume_size           = "240"
+    delete_on_termination = "true"
+  }
+
+  tags = merge(local.common_tags ,{
+   ConsulJoin     = "${var.consul_join_tag_value}" ,
+   Purpose        = "demostack" ,
+   function       = "worker" 
+   name            = "demostack-worker-${count.index}" ,
+   }
+  )
+  
+
+  user_data = element(data.template_cloudinit_config.workers.*.rendered, count.index)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%outputs.tf
new file mode 100644
index 0000000..46056b3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%outputs.tf
@@ -0,0 +1,173 @@
+////////////////////// Main //////////////////////////
+
+output "A_Welcome_Message" {
+  value = <<SHELLCOMMANDS
+
+ooooo   ooooo                    oooo         o8o    .oooooo.
+`888'   `888'                    `888         `"'   d8P'  `Y8b
+ 888     888   .oooo.    .oooo.o  888 .oo.   oooo  888           .ooooo.  oooo d8b oo.ooooo.
+ 888ooooo888  `P  )88b  d88(  "8  888P"Y88b  `888  888          d88' `88b `888""8P  888' `88b
+ 888     888   .oP"888  `"Y88b.   888   888   888  888          888   888  888      888   888
+ 888     888  d8(  888  o.  )88b  888   888   888  `88b    ooo  888   888  888      888   888
+o888o   o888o `Y888""8o 8""888P' o888o o888o o888o  `Y8bood8P'  `Y8bod8P' d888b     888bod8P'
+                                                                                    888
+                                                                                   o888o
+
+
+
+ |.--------_--_------------_--__--.|
+ ||    /\ |_)|_)|   /\ | |(_ |_   ||
+ ;;`,_/``\|__|__|__/``\|_| _)|__ ,:|
+((_(-,-----------.-.----------.-.)`)
+ \__ )        ,'     `.        \ _/
+ :  :        |_________|       :  :
+ |-'|       ,'-.-.--.-.`.      |`-|
+ |_.|      (( (*  )(*  )))     |._|
+ |  |       `.-`-'--`-'.'      |  |
+ |-'|        | ,-.-.-. |       |._|
+ |  |        |(|-|-|-|)|       |  |
+ :,':        |_`-'-'-'_|       ;`.;
+  \  \     ,'           `.    /._/
+   \/ `._ /_______________\_,'  /
+    \  / :   ___________   : \,'
+     `.| |  |           |  |,'
+       `.|  |           |  |
+         |  | HashiCorp |  |
+
+SHELLCOMMANDS
+}
+
+// Primary
+output "Primary_Region" {
+  value = var.primary_region
+}
+
+output "Primary_Consul" {
+  value = module.primarycluster.consul_ui
+}
+
+output "Primary_Nomad" {
+  value = module.primarycluster.nomad_ui
+}
+
+output "Primary_Vault" {
+  value = module.primarycluster.vault_ui
+}
+
+output "Primary_Fabio" {
+  value = module.primarycluster.fabio_lb
+}
+
+output "Primary_Traefik" {
+  value = module.primarycluster.traefik_lb
+}
+
+output "Primary_Boundary" {
+  value = module.primarycluster.boundary_ui
+}
+
+output "Primary_servers_nodes" {
+  value = module.primarycluster.servers
+}
+
+output "Primary_workers_Nodes" {
+  value = module.primarycluster.workers
+}
+
+output "Primary_nomad_tag_workers" {
+  value = module.primarycluster.nomad_tag_workers
+}
+
+output "Primary_nomad_tag_servers" {
+  value = module.primarycluster.nomad_tag_servers
+}
+/**
+output "Primary_k8s_eks_endpoint"{
+  value = module.primarycluster.eks_endpoint
+}
+
+output "Primary_k8s_eks_ca"{
+  value = module.primarycluster.eks_ca
+}
+**/
+
+// Secondary
+/**
+output "Secondary_Region" {
+  value = var.secondary_region
+}
+
+output "Secondary_Consul" {
+  value = module.secondarycluster.consul_ui
+}
+
+output "Secondary_Nomad" {
+  value = module.secondarycluster.nomad_ui
+}
+
+output "Secondary_Vault" {
+  value = module.secondarycluster.vault_ui
+}
+
+output "Secondary_Fabio" {
+  value = module.secondarycluster.fabio_lb
+}
+
+output "Secondary_Traefik" {
+  value = module.secondarycluster.traefik_lb
+}
+
+
+output "Secondary_Boundary" {
+  value = module.secondarycluster.boundary_ui
+}
+
+
+output "Secondary_servers_nodes" {
+  value = module.secondarycluster.servers
+}
+output "Secondary_workers_Nodes" {
+  value = module.secondarycluster.workers
+}
+output "Secondary_nomad_tag_workers" {
+  value = module.secondarycluster.nomad_tag_workers
+}
+
+output "Secondary_nomad_tag_servers" {
+  value = module.secondarycluster.nomad_tag_servers
+}
+*/
+
+
+// Tertiary
+/*
+output "Tertiary_Region" {
+  value = var.tertiary_region
+}
+
+output "Tertiary_Consul" {
+  value = module.tertiarycluster.consul_ui
+}
+output "Tertiary_Nomad" {
+  value = module.tertiarycluster.nomad_ui
+}
+output "Tertiary_Vault" {
+  value = module.tertiarycluster.vault_ui
+}
+output "Tertiary_Fabio" {
+  value = module.tertiarycluster.fabio_lb
+}
+output "Tertiary_server_nodes" {
+  value = module.tertiarycluster.servers
+}
+output "Tertiary_workers_Nodes" {
+  value = module.tertiarycluster.workers
+}
+output "Tertiary_nomad_tag_workers"{
+  value = module.tertiarycluster.nomad_tag_workers
+}
+
+output "Tertiary_nomad_tag_servers"{
+  value = module.tertiarycluster.nomad_tag_servers
+}
+*/
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%variables.tf
new file mode 100644
index 0000000..3a49017
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%variables.tf
@@ -0,0 +1,238 @@
+/*
+data "http" "myipaddr" {
+  url = "http://ipv4.icanhazip.com"
+}
+
+locals {
+  host_access_ip = ["${chomp(data.http.myipaddr.body)}/32"]
+}
+*/
+
+variable "host_access_ip" {
+  description = "your IP address to allow ssh to work"
+  default     = []
+}
+
+variable "create_primary_cluster" {
+  description = "Set to true if you want to deploy the AWS delegated zone."
+  type        = bool
+  default     = "true"
+}
+
+variable "create_secondary_cluster" {
+  description = "Set to true if you want to deploy the AWS delegated zone."
+  type        = bool
+  default     = "false"
+}
+
+variable "create_tertiary_cluster" {
+  description = "Set to true if you want to deploy the AWS delegated zone."
+  type        = bool
+  default     = "false"
+}
+
+
+
+variable "namespace" {
+  description = <<EOH
+this is the differantiates different demostack deployment on the same subscription, everycluster should have a different value
+EOH
+  default     = "primarystack"
+}
+
+variable "primary_namespace" {
+  description = <<EOH
+this is the differantiates different demostack deployment on the same subscription, everycluster should have a different value
+EOH
+
+  default = "primarystack"
+}
+
+variable "secondary_namespace" {
+  description = <<EOH
+this is the differantiates different demostack deployment on the same subscription, everycluster should have a different value
+EOH
+
+  default = "secondarystack"
+}
+
+variable "tertiary_namespace" {
+  description = <<EOH
+this is the differantiates different demostack deployment on the same subscription, everycluster should have a different value
+EOH
+
+  default = "tertiarystack"
+}
+
+variable "primary_region" {
+  description = "The region to create resources."
+  default     = "eu-west-2"
+}
+
+variable "secondary_region" {
+  description = "The region to create resources."
+  default     = "eu-west-2"
+}
+
+variable "tertiary_region" {
+  description = "The region to create resources."
+  default     = "ap-northeast-1"
+}
+
+
+variable "servers" {
+  description = "The number of data servers (consul, nomad, etc)."
+  default     = "3"
+}
+
+variable "workers" {
+  description = "The number of nomad worker vms to create."
+  default     = "3"
+}
+
+variable "consul_url" {
+  description = "The url to download Consul."
+  default     = "https://releases.hashicorp.com/consul/1.2.2/consul_1.2.2_linux_amd64.zip"
+}
+
+variable "consul_ent_url" {
+  description = "The url to download Consul."
+  default     = "https://releases.hashicorp.com/consul/1.2.2/consul_1.2.2_linux_amd64.zip"
+}
+
+variable "fabio_url" {
+  description = "The url download fabio."
+  default     = "https://github.com/fabiolb/fabio/releases/download/v1.5.7/fabio-1.5.7-go1.9.2-linux_amd64"
+}
+
+variable "nomad_url" {
+  description = "The url to download nomad."
+  default     = "https://releases.hashicorp.com/nomad/0.8.4/nomad_0.8.4_linux_amd64.zip"
+}
+
+variable "nomad_ent_url" {
+  description = "The url to download nomad."
+  default     = "https://releases.hashicorp.com/nomad/0.8.4/nomad_0.8.4_linux_amd64.zip"
+}
+
+variable "cni_plugin_url" {
+  description = "The url to download teh CNI plugin for nomad."
+  default     = "https://github.com/containernetworking/plugins/releases/download/v0.8.2/cni-plugins-linux-amd64-v0.8.2.tgz"
+}
+
+variable "vault_url" {
+  description = "The url to download vault."
+  default     = "https://releases.hashicorp.com/vault/0.11.1/vault_0.11.1_linux_amd64.zip"
+}
+
+variable "vault_ent_url" {
+  description = "The url to download vault."
+  default     = "https://s3-us-west-2.amazonaws.com/hc-enterprise-binaries/vault/ent/0.11.1/vault-enterprise_0.11.1%2Bent_linux_amd64.zip"
+}
+
+variable "owner" {
+  description = "IAM user responsible for lifecycle of cloud resources used for training"
+}
+
+variable "created-by" {
+  description = "Tag used to identify resources created programmatically by Terraform"
+  default     = "Terraform"
+}
+
+variable "sleep-at-night" {
+  description = "Tag used by reaper to identify resources that can be shutdown at night"
+  default     = true
+}
+
+variable "TTL" {
+  description = "Hours after which resource expires, used by reaper. Do not use any unit. -1 is infinite."
+  default     = "240"
+}
+
+variable "vpc_cidr_block" {
+  description = "The top-level CIDR block for the VPC."
+  default     = "10.1.0.0/16"
+}
+
+variable "cidr_blocks" {
+  description = "The CIDR blocks to create the workstations in."
+  default     = ["10.1.1.0/24", "10.1.2.0/24"]
+}
+
+variable "zone_id" {
+  description = "The CIDR blocks to create the workstations in."
+  default     = ""
+}
+
+
+variable "public_key" {
+  description = "The contents of the SSH public key to use for connecting to the cluster."
+}
+
+variable "enterprise" {
+  description = "do you want to use the enterprise version of the binaries"
+  default     = false
+}
+
+variable "vaultlicense" {
+  description = "Enterprise License for Vault"
+  default     = ""
+}
+
+variable "consullicense" {
+  description = "Enterprise License for Consul"
+  default     = ""
+}
+
+variable "nomadlicense" {
+  description = "Enterprise License for Nomad"
+  default     = ""
+}
+
+variable "instance_type_server" {
+  description = "The type(size) of data servers (consul, nomad, etc)."
+  default     = "r4.large"
+}
+
+variable "instance_type_worker" {
+  description = "The type(size) of data servers (consul, nomad, etc)."
+  default     = "t2.medium"
+}
+
+variable "ca_key_algorithm" {
+  default = ""
+}
+
+variable "ca_private_key_pem" {
+  default = ""
+}
+
+variable "ca_cert_pem" {
+  default = ""
+}
+
+variable "consul_gossip_key" {
+  default = ""
+}
+
+variable "consul_master_token" {
+  default = ""
+}
+
+variable "consul_join_tag_value" {
+  default = ""
+}
+
+variable "nomad_gossip_key" {
+  default = ""
+}
+
+variable "run_nomad_jobs" {
+  default = "0"
+}
+
+
+variable "primary_datacenter" {
+  description = "the primary datacenter for mesh gateways"
+  default     = ""
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%versions.tf
new file mode 100644
index 0000000..c142339
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%JaseTeraform-AWS-demostack%versions.tf
@@ -0,0 +1,4 @@
+
+terraform {
+  required_version = ">= 0.12"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%data-sources%scaffolding_data_source%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%data-sources%scaffolding_data_source%data-source.tf
new file mode 100644
index 0000000..c4bb102
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%data-sources%scaffolding_data_source%data-source.tf
@@ -0,0 +1,3 @@
+data "scaffolding_data_source" "example" {
+  sample_attribute = "foo"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%provider%provider.tf b/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%provider%provider.tf
new file mode 100644
index 0000000..27cbc08
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%provider%provider.tf
@@ -0,0 +1,3 @@
+provider "scaffolding" {
+  # example configuration here
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%resources%scaffolding_resource%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%resources%scaffolding_resource%resource.tf
new file mode 100644
index 0000000..36f1dd0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%Jaseexamples%resources%scaffolding_resource%resource.tf
@@ -0,0 +1,3 @@
+resource "scaffolding_resource" "example" {
+  sample_attribute = "foo"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%boundary.hcl b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%boundary.hcl
new file mode 100644
index 0000000..e5597fa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%boundary.hcl
@@ -0,0 +1,56 @@
+disable_mlock = true
+
+controller {
+  name = "docker-controller"
+  description = "A controller for a docker demo!"
+  database {
+      url = "env://BOUNDARY_PG_URL"
+  }
+}
+
+worker {
+  name = "docker-worker"
+  description = "A worker for a docker demo"
+  #address = "boundary"
+  public_addr = "127.0.0.1"
+}
+
+listener "tcp" {
+  address = "boundary"
+  purpose = "api"
+  tls_disable = true 
+}
+
+listener "tcp" {
+  address = "boundary"
+  purpose = "cluster"
+  tls_disable = true 
+}
+
+listener "tcp" {
+	address = "boundary"
+	purpose = "proxy"
+	tls_disable = true
+}
+
+kms "aead" {
+  purpose = "root"
+  aead_type = "aes-gcm"
+  key = "sP1fnF5Xz85RrXyELHFeZg9Ad2qt4Z4bgNHVGtD6ung="
+  key_id = "global_root"
+}
+
+kms "aead" {
+  purpose = "worker-auth"
+  aead_type = "aes-gcm"
+  key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
+  key_id = "global_worker-auth"
+}
+
+kms "aead" {
+  purpose = "recovery"
+  aead_type = "aes-gcm"
+  key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
+  key_id = "global_recovery"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%config.hcl b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%config.hcl
new file mode 100644
index 0000000..17b825c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%config.hcl
@@ -0,0 +1,64 @@
+log_level = "info"
+
+syslog {
+  enabled = true
+}
+
+consul {
+  #address = "consul:8500"
+  address = "localhost:8500"
+}
+
+terraform_provider "consul" {
+  #address = "consul:8500"
+  address = "localhost:8500"
+  datacenter = "dc1"
+}
+
+
+terraform_provider "boundary" {
+  #addr             = "http://boundary:9200"
+  addr = "http://localhost:9200"
+  recovery_kms_hcl = <<EOT
+kms "aead" {
+  purpose = "recovery"
+  aead_type = "aes-gcm"
+  key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
+  key_id = "global_recovery"
+}
+EOT
+}
+
+driver "terraform" {
+  log = true
+  persist_log = false
+  path = ""
+  working_dir = "./cts/sync-tasks/"
+
+  backend "consul" {
+    gzip = true
+  }
+
+  required_providers {
+    consul = {
+      source = "hashicorp/http"
+      version = "2.1.0"
+    }
+    boundary = {
+      source = "hashicorp/boundary"
+      version = "1.0.2"
+    }
+  }
+}
+
+
+
+task {
+    name = "boundary"
+    source = "./boundary"
+    providers = ["http", "boundary"]
+    services = ["redis","mysql"]
+    buffer_period {
+      min = "5s"
+    }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%main.tf b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%main.tf
new file mode 100644
index 0000000..8db6bc8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%main.tf
@@ -0,0 +1,102 @@
+
+data "http" "scopes" {
+    url = "http://localhost:9200/v1/scopes"
+}
+
+data "http" "project" {
+    url = "http://localhost:9200/v1/scopes?scope_id=${local.primary_scope_id}"
+}
+
+data "http" "host_catalogs" {
+    url = "http://localhost:9200/v1/host-catalogs?scope_id=${local.database_project_id}"
+}
+
+locals {
+    primary_scope_id = [for i in jsondecode(data.http.scopes.body).items : i.id if i.name == "primary"][0]
+    database_project_id = [for i in jsondecode(data.http.project.body).items : i.id if i.name == "databases"][0]
+    database_host_catalog_id = [for i in jsondecode(data.http.host_catalogs.body).items : i.id if i.name == "databases"][0]
+    # Create a map of service names to instance IDs to then build
+    # a map of service names to instances
+    consul_service_ids = transpose({
+      for id, s in var.services : id => [s.name]
+    })
+
+    # Group service instances by service name
+    # consul_services = {
+    #   "app" = [
+    #     {
+    #       "id" = "app-id-01"
+    #       "name" = "app"
+    #       "node_address" = "192.168.10.10"
+    #     }
+    #   ]
+    # }
+    consul_services = {
+      for name, ids in local.consul_service_ids :
+      name => [for id in ids : var.services[id]]
+    }
+}
+
+output "test" {
+  value = local.consul_services
+}
+
+resource "boundary_host" "mysql" {
+  for_each = {for s in local.consul_services["mysql"] : s.id => s}
+  type        = "static"
+  name        = "mysql"
+  description = "Private mysql container"
+  address         = each.value.address
+  host_catalog_id = local.database_host_catalog_id
+}
+
+resource "boundary_host_set" "mysql" {
+  type            = "static"
+  name            = "mysql"
+  description     = "Host set for mysql containers"
+  host_catalog_id = local.database_host_catalog_id
+  host_ids        = [for k,v in boundary_host.mysql : v.id]
+}
+
+resource "boundary_target" "mysql" {
+  type                     = "tcp"
+  name                     = "mysql"
+  description              = "MySQL server"
+  scope_id                 = local.database_project_id
+  session_connection_limit = -1
+  session_max_seconds      = 300
+  default_port             = 3306
+  host_set_ids = [
+    boundary_host_set.mysql.id
+  ]
+}
+
+resource "boundary_host" "redis" {
+  for_each = {for s in local.consul_services["redis"] : s.id => s}
+  type        = "static"
+  name        = each.key
+  description = "Private redis container"
+  address         = each.value.address
+  host_catalog_id = local.database_host_catalog_id
+}
+
+resource "boundary_host_set" "redis" {
+  type            = "static"
+  name            = "redis"
+  description     = "Host set for redis containers"
+  host_catalog_id = local.database_host_catalog_id
+  host_ids        = [for k,v in boundary_host.redis : v.id]
+}
+
+resource "boundary_target" "redis" {
+  type                     = "tcp"
+  name                     = "redis"
+  description              = "Redis server"
+  scope_id                 = local.database_project_id
+  session_connection_limit = -1
+  session_max_seconds      = 300
+  default_port             = 6379
+  host_set_ids = [
+    boundary_host_set.redis.id
+  ]
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%variables.tf
new file mode 100644
index 0000000..7a32ba3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%boundary%variables.tf
@@ -0,0 +1,25 @@
+variable "services" {
+  description = "Consul services monitored by Consul Terraform Sync"
+  type = map(
+    object({
+      id        = string
+      name      = string
+      kind      = string
+      address   = string
+      port      = number
+      meta      = map(string)
+      tags      = list(string)
+      namespace = string
+      status    = string
+
+      node                  = string
+      node_id               = string
+      node_address          = string
+      node_datacenter       = string
+      node_tagged_addresses = map(string)
+      node_meta             = map(string)
+
+      cts_user_defined_meta = map(string)
+    })
+  )
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%main.tf b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%main.tf
new file mode 100644
index 0000000..5c7bf6b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%main.tf
@@ -0,0 +1,36 @@
+# This file is generated by Consul Terraform Sync.
+#
+# The HCL blocks, arguments, variables, and values are derived from the
+# operator configuration for Sync. Any manual changes to this file
+# may not be preserved and could be overwritten by a subsequent update.
+#
+# Task: boundary
+# Description: 
+
+terraform {
+  required_version = ">= 0.13.0, < 0.15"
+  required_providers {
+    boundary = {
+      source  = "hashicorp/boundary"
+      version = "1.0.2"
+    }
+  }
+  backend "consul" {
+    address = "localhost:8500"
+    gzip    = true
+    path    = "consul-terraform-sync/terraform"
+  }
+}
+
+provider "boundary" {
+  addr             = var.boundary.addr
+  recovery_kms_hcl = var.boundary.recovery_kms_hcl
+}
+
+provider "http" {
+}
+
+module "boundary" {
+  source   = "./boundary"
+  services = var.services
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%variables.tf
new file mode 100644
index 0000000..5e74287
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%compose%cts%sync-tasks%boundary%variables.tf
@@ -0,0 +1,50 @@
+# This file is generated by Consul Terraform Sync.
+#
+# The HCL blocks, arguments, variables, and values are derived from the
+# operator configuration for Sync. Any manual changes to this file
+# may not be preserved and could be overwritten by a subsequent update.
+#
+# Task: boundary
+# Description: 
+
+# Service definition protocol v0
+variable "services" {
+  description = "Consul services monitored by Consul Terraform Sync"
+  type = map(
+    object({
+      id        = string
+      name      = string
+      kind      = string
+      address   = string
+      port      = number
+      meta      = map(string)
+      tags      = list(string)
+      namespace = string
+      status    = string
+
+      node                  = string
+      node_id               = string
+      node_address          = string
+      node_datacenter       = string
+      node_tagged_addresses = map(string)
+      node_meta             = map(string)
+
+      cts_user_defined_meta = map(string)
+    })
+  )
+}
+
+variable "boundary" {
+  default     = null
+  description = "Configuration object for boundary"
+  type = object({
+    addr             = string
+    recovery_kms_hcl = string
+  })
+}
+
+variable "http" {
+  default     = null
+  description = "Configuration object for http"
+  type        = object({})
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%main.tf b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%main.tf
new file mode 100644
index 0000000..5c7bf6b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%main.tf
@@ -0,0 +1,36 @@
+# This file is generated by Consul Terraform Sync.
+#
+# The HCL blocks, arguments, variables, and values are derived from the
+# operator configuration for Sync. Any manual changes to this file
+# may not be preserved and could be overwritten by a subsequent update.
+#
+# Task: boundary
+# Description: 
+
+terraform {
+  required_version = ">= 0.13.0, < 0.15"
+  required_providers {
+    boundary = {
+      source  = "hashicorp/boundary"
+      version = "1.0.2"
+    }
+  }
+  backend "consul" {
+    address = "localhost:8500"
+    gzip    = true
+    path    = "consul-terraform-sync/terraform"
+  }
+}
+
+provider "boundary" {
+  addr             = var.boundary.addr
+  recovery_kms_hcl = var.boundary.recovery_kms_hcl
+}
+
+provider "http" {
+}
+
+module "boundary" {
+  source   = "./boundary"
+  services = var.services
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%variables.tf
new file mode 100644
index 0000000..d75ed47
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%cts%sync-tasks%boundary%variables.tf
@@ -0,0 +1,52 @@
+# This file is generated by Consul Terraform Sync.
+#
+# The HCL blocks, arguments, variables, and values are derived from the
+# operator configuration for Sync. Any manual changes to this file
+# may not be preserved and could be overwritten by a subsequent update.
+#
+# Task: boundary
+# Description: 
+
+# Service definition protocol v0
+variable "services" {
+  description = "Consul services monitored by Consul Terraform Sync"
+  type = map(
+    object({
+      id        = string
+      name      = string
+      kind      = string
+      address   = string
+      port      = number
+      meta      = map(string)
+      tags      = list(string)
+      namespace = string
+      status    = string
+
+      node                  = string
+      node_id               = string
+      node_address          = string
+      node_datacenter       = string
+      node_tagged_addresses = map(string)
+      node_meta             = map(string)
+
+      cts_user_defined_meta = map(string)
+    })
+  )
+}
+
+variable "boundary" {
+  default     = null
+  description = "Configuration object for boundary"
+  sensitive   = true
+  type = object({
+    addr             = string
+    recovery_kms_hcl = string
+  })
+}
+
+variable "http" {
+  default     = null
+  description = "Configuration object for http"
+  sensitive   = true
+  type        = object({})
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%terraform%main.tf b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%terraform%main.tf
new file mode 100644
index 0000000..2355054
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%boundary-reference-architecturedeployment%docker_cts%terraform%main.tf
@@ -0,0 +1,231 @@
+terraform {
+  required_providers {
+    boundary = {
+      source  = "hashicorp/boundary"
+      version = "1.0.2"
+    }
+  }
+  backend "consul" {
+    address = "localhost:8500"
+    scheme = "http"
+    path = "terraform/boundary"
+  }
+}
+
+provider "boundary" {
+  addr             = "http://127.0.0.1:9200"
+  recovery_kms_hcl = <<EOT
+kms "aead" {
+  purpose = "recovery"
+  aead_type = "aes-gcm"
+  key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
+  key_id = "global_recovery"
+}
+EOT
+}
+
+variable "users" {
+  type = set(string)
+  default = [
+    "jim",
+    "mike",
+    "todd",
+    "randy",
+    "susmitha",
+    "jeff",
+    "pete",
+    "harold",
+    "patrick",
+    "jonathan",
+    "yoko",
+    "brandon",
+    "kyle",
+    "justin",
+    "melissa",
+    "paul",
+    "mitchell",
+    "armon",
+    "andy",
+    "ben",
+    "kristopher",
+    "kris",
+    "chris",
+    "swarna",
+  ]
+}
+
+resource "boundary_scope" "global" {
+  global_scope = true
+  name         = "global"
+  scope_id     = "global"
+}
+
+resource "boundary_scope" "org" {
+  scope_id    = boundary_scope.global.id
+  name        = "primary"
+  description = "Primary organization scope"
+}
+
+resource "boundary_scope" "project" {
+  name                     = "databases"
+  description              = "Databases project"
+  scope_id                 = boundary_scope.org.id
+  auto_create_admin_role   = true
+  auto_create_default_role = true
+}
+
+resource "boundary_user" "user" {
+  for_each    = var.users
+  name        = each.key
+  description = "User resource for ${each.key}"
+  account_ids = [boundary_account.user[each.value].id]
+  scope_id    = boundary_scope.org.id
+}
+
+resource "boundary_auth_method" "password" {
+  name        = "org_password_auth"
+  description = "Password auth method for org"
+  type        = "password"
+  scope_id    = boundary_scope.org.id
+}
+
+resource "boundary_account" "user" {
+  for_each       = var.users
+  name           = each.key
+  description    = "User account for ${each.key}"
+  type           = "password"
+  login_name     = lower(each.key)
+  password       = "foofoofoo"
+  auth_method_id = boundary_auth_method.password.id
+}
+
+resource "boundary_role" "global_anon_listing" {
+  scope_id = boundary_scope.global.id
+  grant_strings = [
+    "id=*;type=auth-method;actions=list,authenticate",
+    "id=*;type=scope;actions=*",
+    "id={{account.id}};actions=read,change-password",
+    "id=*;type=host-catalog;actions=*",
+    "type=host-catalog;actions=list"
+  ]
+  principal_ids = ["u_anon"]
+}
+
+resource "boundary_role" "org_anon_listing" {
+  scope_id = boundary_scope.org.id
+  grant_strings = [
+    "id=*;type=auth-method;actions=list,authenticate",
+    "id=*;type=scope;actions=*",
+    "id={{account.id}};actions=read,change-password",
+    "id=*;type=host-catalog;actions=*",
+    "type=host-catalog;actions=list"
+  ]
+  principal_ids = ["u_anon"]
+}
+resource "boundary_role" "org_admin" {
+  scope_id       = "global"
+  grant_scope_id = boundary_scope.org.id
+  grant_strings  = ["id=*;type=*;actions=*"]
+  principal_ids = concat(
+    [for user in boundary_user.user : user.id],
+    ["u_auth"]
+  )
+}
+
+resource "boundary_role" "proj_admin" {
+  scope_id       = boundary_scope.org.id
+  grant_scope_id = boundary_scope.project.id
+  grant_strings  = ["id=*;type=*;actions=*"]
+  principal_ids = concat(
+    [for user in boundary_user.user : user.id],
+    ["u_auth"]
+  )
+}
+
+resource "boundary_role" "proj_anon_listing" {
+  scope_id = boundary_scope.org.id
+  grant_scope_id = boundary_scope.project.id
+  grant_strings = [
+    "id=*;type=auth-method;actions=list,authenticate",
+    "id=*;type=scope;actions=*",
+    "id={{account.id}};actions=read,change-password",
+    "id=*;type=host-catalog;actions=*",
+    "type=host-catalog;actions=list"
+  ]
+  principal_ids = ["u_anon"]
+}
+
+resource "boundary_host_catalog" "databases" {
+  name        = "databases"
+  description = "Database targets"
+  type        = "static"
+  scope_id    = boundary_scope.project.id
+}
+
+resource "boundary_host" "localhost" {
+  type            = "static"
+  name            = "localhost"
+  description     = "Localhost host"
+  address         = "localhost"
+  host_catalog_id = boundary_host_catalog.databases.id
+}
+
+# Target hosts available on localhost: ssh and postgres
+# Postgres is exposed to localhost for debugging of the 
+# Boundary DB from the CLI. Assumes SSHD is running on
+# localhost.
+resource "boundary_host_set" "local" {
+  type            = "static"
+  name            = "local"
+  description     = "Host set for local servers"
+  host_catalog_id = boundary_host_catalog.databases.id
+  host_ids        = [boundary_host.localhost.id]
+}
+
+resource "boundary_target" "ssh" {
+  type                     = "tcp"
+  name                     = "ssh"
+  description              = "SSH server"
+  scope_id                 = boundary_scope.project.id
+  session_connection_limit = -1
+  session_max_seconds      = 2
+  default_port             = 22
+  host_set_ids = [
+    boundary_host_set.local.id
+  ]
+}
+
+resource "boundary_target" "postgres" {
+  type                     = "tcp"
+  name                     = "postgres"
+  description              = "Postgres server"
+  scope_id                 = boundary_scope.project.id
+  session_connection_limit = -1
+  session_max_seconds      = 2
+  default_port             = 5432
+  host_set_ids = [
+    boundary_host_set.local.id
+  ]
+}
+
+#resource "boundary_auth_method_oidc" "provider" {
+#  name               = "<oidc provider>"
+#  description        = "OIDC auth method for AAD"
+#  scope_id           = boundary_scope.org.id
+#  issuer             = "<issuer_url>"
+#  client_id          = "<client_id>"
+#  client_secret      = "<client_secret>"
+#  signing_algorithms = ["RS256"]
+#  api_url_prefix     = "http://localhost:9200"
+#  is_primary_for_scope = true
+#  state = "active-public"
+#  max_age = 0
+#}
+
+#resource "boundary_account_oidc" "oidc_user" {
+#  name           = "user1"
+#  description    = "OIDC account for user1"
+#  auth_method_id = boundary_auth_method_oidc.provider.id
+#  issuer  = "<Issuer_URL>"
+#  subject = "<Object_Id>"
+#}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-defaults.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-defaults.hcl
new file mode 100644
index 0000000..29b0020
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-defaults.hcl
@@ -0,0 +1,4 @@
+Kind      = "service-defaults"
+Name      = "frontend"
+Namespace = "apps"
+Protocol  = "http"
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-resolver.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-resolver.hcl
new file mode 100644
index 0000000..bd650ad
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-resolver.hcl
@@ -0,0 +1,17 @@
+Kind          = "service-resolver"
+Name          = "frontend"
+Namespace = "apps"
+DefaultSubset = "v1"
+Subsets = {
+  "v1" = {
+    Filter = "Service.Tags contains v1"
+  }
+  "v2" = {
+    Filter = "Service.Tags contains v2"
+  }
+}
+Failover = {
+  "*" = {
+    Datacenters = ["dc2"]
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-router.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-router.hcl
new file mode 100644
index 0000000..a7d38d4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-router.hcl
@@ -0,0 +1,21 @@
+Kind = "service-router"
+Name = "frontend"
+Namespace = "apps"
+Routes = [
+  {
+    Match = {
+      HTTP = {
+        QueryParam = [
+          {
+            Name  = "x-debug"
+            Present = "True"
+          },
+        ]
+      }
+    }
+    Destination = {
+      Service = "frontend"
+      ServiceSubset = "v2"
+    }
+  }
+]
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-splitter.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-splitter.hcl
new file mode 100644
index 0000000..aa71156
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%frontend-splitter.hcl
@@ -0,0 +1,15 @@
+Kind = "service-splitter"
+Name = "frontend"
+Namespace = "apps"
+Splits = [
+  {
+    Weight  = 50
+    Service = "frontend"
+    ServiceSubset = "v1"
+  },
+  {
+    Weight  = 50
+    Service = "frontend"
+    ServiceSubset = "v2"
+  },
+]
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%ingress.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%ingress.hcl
new file mode 100644
index 0000000..2344293
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsconsul-configs%ingress.hcl
@@ -0,0 +1,20 @@
+Kind = "ingress-gateway"
+Name = "ingress-gateway"
+
+# TLS {
+#   Enabled = true
+# }
+
+Listeners = [
+ {
+    Port = 8080
+    Protocol = "http"
+    Services = [
+      {
+        Name = "frontend"
+        Namespace = "apps"
+        Hosts = "*"
+      }
+    ]
+  }
+]
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetshashicups-waypoint%waypoint.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetshashicups-waypoint%waypoint.hcl
new file mode 100644
index 0000000..f4a146f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetshashicups-waypoint%waypoint.hcl
@@ -0,0 +1,138 @@
+project = "hashicups-demo-hackathon"
+
+app "frontend" {
+  path = "./front"
+
+  build {
+    # use docker {}
+    use "docker-pull" {
+      image = "hashicorpdemoapp/frontend"
+      tag   = "v0.0.4"
+    }
+  }
+
+  deploy {
+    use "exec" {
+      command = ["kubectl","apply","-f","<TPL>","-n","apps"]
+      template {
+        path = join("", ["${path.app}/", jsondecode(file("${path.project}/versions.json"))["frontend"]])
+      }
+    }
+  }
+}
+
+app "public-api" {
+  path = "./public-api"
+  url {
+    auto_hostname = false
+  }
+
+  build {
+    use "docker-pull" {
+      image = "hashicorpdemoapp/public-api"
+      tag   = "v0.0.4"
+    }
+  }
+
+  deploy {
+    use "kubernetes" {
+      annotations = {
+        "consul.hashicorp.com/connect-inject" = "true"
+        "consul.hashicorp.com/connect-service" = "public-api"
+        # "consul.hashicorp.com/connect-service-upstreams" = "product-api:9090"
+        "consul.hashicorp.com/connect-service-upstreams" = "product-api:9090,payments:9091"
+      }
+      service_port = "8080"
+      service_account = "public-api"
+      static_environment = {
+        PRODUCT_API_URI = "http://localhost:9090"
+        PAYMENT_API_URI = "http://localhost:9091"
+        BIND_ADDRESS = ":8080"
+      }
+      namespace = "apps"
+    }
+  }
+
+  release {
+    use "kubernetes" {
+      port = "8080"
+      namespace = "apps"
+    }
+  }
+}
+
+app "product-api" {
+  path = "./product-api"
+
+  build {
+    use "docker-pull" {
+      image = "hashicorpdemoapp/product-api"
+      tag   = "v0.0.15"
+    }
+  }
+
+  deploy {
+    use "exec" {
+      command = ["kubectl","apply","-f","<TPL>","-n","apps"]
+      template {
+        path = "${path.app}/product-api.yaml"
+      }
+    }
+
+  }
+}
+
+app "postgres" {
+  path = "./postgres"
+
+  build {
+    use "docker-pull" {
+      image = "hashicorpdemoapp/product-api-db"
+      tag   = "v0.0.15"
+    }
+  }
+
+  deploy {
+    use "exec" {
+      command = ["kubectl","apply","-f","<TPL>","-n","apps"]
+      template {
+        path = "${path.app}/postgres.yaml"
+      }
+    }
+  }
+}
+app "payments" {
+  path = "./payments"
+  url {
+    auto_hostname = false
+  }
+
+  build {
+    use "docker-pull" {
+      image = "hashicorpdemoapp/payments"
+      tag   = "v0.0.11"
+    }
+  }
+
+  deploy {
+    use "kubernetes" {
+      annotations = {
+        "consul.hashicorp.com/connect-inject" = "true"
+        "consul.hashicorp.com/connect-service" = "payments"
+        # "consul.hashicorp.com/connect-service-port" = "9091"
+      }
+      service_port = "8080"
+      service_account = "payments"
+      static_environment = {
+      }
+      namespace = "apps"
+    }
+  }
+
+  release {
+    use "kubernetes" {
+      port = "9091"
+      namespace = "apps"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmain.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmain.tf
new file mode 100644
index 0000000..c9f6981
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmain.tf
@@ -0,0 +1,113 @@
+terraform {
+  required_version = ">= 0.15" # With 0.14 data sources are not refreshed on destroy and you need to do an apply before a destroy to auth to K8s and Helm
+  required_providers {
+    google = {
+      source = "hashicorp/google"
+      version = "3.64.0"
+    }
+    helm = {
+      source = "hashicorp/helm"
+      version = "2.1.2"
+    }
+    kubernetes = {
+      source = "hashicorp/kubernetes"
+      version = "2.1.0"
+    }
+  }
+  # backend "remote" {
+  # }
+}
+
+# Collect client config for GCP
+data "google_client_config" "current" {
+}
+data "google_service_account" "owner_project" {
+  account_id = var.service_account
+}
+module "gke" {
+  source  = "./modules/tf-gke"
+
+  # version = "0.1.0"
+  count = var.create_federation ? 2 : 1
+  dns_zone = var.dns_zone
+  gcp_project = var.gcp_project
+  gcp_region = var.gcp_region[count.index]
+  gcp_zone = var.gcp_zone[count.index]
+  gcs_bucket = var.gcs_bucket
+  gke_cluster = "${var.gke_cluster}${count.index + 1}"
+  default_gke = var.default_gke
+  default_network = var.default_network
+  owner = var.owner
+  service_account = var.service_account
+}
+
+
+module "k8s" {
+  source = "./modules/kubernetes"
+  depends_on = [
+    module.gke,
+    # data.google_container_cluster.primary_gke
+  ]
+  providers = {
+    helm = helm.primary
+    kubernetes = kubernetes.primary
+  }
+  # token = data.google_client_config.current.access_token
+  # k8s_host = local.secondary_host
+  # k8s_cert = local.secondary_cert
+  cluster_endpoint = module.gke.0.k8s_endpoint
+  cluster_namespace = "consul"
+  ca_certificate = module.gke.0.gke_ca_certificate
+  location = var.gcp_zone[0]
+  gcp_region = var.gcp_region[0]
+  gcp_project = var.gcp_project
+  cluster_name = var.gke_cluster
+  config_bucket = var.gcs_bucket
+  nodes = var.consul_nodes
+  gcp_service_account = data.google_service_account.owner_project
+  dns_zone = var.dns_zone
+  consul_license = var.consul_license
+  values_file = "consul-values-dc.yaml"
+  consul_dc = "dc1"
+  enterprise = var.consul_enterprise
+  consul_version = var.consul_version
+  # envoy_version = var.envoy_version
+  chart_version = var.chart_version
+}
+
+module "k8s-sec" {
+  count = var.create_federation ? 1 : 0
+  source = "./modules/kubernetes"
+  depends_on = [
+    # module.gke,
+    module.k8s,
+    # data.google_container_cluster.secondary_gke
+  ]
+  providers = {
+    helm = helm.secondary
+    kubernetes = kubernetes.secondary
+  }
+  # token = data.google_client_config.current.access_token
+  # k8s_host = local.secondary_host
+  # k8s_cert = local.secondary_cert
+  cluster_endpoint = module.gke.1.k8s_endpoint
+  cluster_namespace = "consul"
+  ca_certificate = module.gke.1.gke_ca_certificate
+  location = var.gcp_zone[1]
+  gcp_region = var.gcp_region[1]
+  gcp_project = var.gcp_project
+  cluster_name = var.gke_cluster
+  config_bucket = var.gcs_bucket
+  nodes = var.consul_nodes
+  gcp_service_account = data.google_service_account.owner_project
+  dns_zone = var.dns_zone
+  consul_license = var.consul_license
+  values_file = "consul-values-dc-fed.yaml"
+  federated = true
+  federation_secret = module.k8s.federation_secret
+  consul_dc = "dc2"
+  enterprise = var.consul_enterprise
+  consul_version = var.consul_version
+  # envoy_version = var.envoy_version
+  chart_version = var.chart_version
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%kubernetes%main.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%kubernetes%main.tf
new file mode 100644
index 0000000..b77b912
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%kubernetes%main.tf
@@ -0,0 +1,118 @@
+terraform {
+  required_version = ">= 0.15" # 0.14 version has a problem when refreshing data sources on destroy
+  required_providers {
+    helm = {
+      source = "hashicorp/helm"
+      version = "2.1.2"
+    }
+    kubernetes = {
+      source = "hashicorp/kubernetes"
+      version = "2.1.0"
+    }
+  }
+  # backend "remote" {
+  # }
+}
+
+# The Helm provider creates the namespace, but if we want to create it manually would be with following lines
+resource "kubernetes_namespace" "consul" {
+  metadata {
+    name = var.cluster_namespace
+  }
+}
+
+# Creating dynamically a hostname list to use later on template
+# data "null_data_source" "hostnames" {
+#   count = var.nodes
+#   inputs = {
+#       hostnames = "consul-server-${count.index}"
+#   }
+# }
+# locals {
+#   hostnames = data.null_data_source.hostnames.*.inputs.hostnames
+# }
+
+# # Let's create a secret with the json credentials
+# resource "google_service_account_key" "gcp_sa_key" {
+#   service_account_id = var.gcp_service_account.name
+# }
+# resource "kubernetes_secret" "google-application-credentials" {
+#   metadata {
+#     name = "gcp-creds"
+#     namespace = kubernetes_namespace.consul.metadata.0.name
+#   }
+#   data = {
+#     "credentials.json" = base64decode(google_service_account_key.gcp_sa_key.private_key)
+#   }
+# }
+resource "kubernetes_secret" "consul-license" {
+  count = var.consul_license == null ? 0 : 1
+  metadata {
+    name = "consul-ent-license"
+    namespace = kubernetes_namespace.consul.metadata.0.name
+  }
+  data = {
+    "key" = var.consul_license
+  }
+}
+
+resource "kubernetes_secret" "consul-federation" {
+  count = var.federated ? 1 : 0
+  metadata {
+    name = "consul-federation"
+    namespace = kubernetes_namespace.consul.metadata.0.name
+  }
+  data = var.federation_secret
+}
+
+
+# Because we are executing remotely using TFC/TFE we want to save our templates in a Cloud bucket
+resource "google_storage_bucket_object" "consul-config" {
+  name   = "${var.cluster_name}-${formatdate("YYMMDD_HHmm",timestamp())}.yml"
+  content = templatefile("${path.root}/templates/${var.values_file}",{
+            # version = "1.8.4",
+            image = var.enterprise ? "hashicorp/consul-enterprise:${var.consul_version}" : "consul:${var.consul_version}"
+            # envoy = "envoyproxy/envoy-alpine:${var.envoy_version}"
+            datacenter = var.consul_dc
+            enterprise = var.enterprise
+            license = var.consul_license
+            nodes = var.nodes
+            # http = var.tls == "enabled" ? "https" : "http",
+            # disable_tls = var.tls == "enabled" ? false : true,
+            # tls = var.tls
+            })
+  bucket = var.config_bucket
+}
+
+
+
+## I you want to create the template files locally uncomment the following lines (This is not working with remote execution in TFE)
+# resource "local_file" "foo" {
+#     content     = templatefile("${path.root}/templates/consul_values.yaml",{
+#           hostname = var.hostname,
+#           vault_version = var.vault_version
+#           })
+#     filename = "${path.root}/templates/vault.yaml"
+# }
+
+
+# We need to create a sleep to let the ingress Load Balancer be assigned, so we can get the Ingress data
+# resource "time_sleep" "wait_60_seconds" {
+#   depends_on = [
+#     helm_release.consul,
+#   ]
+
+#   create_duration = "60s"
+# }
+
+
+# resource "google_dns_record_set" "consul" {
+#   count = var.dns_zone != null ? 1 : 0
+#   name = "${var.hostname}."
+#   type = "A"
+#   ttl  = 300
+
+#   managed_zone = var.dns_zone
+
+#   rrdatas = [data.kubernetes_service.consul-ui.load_balancer_ingress.0.ip]
+# }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%main.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%main.tf
new file mode 100644
index 0000000..a096e82
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%main.tf
@@ -0,0 +1,64 @@
+terraform {
+  required_version = ">= 0.12.26"
+  backend "remote" {}
+}
+
+# Collect client config for GCP
+data "google_client_config" "current" {
+}
+data "google_service_account" "owner_project" {
+  account_id = var.service_account
+}
+
+resource "google_compute_network" "container_network" {
+  count = var.default_network ? 0 : 1
+  name = "${var.gke_cluster}-network"
+  auto_create_subnetworks = false
+}
+
+resource "google_compute_subnetwork" "container_subnetwork" {
+  count = var.default_network ? 0 : 1
+  name          = "${var.gke_cluster}-subnetwork"
+  description   = "auto-created subnetwork for cluster \"${var.gke_cluster}\""
+  region        = var.gcp_region
+  ip_cidr_range = "10.2.0.0/16"
+  network       = google_compute_network.container_network.0.self_link
+}
+
+module "gke" {
+  source = "./modules/gke"
+  region = var.gcp_region
+  zone = var.gcp_zone
+  project = var.gcp_project
+  cluster_name = var.gke_cluster
+  network = var.default_network ? null : google_compute_network.container_network.0.self_link
+  subnetwork = var.default_network ? null : google_compute_subnetwork.container_subnetwork.0.self_link
+  nodes = var.numnodes
+  node_type = var.node_type
+  owner = var.owner
+  default_gke = var.default_gke
+}
+
+resource "google_storage_bucket_object" "jx-requirements" {
+  name   = "jx-requirements.yml"
+  content = templatefile("${path.module}/templates/jx-requirements.yml.tpl",{
+    gke_cluster = var.gke_cluster,
+    owner = var.owner,
+    github_org = var.owner,
+    zone = var.gcp_zone,
+    project = var.gcp_project
+  })
+  bucket = var.gcs_bucket
+}
+
+
+# resource "local_file" "jx-requirements" {
+#   content = templatefile("${path.module}/templates/jx-requirements.yml.tpl",{
+#     gke_cluster = var.gke_cluster,
+#     owner = var.owner,
+#     github_org = "dcanadillas",
+#     zone = var.gcp_zone,
+#     project = var.gcp_project
+#   })
+#   filename = "${path.module}/jx-requirements-${var.gke_cluster}.yml"
+# }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%main.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%main.tf
new file mode 100644
index 0000000..7421cc8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%main.tf
@@ -0,0 +1,93 @@
+
+# provider "google" {
+#   project = var.gcp_project
+#   region = var.gcp_region
+# }
+
+# resource "google_compute_network" "vpc_network" {
+#   name = "${var.cluster_name}-network"
+# }
+data "google_container_engine_versions" "k8sversion" {
+  provider = google-beta
+  project = var.project
+  location       = var.regional_k8s ? var.region : var.zone
+  version_prefix = "1.16."
+}
+
+resource "google_container_cluster" "primary" {
+  # provider = google-beta
+  # project = var.project
+  name     = var.cluster_name
+  location = var.regional_k8s ? var.region : var.zone
+  # node_version = data.google_container_engine_versions.k8sversion.latest_node_version
+  # We can't create a cluster with no node pool defined, but we want to only use
+  # separately managed node pools. So we create the smallest possible default
+  # node pool and immediately delete it.
+  remove_default_node_pool = var.default_gke ? false : true
+  initial_node_count       = var.default_gke ? var.nodes : 1
+  # network = google_compute_network.vpc_network.self_link
+  network = var.network
+  subnetwork = var.subnetwork
+  min_master_version = data.google_container_engine_versions.k8sversion.latest_master_version
+  master_auth {
+    username = ""
+    password = ""
+
+    client_certificate_config {
+      issue_client_certificate = false
+    }
+  }
+  node_config {
+    machine_type = var.node_type
+    disk_type = "pd-ssd"
+    metadata = {
+      disable-legacy-endpoints = "true"
+    }
+
+    oauth_scopes = [
+      "https://www.googleapis.com/auth/logging.write",
+      "https://www.googleapis.com/auth/monitoring",
+      "https://www.googleapis.com/auth/compute",
+      "https://www.googleapis.com/auth/devstorage.read_write",
+      "https://www.googleapis.com/auth/cloud-platform"
+    ]
+
+    tags = [
+      "${var.owner}-gke"
+    ]
+  }
+}
+
+resource "google_container_node_pool" "primary_nodes" {
+  count = var.default_gke ? 0 : 1
+  name       = "${var.cluster_name}-node-pool"
+  location = google_container_cluster.primary.location
+  #version = data.google_container_engine_versions.k8sversion.latest_node_version
+  # location   = var.regional_k8s == true ? var.region : var.zone
+  cluster    = google_container_cluster.primary.name
+  node_count = var.nodes
+
+  node_config {
+    machine_type = var.node_type
+    disk_type = "pd-ssd"
+    metadata = {
+      disable-legacy-endpoints = "true"
+    }
+
+    oauth_scopes = [
+      "https://www.googleapis.com/auth/logging.write",
+      "https://www.googleapis.com/auth/monitoring",
+      "https://www.googleapis.com/auth/compute",
+      "https://www.googleapis.com/auth/devstorage.read_write",
+      "https://www.googleapis.com/auth/cloud-platform"
+    ]
+
+    tags = [
+      "${var.owner}-gke"
+    ]
+  }
+  # autoscaling {
+  #   min_node_count = 0
+  #   max_node_count = var.nodes*2
+  # }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%outputs.tf
new file mode 100644
index 0000000..e971a2f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%outputs.tf
@@ -0,0 +1,35 @@
+data "google_container_cluster" "gke_cluster" {
+  depends_on = [
+    google_container_node_pool.primary_nodes,
+  ]
+  name = google_container_cluster.primary.name
+  location = google_container_cluster.primary.location
+}
+
+output "ca_certificate" {
+  value = data.google_container_cluster.gke_cluster.master_auth.0.cluster_ca_certificate
+  # value = google_container_cluster.primary.master_auth.0.cluster_ca_certificate
+}
+# output "client_key" {
+#   depends_on = [
+#     google_container_node_pool.primary_nodes,
+#   ]
+#   value = google_container_cluster.primary.master_auth.0.client_key
+# }
+# output "client_certificate" {
+#   depends_on = [
+#     google_container_node_pool.primary_nodes,
+#   ]
+#   value = google_container_cluster.primary.master_auth.0.client_certificate
+# }
+output "cluster_endpoint" {
+  value = data.google_container_cluster.gke_cluster.endpoint
+  # value = data.google_container_cluster.gke_cluster.endpoint
+}
+output "cluster_name" {
+  depends_on = [
+    google_container_node_pool.primary_nodes,
+  ]
+  # value = google_container_cluster.primary.name
+  value = data.google_container_cluster.gke_cluster.name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%variables.tf
new file mode 100644
index 0000000..c176c1c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%modules%gke%variables.tf
@@ -0,0 +1,36 @@
+variable "region" {
+  description = "Cloud region"
+}
+variable "project" {
+  description = "Cloud GCP project"
+}
+variable "node_type" {
+  description = "Machine type for nodes"
+  default = "n1-standard-2"
+}
+variable "zone" {
+  description = "availability zones"
+}
+variable "cluster_name" {
+  description = "Name of your cluster  "
+}
+variable "nodes" {
+  description = "Number of nodes of the cluster"
+}
+variable "regional_k8s" {
+  description = "Set this to true if you want regional cluster with a master per zone"
+  default = false
+}
+variable "network" {
+  description = "The Network to be used for the K8s cluster"
+  default = "default"
+}
+variable "subnetwork" {
+  description = "The Network to be used for the K8s cluster"
+}
+variable "owner" {
+  description = "Owner name to tag clusters"
+}
+variable "default_gke" {
+  description = "Set it to true if you want to speed up GKE cluster creation by creating a default NodePool"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%outputs.tf
new file mode 100644
index 0000000..71bf598
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%outputs.tf
@@ -0,0 +1,14 @@
+
+output "gke_ca_certificate" {
+  value = base64decode(module.gke.ca_certificate)
+}
+# output "jx-requirements" {
+#   value = "https://storage.cloud.google.com/${google_storage_bucket_object.jx-requirements.bucket}/${google_storage_bucket_object.jx-requirements.output_name}"
+#   # value = google_storage_bucket_object.jx-requirements.self_link
+# }
+output "k8s_endpoint" {
+  value = module.gke.cluster_endpoint
+}
+output "cluster_name" {
+  value = module.gke.cluster_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%variables.tf
new file mode 100644
index 0000000..2dbf3bf
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-consul-expand-team-qapla-assetsmodules%tf-gke%variables.tf
@@ -0,0 +1,45 @@
+variable "gcp_region" {
+  description = "Cloud region"
+}
+variable "gcp_project" {
+  description = "Cloud GCP project"
+}
+variable "node_type" {
+  description = "Machine type for nodes"
+  default = "n1-standard-2"
+}
+variable "gcp_zone" {
+  description = "availability zones"
+}
+variable "gke_cluster" {
+  description = "Name of your cluster  "
+}
+variable "numnodes" {
+  description = "Number of nodes of the cluster"
+  default=3
+}
+variable "regional_k8s" {
+  description = "Set this to true if you want regional cluster with a master per zone"
+  default = false
+}
+variable "owner" {
+  description = "Owner name to tag clusters"
+}
+variable "gcs_bucket" {
+  description = "Bucket to save template files created"
+}
+variable "service_account" {
+  description = "Service Account to be used as scope permissions"
+}
+variable "default_gke" {
+  description = "Set it to true if you want to speed up GKE cluster creation by creating a default NodePool"
+  default = false
+}
+variable "default_network" {
+  description = "Set it to true if you cant to use the default network in GCP"
+  default = false
+}
+variable "dns_zone" {
+  description = "Cloud DNS zone to create record"
+  default = null
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetscost-estimation-policy%sentinel.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetscost-estimation-policy%sentinel.hcl
new file mode 100644
index 0000000..c343ef3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetscost-estimation-policy%sentinel.hcl
@@ -0,0 +1,3 @@
+policy "less-than-100-month" {
+  enforcement_level = "soft-mandatory"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%main.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%main.tf
new file mode 100644
index 0000000..e2bc700
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%main.tf
@@ -0,0 +1,62 @@
+provider "aws" {
+  region  = var.region
+}
+
+module "frontend" {
+  source = "./terraform-aws-server"
+  name              = "frontend"
+  tags              = { Owner = "jdoe@hashicorp.com", CostCenter = "12345", Environment = var.environment }
+  vpc_id            = module.network.vpc_id
+  vpc_subnet_ids    = module.network.public_subnets[0]
+  security_group_id = module.network.security_group_id
+  public_key        = aws_key_pair.awskey.key_name
+  private_ip        = "10.140.101.10"
+  upstream_ip       = "10.140.101.11"
+
+}
+
+module "public_api" {
+  source = "./terraform-aws-server"
+  name              = "public_api"
+  tags              = { Owner = "jdoe@hashicorp.com", CostCenter = "12345", Environment = var.environment }
+  vpc_id            = module.network.vpc_id
+  vpc_subnet_ids    = module.network.public_subnets[0]
+  security_group_id = module.network.security_group_id
+  public_key        = aws_key_pair.awskey.key_name
+  private_ip        = "10.140.101.11"
+  upstream_ip       = "10.140.101.12"
+
+}
+
+module "product_api" {
+  source = "./terraform-aws-server"
+  name              = "product_api"
+  tags              = { Owner = "jdoe@hashicorp.com", CostCenter = "12345", Environment = var.environment }
+  vpc_id            = module.network.vpc_id
+  vpc_subnet_ids    = module.network.public_subnets[0]
+  security_group_id = module.network.security_group_id
+  public_key        = aws_key_pair.awskey.key_name
+  private_ip        = "10.140.101.12"
+  upstream_ip       = "10.140.101.13"
+
+}
+
+module "postgres" {
+  source = "./terraform-aws-server"
+  name              = "postgres"
+  tags              = { Owner = "jdoe@hashicorp.com", CostCenter = "12345", Environment = var.environment }
+  vpc_id            = module.network.vpc_id
+  vpc_subnet_ids    = module.network.public_subnets[0]
+  security_group_id = module.network.security_group_id
+  public_key        = aws_key_pair.awskey.key_name
+  private_ip        = "10.140.101.13"
+  upstream_ip       = "10.140.101.14"
+}
+
+module "network" {
+  source = "./terraform-aws-network"
+  name            = "Hashicups"
+  private_subnets = ["10.140.1.0/24", "10.140.2.0/24", "10.140.3.0/24"]
+  public_subnets  = ["10.140.101.0/24", "10.140.102.0/24", "10.140.103.0/24"]
+  cidr_block      = "10.140.0.0/16"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%outputs.tf
new file mode 100644
index 0000000..ea38331
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%outputs.tf
@@ -0,0 +1,17 @@
+output "output" {
+  value = <<README
+
+frontend: ssh -i ~/.ssh/awskey.pem ubuntu@${module.frontend.public_ip}
+public-api: ssh -i ~/.ssh/awskey.pem ubuntu@${module.public_api.public_ip}
+product-api: ssh -i ~/.ssh/awskey.pem ubuntu@${module.product_api.public_ip}
+postgres: ssh -i ~/.ssh/awskey.pem ubuntu@${module.postgres.public_ip}
+
+Takes a few mins to install packages:
+http://${module.frontend.public_ip}
+
+README
+}
+
+output "environment" {
+    value = var.environment
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%ssh.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%ssh.tf
new file mode 100644
index 0000000..7478a0a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%ssh.tf
@@ -0,0 +1,22 @@
+resource "random_id" "server" {
+  byte_length = 4
+}
+
+resource "aws_key_pair" "awskey" {
+  key_name   = "awskey-${random_id.server.hex}"
+  public_key = tls_private_key.awskey.public_key_openssh
+}
+
+resource "tls_private_key" "awskey" {
+  algorithm = "RSA"
+}
+
+resource "null_resource" "awskey" {
+  provisioner "local-exec" {
+    command = "echo \"${tls_private_key.awskey.private_key_pem}\" > ~/.ssh/awskey.pem"
+  }
+
+  provisioner "local-exec" {
+    command = "chmod 600 ~/.ssh/awskey.pem"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%outputs.tf
new file mode 100644
index 0000000..c6cc85a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%outputs.tf
@@ -0,0 +1,15 @@
+output "vpc_id" {
+  value = module.vpc.vpc_id
+}
+
+output "vpc_cidr" {
+  value = module.vpc.vpc_cidr_block
+}
+
+output "public_subnets" {
+  value = module.vpc.public_subnets
+}
+
+output "security_group_id" {
+  value = aws_security_group.security_group.id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%sg.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%sg.tf
new file mode 100644
index 0000000..b883ffa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%sg.tf
@@ -0,0 +1,18 @@
+resource "aws_security_group" "security_group" {
+  name        = "${var.name}-security-group"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%variables.tf
new file mode 100644
index 0000000..8d54c17
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%variables.tf
@@ -0,0 +1,4 @@
+variable "name" { default = "rchao" }
+variable "private_subnets" { type = list(string)}
+variable "public_subnets" { type = list(string)}
+variable "cidr_block" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%vpc.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%vpc.tf
new file mode 100644
index 0000000..cef12e4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-network%vpc.tf
@@ -0,0 +1,13 @@
+data "aws_availability_zones" "available" {
+}
+
+module "vpc" {
+  source             = "terraform-aws-modules/vpc/aws"
+  name               = "${var.name}-vpc"
+  cidr               = var.cidr_block
+  azs                = [data.aws_availability_zones.available.names[0], data.aws_availability_zones.available.names[1], data.aws_availability_zones.available.names[2]]
+  private_subnets    = var.private_subnets
+  public_subnets     = var.public_subnets
+  enable_dns_hostnames = true
+  enable_vpn_gateway   = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%outputs.tf
new file mode 100644
index 0000000..72d255f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%outputs.tf
@@ -0,0 +1,15 @@
+output "db_password" {
+  value = var.db_password
+}
+
+output "db_username" {
+  value = var.db_username
+}
+
+output "db_endpoint" {
+  value = aws_db_instance.rds.endpoint
+}
+
+output "db_name" {
+  value = var.db_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%rds.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%rds.tf
new file mode 100644
index 0000000..4c9b147
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%rds.tf
@@ -0,0 +1,43 @@
+resource "aws_security_group" "rds_access" {
+  vpc_id      = var.vpc_id
+
+  ingress {
+    from_port = 0
+    to_port   = 0
+    protocol  = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "random_id" "server" {
+  byte_length = 4
+}
+
+resource "aws_db_subnet_group" "rds_subnet" {
+  name_prefix = var.name
+  subnet_ids  = flatten([var.vpc_subnet_ids ])
+}
+
+resource "aws_db_instance" "rds" {
+  allocated_storage       = 20
+  db_subnet_group_name    = aws_db_subnet_group.rds_subnet.name
+  vpc_security_group_ids  = [ aws_security_group.rds_access.id ]
+  publicly_accessible     = true
+  engine                  = "postgres"
+  engine_version          = "11.5"
+  identifier              = var.name
+  instance_class          = "db.t2.micro"
+  name                    = var.db_name
+  username                = var.db_username
+  password                = var.db_password
+  skip_final_snapshot     = true
+  #storage_encrypted    = true
+
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%variables.tf
new file mode 100644
index 0000000..27e2d49
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-postgres-rds%variables.tf
@@ -0,0 +1,7 @@
+variable "name" {}
+variable "vpc_id" {}
+variable "vpc_cidr" {}
+variable "vpc_subnet_ids" {}
+variable "db_name" {}
+variable "db_username" {}
+variable "db_password" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%iam.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%iam.tf
new file mode 100644
index 0000000..20afa4b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%iam.tf
@@ -0,0 +1,43 @@
+resource "random_id" "name" {
+  byte_length = 4
+}
+
+data "aws_iam_policy_document" "assume_role" {
+  statement {
+    effect  = "Allow"
+    actions = ["sts:AssumeRole"]
+
+    principals {
+      type        = "Service"
+      identifiers = ["ec2.amazonaws.com"]
+    }
+  }
+}
+
+data "aws_iam_policy_document" "instance" {
+  statement {
+    sid       = "AllowSelfAssembly"
+    effect    = "Allow"
+    resources = ["*"]
+
+    actions = [
+      "ec2:DescribeInstances",
+    ]
+  }
+}
+
+resource "aws_iam_role" "instance" {
+  name               = "hashicups-instance-role-${random_id.name.hex}"
+  assume_role_policy = data.aws_iam_policy_document.assume_role.json
+}
+
+resource "aws_iam_role_policy" "instance" {
+  name   = "hashicups-instance-SelfAssembly-${random_id.name.hex}"
+  role   = aws_iam_role.instance.id
+  policy = data.aws_iam_policy_document.instance.json
+}
+
+resource "aws_iam_instance_profile" "instance" {
+  name = "hashicups-instance-profile-${random_id.name.hex}"
+  role = aws_iam_role.instance.name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%instances.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%instances.tf
new file mode 100644
index 0000000..cf98759
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%instances.tf
@@ -0,0 +1,41 @@
+terraform {
+  required_version = ">= 0.12"
+}
+
+data "aws_ami" "ubuntu" {
+  most_recent = true
+
+  filter {
+    name = "name"
+    #values = ["ubuntu/images/hvm-ssd/ubuntu-disco-19.04-amd64-server-*"]
+    values = ["ubuntu/images/hvm-ssd/ubuntu-bionic-18.04-amd64-server-*"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  owners = ["099720109477"] # Canonical
+}
+
+data "template_file" "config" {
+  template = file("${path.module}/configs/${var.name}.tpl")
+  vars = {
+    upstream_ip = var.upstream_ip
+  }
+}
+
+resource "aws_instance" "instance" {
+  instance_type               = "t2.small"
+  ami                         = data.aws_ami.ubuntu.id
+  vpc_security_group_ids      = [ var.security_group_id ]
+  subnet_id                   = var.vpc_subnet_ids
+  associate_public_ip_address = true
+  key_name                    = var.public_key
+  iam_instance_profile        = aws_iam_instance_profile.instance.id
+  private_ip                  = var.private_ip
+  tags                        = var.tags
+
+  user_data = data.template_file.config.rendered
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%outputs.tf
new file mode 100644
index 0000000..ed12e77
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%outputs.tf
@@ -0,0 +1,7 @@
+output "public_ip" {
+  value = aws_instance.instance.public_ip
+}
+
+output "private_ip" {
+  value = aws_instance.instance.private_ip
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%variables.tf
new file mode 100644
index 0000000..1504153
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%terraform-aws-server%variables.tf
@@ -0,0 +1,8 @@
+variable "name" {}
+variable "tags" {}
+variable "vpc_id" {}
+variable "vpc_subnet_ids" {}
+variable "security_group_id" {}
+variable "public_key" {}
+variable "private_ip" {}
+variable "upstream_ip" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%variables.tf
new file mode 100644
index 0000000..1b55e9c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%hashicups-application%variables.tf
@@ -0,0 +1,2 @@
+variable "region" { default = "us-west-2" }
+variable "environment" { default = "not-defined" }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%sentinel-policies%sentinel.hcl b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%sentinel-policies%sentinel.hcl
new file mode 100644
index 0000000..d8fe70b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetsgitclones%sentinel-policies%sentinel.hcl
@@ -0,0 +1,8 @@
+module "tfrun-functions" {
+    source = "./common-functions/tfrun-functions/tfrun-functions.sentinel"
+}
+
+policy "limit-cost-by-workspace-name" {
+    source = "./limit-cost-by-workspace-name.sentinel"
+    enforcement_level = "soft-mandatory"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%main.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%main.tf
new file mode 100644
index 0000000..b50fcb0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%main.tf
@@ -0,0 +1,14 @@
+resource "tfe_policy_set" "sentinel" {
+  name          = "limit-cost-by-workspace-name"
+  description   = "Limit costs with different limits based on workspace names."
+  organization  = var.TFC_ORGANIZATION
+  policies_path = "gitclones/sentinel-policies"
+  global = true
+
+  vcs_repo {
+    identifier         = var.GITHUB_IDENTIFIER
+    branch             = "main"
+    ingress_submodules = false
+    oauth_token_id     = var.OAUTH_TOKEN_ID
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%variables.tf
new file mode 100644
index 0000000..84891c9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-sentinel%variables.tf
@@ -0,0 +1,3 @@
+variable "GITHUB_IDENTIFIER" {}
+variable "TFC_ORGANIZATION" {}
+variable "OAUTH_TOKEN_ID" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%main.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%main.tf
new file mode 100644
index 0000000..39986a7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%main.tf
@@ -0,0 +1,157 @@
+//TFC VCS
+resource "tfe_oauth_client" "test-oauth-client" {
+   organization = var.TFC_ORGANIZATION
+   api_url          = "https://api.github.com"
+   http_url         = "https://github.com"
+   oauth_token      = var.GITHUB_TOKEN
+   service_provider = "github"
+}
+
+//TFC Workspaces
+resource "tfe_workspace" "hashicups_prod" {
+  name         = "hashicups-prod"
+  organization = var.TFC_ORGANIZATION
+  auto_apply = false
+  queue_all_runs = false
+  terraform_version = "0.14.9"
+  working_directory   = "gitclones/hashicups-application/"
+
+
+  vcs_repo {
+      identifier = var.GITHUB_IDENTIFIER
+      branch = "main"
+      oauth_token_id     = tfe_oauth_client.test-oauth-client.oauth_token_id
+    }
+}
+
+resource "tfe_workspace" "hashicups_stage" {
+  name         = "hashicups-staging"
+  organization = var.TFC_ORGANIZATION
+  auto_apply = false
+  queue_all_runs = false
+  terraform_version = "0.14.9"
+  working_directory   = "gitclones/hashicups-application/"
+
+  # VCS Section
+  vcs_repo {
+    identifier = var.GITHUB_IDENTIFIER
+    branch = "staging"
+    oauth_token_id     = tfe_oauth_client.test-oauth-client.oauth_token_id
+  }
+}
+
+resource "tfe_workspace" "hashicups_dev" {
+  name         = "hashicups-dev"
+  organization = var.TFC_ORGANIZATION
+  auto_apply = false
+  queue_all_runs = false
+  terraform_version = "0.14.9"
+  working_directory   = "gitclones/hashicups-application/"
+
+  # VCS Section
+  vcs_repo {
+    identifier = var.GITHUB_IDENTIFIER
+    branch = "dev"
+    oauth_token_id     = tfe_oauth_client.test-oauth-client.oauth_token_id
+  }
+}
+
+resource "tfe_variable" "prod_aws_access_key" {
+  key = "AWS_ACCESS_KEY_ID"
+  value = var.AWS_ACCESS_KEY_ID
+  category = "env"
+  sensitive = true
+  workspace_id = tfe_workspace.hashicups_prod.id
+}
+
+resource "tfe_variable" "prod_aws_secret_key" {
+  key = "AWS_SECRET_ACCESS_KEY"
+  value = var.AWS_SECRET_ACCESS_KEY
+  category = "env"
+  sensitive = true
+  workspace_id = tfe_workspace.hashicups_prod.id
+}
+
+resource "tfe_variable" "prod-region" {
+  key = "region"
+  value = "us-west-2"
+  category = "terraform"
+  sensitive = false
+  workspace_id = tfe_workspace.hashicups_prod.id
+}
+
+resource "tfe_variable" "prod_environment" {
+  key = "environment"
+  value = "production"
+  category = "terraform"
+  sensitive = false
+  workspace_id = tfe_workspace.hashicups_prod.id
+}
+
+resource "tfe_variable" "stage_aws_access_key" {
+  key = "AWS_ACCESS_KEY_ID"
+  value = var.AWS_ACCESS_KEY_ID
+  category = "env"
+  sensitive = true
+  workspace_id = tfe_workspace.hashicups_stage.id
+}
+
+resource "tfe_variable" "stage_aws_secret_key" {
+  key = "AWS_SECRET_ACCESS_KEY"
+  value = var.AWS_SECRET_ACCESS_KEY
+  category = "env"
+  sensitive = true
+  workspace_id = tfe_workspace.hashicups_stage.id
+}
+
+resource "tfe_variable" "stage_region" {
+  key = "region"
+  value = "us-west-2"
+  category = "terraform"
+  sensitive = false
+  workspace_id = tfe_workspace.hashicups_stage.id
+}
+
+resource "tfe_variable" "stage_environment" {
+  key = "environment"
+  value = "stage"
+  category = "terraform"
+  sensitive = false
+  workspace_id = tfe_workspace.hashicups_stage.id
+}
+
+resource "tfe_variable" "dev_aws_access_key" {
+  key = "AWS_ACCESS_KEY_ID"
+  value = var.AWS_ACCESS_KEY_ID
+  category = "env"
+  sensitive = true
+  workspace_id = tfe_workspace.hashicups_dev.id
+}
+
+resource "tfe_variable" "dev_aws_secret_key" {
+  key = "AWS_SECRET_ACCESS_KEY"
+  value = var.AWS_SECRET_ACCESS_KEY
+  category = "env"
+  sensitive = true
+  workspace_id = tfe_workspace.hashicups_dev.id
+}
+
+resource "tfe_variable" "dev_region" {
+  key = "region"
+  value = "us-west-2"
+  category = "terraform"
+  sensitive = false
+  workspace_id = tfe_workspace.hashicups_dev.id
+}
+
+resource "tfe_variable" "dev_environment" {
+  key = "environment"
+  value = "development"
+  category = "terraform"
+  sensitive = false
+  workspace_id = tfe_workspace.hashicups_dev.id
+}
+
+output "oauth_token_id" {
+  value = tfe_oauth_client.test-oauth-client.oauth_token_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%variables.tf
new file mode 100644
index 0000000..3c64a9d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%field-demos-expand-terraform-boom-shaka-laka-assetssetup%terraform%tfc-workspaces%variables.tf
@@ -0,0 +1,5 @@
+variable "AWS_ACCESS_KEY_ID" {}
+variable "AWS_SECRET_ACCESS_KEY" {}
+variable "TFC_ORGANIZATION" {}
+variable "GITHUB_TOKEN" {}
+variable "GITHUB_IDENTIFIER" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%go-tfetest-fixtures%config-version%main.tf b/example/real_world_stuff/hashicorp/hashicorp%go-tfetest-fixtures%config-version%main.tf
new file mode 100644
index 0000000..3911a2a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%go-tfetest-fixtures%config-version%main.tf
@@ -0,0 +1 @@
+resource "null_resource" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%go-tfetest-fixtures%policy-set-version%sentinel.hcl b/example/real_world_stuff/hashicorp/hashicorp%go-tfetest-fixtures%policy-set-version%sentinel.hcl
new file mode 100644
index 0000000..c6c0052
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%go-tfetest-fixtures%policy-set-version%sentinel.hcl
@@ -0,0 +1,4 @@
+policy "enforce-mandatory-tags" {
+  source = "./enforce-mandatory-tags.sentinel"
+  enforcement_level = "hard-mandatory"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%hashicat-azuremain.tf b/example/real_world_stuff/hashicorp/hashicorp%hashicat-azuremain.tf
new file mode 100644
index 0000000..f299aa3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%hashicat-azuremain.tf
@@ -0,0 +1,204 @@
+terraform {
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "=2.60.0"
+    }
+  }
+}
+
+provider "azurerm" {
+  features {}
+}
+
+resource "azurerm_resource_group" "myresourcegroup" {
+  name     = "${var.prefix}-workshop"
+  location = var.location
+
+  tags = {
+    environment = "Production"
+  }
+}
+
+resource "azurerm_virtual_network" "vnet" {
+  name                = "${var.prefix}-vnet"
+  location            = azurerm_resource_group.myresourcegroup.location
+  address_space       = [var.address_space]
+  resource_group_name = azurerm_resource_group.myresourcegroup.name
+}
+
+resource "azurerm_subnet" "subnet" {
+  name                 = "${var.prefix}-subnet"
+  virtual_network_name = azurerm_virtual_network.vnet.name
+  resource_group_name  = azurerm_resource_group.myresourcegroup.name
+  address_prefixes     = [var.subnet_prefix]
+}
+
+resource "azurerm_network_security_group" "catapp-sg" {
+  name                = "${var.prefix}-sg"
+  location            = var.location
+  resource_group_name = azurerm_resource_group.myresourcegroup.name
+
+  security_rule {
+    name                       = "HTTP"
+    priority                   = 100
+    direction                  = "Inbound"
+    access                     = "Allow"
+    protocol                   = "Tcp"
+    source_port_range          = "*"
+    destination_port_range     = "80"
+    source_address_prefix      = "*"
+    destination_address_prefix = "*"
+  }
+
+  security_rule {
+    name                       = "HTTPS"
+    priority                   = 102
+    direction                  = "Inbound"
+    access                     = "Allow"
+    protocol                   = "Tcp"
+    source_port_range          = "*"
+    destination_port_range     = "443"
+    source_address_prefix      = "*"
+    destination_address_prefix = "*"
+  }
+
+  security_rule {
+    name                       = "SSH"
+    priority                   = 101
+    direction                  = "Inbound"
+    access                     = "Allow"
+    protocol                   = "Tcp"
+    source_port_range          = "*"
+    destination_port_range     = "22"
+    source_address_prefix      = "*"
+    destination_address_prefix = "*"
+  }
+}
+
+resource "azurerm_network_interface" "catapp-nic" {
+  name                      = "${var.prefix}-catapp-nic"
+  location                  = var.location
+  resource_group_name       = azurerm_resource_group.myresourcegroup.name
+
+  ip_configuration {
+    name                          = "${var.prefix}ipconfig"
+    subnet_id                     = azurerm_subnet.subnet.id
+    private_ip_address_allocation = "Dynamic"
+    public_ip_address_id          = azurerm_public_ip.catapp-pip.id
+  }
+}
+
+resource "azurerm_network_interface_security_group_association" "catapp-nic-sg-ass" {
+  network_interface_id      = azurerm_network_interface.catapp-nic.id
+  network_security_group_id = azurerm_network_security_group.catapp-sg.id
+}
+
+resource "azurerm_public_ip" "catapp-pip" {
+  name                = "${var.prefix}-ip"
+  location            = var.location
+  resource_group_name = azurerm_resource_group.myresourcegroup.name
+  allocation_method   = "Dynamic"
+  domain_name_label   = "${var.prefix}-meow"
+}
+
+resource "azurerm_virtual_machine" "catapp" {
+  name                = "${var.prefix}-meow"
+  location            = var.location
+  resource_group_name = azurerm_resource_group.myresourcegroup.name
+  vm_size             = var.vm_size
+
+  network_interface_ids         = [azurerm_network_interface.catapp-nic.id]
+  delete_os_disk_on_termination = "true"
+
+  storage_image_reference {
+    publisher = var.image_publisher
+    offer     = var.image_offer
+    sku       = var.image_sku
+    version   = var.image_version
+  }
+
+  storage_os_disk {
+    name              = "${var.prefix}-osdisk"
+    managed_disk_type = "Standard_LRS"
+    caching           = "ReadWrite"
+    create_option     = "FromImage"
+  }
+
+  os_profile {
+    computer_name  = var.prefix
+    admin_username = var.admin_username
+    admin_password = var.admin_password
+  }
+
+  os_profile_linux_config {
+    disable_password_authentication = false
+  }
+
+  tags = {}
+
+  # Added to allow destroy to work correctly.
+  depends_on = [azurerm_network_interface_security_group_association.catapp-nic-sg-ass]
+}
+
+# We're using a little trick here so we can run the provisioner without
+# destroying the VM. Do not do this in production.
+
+# If you need ongoing management (Day N) of your virtual machines a tool such
+# as Chef or Puppet is a better choice. These tools track the state of
+# individual files and can keep them in the correct configuration.
+
+# Here we do the following steps:
+# Sync everything in files/ to the remote VM.
+# Set up some environment variables for our script.
+# Add execute permissions to our scripts.
+# Run the deploy_app.sh script.
+resource "null_resource" "configure-cat-app" {
+  depends_on = [
+    azurerm_virtual_machine.catapp,
+  ]
+
+  # Terraform 0.11
+  # triggers {
+  #   build_number = "${timestamp()}"
+  # }
+
+  # Terraform 0.12
+  triggers = {
+    build_number = timestamp()
+  }
+
+  provisioner "file" {
+    source      = "files/"
+    destination = "/home/${var.admin_username}/"
+
+    connection {
+      type     = "ssh"
+      user     = var.admin_username
+      password = var.admin_password
+      host     = azurerm_public_ip.catapp-pip.fqdn
+    }
+  }
+
+  provisioner "remote-exec" {
+    inline = [
+      "sudo apt -y update",
+      "sleep 15",
+      "sudo apt -y update",
+      "sudo apt -y install apache2",
+      "sudo systemctl start apache2",
+      "sudo chown -R ${var.admin_username}:${var.admin_username} /var/www/html",
+      "chmod +x *.sh",
+      "PLACEHOLDER=${var.placeholder} WIDTH=${var.width} HEIGHT=${var.height} PREFIX=${var.prefix} ./deploy_app.sh",
+      "sudo apt -y install cowsay",
+      "cowsay Mooooooooooo!",
+    ]
+
+    connection {
+      type     = "ssh"
+      user     = var.admin_username
+      password = var.admin_password
+      host     = azurerm_public_ip.catapp-pip.fqdn
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kubernetesenvironments%terraform%eks%main.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kubernetesenvironments%terraform%eks%main.tf
new file mode 100644
index 0000000..b2f99f7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kubernetesenvironments%terraform%eks%main.tf
@@ -0,0 +1,76 @@
+provider "aws" {
+  region  = var.region
+}
+
+data "aws_availability_zones" "available" {
+  state = "available"
+  filter {
+    name   = "opt-in-status"
+    values = ["opt-in-not-required"]
+  }
+}
+
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "2.65.0"
+
+  name                 = "${var.datacenter_name}-vpc"
+  cidr                 = "10.0.0.0/16"
+  azs                  = data.aws_availability_zones.available.names
+  private_subnets      = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
+  public_subnets       = ["10.0.4.0/24", "10.0.5.0/24", "10.0.6.0/24"]
+  enable_nat_gateway   = true
+  single_nat_gateway   = true
+  enable_dns_hostnames = true
+
+  public_subnet_tags = {
+    "kubernetes.io/cluster/${var.datacenter_name}-public-subnet" = "shared"
+    "kubernetes.io/role/elb"                                     = "1"
+  }
+
+  private_subnet_tags = {
+    "kubernetes.io/cluster/${var.datacenter_name}-private-subnet" = "shared"
+    "kubernetes.io/role/internal-elb"                             = "1"
+  }
+}
+
+module "eks" {
+  source  = "terraform-aws-modules/eks/aws"
+  version = "13.2.1"
+
+  cluster_name    = var.datacenter_name
+  cluster_version = "1.17"
+  subnets         = module.vpc.public_subnets
+
+  vpc_id = module.vpc.vpc_id
+
+  node_groups = {
+    first = {
+      desired_capacity = 3
+      max_capacity     = 3
+      min_capacity     = 3
+
+      instance_type = "t2.medium"
+    }
+  }
+
+  manage_aws_auth    = false
+  write_kubeconfig   = true
+  config_output_path = pathexpand("${var.output_dir}/${var.datacenter_name}")
+
+}
+
+data "aws_eks_cluster" "cluster" {
+  name = module.eks.cluster_id
+}
+
+data "aws_eks_cluster_auth" "cluster" {
+  name = module.eks.cluster_id
+}
+
+provider "kubernetes" {
+  load_config_file       = false
+  host                   = data.aws_eks_cluster.cluster.endpoint
+  cluster_ca_certificate = base64decode(data.aws_eks_cluster.cluster.certificate_authority.0.data)
+  token                  = data.aws_eks_cluster_auth.cluster.token
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%.terraform.lock.hcl b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%.terraform.lock.hcl
new file mode 100644
index 0000000..39c3ba2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%.terraform.lock.hcl
@@ -0,0 +1,113 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.23.0"
+  constraints = ">= 2.68.0, >= 3.3.0, 3.23.0"
+  hashes = [
+    "h1:tSznQxPJvolDnmqqaTK9SsJ0bluTws7OAWcnc1t0ABs=",
+    "zh:30b0733027c00472618da998bc77967c692e238ae117c07e046fdd7336b83fa3",
+    "zh:3677550a8bef8e01c67cb615407dc8a69d32f4e36017033cd6f71a831c99d5de",
+    "zh:3c2fb4c14bfd43cf20ee25d0068ce09f1d48758408b8f1c88a096cea243612b3",
+    "zh:5577543322003693c4fe24a69ed0d47e58f867426fd704fac94cf5c16d3d6153",
+    "zh:6771f09d76ad01ffc04baa3bce7a3eed09f6a8a949274ffbd9d11756a58a4329",
+    "zh:7a57b79d304d17cf52ee3ddce91679f6b4289c5bdda2e31b763bf7d512e542d9",
+    "zh:815fb027e17bfe754b05367d20bd0694726a95a99b81e8d939ddd44e2b1f05a9",
+    "zh:a3d67db5ec0f4e9750eb19676a9a1aff36b0721e276a4ba789f42b991bf5951c",
+    "zh:cd67ff33860ad578172c19412ce608ba818e7590083197df2b793f870d6f50a3",
+    "zh:fbe0835055d1260fb77ad19a32a8726248ba7ac187f6c463ded90737b4cea8e6",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/kubernetes" {
+  version     = "1.13.3"
+  constraints = ">= 1.11.1, 1.13.3"
+  hashes = [
+    "h1:iV0RArGM0KJ3n0ctwpNzcTkTAnx5G4wV3V3kYkRpJXU=",
+    "zh:11fd58df9c297a4f3cab82ce8eb2f54f1be27f78fa23be2273ecd545ab254b91",
+    "zh:5b9e6f352c5666d791e2658a1d18bf0990f3ab70c99c916c393a2ee7f385364c",
+    "zh:5c94f1350471a5c8e8ee6675874608c506a0bfd3164bdd91b802842723547e2c",
+    "zh:5d9c5c44dba9addbb86491339012096e74778bb4ea93b70f12333bffba3d05e6",
+    "zh:6336f9cbb0b580f247cebb97fb7d4cc5e7fe9cc734d8d958d84c4ea3f1e24041",
+    "zh:bca3b9d4dcbe6f804f5611a83add371dc03b5aa92271f60ebdc2216bfedfab28",
+    "zh:cbcdc87a593090f490f7899f4f2d302e0c7023155591fcf65e6fadd69f5452f0",
+    "zh:ec2886a1adbfe3c861b2deb9446369111b9c6116701ae73ef372dc7df5bb3c9e",
+    "zh:edb5b4172610672bb4d7425511961fda2047b8a00675b99ae6887cd2ece4bda9",
+    "zh:ff7ea7743246181ea739643d7751c37041c4016eb6bbc39beb1e3b4e99629112",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/local" {
+  version     = "2.1.0"
+  constraints = ">= 1.4.0"
+  hashes = [
+    "h1:KfieWtVyGWwplSoLIB5usKAUnrIkDQBkWaR5TI+4WYg=",
+    "zh:0f1ec65101fa35050978d483d6e8916664b7556800348456ff3d09454ac1eae2",
+    "zh:36e42ac19f5d68467aacf07e6adcf83c7486f2e5b5f4339e9671f68525fc87ab",
+    "zh:6db9db2a1819e77b1642ec3b5e95042b202aee8151a0256d289f2e141bf3ceb3",
+    "zh:719dfd97bb9ddce99f7d741260b8ece2682b363735c764cac83303f02386075a",
+    "zh:7598bb86e0378fd97eaa04638c1a4c75f960f62f69d3662e6d80ffa5a89847fe",
+    "zh:ad0a188b52517fec9eca393f1e2c9daea362b33ae2eb38a857b6b09949a727c1",
+    "zh:c46846c8df66a13fee6eff7dc5d528a7f868ae0dcf92d79deaac73cc297ed20c",
+    "zh:dc1a20a2eec12095d04bf6da5321f535351a594a636912361db20eb2a707ccc4",
+    "zh:e57ab4771a9d999401f6badd8b018558357d3cbdf3d33cc0c4f83e818ca8e94b",
+    "zh:ebdcde208072b4b0f8d305ebf2bfdc62c926e0717599dcf8ec2fd8c5845031c3",
+    "zh:ef34c52b68933bedd0868a13ccfd59ff1c820f299760b3c02e008dc95e2ece91",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/null" {
+  version     = "3.1.0"
+  constraints = ">= 2.1.0"
+  hashes = [
+    "h1:xhbHC6in3nQryvTQBWKxebi3inG5OCgHgc4fRxL0ymc=",
+    "zh:02a1675fd8de126a00460942aaae242e65ca3380b5bb192e8773ef3da9073fd2",
+    "zh:53e30545ff8926a8e30ad30648991ca8b93b6fa496272cd23b26763c8ee84515",
+    "zh:5f9200bf708913621d0f6514179d89700e9aa3097c77dac730e8ba6e5901d521",
+    "zh:9ebf4d9704faba06b3ec7242c773c0fbfe12d62db7d00356d4f55385fc69bfb2",
+    "zh:a6576c81adc70326e4e1c999c04ad9ca37113a6e925aefab4765e5a5198efa7e",
+    "zh:a8a42d13346347aff6c63a37cda9b2c6aa5cc384a55b2fe6d6adfa390e609c53",
+    "zh:c797744d08a5307d50210e0454f91ca4d1c7621c68740441cf4579390452321d",
+    "zh:cecb6a304046df34c11229f20a80b24b1603960b794d68361a67c5efe58e62b8",
+    "zh:e1371aa1e502000d9974cfaff5be4cfa02f47b17400005a16f14d2ef30dc2a70",
+    "zh:fc39cc1fe71234a0b0369d5c5c7f876c71b956d23d7d6f518289737a001ba69b",
+    "zh:fea4227271ebf7d9e2b61b89ce2328c7262acd9fd190e1fd6d15a591abfa848e",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/random" {
+  version     = "3.1.0"
+  constraints = ">= 2.1.0"
+  hashes = [
+    "h1:rKYu5ZUbXwrLG1w81k7H3nce/Ys6yAxXhWcbtk36HjY=",
+    "zh:2bbb3339f0643b5daa07480ef4397bd23a79963cc364cdfbb4e86354cb7725bc",
+    "zh:3cd456047805bf639fbf2c761b1848880ea703a054f76db51852008b11008626",
+    "zh:4f251b0eda5bb5e3dc26ea4400dba200018213654b69b4a5f96abee815b4f5ff",
+    "zh:7011332745ea061e517fe1319bd6c75054a314155cb2c1199a5b01fe1889a7e2",
+    "zh:738ed82858317ccc246691c8b85995bc125ac3b4143043219bd0437adc56c992",
+    "zh:7dbe52fac7bb21227acd7529b487511c91f4107db9cc4414f50d04ffc3cab427",
+    "zh:a3a9251fb15f93e4cfc1789800fc2d7414bbc18944ad4c5c98f466e6477c42bc",
+    "zh:a543ec1a3a8c20635cf374110bd2f87c07374cf2c50617eee2c669b3ceeeaa9f",
+    "zh:d9ab41d556a48bd7059f0810cf020500635bfc696c9fc3adab5ea8915c1d886b",
+    "zh:d9e13427a7d011dbd654e591b0337e6074eef8c3b9bb11b2e39eaaf257044fd7",
+    "zh:f7605bd1437752114baf601bdf6931debe6dc6bfe3006eb7e9bb9080931dca8a",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/template" {
+  version     = "2.2.0"
+  constraints = ">= 2.1.0"
+  hashes = [
+    "h1:0wlehNaxBX7GJQnPfQwTNvvAf38Jm0Nv7ssKGMaG6Og=",
+    "zh:01702196f0a0492ec07917db7aaa595843d8f171dc195f4c988d2ffca2a06386",
+    "zh:09aae3da826ba3d7df69efeb25d146a1de0d03e951d35019a0f80e4f58c89b53",
+    "zh:09ba83c0625b6fe0a954da6fbd0c355ac0b7f07f86c91a2a97849140fea49603",
+    "zh:0e3a6c8e16f17f19010accd0844187d524580d9fdb0731f675ffcf4afba03d16",
+    "zh:45f2c594b6f2f34ea663704cc72048b212fe7d16fb4cfd959365fa997228a776",
+    "zh:77ea3e5a0446784d77114b5e851c970a3dde1e08fa6de38210b8385d7605d451",
+    "zh:8a154388f3708e3df5a69122a23bdfaf760a523788a5081976b3d5616f7d30ae",
+    "zh:992843002f2db5a11e626b3fc23dc0c87ad3729b3b3cff08e32ffb3df97edbde",
+    "zh:ad906f4cebd3ec5e43d5cd6dc8f4c5c9cc3b33d2243c89c5fc18f97f7277b51d",
+    "zh:c979425ddb256511137ecd093e23283234da0154b7fa8b21c2687182d9aea8b2",
+  ]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%dc1.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%dc1.tf
new file mode 100644
index 0000000..7173bfc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%dc1.tf
@@ -0,0 +1,7 @@
+module "dc1" {
+  source = "../environments/terraform/eks"
+
+  datacenter_name = "layer7-observability-dc1"
+  region = "us-west-2"
+  output_dir = "./"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%versions.tf
new file mode 100644
index 0000000..4c81d2e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-consul-kuberneteslayer7-observability%versions.tf
@@ -0,0 +1,8 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "3.23.0"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsmain.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsmain.tf
new file mode 100644
index 0000000..e3c5d2f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsmain.tf
@@ -0,0 +1,129 @@
+terraform {
+  required_providers {
+    aws = {
+      source = "hashicorp/aws"
+    }
+  }
+}
+
+provider "aws" {
+  region  = var.aws_region
+}
+
+data "aws_availability_zones" "available" {
+  state = "available"
+}
+
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "2.64.0"
+
+  name = "vpc-${var.resource_tags["project"]}-${var.resource_tags["environment"]}"
+  cidr = var.vpc_cidr_block
+
+  azs             = data.aws_availability_zones.available.names
+  private_subnets = slice(var.private_subnet_cidr_blocks, 0, var.private_subnet_count)
+  public_subnets  = slice(var.public_subnet_cidr_blocks, 0, var.public_subnet_count)
+
+  enable_nat_gateway = true
+  enable_vpn_gateway = var.enable_vpn_gateway
+
+  tags = var.resource_tags
+}
+
+module "app_security_group" {
+  source  = "terraform-aws-modules/security-group/aws//modules/web"
+  version = "3.17.0"
+
+  name        = "web-sg-${var.resource_tags["project"]}-${var.resource_tags["environment"]}"
+  description = "Security group for web-servers with HTTP ports open within VPC"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress_cidr_blocks = module.vpc.public_subnets_cidr_blocks
+
+  tags = var.resource_tags
+}
+
+module "lb_security_group" {
+  source  = "terraform-aws-modules/security-group/aws//modules/web"
+  version = "3.17.0"
+
+  name        = "lb-sg-${var.resource_tags["project"]}-${var.resource_tags["environment"]}"
+  description = "Security group for load balancer with HTTP ports open within VPC"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress_cidr_blocks = ["0.0.0.0/0"]
+
+  tags = var.resource_tags
+}
+
+resource "random_string" "lb_id" {
+  length  = 3
+  special = false
+}
+
+module "elb_http" {
+  source  = "terraform-aws-modules/elb/aws"
+  version = "2.4.0"
+
+  # Ensure load balancer name is unique
+  name = "lb-${random_string.lb_id.result}-${var.resource_tags["project"]}-${var.resource_tags["environment"]}"
+
+  internal = false
+
+  security_groups = [module.lb_security_group.this_security_group_id]
+  subnets         = module.vpc.public_subnets
+
+  number_of_instances = length(aws_instance.app)
+  instances           = aws_instance.app.*.id
+
+  listener = [{
+    instance_port     = "80"
+    instance_protocol = "HTTP"
+    lb_port           = "80"
+    lb_protocol       = "HTTP"
+  }]
+
+  health_check = {
+    target              = "HTTP:80/index.html"
+    interval            = 10
+    healthy_threshold   = 3
+    unhealthy_threshold = 10
+    timeout             = 5
+  }
+
+  tags = var.resource_tags
+}
+
+data "aws_ami" "amazon_linux" {
+  most_recent = true
+  owners      = ["amazon"]
+
+  filter {
+    name   = "name"
+    values = ["amzn2-ami-hvm-*-x86_64-gp2"]
+  }
+}
+
+resource "aws_instance" "app" {
+  count = var.instance_count
+
+  ami           = data.aws_ami.amazon_linux.id
+  instance_type = var.ec2_instance_type
+
+  subnet_id              = module.vpc.private_subnets[count.index % length(module.vpc.private_subnets)]
+  vpc_security_group_ids = [module.app_security_group.this_security_group_id]
+
+  user_data = <<-EOF
+    #!/bin/bash
+    sudo yum update -y
+    sudo yum install -y amazon-linux-extras
+    sudo amazon-linux-extras enable httpd_modules
+    sudo yum install httpd -y
+    sudo systemctl enable httpd
+    sudo systemctl start httpd
+    echo "<html><body><div>Hello, world!</div></body></html>" > /var/www/html/index.html
+    EOF
+
+  tags = var.resource_tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsoutputs.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsoutputs.tf
new file mode 100644
index 0000000..385c487
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsoutputs.tf
@@ -0,0 +1,4 @@
+output "public_dns_name" {
+  description = "Public DNS names of the load balancer for this project"
+  value       = module.elb_http.this_elb_dns_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsvariables.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsvariables.tf
new file mode 100644
index 0000000..9b56c0c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-localsvariables.tf
@@ -0,0 +1,82 @@
+# variable "declarations
+
+variable "aws_region" {
+  description = "AWS region"
+  type        = string
+  default     = "us-east-2"
+}
+
+variable "vpc_cidr_block" {
+  description = "CIDR block for VPC"
+  type        = string
+  default     = "10.0.0.0/16"
+}
+
+variable "instance_count" {
+  description = "Number of instances to provision."
+  type        = number
+  default     = 2
+}
+
+variable "enable_vpn_gateway" {
+  description = "Enable a VPN gateway in your VPC."
+  type        = bool
+  default     = false
+}
+
+variable "public_subnet_count" {
+  description = "Number of public subnets."
+  type        = number
+  default     = 2
+}
+
+variable "private_subnet_count" {
+  description = "Number of private subnets."
+  type        = number
+  default     = 2
+}
+
+variable "public_subnet_cidr_blocks" {
+  description = "Available cidr blocks for public subnets"
+  type        = list(string)
+  default     = [
+    "10.0.1.0/24",
+    "10.0.2.0/24",
+    "10.0.3.0/24",
+    "10.0.4.0/24",
+    "10.0.5.0/24",
+    "10.0.6.0/24",
+    "10.0.7.0/24",
+    "10.0.8.0/24",
+  ]
+}
+
+variable "private_subnet_cidr_blocks" {
+  description = "Available cidr blocks for private subnets"
+  type        = list(string)
+  default     = [
+    "10.0.101.0/24",
+    "10.0.102.0/24",
+    "10.0.103.0/24",
+    "10.0.104.0/24",
+    "10.0.105.0/24",
+    "10.0.106.0/24",
+    "10.0.107.0/24",
+    "10.0.108.0/24",
+  ]
+}
+
+variable "resource_tags" {
+  description = "Tags to set for all resources"
+  type        = map(string)
+  default     = {
+    project     = "my-project",
+    environment = "dev"
+  }
+}
+
+variable "ec2_instance_type" {
+  description = "AWS EC2 instance type."
+  type        = string
+  default     = "t2.micro"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refresh.terraform.lock.hcl b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refresh.terraform.lock.hcl
new file mode 100644
index 0000000..506f062
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refresh.terraform.lock.hcl
@@ -0,0 +1,21 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.42.0"
+  constraints = "~> 3.27"
+  hashes = [
+    "h1:C6/yDp6BhuDFx0qdkBuJj/OWUJpAoraHTJaU6ac38Rw=",
+    "zh:126c856a6eedddd8571f161a826a407ba5655a37a6241393560a96b8c4beca1a",
+    "zh:1a4868e6ac734b5fc2e79a4a889d176286b66664aad709435aa6acee5871d5b0",
+    "zh:40fed7637ab8ddeb93bef06aded35d970f0628025b97459ae805463e8aa0a58a",
+    "zh:68def3c0a5a1aac1db6372c51daef858b707f03052626d3427ac24cba6f2014d",
+    "zh:6db7ec9c8d1803a0b6f40a664aa892e0f8894562de83061fa7ac1bc51ff5e7e5",
+    "zh:7058abaad595930b3f97dc04e45c112b2dbf37d098372a849081f7081da2fb52",
+    "zh:8c25adb15a19da301c478aa1f4a4d8647cabdf8e5dae8331d4490f80ea718c26",
+    "zh:8e129b847401e39fcbc54817726dab877f36b7f00ff5ed76f7b43470abe99ff9",
+    "zh:d268bb267a2d6b39df7ddee8efa7c1ef7a15cf335dfa5f2e64c9dae9b623a1b8",
+    "zh:d6eeb3614a0ab50f8e9ab5666ae5754ea668ce327310e5b21b7f04a18d7611a8",
+    "zh:f5d3c58055dff6e38562b75d3edc908cb2f1e45c6914f6b00f4773359ce49324",
+  ]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refreshmain.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refreshmain.tf
new file mode 100644
index 0000000..cfa5429
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refreshmain.tf
@@ -0,0 +1,35 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.27"
+    }
+  }
+
+  required_version = "~> 0.15.4"
+}
+
+provider "aws" {
+  profile = "default"
+  region  = var.region
+}
+
+data "aws_ami" "amazon_linux" {
+  owners      = ["amazon"]
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["amzn2-ami-hvm-*-x86_64-ebs"]
+  }
+}
+
+resource "aws_instance" "server" {
+  ami           = data.aws_ami.amazon_linux.id
+  instance_type = "t2.micro"
+
+  tags = {
+    Name = "Learn Refresh"
+  }
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refreshvariables.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refreshvariables.tf
new file mode 100644
index 0000000..8036423
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-terraform-refreshvariables.tf
@@ -0,0 +1,4 @@
+variable "region" {
+  description = "AWS region in which to provision infrastructure"
+  default     = "us-east-2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%learn-tfc-state-apimain.tf b/example/real_world_stuff/hashicorp/hashicorp%learn-tfc-state-apimain.tf
new file mode 100644
index 0000000..b006a69
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%learn-tfc-state-apimain.tf
@@ -0,0 +1,71 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 3.24.1"
+    }
+  }
+  required_version = "~> 0.15"
+  backend "remote" {
+    hostname     = "app.terraform.io"
+    organization = "<YOUR-ORGANIZATION-NAME>"
+
+    workspaces {
+      name = "state-versioning"
+    }
+  }
+}
+
+
+provider "aws" {
+  region = var.region
+}
+
+data "aws_ami" "ubuntu" {
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  owners = ["099720109477"] # Canonical
+}
+
+
+resource "aws_instance" "example" {
+  ami                    = data.aws_ami.ubuntu.id
+  instance_type          = "t2.micro"
+  vpc_security_group_ids = [aws_security_group.sg_web.id]
+  user_data              = <<-EOF
+              #!/bin/bash
+              echo "Hello, World" > index.html
+              nohup busybox httpd -f -p 8080 &
+              EOF
+  tags = {
+    Name = "terraform-learn-state-versioning"
+  }
+}
+
+resource "aws_security_group" "sg_web" {
+  name        = "sg_web"
+  description = "allow 8080"
+}
+
+resource "aws_security_group_rule" "sg_web" {
+  type              = "ingress"
+  to_port           = "8080"
+  from_port         = "8080"
+  protocol          = "tcp"
+  cidr_blocks       = ["0.0.0.0/0"]
+  security_group_id = aws_security_group.sg_web.id
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%.terraform.lock.hcl b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%.terraform.lock.hcl
new file mode 100644
index 0000000..618c212
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%.terraform.lock.hcl
@@ -0,0 +1,128 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "3.39.0"
+  constraints = "~> 3.39"
+  hashes = [
+    "h1:fjlp3Pd3QsTLghNm7TUh/KnEMM2D3tLb7jsDLs8oWUE=",
+    "zh:2014b397dd93fa55f2f2d1338c19e5b2b77b025a76a6b1fceea0b8696e984b9c",
+    "zh:23d59c68ab50148a0f5c911a801734e9934a1fccd41118a8efb5194135cbd360",
+    "zh:412eab41d4934ca9c47083faa128e4cd585c3bb44ad718e40d67091aebc02f4e",
+    "zh:4b75e0a259b56d97e66b7d69f3f25bd4cc7be2440c0fe35529f46de7d40a49d3",
+    "zh:694a32519dcca5bd8605d06481d16883d55160d97c1f4039deb13c6ca8de8427",
+    "zh:6a0bcef43c2d9a97aeaaac3c5d1d6728dc2464a51a014f118c691c79029d0903",
+    "zh:6d78fc7c663247ca2a80f276008dcdafece4cac75e2639bbce188c08b796040a",
+    "zh:78f846a505d7b64b67feed1527d4d2b40130dadaf8e3112113685e148f49b156",
+    "zh:881bc969432d3ef6ec70f5a762c3415e037904338579b0a360c6818b74d26e59",
+    "zh:96c1ca80c1d693a3eef80489adb45c076ee8e6878e461d6c29b05388d4b95f48",
+    "zh:9be5fa342272586fc6e319e20f21c0c5c801b05dcf7d59e473ad0882c9ecfa70",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/http" {
+  version = "2.1.0"
+  hashes = [
+    "h1:GYoVrTtiSAE3AlP1fad3fFmHoPaXAPhm/DJyMcVCwZA=",
+    "zh:03d82dc0887d755b8406697b1d27506bc9f86f93b3e9b4d26e0679d96b802826",
+    "zh:0704d02926393ddc0cfad0b87c3d51eafeeae5f9e27cc71e193c141079244a22",
+    "zh:095ea350ea94973e043dad2394f10bca4a4bf41be775ba59d19961d39141d150",
+    "zh:0b71ac44e87d6964ace82979fc3cbb09eb876ed8f954449481bcaa969ba29cb7",
+    "zh:0e255a170db598bd1142c396cefc59712ad6d4e1b0e08a840356a371e7b73bc4",
+    "zh:67c8091cfad226218c472c04881edf236db8f2dc149dc5ada878a1cd3c1de171",
+    "zh:75df05e25d14b5101d4bc6624ac4a01bb17af0263c9e8a740e739f8938b86ee3",
+    "zh:b4e36b2c4f33fdc44bf55fa1c9bb6864b5b77822f444bd56f0be7e9476674d0e",
+    "zh:b9b36b01d2ec4771838743517bc5f24ea27976634987c6d5529ac4223e44365d",
+    "zh:ca264a916e42e221fddb98d640148b12e42116046454b39ede99a77fc52f59f4",
+    "zh:fe373b2fb2cc94777a91ecd7ac5372e699748c455f44f6ea27e494de9e5e6f92",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/local" {
+  version = "2.1.0"
+  hashes = [
+    "h1:KfieWtVyGWwplSoLIB5usKAUnrIkDQBkWaR5TI+4WYg=",
+    "zh:0f1ec65101fa35050978d483d6e8916664b7556800348456ff3d09454ac1eae2",
+    "zh:36e42ac19f5d68467aacf07e6adcf83c7486f2e5b5f4339e9671f68525fc87ab",
+    "zh:6db9db2a1819e77b1642ec3b5e95042b202aee8151a0256d289f2e141bf3ceb3",
+    "zh:719dfd97bb9ddce99f7d741260b8ece2682b363735c764cac83303f02386075a",
+    "zh:7598bb86e0378fd97eaa04638c1a4c75f960f62f69d3662e6d80ffa5a89847fe",
+    "zh:ad0a188b52517fec9eca393f1e2c9daea362b33ae2eb38a857b6b09949a727c1",
+    "zh:c46846c8df66a13fee6eff7dc5d528a7f868ae0dcf92d79deaac73cc297ed20c",
+    "zh:dc1a20a2eec12095d04bf6da5321f535351a594a636912361db20eb2a707ccc4",
+    "zh:e57ab4771a9d999401f6badd8b018558357d3cbdf3d33cc0c4f83e818ca8e94b",
+    "zh:ebdcde208072b4b0f8d305ebf2bfdc62c926e0717599dcf8ec2fd8c5845031c3",
+    "zh:ef34c52b68933bedd0868a13ccfd59ff1c820f299760b3c02e008dc95e2ece91",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/nomad" {
+  version     = "1.4.14"
+  constraints = "~> 1.4.14"
+  hashes = [
+    "h1:l64RWHz6dek0+kx0ZVvbCjAjqQfOVq7QnSmvLqLEYOI=",
+    "zh:036cc8e0c1c6c2f91573149910eca29a7107b3415536eabeb2581861525da64a",
+    "zh:1414e2deb87af66a47e44ab5472b4606294cf511722beae2c0a3680041d66635",
+    "zh:623184a22b347fa5b696d3fbee35f5bff9ed30fbc8b067715c52b6300d655789",
+    "zh:7a026a57148a7c2e8a08a83c3641898911a7d9998c38eb2c6ca634107ccf49f9",
+    "zh:87d34e879284453b2ac825f8bb9c88c85027d404b1b9fa445ec97b519dfa59cb",
+    "zh:90591119307c2f3dd15a6a78964731689444fb1ce3d393eddf83e05a2f187b80",
+    "zh:b2cbf5e4d4f2d500804e7f1968b3fd2cebd4b164ccf76d7cb2c99ed1eb23957e",
+    "zh:d5f19ab3d0d172be8af098bb62b47667c632af736c60d1acab0fc1c31dbbcb99",
+    "zh:ee5f7f75a642eed607d4824b5888e4aacfc4dd435d54d9523d8f8165695d52a1",
+    "zh:f6300309339221a5f0863bec32d96b38a8e545c5a87b43c5bb8c65d2ff0492ed",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/null" {
+  version = "3.1.0"
+  hashes = [
+    "h1:xhbHC6in3nQryvTQBWKxebi3inG5OCgHgc4fRxL0ymc=",
+    "zh:02a1675fd8de126a00460942aaae242e65ca3380b5bb192e8773ef3da9073fd2",
+    "zh:53e30545ff8926a8e30ad30648991ca8b93b6fa496272cd23b26763c8ee84515",
+    "zh:5f9200bf708913621d0f6514179d89700e9aa3097c77dac730e8ba6e5901d521",
+    "zh:9ebf4d9704faba06b3ec7242c773c0fbfe12d62db7d00356d4f55385fc69bfb2",
+    "zh:a6576c81adc70326e4e1c999c04ad9ca37113a6e925aefab4765e5a5198efa7e",
+    "zh:a8a42d13346347aff6c63a37cda9b2c6aa5cc384a55b2fe6d6adfa390e609c53",
+    "zh:c797744d08a5307d50210e0454f91ca4d1c7621c68740441cf4579390452321d",
+    "zh:cecb6a304046df34c11229f20a80b24b1603960b794d68361a67c5efe58e62b8",
+    "zh:e1371aa1e502000d9974cfaff5be4cfa02f47b17400005a16f14d2ef30dc2a70",
+    "zh:fc39cc1fe71234a0b0369d5c5c7f876c71b956d23d7d6f518289737a001ba69b",
+    "zh:fea4227271ebf7d9e2b61b89ce2328c7262acd9fd190e1fd6d15a591abfa848e",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/random" {
+  version = "3.1.0"
+  hashes = [
+    "h1:rKYu5ZUbXwrLG1w81k7H3nce/Ys6yAxXhWcbtk36HjY=",
+    "zh:2bbb3339f0643b5daa07480ef4397bd23a79963cc364cdfbb4e86354cb7725bc",
+    "zh:3cd456047805bf639fbf2c761b1848880ea703a054f76db51852008b11008626",
+    "zh:4f251b0eda5bb5e3dc26ea4400dba200018213654b69b4a5f96abee815b4f5ff",
+    "zh:7011332745ea061e517fe1319bd6c75054a314155cb2c1199a5b01fe1889a7e2",
+    "zh:738ed82858317ccc246691c8b85995bc125ac3b4143043219bd0437adc56c992",
+    "zh:7dbe52fac7bb21227acd7529b487511c91f4107db9cc4414f50d04ffc3cab427",
+    "zh:a3a9251fb15f93e4cfc1789800fc2d7414bbc18944ad4c5c98f466e6477c42bc",
+    "zh:a543ec1a3a8c20635cf374110bd2f87c07374cf2c50617eee2c669b3ceeeaa9f",
+    "zh:d9ab41d556a48bd7059f0810cf020500635bfc696c9fc3adab5ea8915c1d886b",
+    "zh:d9e13427a7d011dbd654e591b0337e6074eef8c3b9bb11b2e39eaaf257044fd7",
+    "zh:f7605bd1437752114baf601bdf6931debe6dc6bfe3006eb7e9bb9080931dca8a",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/template" {
+  version = "2.2.0"
+  hashes = [
+    "h1:0wlehNaxBX7GJQnPfQwTNvvAf38Jm0Nv7ssKGMaG6Og=",
+    "zh:01702196f0a0492ec07917db7aaa595843d8f171dc195f4c988d2ffca2a06386",
+    "zh:09aae3da826ba3d7df69efeb25d146a1de0d03e951d35019a0f80e4f58c89b53",
+    "zh:09ba83c0625b6fe0a954da6fbd0c355ac0b7f07f86c91a2a97849140fea49603",
+    "zh:0e3a6c8e16f17f19010accd0844187d524580d9fdb0731f675ffcf4afba03d16",
+    "zh:45f2c594b6f2f34ea663704cc72048b212fe7d16fb4cfd959365fa997228a776",
+    "zh:77ea3e5a0446784d77114b5e851c970a3dde1e08fa6de38210b8385d7605d451",
+    "zh:8a154388f3708e3df5a69122a23bdfaf760a523788a5081976b3d5616f7d30ae",
+    "zh:992843002f2db5a11e626b3fc23dc0c87ad3729b3b3cff08e32ffb3df97edbde",
+    "zh:ad906f4cebd3ec5e43d5cd6dc8f4c5c9cc3b33d2243c89c5fc18f97f7277b51d",
+    "zh:c979425ddb256511137ecd093e23283234da0154b7fa8b21c2687182d9aea8b2",
+  ]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%infrastructure.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%infrastructure.tf
new file mode 100644
index 0000000..4efbc41
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%infrastructure.tf
@@ -0,0 +1,97 @@
+locals {
+  client_load_balancers = [
+    {
+      name = "platform"
+      listeners = [
+        {
+          port     = 8081
+          protocol = "TCP"
+        },
+        {
+          port     = 9090
+          protocol = "TCP"
+        },
+        {
+          port     = 3000
+          protocol = "TCP"
+        },
+      ],
+    },
+  ]
+
+  allowed_ips = length(var.allowed_ips) == 0 ? ["${chomp(data.http.my_ip.body)}/32"] : formatlist("%s/32", var.allowed_ips)
+}
+
+data "http" "my_ip" {
+  url = "https://icanhazip.com/"
+}
+
+resource "random_pet" "stack_name" {}
+
+module "image" {
+  source     = "../../../infrastructure/aws/terraform/modules/aws-nomad-image"
+  depends_on = [null_resource.preflight_check]
+
+  ami_id      = var.ami_id
+  region      = var.region
+  vpc_id      = module.network.vpc_id
+  subnet_id   = module.network.subnet_id
+  stack_name  = random_pet.stack_name.id
+  owner_name  = var.owner_name
+  owner_email = var.owner_email
+}
+
+module "servers" {
+  source     = "../../../infrastructure/aws/terraform/modules/aws-nomad-servers"
+  depends_on = [null_resource.preflight_check]
+
+  stack_name         = random_pet.stack_name.id
+  ami_id             = module.image.id
+  key_name           = var.key_name
+  owner_name         = var.owner_name
+  owner_email        = var.owner_email
+  subnet_ids         = [module.network.subnet_id]
+  security_group_ids = [module.network.agents_sg_id]
+}
+
+module "clients_platform" {
+  source     = "../../../infrastructure/aws/terraform/modules/aws-nomad-clients"
+  depends_on = [null_resource.preflight_check]
+
+  nomad_datacenter    = "platform"
+  stack_name          = random_pet.stack_name.id
+  ami_id              = module.image.id
+  key_name            = var.key_name
+  owner_name          = var.owner_name
+  owner_email         = var.owner_email
+  security_group_ids  = [module.network.agents_sg_id, module.network.clients_sg_ids[0]]
+  subnet_ids          = [module.network.subnet_id]
+  load_balancer_names = [module.network.clients_lb_names[0]]
+}
+
+module "clients_batch" {
+  source     = "../../../infrastructure/aws/terraform/modules/aws-nomad-clients"
+  depends_on = [null_resource.preflight_check]
+
+  nomad_datacenter   = "batch_workers"
+  desired_capacity   = 0
+  stack_name         = random_pet.stack_name.id
+  ami_id             = module.image.id
+  key_name           = var.key_name
+  owner_name         = var.owner_name
+  owner_email        = var.owner_email
+  security_group_ids = [module.network.agents_sg_id]
+  subnet_ids         = [module.network.subnet_id]
+}
+
+module "network" {
+  source     = "../../../infrastructure/aws/terraform/modules/aws-nomad-network"
+  depends_on = [null_resource.preflight_check]
+
+  stack_name            = random_pet.stack_name.id
+  owner_name            = var.owner_name
+  owner_email           = var.owner_email
+  server_ids            = module.servers.ids
+  allowed_ips           = local.allowed_ips
+  client_load_balancers = local.client_load_balancers
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%main.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%main.tf
new file mode 100644
index 0000000..696e0a7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%main.tf
@@ -0,0 +1,55 @@
+terraform {
+  required_version = ">= 0.13"
+
+  required_providers {
+    aws = {
+      version = "~> 3.39"
+    }
+
+    nomad = {
+      version = "~> 1.4.14"
+    }
+  }
+}
+
+# Providers.
+provider "http" {}
+
+provider "aws" {
+  region = var.region
+}
+
+provider "nomad" {
+  address = module.network.nomad_addr
+}
+
+# Pre-flight check.
+resource "null_resource" "preflight_check" {
+  provisioner "local-exec" {
+    command = <<EOF
+aws --version && \
+packer --version && \
+nomad --version
+EOF
+  }
+}
+
+# Nomad jobs.
+module "nomad_jobs" {
+  source     = "../shared/terraform/modules/nomad-jobs"
+  depends_on = [null_resource.preflight_check]
+
+  nomad_addr = module.network.nomad_addr
+}
+
+resource "nomad_job" "autoscaler" {
+  depends_on = [null_resource.preflight_check, module.nomad_jobs]
+
+  jobspec = templatefile(
+    "${path.module}/jobs/autoscaler.nomad.tpl",
+    {
+      aws_region   = var.region,
+      aws_asg_name = module.clients_batch.asg_name,
+    }
+  )
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%variables.tf
new file mode 100644
index 0000000..2eccf27
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%demos%on-demand-batch%aws%variables.tf
@@ -0,0 +1,21 @@
+# Required variables.
+variable "key_name" {}
+variable "owner_name" {}
+variable "owner_email" {}
+variable "region" {}
+
+# Optional variables.
+variable "ami_id" {
+  default     = ""
+  description = "AMI ID to use to provision instances. If left empty, a new image will be created."
+}
+
+variable "allowed_ips" {
+  default     = ""
+  description = "List of IP addresses allowed to access the infrastructure. If left empty, only the IP of the machine running Terraform will be allowed."
+}
+
+variable "vpc_cidr" {
+  default     = "172.31.0.0/16"
+  description = ""
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%packer%aws-packer.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%packer%aws-packer.pkr.hcl
new file mode 100644
index 0000000..93d6f9e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%packer%aws-packer.pkr.hcl
@@ -0,0 +1,59 @@
+variable "owner_email" {}
+variable "owner_name" {}
+variable "region" {}
+variable "vpc_id" {}
+variable "subnet_id" {}
+variable "stack_name" {}
+
+source "amazon-ebs" "hashistack" {
+  ami_name      = var.stack_name
+  region        = var.region
+  subnet_id     = var.subnet_id
+  vpc_id        = var.vpc_id
+  instance_type = "t2.medium"
+
+  associate_public_ip_address = true
+
+  source_ami_filter {
+    filters = {
+      virtualization-type = "hvm"
+      name                = "ubuntu/images/*ubuntu-focal-20.04-amd64-server-*"
+      root-device-type    = "ebs"
+    }
+    owners      = ["099720109477"] # Canonical's owner ID
+    most_recent = true
+  }
+
+  communicator = "ssh"
+  ssh_username = "ubuntu"
+
+  tags = {
+    OS           = "Ubuntu"
+    Release      = "20.04"
+    Architecture = "amd64"
+    OwnerName    = var.owner_name
+    OwnerEmail   = var.owner_email
+  }
+}
+
+build {
+  sources = [
+    "source.amazon-ebs.hashistack"
+  ]
+
+  provisioner "shell" {
+    inline = [
+      "sudo mkdir -p /ops",
+      "sudo chmod 777 /ops"
+    ]
+  }
+
+  provisioner "file" {
+    source      = "../../shared/packer/"
+    destination = "/ops"
+  }
+
+  provisioner "shell" {
+    script = "../../shared/packer/scripts/setup.sh"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%asg.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%asg.tf
new file mode 100644
index 0000000..adbfc4a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%asg.tf
@@ -0,0 +1,62 @@
+locals {
+  name_prefix    = format("%s-%s", var.stack_name, var.nomad_node_class)
+  load_balancers = var.load_balancer_names != [""] ? var.load_balancer_names : [""]
+}
+
+resource "aws_launch_template" "clients" {
+  name_prefix            = local.name_prefix
+  image_id               = var.ami_id
+  instance_type          = var.instance_type
+  key_name               = var.key_name
+  vpc_security_group_ids = var.security_group_ids
+  user_data              = base64encode(data.template_file.user_data.rendered)
+
+  iam_instance_profile {
+    name = aws_iam_instance_profile.clients.name
+  }
+
+  tag_specifications {
+    resource_type = "instance"
+    tags = {
+      Name           = "${local.name_prefix}-client"
+      ConsulAutoJoin = "auto-join"
+      OwnerName      = var.owner_name
+      OwnerEmail     = var.owner_email
+    }
+  }
+
+  block_device_mappings {
+    device_name = "/dev/xvdd"
+    ebs {
+      volume_type           = "gp2"
+      volume_size           = "50"
+      delete_on_termination = "true"
+    }
+  }
+}
+
+resource "aws_autoscaling_group" "clients" {
+  name_prefix         = local.name_prefix
+  desired_capacity    = var.desired_capacity
+  min_size            = var.min_size
+  max_size            = var.max_size
+  load_balancers      = local.load_balancers
+  vpc_zone_identifier = var.subnet_ids
+
+  launch_template {
+    id      = aws_launch_template.clients.id
+    version = "$Latest"
+  }
+
+  tag {
+    key                 = "OwnerName"
+    value               = var.owner_name
+    propagate_at_launch = true
+  }
+
+  tag {
+    key                 = "OwnerEmail"
+    value               = var.owner_email
+    propagate_at_launch = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%variables.tf
new file mode 100644
index 0000000..2cab856
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-clients%variables.tf
@@ -0,0 +1,97 @@
+# Required variables.
+variable "ami_id" {
+  type        = string
+  description = "The AMI ID to use when launching new instances."
+}
+
+variable "key_name" {
+  type        = string
+  description = "The SSH key name used to access instances."
+}
+
+variable "owner_name" {
+  type        = string
+  description = "The name used to identify the owner of the resources provisioned by this module. It will be stored in a tag called OwnerName."
+}
+
+variable "owner_email" {
+  type        = string
+  description = "The email used to contact the owner of the resources provisioned by this module. It will be stored in a tag called OwnerEmail."
+}
+
+variable "security_group_ids" {
+  type        = list(string)
+  description = "List of security group IDs to associate the instances."
+}
+
+variable "subnet_ids" {
+  type        = list(string)
+  description = "List of subnet IDs to use to launch instances."
+}
+
+# Optional variables.
+variable "consul_binary_url" {
+  type        = string
+  default     = ""
+  description = "The URL that points to the Consul binary to be used."
+}
+
+variable "desired_capacity" {
+  type        = number
+  default     = 1
+  description = "Number of initial instances to launch."
+}
+
+variable "instance_type" {
+  type        = string
+  default     = "t2.small"
+  description = "EC2 instance type to use for new instances."
+}
+
+variable "load_balancer_names" {
+  type        = list(string)
+  default     = []
+  description = "List of ELB names useb by the ASG."
+}
+
+variable "max_size" {
+  type        = number
+  default     = 5
+  description = "Maximum number of instances allowed."
+}
+
+variable "min_size" {
+  type        = number
+  default     = 0
+  description = "Minimum number of instances allowed."
+}
+
+variable "nomad_datacenter" {
+  type        = string
+  default     = "dc1"
+  description = "Nomad datacenter where the clients will be registered."
+}
+
+variable "nomad_node_class" {
+  type        = string
+  default     = "hashistack"
+  description = "Node class associated with the Nomad clients provisioned by this module."
+}
+
+variable "nomad_binary_url" {
+  type        = string
+  default     = ""
+  description = "The URL that points to the Nomad binary to be used."
+}
+
+variable "retry_join" {
+  type        = string
+  default     = "provider=aws tag_key=ConsulAutoJoin tag_value=auto-join"
+  description = "Cloud auto-join expression by the Consul and Nomad agents."
+}
+
+variable "stack_name" {
+  type        = string
+  default     = "hashistack"
+  description = "Name used to identify resources provisioned by this module."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%image.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%image.tf
new file mode 100644
index 0000000..c7d6c40
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%image.tf
@@ -0,0 +1,65 @@
+locals {
+  build_image = var.ami_id == ""
+  image       = local.build_image ? data.aws_ami.built[0] : data.aws_ami.existing[0]
+  image_id    = local.image.id
+  snapshot_id = [for b in local.image.block_device_mappings : lookup(b.ebs, "snapshot_id", "")][0]
+}
+
+resource "null_resource" "packer_build" {
+  count = local.build_image ? 1 : 0
+
+  provisioner "local-exec" {
+    command = <<EOF
+cd ${path.module}/../../../packer && \
+  packer build -force \
+    -var 'owner_name=${var.owner_name}' \
+    -var 'owner_email=${var.owner_email}' \
+    -var 'region=${var.region}' \
+    -var 'stack_name=${var.stack_name}' \
+    -var 'vpc_id=${var.vpc_id}' \
+    -var 'subnet_id=${var.subnet_id}' \
+    aws-packer.pkr.hcl
+EOF
+  }
+}
+
+resource "local_file" "cleanup" {
+  count = local.build_image ? 1 : 0
+
+  content         = "${local.image_id},${local.snapshot_id},${var.region}"
+  filename        = ".cleanup-${local.image_id}"
+  file_permission = "0644"
+
+  provisioner "local-exec" {
+    when    = destroy
+    command = <<EOF
+aws ec2 deregister-image --image-id ${split(",", self.content)[0]} --region ${split(",", self.content)[2]} &&
+aws ec2 delete-snapshot --snapshot-id ${split(",", self.content)[1]} --region ${split(",", self.content)[2]}
+EOF
+  }
+}
+
+data "aws_ami" "built" {
+  depends_on = [null_resource.packer_build]
+  count      = local.build_image ? 1 : 0
+
+  owners      = ["self"]
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = [var.stack_name]
+  }
+}
+
+data "aws_ami" "existing" {
+  count = local.build_image ? 0 : 1
+
+  owners      = ["self"]
+  most_recent = true
+
+  filter {
+    name   = "image-id"
+    values = [var.ami_id]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%variables.tf
new file mode 100644
index 0000000..a66de38
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-image%variables.tf
@@ -0,0 +1,38 @@
+# Required variables.
+variable "region" {
+  type        = string
+  description = "The AWS region where the image will be created."
+}
+
+variable "subnet_id" {
+  type        = string
+  description = "The subnet ID to use when launching the build instance."
+}
+
+variable "owner_name" {
+  type        = string
+  description = "The name used to identify the owner of the resources provisioned by this module. It will be stored in a tag called OwnerName."
+}
+
+variable "owner_email" {
+  type        = string
+  description = "The email used to contact the owner of the resources provisioned by this module. It will be stored in a tag called OwnerEmail."
+}
+
+variable "vpc_id" {
+  type        = string
+  description = "The VPC to use when launching the build instance."
+}
+
+# Optional variables.
+variable "ami_id" {
+  type        = string
+  default     = ""
+  description = "The ID of an existing AMI."
+}
+
+variable "stack_name" {
+  type        = string
+  default     = "hashistack"
+  description = "Name used to identify resources provisioned by this module."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%elb.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%elb.tf
new file mode 100644
index 0000000..d7160b2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%elb.tf
@@ -0,0 +1,62 @@
+resource "aws_elb" "servers" {
+  name            = substr("${var.stack_name}-servers", 0, 32)
+  instances       = var.server_ids
+  subnets         = aws_subnet.public.*.id
+  security_groups = [aws_security_group.servers_lb.id]
+  internal        = false
+  idle_timeout    = 360
+
+  # Nomad
+  listener {
+    instance_port     = 4646
+    instance_protocol = "http"
+    lb_port           = 4646
+    lb_protocol       = "http"
+  }
+
+  # Consul
+  listener {
+    instance_port     = 8500
+    instance_protocol = "http"
+    lb_port           = 8500
+    lb_protocol       = "http"
+  }
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
+
+resource "aws_elb" "clients" {
+  count = length(var.client_load_balancers)
+
+  name            = substr("${var.stack_name}-${var.client_load_balancers[count.index].name}", 0, 32)
+  subnets         = aws_subnet.public.*.id
+  security_groups = [aws_security_group.clients[count.index].id]
+  internal        = false
+
+  dynamic "listener" {
+    for_each = var.client_load_balancers[count.index].listeners
+
+    content {
+      instance_port     = listener.value["port"]
+      instance_protocol = listener.value["protocol"]
+      lb_port           = listener.value["port"]
+      lb_protocol       = listener.value["protocol"]
+    }
+  }
+
+  health_check {
+    healthy_threshold   = 3
+    unhealthy_threshold = 2
+    interval            = 30
+    timeout             = 3
+    target              = "${var.client_load_balancers[count.index].listeners[0]["protocol"]}:${var.client_load_balancers[count.index].listeners[0]["port"]}"
+  }
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%outputs.tf
new file mode 100644
index 0000000..9a9bd2e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%outputs.tf
@@ -0,0 +1,56 @@
+# Security groups.
+output "agents_sg_id" {
+  value = aws_security_group.agents.id
+}
+
+output "clients_sg_ids" {
+  value = aws_security_group.clients.*.id
+}
+
+# Servers ELB outputs.
+output "servers_lb_id" {
+  value = aws_elb.servers.id
+}
+
+output "servers_lb_dns" {
+  value = aws_elb.servers.dns_name
+}
+
+output "servers_lb_zone_id" {
+  value = aws_elb.servers.zone_id
+}
+
+# Clients ELBs outputs.
+output "clients_lb_ids" {
+  value = aws_elb.clients.*.id
+}
+
+output "clients_lb_dns_names" {
+  value = aws_elb.clients.*.dns_name
+}
+
+output "clients_lb_names" {
+  value = aws_elb.clients.*.name
+}
+
+output "clients_lb_zone_ids" {
+  value = aws_elb.clients.*.zone_id
+}
+
+# Nomad and Consul address.
+output "consul_addr" {
+  value = "http://${aws_elb.servers.dns_name}:8500"
+}
+
+output "nomad_addr" {
+  value = "http://${aws_elb.servers.dns_name}:4646"
+}
+
+# VPC and subnets
+output "vpc_id" {
+  value = aws_vpc.main.id
+}
+
+output "subnet_id" {
+  value = aws_subnet.public.id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%sg.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%sg.tf
new file mode 100644
index 0000000..387b8d7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%sg.tf
@@ -0,0 +1,154 @@
+resource "aws_security_group" "agents" {
+  name_prefix = "${var.stack_name}-agents"
+  vpc_id      = aws_vpc.main.id
+
+  # SSH
+  ingress {
+    from_port   = 22
+    to_port     = 22
+    protocol    = "tcp"
+    cidr_blocks = var.allowed_ips
+  }
+
+  # Nomad
+  ingress {
+    from_port   = 4646
+    to_port     = 4646
+    protocol    = "tcp"
+    cidr_blocks = var.allowed_ips
+    security_groups = [
+      aws_security_group.servers_lb.id,
+    ]
+  }
+
+  # Consul
+  ingress {
+    from_port   = 8500
+    to_port     = 8500
+    protocol    = "tcp"
+    cidr_blocks = var.allowed_ips
+    security_groups = [
+      aws_security_group.servers_lb.id,
+    ]
+  }
+
+  ingress {
+    from_port = 0
+    to_port   = 0
+    protocol  = "-1"
+    self      = true
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
+
+resource "aws_security_group" "clients" {
+  count = length(var.client_load_balancers)
+
+  name_prefix = "${var.stack_name}-${var.client_load_balancers[count.index].name}-clients"
+  vpc_id      = aws_vpc.main.id
+
+  dynamic "ingress" {
+    for_each = var.client_load_balancers[count.index].listeners
+    content {
+      protocol    = ingress.value["protocol"]
+      from_port   = ingress.value["port"]
+      to_port     = ingress.value["port"]
+      cidr_blocks = var.allowed_ips
+      security_groups = [
+        aws_security_group.clients_lb[count.index].id,
+      ]
+    }
+  }
+
+  ingress {
+    from_port = 0
+    to_port   = 0
+    protocol  = "-1"
+    self      = true
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
+
+resource "aws_security_group" "servers_lb" {
+  name_prefix = "${var.stack_name}-servers-lb"
+  vpc_id      = aws_vpc.main.id
+
+  # Nomad
+  ingress {
+    from_port   = 4646
+    to_port     = 4646
+    protocol    = "tcp"
+    cidr_blocks = var.allowed_ips
+  }
+
+  # Consul
+  ingress {
+    from_port   = 8500
+    to_port     = 8500
+    protocol    = "tcp"
+    cidr_blocks = var.allowed_ips
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
+
+resource "aws_security_group" "clients_lb" {
+  count = length(var.client_load_balancers)
+
+  name_prefix = "${var.stack_name}-${var.client_load_balancers[count.index].name}-clients-lb"
+  vpc_id      = aws_vpc.main.id
+
+  dynamic "ingress" {
+    for_each = var.client_load_balancers[count.index].listeners
+    content {
+      protocol    = ingress.value["protocol"]
+      from_port   = ingress.value["port"]
+      to_port     = ingress.value["port"]
+      cidr_blocks = var.allowed_ips
+    }
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%variables.tf
new file mode 100644
index 0000000..4a72ffe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%variables.tf
@@ -0,0 +1,45 @@
+# Required variables.
+variable "allowed_ips" {
+  type        = list(string)
+  description = "List of IP addresses that are allowed to connect to the cluster."
+}
+
+variable "owner_name" {
+  type        = string
+  description = "The name used to identify the owner of the resources provisioned by this module. It will be stored in a tag called OwnerName."
+}
+
+variable "owner_email" {
+  type        = string
+  description = "The email used to contact the owner of the resources provisioned by this module. It will be stored in a tag called OwnerEmail."
+}
+
+variable "server_ids" {
+  type        = list(string)
+  description = "List of EC2 instances running Nomad servers."
+}
+
+# Optional variables.
+variable "client_load_balancers" {
+  type = list(object({
+    name = string
+    listeners = list(object({
+      port     = number
+      protocol = string
+    }))
+  }))
+  default     = []
+  description = "List of a list of services. Each top-level list represents a load balancer, with multiple ports to expose within."
+}
+
+variable "stack_name" {
+  type        = string
+  default     = "hashistack"
+  description = "Name used to identify resources provisioned by this module."
+}
+
+variable "vpc_cidr" {
+  type        = string
+  default     = "172.31.0.0/16"
+  description = "The CIDR to use when defining the VPC"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%vpc.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%vpc.tf
new file mode 100644
index 0000000..51c6424
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-network%vpc.tf
@@ -0,0 +1,43 @@
+resource "aws_vpc" "main" {
+  cidr_block           = var.vpc_cidr
+  enable_dns_hostnames = true
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
+
+resource "aws_internet_gateway" "main" {
+  vpc_id = aws_vpc.main.id
+}
+
+resource "aws_subnet" "public" {
+  vpc_id                  = aws_vpc.main.id
+  cidr_block              = aws_vpc.main.cidr_block
+  map_public_ip_on_launch = true
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
+
+resource "aws_route_table" "public" {
+  vpc_id = aws_vpc.main.id
+
+  route {
+    cidr_block = "0.0.0.0/0"
+    gateway_id = aws_internet_gateway.main.id
+  }
+
+  tags = {
+    OwnerName  = var.owner_name
+    OwnerEmail = var.owner_email
+  }
+}
+
+resource "aws_route_table_association" "public" {
+  subnet_id      = aws_subnet.public.id
+  route_table_id = aws_route_table.public.id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%instances.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%instances.tf
new file mode 100644
index 0000000..fd424fd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%instances.tf
@@ -0,0 +1,24 @@
+resource "aws_instance" "servers" {
+  count = var.instance_count
+
+  ami                    = var.ami_id
+  instance_type          = var.instance_type
+  key_name               = var.key_name
+  subnet_id              = element(var.subnet_ids, count.index)
+  vpc_security_group_ids = var.security_group_ids
+  iam_instance_profile   = aws_iam_instance_profile.servers.name
+  user_data              = data.template_file.user_data.rendered
+
+  root_block_device {
+    volume_type           = "gp2"
+    volume_size           = "16"
+    delete_on_termination = "true"
+  }
+
+  tags = {
+    Name           = "${var.stack_name}-server-${count.index + 1}"
+    ConsulAutoJoin = "auto-join"
+    OwnerName      = var.owner_name
+    OwnerEmail     = var.owner_email
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%variables.tf
new file mode 100644
index 0000000..402b6c3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomad-autoscaler-demoscloud%infrastructure%aws%terraform%modules%aws-nomad-servers%variables.tf
@@ -0,0 +1,67 @@
+# Required variables.
+variable "ami_id" {
+  type        = string
+  description = "The AMI ID to use when launching new instances."
+}
+
+variable "key_name" {
+  type        = string
+  description = "The SSH key name used to access instances."
+}
+
+variable "owner_name" {
+  type        = string
+  description = "The name used to identify the owner of the resources provisioned by this module. It will be stored in a tag called OwnerName."
+}
+
+variable "owner_email" {
+  type        = string
+  description = "The email used to contact the owner of the resources provisioned by this module. It will be stored in a tag called OwnerEmail."
+}
+
+variable "security_group_ids" {
+  type        = list(string)
+  description = "List of security group IDs to associate the instances."
+}
+
+variable "subnet_ids" {
+  type        = list(string)
+  description = "Subnets to use to provision instances."
+}
+
+# Optional variables.
+variable "consul_binary_url" {
+  type        = string
+  default     = ""
+  description = "The URL that points to the Consul binary to be used."
+}
+
+variable "instance_count" {
+  type        = number
+  default     = 1
+  description = "The number of server instances to provision."
+}
+
+variable "instance_type" {
+  type        = string
+  default     = "t3.small"
+  description = "EC2 instance type to use for new instances."
+}
+
+variable "nomad_binary_url" {
+  type        = string
+  default     = ""
+  description = "The URL that points to the Nomad binary to be used."
+}
+
+variable "retry_join" {
+  type        = string
+  default     = "provider=aws tag_key=ConsulAutoJoin tag_value=auto-join"
+  description = "Cloud auto-join expression by the Consul and Nomad agents."
+}
+
+variable "stack_name" {
+  type        = string
+  default     = "hashistack"
+  description = "Name used to identify resources provisioned by this module."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%.terraform.lock.hcl b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%.terraform.lock.hcl
new file mode 100644
index 0000000..10b8e28
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%.terraform.lock.hcl
@@ -0,0 +1,152 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version = "3.37.0"
+  hashes = [
+    "h1:RvLGIfRZfbzY58wUja9B6CvGdgVVINy7zLVBdLqIelA=",
+    "h1:Tf6Os+utUxE8rEr/emCXLFEDdCb0Y6rsN4Ee84+aDCQ=",
+    "zh:064c9b21bcd69be7a8631ccb3eccb8690c6a9955051145920803ef6ce6fc06bf",
+    "zh:277dd05750187a41282cf6e066e882eac0dd0056e3211d125f94bf62c19c4b8b",
+    "zh:47050211f72dcbf3d99c82147abd2eefbb7238efb94d5188979f60de66c8a3df",
+    "zh:4a4e0d070399a050847545721dae925c192a2d6354802fdfbea73769077acca5",
+    "zh:4cbc46f79239c85d69389f9e91ca9a9ebf6a8a937cfada026c5a037fd09130fb",
+    "zh:6548dcb1ac4a388ed46034a5317fa74b3b0b0f68eec03393f2d4d09342683f95",
+    "zh:75b4a82596aa525d95b0b2847fe648368c6e2b054059c4dc4dcdee01d374b592",
+    "zh:75cf5cc674b61c82300667a82650f56722618b119ab0526b47b5ecbb4bbf49d0",
+    "zh:93c896682359039960c38eb5a4b29d1cc06422f228db0572b90330427e2a21ec",
+    "zh:c7256663aedbc9de121316b6d0623551386a476fc12b8eb77e88532ce15de354",
+    "zh:e995c32f49c23b5938200386e08b2a3fd69cf5102b5299366c0608bbeac68429",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/external" {
+  version = "2.1.0"
+  hashes = [
+    "h1:LTl5CGW8wiIEe16AC4MtXN/95xWWNDbap70zJsBTk0w=",
+    "h1:wbtDfLeawmv6xVT1W0w0fctRCb4ABlaD3JTxwb1jXag=",
+    "zh:0d83ffb72fbd08986378204a7373d8c43b127049096eaf2765bfdd6b00ad9853",
+    "zh:7577d6edc67b1e8c2cf62fe6501192df1231d74125d90e51d570d586d95269c5",
+    "zh:9c669ded5d5affa4b2544952c4b6588dfed55260147d24ced02dca3a2829f328",
+    "zh:a404d46f2831f90633947ab5d57e19dbfe35b3704104ba6ec80bcf50b058acfd",
+    "zh:ae1caea1c936d459ceadf287bb5c5bd67b5e2a7819df6f5c4114b7305df7f822",
+    "zh:afb4f805477694a4b9dde86b268d2c0821711c8aab1c6088f5f992228c4c06fb",
+    "zh:b993b4a1de8a462643e78f4786789e44ce5064b332fee1cb0d6250ed085561b8",
+    "zh:c84b2c13fa3ea2c0aa7291243006d560ce480a5591294b9001ce3742fc9c5791",
+    "zh:c8966f69b7eccccb771704fd5335923692eccc9e0e90cb95d14538fe2e92a3b8",
+    "zh:d5fe68850d449b811e633a300b114d0617df6d450305e8251643b4d143dc855b",
+    "zh:ddebfd1e674ba336df09b1f27bbaa0e036c25b7a7087dc8081443f6e5954028b",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/http" {
+  version = "2.1.0"
+  hashes = [
+    "h1:GYoVrTtiSAE3AlP1fad3fFmHoPaXAPhm/DJyMcVCwZA=",
+    "zh:03d82dc0887d755b8406697b1d27506bc9f86f93b3e9b4d26e0679d96b802826",
+    "zh:0704d02926393ddc0cfad0b87c3d51eafeeae5f9e27cc71e193c141079244a22",
+    "zh:095ea350ea94973e043dad2394f10bca4a4bf41be775ba59d19961d39141d150",
+    "zh:0b71ac44e87d6964ace82979fc3cbb09eb876ed8f954449481bcaa969ba29cb7",
+    "zh:0e255a170db598bd1142c396cefc59712ad6d4e1b0e08a840356a371e7b73bc4",
+    "zh:67c8091cfad226218c472c04881edf236db8f2dc149dc5ada878a1cd3c1de171",
+    "zh:75df05e25d14b5101d4bc6624ac4a01bb17af0263c9e8a740e739f8938b86ee3",
+    "zh:b4e36b2c4f33fdc44bf55fa1c9bb6864b5b77822f444bd56f0be7e9476674d0e",
+    "zh:b9b36b01d2ec4771838743517bc5f24ea27976634987c6d5529ac4223e44365d",
+    "zh:ca264a916e42e221fddb98d640148b12e42116046454b39ede99a77fc52f59f4",
+    "zh:fe373b2fb2cc94777a91ecd7ac5372e699748c455f44f6ea27e494de9e5e6f92",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/local" {
+  version = "2.1.0"
+  hashes = [
+    "h1:EYZdckuGU3n6APs97nS2LxZm3dDtGqyM4qaIvsmac8o=",
+    "h1:KfieWtVyGWwplSoLIB5usKAUnrIkDQBkWaR5TI+4WYg=",
+    "zh:0f1ec65101fa35050978d483d6e8916664b7556800348456ff3d09454ac1eae2",
+    "zh:36e42ac19f5d68467aacf07e6adcf83c7486f2e5b5f4339e9671f68525fc87ab",
+    "zh:6db9db2a1819e77b1642ec3b5e95042b202aee8151a0256d289f2e141bf3ceb3",
+    "zh:719dfd97bb9ddce99f7d741260b8ece2682b363735c764cac83303f02386075a",
+    "zh:7598bb86e0378fd97eaa04638c1a4c75f960f62f69d3662e6d80ffa5a89847fe",
+    "zh:ad0a188b52517fec9eca393f1e2c9daea362b33ae2eb38a857b6b09949a727c1",
+    "zh:c46846c8df66a13fee6eff7dc5d528a7f868ae0dcf92d79deaac73cc297ed20c",
+    "zh:dc1a20a2eec12095d04bf6da5321f535351a594a636912361db20eb2a707ccc4",
+    "zh:e57ab4771a9d999401f6badd8b018558357d3cbdf3d33cc0c4f83e818ca8e94b",
+    "zh:ebdcde208072b4b0f8d305ebf2bfdc62c926e0717599dcf8ec2fd8c5845031c3",
+    "zh:ef34c52b68933bedd0868a13ccfd59ff1c820f299760b3c02e008dc95e2ece91",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/null" {
+  version = "3.1.0"
+  hashes = [
+    "h1:vpC6bgUQoJ0znqIKVFevOdq+YQw42bRq0u+H3nto8nA=",
+    "h1:xhbHC6in3nQryvTQBWKxebi3inG5OCgHgc4fRxL0ymc=",
+    "zh:02a1675fd8de126a00460942aaae242e65ca3380b5bb192e8773ef3da9073fd2",
+    "zh:53e30545ff8926a8e30ad30648991ca8b93b6fa496272cd23b26763c8ee84515",
+    "zh:5f9200bf708913621d0f6514179d89700e9aa3097c77dac730e8ba6e5901d521",
+    "zh:9ebf4d9704faba06b3ec7242c773c0fbfe12d62db7d00356d4f55385fc69bfb2",
+    "zh:a6576c81adc70326e4e1c999c04ad9ca37113a6e925aefab4765e5a5198efa7e",
+    "zh:a8a42d13346347aff6c63a37cda9b2c6aa5cc384a55b2fe6d6adfa390e609c53",
+    "zh:c797744d08a5307d50210e0454f91ca4d1c7621c68740441cf4579390452321d",
+    "zh:cecb6a304046df34c11229f20a80b24b1603960b794d68361a67c5efe58e62b8",
+    "zh:e1371aa1e502000d9974cfaff5be4cfa02f47b17400005a16f14d2ef30dc2a70",
+    "zh:fc39cc1fe71234a0b0369d5c5c7f876c71b956d23d7d6f518289737a001ba69b",
+    "zh:fea4227271ebf7d9e2b61b89ce2328c7262acd9fd190e1fd6d15a591abfa848e",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/random" {
+  version = "3.1.0"
+  hashes = [
+    "h1:BZMEPucF+pbu9gsPk0G0BHx7YP04+tKdq2MrRDF1EDM=",
+    "h1:rKYu5ZUbXwrLG1w81k7H3nce/Ys6yAxXhWcbtk36HjY=",
+    "zh:2bbb3339f0643b5daa07480ef4397bd23a79963cc364cdfbb4e86354cb7725bc",
+    "zh:3cd456047805bf639fbf2c761b1848880ea703a054f76db51852008b11008626",
+    "zh:4f251b0eda5bb5e3dc26ea4400dba200018213654b69b4a5f96abee815b4f5ff",
+    "zh:7011332745ea061e517fe1319bd6c75054a314155cb2c1199a5b01fe1889a7e2",
+    "zh:738ed82858317ccc246691c8b85995bc125ac3b4143043219bd0437adc56c992",
+    "zh:7dbe52fac7bb21227acd7529b487511c91f4107db9cc4414f50d04ffc3cab427",
+    "zh:a3a9251fb15f93e4cfc1789800fc2d7414bbc18944ad4c5c98f466e6477c42bc",
+    "zh:a543ec1a3a8c20635cf374110bd2f87c07374cf2c50617eee2c669b3ceeeaa9f",
+    "zh:d9ab41d556a48bd7059f0810cf020500635bfc696c9fc3adab5ea8915c1d886b",
+    "zh:d9e13427a7d011dbd654e591b0337e6074eef8c3b9bb11b2e39eaaf257044fd7",
+    "zh:f7605bd1437752114baf601bdf6931debe6dc6bfe3006eb7e9bb9080931dca8a",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/template" {
+  version = "2.2.0"
+  hashes = [
+    "h1:0wlehNaxBX7GJQnPfQwTNvvAf38Jm0Nv7ssKGMaG6Og=",
+    "h1:94qn780bi1qjrbC3uQtjJh3Wkfwd5+tTtJHOb7KTg9w=",
+    "zh:01702196f0a0492ec07917db7aaa595843d8f171dc195f4c988d2ffca2a06386",
+    "zh:09aae3da826ba3d7df69efeb25d146a1de0d03e951d35019a0f80e4f58c89b53",
+    "zh:09ba83c0625b6fe0a954da6fbd0c355ac0b7f07f86c91a2a97849140fea49603",
+    "zh:0e3a6c8e16f17f19010accd0844187d524580d9fdb0731f675ffcf4afba03d16",
+    "zh:45f2c594b6f2f34ea663704cc72048b212fe7d16fb4cfd959365fa997228a776",
+    "zh:77ea3e5a0446784d77114b5e851c970a3dde1e08fa6de38210b8385d7605d451",
+    "zh:8a154388f3708e3df5a69122a23bdfaf760a523788a5081976b3d5616f7d30ae",
+    "zh:992843002f2db5a11e626b3fc23dc0c87ad3729b3b3cff08e32ffb3df97edbde",
+    "zh:ad906f4cebd3ec5e43d5cd6dc8f4c5c9cc3b33d2243c89c5fc18f97f7277b51d",
+    "zh:c979425ddb256511137ecd093e23283234da0154b7fa8b21c2687182d9aea8b2",
+  ]
+}
+
+provider "registry.terraform.io/hashicorp/tls" {
+  version = "3.1.0"
+  hashes = [
+    "h1:XTU9f6sGMZHOT8r/+LWCz2BZOPH127FBTPjMMEAAu1U=",
+    "h1:fUJX8Zxx38e2kBln+zWr1Tl41X+OuiE++REjrEyiOM4=",
+    "zh:3d46616b41fea215566f4a957b6d3a1aa43f1f75c26776d72a98bdba79439db6",
+    "zh:623a203817a6dafa86f1b4141b645159e07ec418c82fe40acd4d2a27543cbaa2",
+    "zh:668217e78b210a6572e7b0ecb4134a6781cc4d738f4f5d09eb756085b082592e",
+    "zh:95354df03710691773c8f50a32e31fca25f124b7f3d6078265fdf3c4e1384dca",
+    "zh:9f97ab190380430d57392303e3f36f4f7835c74ea83276baa98d6b9a997c3698",
+    "zh:a16f0bab665f8d933e95ca055b9c8d5707f1a0dd8c8ecca6c13091f40dc1e99d",
+    "zh:be274d5008c24dc0d6540c19e22dbb31ee6bfdd0b2cddd4d97f3cd8a8d657841",
+    "zh:d5faa9dce0a5fc9d26b2463cea5be35f8586ab75030e7fa4d4920cd73ee26989",
+    "zh:e9b672210b7fb410780e7b429975adcc76dd557738ecc7c890ea18942eb321a5",
+    "zh:eb1f8368573d2370605d6dbf60f9aaa5b64e55741d96b5fb026dbfe91de67c0d",
+    "zh:fc1e12b713837b85daf6c3bb703d7795eaf1c5177aebae1afcf811dd7009f4b0",
+  ]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%network.tf b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%network.tf
new file mode 100644
index 0000000..611a74a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%network.tf
@@ -0,0 +1,87 @@
+data "aws_vpc" "default" {
+  default = true
+}
+
+data "aws_subnet" "default" {
+  availability_zone = var.availability_zone
+  vpc_id            = data.aws_vpc.default.id
+}
+
+data "http" "my_public_ipv4" {
+  url = "https://api.ipify.org"
+}
+
+locals {
+  ingress_cidr = var.restrict_ingress_cidrblock ? "${chomp(data.http.my_public_ipv4.body)}/32" : "0.0.0.0/0"
+}
+
+resource "aws_security_group" "primary" {
+  name   = local.random_name
+  vpc_id = data.aws_vpc.default.id
+
+  ingress {
+    from_port   = 22
+    to_port     = 22
+    protocol    = "tcp"
+    cidr_blocks = [local.ingress_cidr]
+  }
+
+  # Nomad
+  ingress {
+    from_port   = 4646
+    to_port     = 4646
+    protocol    = "tcp"
+    cidr_blocks = [local.ingress_cidr]
+  }
+
+  # Fabio
+  ingress {
+    from_port   = 9998
+    to_port     = 9999
+    protocol    = "tcp"
+    cidr_blocks = [local.ingress_cidr]
+  }
+
+  # Consul
+  ingress {
+    from_port   = 8500
+    to_port     = 8500
+    protocol    = "tcp"
+    cidr_blocks = [local.ingress_cidr]
+  }
+
+  # Vault
+  ingress {
+    from_port   = 8200
+    to_port     = 8200
+    protocol    = "tcp"
+    cidr_blocks = [local.ingress_cidr]
+  }
+
+  ingress {
+    from_port = 0
+    to_port   = 0
+    protocol  = "-1"
+    self      = true
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_security_group" "nfs" {
+  count  = var.volumes ? 1 : 0
+  name   = "${local.random_name}-nfs"
+  vpc_id = data.aws_vpc.default.id
+
+  ingress {
+    from_port       = 2049
+    to_port         = 2049
+    protocol        = "tcp"
+    security_groups = [aws_security_group.primary.id]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%nomad.tf b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%nomad.tf
new file mode 100644
index 0000000..dd472ab
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%nomad.tf
@@ -0,0 +1,115 @@
+module "nomad_server" {
+
+  source     = "./provision-nomad"
+  depends_on = [aws_instance.server]
+  count      = var.server_count
+
+  platform = "linux_amd64"
+  profile  = var.profile
+  role     = "server"
+  index    = count.index
+
+  # The specific version of Nomad deployed will default to whichever one of
+  # nomad_sha, nomad_version, or nomad_local_binary is set, but if you want to
+  # deploy multiple versions you can use the nomad_*_server variables to
+  # provide a list of builds
+  nomad_version = count.index < length(var.nomad_version_server) ? var.nomad_version_server[count.index] : var.nomad_version
+
+  nomad_sha = count.index < length(var.nomad_sha_server) ? var.nomad_sha_server[count.index] : var.nomad_sha
+
+  nomad_local_binary = count.index < length(var.nomad_local_binary_server) ? var.nomad_local_binary_server[count.index] : var.nomad_local_binary
+
+  nomad_url = count.index < length(var.nomad_url_server) ? var.nomad_url_server[count.index] : var.nomad_url
+
+  nomad_enterprise = var.nomad_enterprise
+  nomad_license    = var.nomad_license
+  nomad_acls       = var.nomad_acls
+  cluster_name     = local.random_name
+
+  connection = {
+    type        = "ssh"
+    user        = "ubuntu"
+    host        = aws_instance.server[count.index].public_ip
+    port        = 22
+    private_key = "${path.root}/keys/${local.random_name}.pem"
+  }
+}
+
+# TODO: split out the different Linux targets (ubuntu, centos, arm, etc.) when
+# they're available
+module "nomad_client_ubuntu_bionic_amd64" {
+
+  source     = "./provision-nomad"
+  depends_on = [aws_instance.client_ubuntu_bionic_amd64]
+  count      = var.client_count_ubuntu_bionic_amd64
+
+  platform = "linux_amd64"
+  profile  = var.profile
+  role     = "client-linux"
+  index    = count.index
+
+  # The specific version of Nomad deployed will default to whichever one of
+  # nomad_sha, nomad_version, or nomad_local_binary is set, but if you want to
+  # deploy multiple versions you can use the nomad_*_client_linux
+  # variables to provide a list of builds
+  nomad_version = count.index < length(var.nomad_version_client_ubuntu_bionic_amd64) ? var.nomad_version_client_ubuntu_bionic_amd64[count.index] : var.nomad_version
+
+  nomad_sha = count.index < length(var.nomad_sha_client_ubuntu_bionic_amd64) ? var.nomad_sha_client_ubuntu_bionic_amd64[count.index] : var.nomad_sha
+
+  nomad_local_binary = count.index < length(var.nomad_local_binary_client_ubuntu_bionic_amd64) ? var.nomad_local_binary_client_ubuntu_bionic_amd64[count.index] : var.nomad_local_binary
+
+  nomad_url = count.index < length(var.nomad_url_client_ubuntu_bionic_amd64) ? var.nomad_url_client_ubuntu_bionic_amd64[count.index] : var.nomad_url
+
+  nomad_enterprise = var.nomad_enterprise
+  nomad_acls       = false
+  cluster_name     = local.random_name
+
+  connection = {
+    type        = "ssh"
+    user        = "ubuntu"
+    host        = aws_instance.client_ubuntu_bionic_amd64[count.index].public_ip
+    port        = 22
+    private_key = "${path.root}/keys/${local.random_name}.pem"
+  }
+}
+
+# TODO: split out the different Windows targets (2016, 2019) when they're
+# available
+module "nomad_client_windows_2016_amd64" {
+
+  source     = "./provision-nomad"
+  depends_on = [aws_instance.client_windows_2016_amd64]
+  count      = var.client_count_windows_2016_amd64
+
+  platform = "windows_amd64"
+  profile  = var.profile
+  role     = "client-windows"
+  index    = count.index
+
+  # The specific version of Nomad deployed will default to whichever one of
+  # nomad_sha, nomad_version, or nomad_local_binary is set, but if you want to
+  # deploy multiple versions you can use the nomad_*_client_windows
+  # variables to provide a list of builds
+  nomad_version = count.index < length(var.nomad_version_client_windows_2016_amd64) ? var.nomad_version_client_windows_2016_amd64[count.index] : var.nomad_version
+
+  nomad_sha = count.index < length(var.nomad_sha_client_windows_2016_amd64) ? var.nomad_sha_client_windows_2016_amd64[count.index] : var.nomad_sha
+
+  # if nomad_local_binary is in use, you must pass a nomad_local_binary_client_windows_2016_amd64!
+  nomad_local_binary = count.index < length(var.nomad_local_binary_client_windows_2016_amd64) ? var.nomad_local_binary_client_windows_2016_amd64[count.index] : ""
+
+  # if nomad_url is in use, you must pass a nomad_url_client_windows_2016_amd64!
+  nomad_url = count.index < length(var.nomad_url_client_windows_2016_amd64) ? var.nomad_url_client_windows_2016_amd64[count.index] : ""
+
+  nomad_enterprise = var.nomad_enterprise
+  nomad_acls       = false
+  cluster_name     = local.random_name
+
+
+  connection = {
+    type        = "ssh"
+    user        = "Administrator"
+    host        = aws_instance.client_windows_2016_amd64[count.index].public_ip
+    port        = 22
+    private_key = "${path.root}/keys/${local.random_name}.pem"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%outputs.tf
new file mode 100644
index 0000000..f46bbad
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%outputs.tf
@@ -0,0 +1,52 @@
+output "servers" {
+  value = aws_instance.server.*.public_ip
+}
+
+output "linux_clients" {
+  value = aws_instance.client_ubuntu_bionic_amd64.*.public_ip
+}
+
+output "windows_clients" {
+  value = aws_instance.client_windows_2016_amd64.*.public_ip
+}
+
+output "message" {
+  value = <<EOM
+Your cluster has been provisioned! To prepare your environment, run:
+
+   $(terraform output --raw environment)
+
+Then you can run tests from the e2e directory with:
+
+   go test -v .
+
+ssh into servers with:
+
+%{for ip in aws_instance.server.*.public_ip~}
+   ssh -i keys/${local.random_name}.pem ubuntu@${ip}
+%{endfor~}
+
+ssh into clients with:
+
+%{for ip in aws_instance.client_ubuntu_bionic_amd64.*.public_ip~}
+    ssh -i keys/${local.random_name}.pem ubuntu@${ip}
+%{endfor~}
+%{for ip in aws_instance.client_windows_2016_amd64.*.public_ip~}
+    ssh -i keys/${local.random_name}.pem Administrator@${ip}
+%{endfor~}
+
+EOM
+}
+
+output "environment" {
+  description = "get connection config by running: $(terraform output environment)"
+  value       = <<EOM
+export NOMAD_ADDR=http://${aws_instance.server[0].public_ip}:4646
+export CONSUL_HTTP_ADDR=http://${aws_instance.server[0].public_ip}:8500
+export VAULT_ADDR=http://${aws_instance.server[0].public_ip}:8200
+export NOMAD_E2E=1
+export NOMAD_TOKEN=${data.local_file.nomad_token.content}
+export VAULT_TOKEN=${data.local_file.vault_token.content}
+
+EOM
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%provision-nomad%main.tf b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%provision-nomad%main.tf
new file mode 100644
index 0000000..2a63db8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%provision-nomad%main.tf
@@ -0,0 +1,142 @@
+locals {
+  provision_script = var.platform == "windows_amd64" ? "powershell C:/opt/provision.ps1" : "/opt/provision.sh"
+
+  config_path = dirname("${path.root}/config/")
+
+  config_files = compact(setunion(
+    fileset(local.config_path, "**"),
+  ))
+
+  update_config_command = var.platform == "windows_amd64" ? "powershell -Command \"& { if (test-path /opt/config) { Remove-Item -Path /opt/config -Force -Recurse }; cp -r C:/tmp/config /opt/config }\"" : "sudo rm -rf /opt/config; sudo mv /tmp/config /opt/config"
+
+  # abstract-away platform-specific parameter expectations
+  _arg = var.platform == "windows_amd64" ? "-" : "--"
+}
+
+resource "null_resource" "provision_nomad" {
+
+  depends_on = [
+    null_resource.upload_configs,
+    null_resource.upload_nomad_binary
+  ]
+
+  # no need to re-run if nothing changes
+  triggers = {
+    script = data.template_file.provision_script.rendered
+  }
+
+
+  connection {
+    type            = "ssh"
+    user            = var.connection.user
+    host            = var.connection.host
+    port            = var.connection.port
+    private_key     = file(var.connection.private_key)
+    target_platform = var.platform == "windows_amd64" ? "windows" : "unix"
+    timeout         = "15m"
+  }
+
+  provisioner "remote-exec" {
+    inline = [data.template_file.provision_script.rendered]
+  }
+
+}
+
+data "template_file" "provision_script" {
+  template = "${local.provision_script}${data.template_file.arg_nomad_url.rendered}${data.template_file.arg_nomad_sha.rendered}${data.template_file.arg_nomad_version.rendered}${data.template_file.arg_nomad_binary.rendered}${data.template_file.arg_nomad_enterprise.rendered}${data.template_file.arg_nomad_license.rendered}${data.template_file.arg_nomad_acls.rendered}${data.template_file.arg_profile.rendered}${data.template_file.arg_role.rendered}${data.template_file.arg_index.rendered}${data.template_file.autojoin_tag.rendered}"
+}
+
+data "template_file" "arg_nomad_sha" {
+  template = var.nomad_sha != "" && var.nomad_local_binary == "" && var.nomad_url == "" ? " ${local._arg}nomad_sha ${var.nomad_sha}" : ""
+}
+
+data "template_file" "arg_nomad_version" {
+  template = var.nomad_version != "" && var.nomad_sha == "" && var.nomad_url == "" && var.nomad_local_binary == "" ? " ${local._arg}nomad_version ${var.nomad_version}" : ""
+}
+
+data "template_file" "arg_nomad_url" {
+  template = var.nomad_url != "" && var.nomad_local_binary == "" ? " ${local._arg}nomad_url ${var.nomad_url}" : ""
+}
+
+data "template_file" "arg_nomad_binary" {
+  template = var.nomad_local_binary != "" ? " ${local._arg}nomad_binary /tmp/nomad" : ""
+}
+
+data "template_file" "arg_nomad_enterprise" {
+  template = var.nomad_enterprise ? " ${local._arg}enterprise" : ""
+}
+
+data "template_file" "arg_nomad_license" {
+  template = var.nomad_license != "" ? " ${local._arg}nomad_license ${var.nomad_license}" : ""
+}
+
+data "template_file" "arg_nomad_acls" {
+  template = var.nomad_acls ? " ${local._arg}nomad_acls" : ""
+}
+
+data "template_file" "arg_profile" {
+  template = var.profile != "" ? " ${local._arg}config_profile ${var.profile}" : ""
+}
+
+data "template_file" "arg_role" {
+  template = var.role != "" ? " ${local._arg}role ${var.role}" : ""
+}
+
+data "template_file" "arg_index" {
+  template = var.index != "" ? " ${local._arg}index ${var.index}" : ""
+}
+
+data "template_file" "autojoin_tag" {
+  template = var.cluster_name != "" ? " ${local._arg}autojoin auto-join-${var.cluster_name}" : ""
+}
+
+resource "null_resource" "upload_nomad_binary" {
+
+  count      = var.nomad_local_binary != "" ? 1 : 0
+  depends_on = [null_resource.upload_configs]
+  triggers = {
+    nomad_binary_sha = filemd5(var.nomad_local_binary)
+  }
+
+  connection {
+    type            = "ssh"
+    user            = var.connection.user
+    host            = var.connection.host
+    port            = var.connection.port
+    private_key     = file(var.connection.private_key)
+    target_platform = var.platform == "windows_amd64" ? "windows" : "unix"
+    timeout         = "15m"
+  }
+
+  provisioner "file" {
+    source      = var.nomad_local_binary
+    destination = "/tmp/nomad"
+  }
+}
+
+resource "null_resource" "upload_configs" {
+
+  triggers = {
+    hashes = join(",", [for file in local.config_files : filemd5("${local.config_path}/${file}")])
+  }
+
+  connection {
+    type            = "ssh"
+    user            = var.connection.user
+    host            = var.connection.host
+    port            = var.connection.port
+    private_key     = file(var.connection.private_key)
+    target_platform = var.platform == "windows_amd64" ? "windows" : "unix"
+    timeout         = "15m"
+  }
+
+  provisioner "file" {
+    source      = local.config_path
+    destination = "/tmp/"
+  }
+
+  provisioner "remote-exec" {
+    inline = [local.update_config_command]
+  }
+
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%provision-nomad%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%provision-nomad%variables.tf
new file mode 100644
index 0000000..bc045b6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%provision-nomad%variables.tf
@@ -0,0 +1,82 @@
+variable "platform" {
+  type        = string
+  description = "Platform ID (ex. \"linux_amd64\" or \"windows_amd64\")"
+  default     = "linux_amd64"
+}
+
+variable "nomad_version" {
+  type        = string
+  description = "Nomad release version (ex. \"0.10.3\")"
+  default     = ""
+}
+
+variable "nomad_sha" {
+  type        = string
+  description = "Nomad build full SHA (ex. \"fef22bdbfa094b5d076710354275e360867261aa\")"
+  default     = ""
+}
+
+variable "nomad_local_binary" {
+  type        = string
+  description = "Path to local Nomad build (ex. \"/home/me/bin/nomad\")"
+  default     = ""
+}
+
+variable "nomad_url" {
+  type        = string
+  description = "URL to Nomad binary (ex. \"https://circleci.com/.../linux_amd64.zip\")"
+  default     = ""
+}
+
+variable "nomad_enterprise" {
+  type        = bool
+  description = "If nomad_sha is used, deploy Nomad Enterprise"
+  default     = false
+}
+
+variable "nomad_license" {
+  type        = string
+  description = "The enterprise license to use. overrides Nomad temporary license"
+  default     = ""
+}
+
+variable "nomad_acls" {
+  type        = bool
+  description = "Bootstrap ACLs"
+  default     = false
+}
+
+variable "profile" {
+  type        = string
+  description = "The name of the configuration profile (ex. 'full-cluster')"
+  default     = ""
+}
+
+variable "role" {
+  type        = string
+  description = "The role in the configuration profile for this instance (ex. 'client-linux')"
+  default     = ""
+}
+
+variable "index" {
+  type        = string # note that we have string here so we can default to ""
+  description = "The count of this instance for indexed configurations"
+  default     = ""
+}
+
+variable "cluster_name" {
+  type        = string
+  description = "The random name assigned to the cluster"
+  default     = ""
+}
+
+variable "connection" {
+  type = object({
+    type        = string
+    user        = string
+    host        = string
+    port        = number
+    private_key = string
+  })
+  description = "ssh connection information for remote target"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%terraform.tfvars b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%terraform.tfvars
new file mode 100644
index 0000000..7559dc2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%terraform.tfvars
@@ -0,0 +1,22 @@
+region                           = "us-east-1"
+instance_type                    = "t3.medium"
+server_count                     = "3"
+client_count_ubuntu_bionic_amd64 = "2"
+client_count_windows_2016_amd64  = "0"
+profile                          = "dev-cluster"
+nomad_acls                       = false
+nomad_enterprise                 = false
+vault                            = true
+volumes                          = false
+
+nomad_version      = "1.0.1" # default version for deployment
+nomad_local_binary = ""      # overrides nomad_version if set
+nomad_url          = ""      # overrides nomad_version if set
+
+# Example overrides:
+# nomad_local_binary = "../../pkg/linux_amd64/nomad"
+# nomad_local_binary_client_windows_2016_amd64 = ["../../pkg/windows_amd64/nomad.exe"]
+
+# The nightly E2E runner will set a nomad_sha flag; this should not be used
+# outside of the nightly E2E runner and will usually fail because the build
+# will not be available
diff --git a/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%variables.tf
new file mode 100644
index 0000000..6461c70
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%nomade2e%terraform%variables.tf
@@ -0,0 +1,192 @@
+variable "name" {
+  description = "Used to name various infrastructure components"
+  default     = "nomad-e2e"
+}
+
+variable "region" {
+  description = "The AWS region to deploy to."
+  default     = "us-east-1"
+}
+
+variable "availability_zone" {
+  description = "The AWS availability zone to deploy to."
+  default     = "us-east-1a"
+}
+
+variable "instance_type" {
+  description = "The AWS instance type to use for both clients and servers."
+  default     = "t2.medium"
+}
+
+variable "server_count" {
+  description = "The number of servers to provision."
+  default     = "3"
+}
+
+variable "client_count_ubuntu_bionic_amd64" {
+  description = "The number of Ubuntu clients to provision."
+  default     = "4"
+}
+
+variable "client_count_windows_2016_amd64" {
+  description = "The number of windows 2016 clients to provision."
+  default     = "1"
+}
+
+variable "aws_assume_role_arn" {
+  description = "The AWS IAM role to assume (not used by human users)"
+  default     = ""
+}
+
+variable "aws_assume_role_session_name" {
+  description = "The AWS IAM session name to assume (not used by human users)"
+  default     = ""
+}
+
+variable "aws_assume_role_external_id" {
+  description = "The AWS IAM external ID to assume (not used by human users)"
+  default     = ""
+}
+
+variable "profile" {
+  description = "A default Nomad/Consul/Vault configuration profile"
+  type        = string
+  default     = ""
+}
+
+variable "restrict_ingress_cidrblock" {
+  description = "Restrict ingress traffic to cluster to invoker ip address"
+  type        = bool
+  default     = true
+}
+
+# ----------------------------------------
+# The specific version of Nomad deployed will default to whichever one of
+# nomad_sha, nomad_version, or nomad_local_binary is set
+
+variable "nomad_sha" {
+  description = "The sha of Nomad to provision; only used for automated nightly testing"
+  default     = ""
+}
+
+variable "nomad_version" {
+  description = "The release version of Nomad to provision"
+  default     = ""
+}
+
+variable "nomad_local_binary" {
+  description = "The path to a local binary to provision"
+  default     = ""
+}
+
+variable "nomad_url" {
+  description = "the URL to Nomad binary archives e.g. CircleCI artifacts"
+  default     = ""
+}
+
+variable "nomad_enterprise" {
+  type        = bool
+  description = "If nomad_sha is used, deploy Nomad Enterprise"
+  default     = false
+}
+
+variable "nomad_license" {
+  type        = string
+  description = "If nomad_license is set, deploy a license to override the temporary license"
+  default     = ""
+}
+
+variable "nomad_acls" {
+  type        = bool
+  description = "Bootstrap ACLs"
+  default     = false
+}
+
+variable "vault" {
+  type        = bool
+  description = "Bootstrap Vault"
+  default     = false
+}
+
+variable "volumes" {
+  type        = bool
+  description = "Include external EBS and EFS volumes (for CSI)"
+  default     = false
+}
+
+# ----------------------------------------
+# If you want to deploy multiple versions you can use these variables to
+# provide a list of builds to override the values of nomad_sha, nomad_version,
+# or nomad_local_binary. Most of the time you can ignore these variables!
+
+variable "nomad_version_server" {
+  description = "A list of Nomad versions to deploy to servers, to override nomad_version"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_sha_server" {
+  description = "A list of Nomad SHAs to deploy to servers, to override nomad_sha"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_local_binary_server" {
+  description = "A list of nomad local binary paths to deploy to servers, to override nomad_local_binary"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_url_server" {
+  description = "A list of Nomad binary archive URLs to deploy to servers, to override nomad_url"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_version_client_ubuntu_bionic_amd64" {
+  description = "A list of Nomad versions to deploy to Ubuntu Bionic clients, to override nomad_version"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_sha_client_ubuntu_bionic_amd64" {
+  description = "A list of Nomad SHAs to deploy to Ubuntu Bionic clients, to override nomad_sha"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_local_binary_client_ubuntu_bionic_amd64" {
+  description = "A list of nomad local binary paths to deploy to Ubuntu Bionic clients, to override nomad_local_binary"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_url_client_ubuntu_bionic_amd64" {
+  description = "A list of Nomad binary archive URLs to deploy to Ubuntu Bionic clients, to override nomad_url"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_version_client_windows_2016_amd64" {
+  description = "A list of Nomad versions to deploy to Windows 2016 clients, to override nomad_version"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_sha_client_windows_2016_amd64" {
+  description = "A list of Nomad SHAs to deploy to Windows 2016 clients, to override nomad_sha"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_local_binary_client_windows_2016_amd64" {
+  description = "A list of nomad local binary paths to deploy to Windows 2016 clients, to override nomad_local_binary"
+  type        = list(string)
+  default     = []
+}
+
+variable "nomad_url_client_windows_2016_amd64" {
+  description = "A list of Nomad binary archive URLs to deploy to Windows 2016 clients, to override nomad_url"
+  type        = list(string)
+  default     = []
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-alicloudexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-alicloudexample%build.pkr.hcl
new file mode 100644
index 0000000..57cef10
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-alicloudexample%build.pkr.hcl
@@ -0,0 +1,33 @@
+// This assumes you have env vars ALICLOUD_ACCESS_KEY, ALICLOUD_SECRET_KEY,
+// and ALICLOUD_REGION set.
+packer {
+  required_plugins {
+    alicloud = {
+      version = ">= 1.0.0"
+      source  = "github.com/hashicorp/alicloud"
+    }
+  }
+}
+
+source "alicloud-ecs" "test" {
+  image_name           = "packer_basic"
+  source_image         = "centos_7_03_64_20G_alibase_20170818.vhd"
+  ssh_username         = "root"
+  instance_type        = "ecs.t5-lc1m1.small"
+  internet_charge_type = "PayByTraffic"
+  io_optimized         = "true"
+}
+
+build {
+  sources = ["source.alicloud-ecs.test"]
+
+  provisioner "shell" {
+    inline = [
+      "sleep 30",
+      "yum install redis.x86_64 -y"
+    ]
+  }
+  post-processor "manifest" {
+    output = "alicloud-manifest.json"
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-amazonexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-amazonexample%build.pkr.hcl
new file mode 100644
index 0000000..9d71a19
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-amazonexample%build.pkr.hcl
@@ -0,0 +1,32 @@
+packer {
+  required_plugins {
+    amazon = {
+      version = ">= 1.0.0"
+      source = "github.com/hashicorp/amazon"
+    }
+  }
+}
+
+data "amazon-ami" "ubuntu-xenial-1604-amd64" {
+  filters = {
+    name                = "ubuntu/images/*ubuntu-xenial-16.04-amd64-server-*"
+    root-device-type    = "ebs"
+    virtualization-type = "hvm"
+  }
+  most_recent = true
+  owners      = ["099720109477"]
+}
+
+locals { timestamp = regex_replace(timestamp(), "[- TZ:]", "") }
+
+source "amazon-ebs" "basic-example" {
+  ami_name      = "packer-example-${local.timestamp}"
+  communicator  = "ssh"
+  instance_type = "t2.micro"
+  source_ami    = data.amazon-ami.ubuntu-xenial-1604-amd64.id
+  ssh_username  = "ubuntu"
+}
+
+build {
+  sources = ["source.amazon-ebs.basic-example"]
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-ansibleexample%docker.json.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-ansibleexample%docker.json.pkr.hcl
new file mode 100644
index 0000000..87ba334
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-ansibleexample%docker.json.pkr.hcl
@@ -0,0 +1,32 @@
+packer {
+  required_plugins {
+    docker = {
+      source  = "github.com/hashicorp/docker"
+      version = ">=0.0.7"
+    }
+    ansible = {
+      source  = "github.com/hashicorp/ansible"
+      version = ">=1.0.0"
+    }
+  }
+
+}
+source "docker" "debian" {
+  discard = true
+  image   = "debian:jessie"
+}
+
+build {
+  sources = ["source.docker.debian"]
+
+  provisioner "shell" {
+    inline = ["apt-get update", "apt-get -y install python"]
+  }
+
+  provisioner "ansible" {
+    playbook_file = "./playbook.yml"
+    sftp_command  = "/usr/bin/false"
+    use_sftp      = false
+  }
+
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-chefexample%chef-solo.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-chefexample%chef-solo.pkr.hcl
new file mode 100644
index 0000000..f08912c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-chefexample%chef-solo.pkr.hcl
@@ -0,0 +1,42 @@
+packer {
+  required_version = ">=1.7.0"
+  required_plugins {
+    docker = {
+      source  = "github.com/hashicorp/docker"
+      version = ">=0.0.7"
+    }
+    chef = {
+      source  = "github.com/hashicorp/chef"
+      version = ">=1.0.0"
+    }
+  }
+}
+
+variable "cookbook_paths" {
+  type    = string
+  default = "cookbooks"
+}
+
+source "docker" "autogenerated_1" {
+  discard = true
+  image  = "ubuntu:latest"
+}
+
+build {
+  description = "Create NGINX Docker image"
+
+  sources = ["source.docker.autogenerated_1"]
+
+  provisioner "shell" {
+    inline = [
+    "apt-get update",
+    "apt-get -qq -y install curl sudo"
+    ]
+  }
+
+  provisioner "chef-solo" {
+    cookbook_paths = [var.cookbook_paths]
+    run_list       = ["nginx"]
+    skip_install   = false
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-cloudstackexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-cloudstackexample%build.pkr.hcl
new file mode 100644
index 0000000..01cdbb4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-cloudstackexample%build.pkr.hcl
@@ -0,0 +1,31 @@
+packer {
+  required_plugins {
+    cloudstack = {
+      version = ">= 1.0.0"
+      source  = "github.com/hashicorp/cloudstack"
+    }
+  }
+}
+
+source "cloudstack" "autogenerated_1" {
+  api_key                   = "YOUR_API_KEY"
+  api_url                   = "https://cloudstack.company.com/client/api"
+  disk_offering             = "Small - 20GB"
+  hypervisor                = "KVM"
+  network                   = "management"
+  secret_key                = "YOUR_SECRET_KEY"
+  service_offering          = "small"
+  source_iso                = "CentOS-7.0-1406-x86_64-Minimal"
+  ssh_username              = "root"
+  template_display_text     = "Centos7-x86_64 KVM Packer"
+  template_featured         = true
+  template_name             = "Centos7-x86_64-KVM-Packer"
+  template_os               = "Other PV (64-bit)"
+  template_password_enabled = true
+  template_scalable         = true
+  zone                      = "NL1"
+}
+
+build {
+  sources = ["source.cloudstack.autogenerated_1"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-digitaloceanexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-digitaloceanexample%build.pkr.hcl
new file mode 100644
index 0000000..2df77df
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-digitaloceanexample%build.pkr.hcl
@@ -0,0 +1,20 @@
+packer {
+  required_plugins {
+    digitalocean = {
+      version = ">= 1.0.0"
+      source  = "github.com/hashicorp/digitalocean"
+    }
+  }
+}
+
+source "digitalocean" "example" {
+  api_token    = "YOUR API KEY"
+  image        = "ubuntu-16-04-x64"
+  region       = "nyc3"
+  size         = "512mb"
+  ssh_username = "root"
+}
+
+build {
+  sources = ["source.digitalocean.example"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-googlecomputeexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-googlecomputeexample%build.pkr.hcl
new file mode 100644
index 0000000..c9591fd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-googlecomputeexample%build.pkr.hcl
@@ -0,0 +1,36 @@
+packer {
+  required_plugins {
+    googlecompute = {
+      version = ">= v1.0.0"
+      source  = "github.com/hashicorp/googlecompute"
+    }
+  }
+}
+
+variable "zone" {
+  default = "europe-west4-a"
+}
+
+variable "project_id" {
+  type = string
+}
+
+source "googlecompute" "ex" {
+  image_name              = "test-packer-example"
+  machine_type            = "e2-small"
+  source_image            = "debian-10-buster-v20210316"
+  ssh_username            = "packer"
+  temporary_key_pair_type = "rsa"
+  temporary_key_pair_bits = 2048
+  zone                    = var.zone
+  project_id              = var.project_id
+}
+
+build {
+  sources = ["source.googlecompute.ex"]
+  provisioner "shell" {
+    inline = [
+      "echo Hello From ${source.type} ${source.name}"
+    ]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-hashicupsexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-hashicupsexample%build.pkr.hcl
new file mode 100644
index 0000000..1f54250
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-hashicupsexample%build.pkr.hcl
@@ -0,0 +1,63 @@
+packer {
+  required_plugins {
+    hashicups = {
+      version = ">= 1.0.0"
+      source = "github.com/hashicorp/hashicups"
+    }
+  }
+}
+
+locals {
+  vagrante_espresso = data.hashicups-coffees.coffees.map["Vagrante espresso"]
+  espresso = data.hashicups-ingredients.vagrante-ingredients.map["Espresso"]
+
+  packer_spiced_latte = data.hashicups-coffees.coffees.map["Packer Spiced Latte"]
+  semi_skimmed_milk = data.hashicups-ingredients.packer-ingredients.map["Semi Skimmed Milk"]
+}
+
+source "hashicups-order" "my-custom-order" {
+  username = "education"
+  password = "test123"
+
+  item {
+    coffee {
+      id = local.vagrante_espresso
+      name = "my custom vagrante"
+      ingredient {
+        id = local.espresso
+        quantity = 50
+      }
+    }
+  }
+
+  item {
+    coffee {
+      id = local.packer_spiced_latte
+      name = "my custom packer spiced latter"
+      ingredient {
+        id = local.espresso
+        quantity = 50
+      }
+      ingredient {
+        id = local.semi_skimmed_milk
+        quantity = 200
+      }
+    }
+    quantity = 2
+  }
+}
+
+build {
+  sources = ["sources.hashicups-order.my-custom-order"]
+
+  provisioner "hashicups-toppings" {
+    toppings = ["cinnamon", "marshmellow", "chocolate", "sprinkles"]
+  }
+
+  post-processor "hashicups-receipt" {
+    format = "pdf"
+  }
+  post-processor "hashicups-receipt" {
+    format = "txt"
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-linodeexample%basic_linode.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-linodeexample%basic_linode.pkr.hcl
new file mode 100644
index 0000000..50b7b75
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-linodeexample%basic_linode.pkr.hcl
@@ -0,0 +1,25 @@
+packer {
+  required_plugins {
+    linode = {
+      version = ">= 1.0.0"
+      source  = "github.com/hashicorp/linode"
+    }
+  }
+}
+
+locals { timestamp = regex_replace(timestamp(), "[- TZ:]", "") }
+
+source "linode" "example" {
+  image             = "linode/debian9"
+  image_description = "My Private Image"
+  image_label       = "private-image-${local.timestamp}"
+  instance_label    = "temporary-linode-${local.timestamp}"
+  instance_type     = "g6-nanode-1"
+  linode_token      = "YOUR API TOKEN"
+  region            = "us-east"
+  ssh_username      = "root"
+}
+
+build {
+  sources = ["source.linode.example"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-oneandoneexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-oneandoneexample%build.pkr.hcl
new file mode 100644
index 0000000..c905b70
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-oneandoneexample%build.pkr.hcl
@@ -0,0 +1,18 @@
+packer {
+  required_plugins {
+    oneandone = {
+      version = ">= 1.0.0"
+      source  = "github.com/hashicorp/oneandone"
+    }
+  }
+}
+
+source "oneandone" "example" {
+  disk_size     = "50"
+  image         = "ubuntu1604-64min"
+  snapshot_name = "test5"
+}
+
+build {
+  sources = ["source.oneandone.example"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-parallelsexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-parallelsexample%build.pkr.hcl
new file mode 100644
index 0000000..1a4ea63
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-parallelsexample%build.pkr.hcl
@@ -0,0 +1,12 @@
+packer {
+  required_plugins {
+    parallels = {
+      version = ">= 1.0.0"
+      source  = "github.com/hashicorp/parallels"
+    }
+  }
+}
+
+build {
+  sources = ["source.parallels-iso.example"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-puppetexample%puppet-masterless.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-puppetexample%puppet-masterless.pkr.hcl
new file mode 100644
index 0000000..f73ca50
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-puppetexample%puppet-masterless.pkr.hcl
@@ -0,0 +1,44 @@
+packer {
+  required_version = ">=1.7.0"
+  required_plugins {
+    docker = {
+      source  = "github.com/hashicorp/docker"
+      version = ">=0.0.7"
+    }
+    puppet = {
+      source  = "github.com/hashicorp/puppet"
+      version = ">=1.0.0"
+    }
+  }
+}
+
+variable "manifest_path" {
+  type    = string
+  default = "manifests"
+}
+
+source "docker" "autogenerated_1" {
+  discard = true
+  image   = "ubuntu:latest"
+}
+
+build {
+
+  sources = ["source.docker.autogenerated_1"]
+
+  provisioner "shell" {
+    inline = [
+      "apt-get update",
+      "apt-get -qq -y install wget sudo",
+      "wget https://apt.puppetlabs.com/puppet6-release-focal.deb",
+      "sudo dpkg -i puppet6-release-focal.deb",
+      "apt-get update",
+      "apt-get -qq -y install puppet-agent"
+    ]
+  }
+
+  provisioner "puppet-masterless" {
+    puppet_bin_dir = "/opt/puppetlabs/bin/"
+    manifest_file  = var.manifest_path
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-qemuexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-qemuexample%build.pkr.hcl
new file mode 100644
index 0000000..a88e514
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-qemuexample%build.pkr.hcl
@@ -0,0 +1,12 @@
+packer {
+  required_plugins {
+    qemu = {
+      version = ">= 1.0.0"
+      source  = "github.com/hashicorp/qemu"
+    }
+  }
+}
+
+build {
+  sources = ["source.qemu.example"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_builder.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_builder.pkr.hcl
new file mode 100644
index 0000000..807ef61
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_builder.pkr.hcl
@@ -0,0 +1,35 @@
+packer {
+  required_plugins {
+    vagrant = {
+      version = ">= 1.0.0"
+      source = "github.com/hashicorp/vagrant"
+    }
+  }
+}
+
+source "vagrant" "example" {
+  communicator    = "ssh"
+  output_dir      = "precisebox"
+  package_include = ["./crash.log", "./base_aws.json"]
+  provider        = "virtualbox"
+  skip_add        = true
+  source_path     = "hashicorp/precise64"
+}
+
+source "vagrant" "frombox" {
+  box_name        = "test-packer"
+  communicator    = "ssh"
+  output_dir      = "test-output-dir"
+  provider        = "virtualbox"
+  source_path     = "./precisebox/package.box"
+  teardown_method = "halt"
+}
+
+build {
+  sources = ["source.vagrant.example",
+             "source.vagrant.frombox"]
+
+  provisioner "shell" {
+    inline = [""]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_cloud_postprocessor.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_cloud_postprocessor.pkr.hcl
new file mode 100644
index 0000000..77b76f7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_cloud_postprocessor.pkr.hcl
@@ -0,0 +1,28 @@
+packer {
+  required_plugins {
+    vagrant = {
+      version = ">= 1.0.0"
+      source = "github.com/hashicorp/vagrant"
+    }
+  }
+}
+
+variable "vagrant_token" {
+  type    = string
+  default = env("VAGRANT_CLOUD_TOKEN")
+}
+
+build {
+  sources = ["source.vagrant.example"]
+
+  provisioner "shell" {
+    inline = ["echo hi"]
+  }
+
+  post-processor "vagrant-cloud" {
+    access_token     = var.vagrant_token
+    box_tag          = "mmarsh/partybox"
+    no_direct_upload = true
+    version          = "0.3"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_postprocessor.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_postprocessor.pkr.hcl
new file mode 100644
index 0000000..5b32b07
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vagrantexample%vagrant_postprocessor.pkr.hcl
@@ -0,0 +1,36 @@
+packer {
+  required_plugins {
+    docker = {
+      version = ">= 0.0.7"
+      source = "github.com/hashicorp/docker"
+    }
+    vagrant = {
+      version = ">= 1.0.0"
+      source = "github.com/hashicorp/vagrant"
+    }
+  }
+}
+
+source "docker" "example" {
+  image  = "ubuntu:xenial"
+  commit = true
+}
+
+build {
+  sources = [
+    "source.docker.example",
+  ]
+  provisioner "shell" {
+    environment_vars = [
+      "FOO=hello world",
+    ]
+    inline = [
+      "echo Adding file to Docker Container",
+      "echo \"FOO is $FOO\" > example.txt"
+    ]
+  }
+
+  post-processors {
+    post-processor "vagrant" {}
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vmwareexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vmwareexample%build.pkr.hcl
new file mode 100644
index 0000000..ef75934
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vmwareexample%build.pkr.hcl
@@ -0,0 +1,18 @@
+source "vmware-iso" "example" {
+  boot_command        = ["<esc><wait>", "<esc><wait>", "<enter><wait>", "/install/vmlinuz<wait>", " initrd=/install/initrd.gz", " auto-install/enable=true", " debconf/priority=critical", " preseed/url=http://{{ .HTTPIP }}:{{ .HTTPPort }}/preseed.cfg<wait>", " -- <wait>", "<enter><wait>"]
+  boot_wait           = "10s"
+  guest_os_type       = "ubuntu-64"
+  headless            = true
+  http_directory      = "${path.root}/http"
+  iso_checksum        = "sha256:946a6077af6f5f95a51f82fdc44051c7aa19f9cfc5f737954845a6050543d7c2"
+  iso_url             = "http://old-releases.ubuntu.com/releases/14.04.1/ubuntu-14.04.1-server-amd64.iso"
+  shutdown_command    = "echo 'vagrant' | sudo -S shutdown -P now"
+  ssh_password        = "vagrant"
+  ssh_timeout         = "10000s"
+  ssh_username        = "vagrant"
+  tools_upload_flavor = "linux"
+}
+
+build {
+  sources = ["source.vmware-iso.example"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vsphereexample%build.pkr.hcl b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vsphereexample%build.pkr.hcl
new file mode 100644
index 0000000..01c8479
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%packer-plugin-vsphereexample%build.pkr.hcl
@@ -0,0 +1,18 @@
+packer {
+  required_plugins {
+    vsphere = {
+      version = ">= v1.0.0"
+      source  = "github.com/hashicorp/vsphere"
+    }
+  }
+}
+
+build {
+  sources  = [
+    "source.vsphere-iso.example"
+  ]
+
+  provisioner "shell-local" {
+    inline  = ["echo the address is: $PACKER_HTTP_ADDR and build name is: $PACKER_BUILD_NAME"]
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%consul-server.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%consul-server.tf
new file mode 100644
index 0000000..93c8363
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%consul-server.tf
@@ -0,0 +1,20 @@
+# Run the Consul dev server as an ECS task.
+module "dev_consul_server" {
+  name                        = "${var.name}-consul-server"
+  source                      = "../../modules/dev-server"
+  ecs_cluster_arn             = aws_ecs_cluster.this.arn
+  subnet_ids                  = module.vpc.private_subnets
+  lb_vpc_id                   = module.vpc.vpc_id
+  lb_enabled                  = true
+  lb_subnets                  = module.vpc.public_subnets
+  lb_ingress_rule_cidr_blocks = ["${var.lb_ingress_ip}/32"]
+  log_configuration = {
+    logDriver = "awslogs"
+    options = {
+      awslogs-group         = aws_cloudwatch_log_group.log_group.name
+      awslogs-region        = var.region
+      awslogs-stream-prefix = "consul-server"
+    }
+  }
+  launch_type = "FARGATE"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%ecs-cluster.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%ecs-cluster.tf
new file mode 100644
index 0000000..71a27cf
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%ecs-cluster.tf
@@ -0,0 +1,4 @@
+resource "aws_ecs_cluster" "this" {
+  name               = var.name
+  capacity_providers = ["FARGATE"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%iam.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%iam.tf
new file mode 100644
index 0000000..8e3edb7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%iam.tf
@@ -0,0 +1,99 @@
+resource "aws_iam_role" "example_app_task_role" {
+  name = "${var.name}-example-app"
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Sid    = ""
+        Principal = {
+          Service = "ecs-tasks.amazonaws.com"
+        }
+      },
+    ]
+  })
+
+  inline_policy {
+    name = "exec"
+    policy = jsonencode({
+      Version = "2012-10-17"
+      Statement = [
+        {
+          Effect = "Allow"
+          Action = [
+            "ssmmessages:CreateControlChannel",
+            "ssmmessages:CreateDataChannel",
+            "ssmmessages:OpenControlChannel",
+            "ssmmessages:OpenDataChannel"
+          ]
+          Resource = "*"
+        },
+        {
+          Effect = "Allow"
+          Action = [
+            "ecs:ListTasks",
+          ]
+          Resource = "*"
+        },
+        {
+          Effect = "Allow"
+          Action = [
+            "ecs:DescribeTasks"
+          ]
+          Resource = [
+            "arn:aws:ecs:${var.region}:${data.aws_caller_identity.this.account_id}:task/*",
+          ]
+        }
+      ]
+    })
+  }
+}
+
+resource "aws_iam_policy" "example_app_execution" {
+  name        = "${var.name}-example-app-execution"
+  path        = "/ecs/"
+  description = "example-app execution"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "logs:CreateLogStream",
+        "logs:PutLogEvents"
+      ],
+      "Resource": "*"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role" "example_app_execution" {
+  name = "${var.name}-example-app-execution"
+  path = "/ecs/"
+
+  assume_role_policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ecs-tasks.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy_attachment" "example_app_execution" {
+  role       = aws_iam_role.example_app_execution.id
+  policy_arn = aws_iam_policy.example_app_execution.arn
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%main.tf
new file mode 100644
index 0000000..7b43d49
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%main.tf
@@ -0,0 +1,229 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "3.42.0"
+    }
+  }
+}
+
+provider "aws" {
+  region = var.region
+}
+
+data "aws_availability_zones" "available" {
+  filter {
+    name   = "opt-in-status"
+    values = ["opt-in-not-required"]
+  }
+}
+
+data "aws_caller_identity" "this" {}
+
+data "aws_security_group" "vpc_default" {
+  name   = "default"
+  vpc_id = module.vpc.vpc_id
+}
+
+# The client app is part of the service mesh. It calls
+# the server app through the service mesh.
+# It's exposed via a load balancer.
+resource "aws_ecs_service" "example_client_app" {
+  name            = "${var.name}-example-client-app"
+  cluster         = aws_ecs_cluster.this.arn
+  task_definition = module.example_client_app.task_definition_arn
+  desired_count   = 1
+  network_configuration {
+    subnets = module.vpc.private_subnets
+  }
+  launch_type    = "FARGATE"
+  propagate_tags = "TASK_DEFINITION"
+  load_balancer {
+    target_group_arn = aws_lb_target_group.example_client_app.arn
+    container_name   = "example-client-app"
+    container_port   = 9090
+  }
+  enable_execute_command = true
+  depends_on = [
+    aws_iam_role.example_app_task_role
+  ]
+}
+
+module "example_client_app" {
+  source             = "../../modules/mesh-task"
+  family             = "${var.name}-example-client-app"
+  execution_role_arn = aws_iam_role.example_app_execution.arn
+  task_role_arn      = aws_iam_role.example_app_task_role.arn
+  port               = "9090"
+  upstreams = [
+    {
+      destination_name = "${var.name}-example-server-app"
+      local_bind_port  = 1234
+    }
+  ]
+  log_configuration = local.example_client_app_log_config
+  container_definitions = [{
+    name             = "example-client-app"
+    image            = "ghcr.io/lkysow/fake-service:v0.21.0"
+    essential        = true
+    logConfiguration = local.example_client_app_log_config
+    environment = [
+      {
+        name  = "NAME"
+        value = "${var.name}-example-client-app"
+      },
+      {
+        name  = "UPSTREAM_URIS"
+        value = "http://localhost:1234"
+      }
+    ]
+    portMappings = [
+      {
+        containerPort = 9090
+        hostPort      = 9090
+        protocol      = "tcp"
+      }
+    ]
+    cpu         = 0
+    mountPoints = []
+    volumesFrom = []
+  }]
+  consul_server_service_name = module.dev_consul_server.ecs_service_name
+}
+
+# The server app is part of the service mesh. It's called
+# by the client app.
+resource "aws_ecs_service" "example_server_app" {
+  name            = "${var.name}-example-server-app"
+  cluster         = aws_ecs_cluster.this.arn
+  task_definition = module.example_server_app.task_definition_arn
+  desired_count   = 1
+  network_configuration {
+    subnets = module.vpc.private_subnets
+  }
+  launch_type            = "FARGATE"
+  propagate_tags         = "TASK_DEFINITION"
+  enable_execute_command = true
+  depends_on = [
+    aws_iam_role.example_app_task_role
+  ]
+}
+
+module "example_server_app" {
+  source             = "../../modules/mesh-task"
+  family             = "${var.name}-example-server-app"
+  execution_role_arn = aws_iam_role.example_app_execution.arn
+  task_role_arn      = aws_iam_role.example_app_task_role.arn
+  port               = "9090"
+  log_configuration  = local.example_server_app_log_config
+  container_definitions = [{
+    name             = "example-server-app"
+    image            = "ghcr.io/lkysow/fake-service:v0.21.0"
+    essential        = true
+    logConfiguration = local.example_server_app_log_config
+    environment = [
+      {
+        name  = "NAME"
+        value = "${var.name}-example-server-app"
+      }
+    ]
+  }]
+  consul_server_service_name = module.dev_consul_server.ecs_service_name
+}
+
+resource "aws_lb" "example_client_app" {
+  name               = "${var.name}-example-client-app"
+  internal           = false
+  load_balancer_type = "application"
+  security_groups    = [aws_security_group.example_client_app_alb.id]
+  subnets            = module.vpc.public_subnets
+}
+
+resource "aws_security_group" "example_client_app_alb" {
+  name   = "${var.name}-example-client-app-alb"
+  vpc_id = module.vpc.vpc_id
+
+  ingress {
+    description = "Access to example client application."
+    from_port   = 9090
+    to_port     = 9090
+    protocol    = "tcp"
+    cidr_blocks = ["${var.lb_ingress_ip}/32"]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
+
+resource "aws_security_group_rule" "ingress_from_client_alb_to_ecs" {
+  type                     = "ingress"
+  from_port                = 0
+  to_port                  = 65535
+  protocol                 = "tcp"
+  source_security_group_id = aws_security_group.example_client_app_alb.id
+  security_group_id        = data.aws_security_group.vpc_default.id
+}
+
+resource "aws_security_group_rule" "ingress_from_server_alb_to_ecs" {
+  type                     = "ingress"
+  from_port                = 8500
+  to_port                  = 8500
+  protocol                 = "tcp"
+  source_security_group_id = module.dev_consul_server.lb_security_group_id
+  security_group_id        = data.aws_security_group.vpc_default.id
+}
+
+resource "aws_lb_target_group" "example_client_app" {
+  name                 = "${var.name}-example-client-app"
+  port                 = 9090
+  protocol             = "HTTP"
+  vpc_id               = module.vpc.vpc_id
+  target_type          = "ip"
+  deregistration_delay = 10
+  health_check {
+    path                = "/"
+    healthy_threshold   = 2
+    unhealthy_threshold = 10
+    timeout             = 30
+    interval            = 60
+  }
+}
+
+resource "aws_lb_listener" "example_client_app" {
+  load_balancer_arn = aws_lb.example_client_app.arn
+  port              = "9090"
+  protocol          = "HTTP"
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.example_client_app.arn
+  }
+}
+
+resource "aws_cloudwatch_log_group" "log_group" {
+  name = var.name
+}
+
+
+locals {
+  example_server_app_log_config = {
+    logDriver = "awslogs"
+    options = {
+      awslogs-group         = aws_cloudwatch_log_group.log_group.name
+      awslogs-region        = var.region
+      awslogs-stream-prefix = "app"
+    }
+  }
+
+  example_client_app_log_config = {
+    logDriver = "awslogs"
+    options = {
+      awslogs-group         = aws_cloudwatch_log_group.log_group.name
+      awslogs-region        = var.region
+      awslogs-stream-prefix = "client"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%outputs.tf
new file mode 100644
index 0000000..f9b03c6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%outputs.tf
@@ -0,0 +1,7 @@
+output "consul_server_lb_address" {
+  value = "http://${module.dev_consul_server.lb_dns_name}:8500"
+}
+
+output "mesh_client_lb_address" {
+  value = "http://${aws_lb.example_client_app.dns_name}:9090/ui"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%variables.tf
new file mode 100644
index 0000000..47b23f8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%variables.tf
@@ -0,0 +1,16 @@
+variable "name" {
+  description = "Name to be used on all the resources as identifier."
+  type        = string
+  default     = "consul-ecs"
+}
+
+variable "region" {
+  description = "AWS region."
+  type        = string
+  default     = "us-east-1"
+}
+
+variable "lb_ingress_ip" {
+  description = "Your IP. This is used in the load balancer security groups to ensure only you can access the Consul UI and example application."
+  type        = string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%vpc.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%vpc.tf
new file mode 100644
index 0000000..43e7b54
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsexamples%dev-server-fargate%vpc.tf
@@ -0,0 +1,13 @@
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "2.78.0"
+
+  name                 = var.name
+  cidr                 = "10.0.0.0/16"
+  azs                  = data.aws_availability_zones.available.names
+  private_subnets      = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
+  public_subnets       = ["10.0.4.0/24", "10.0.5.0/24", "10.0.6.0/24"]
+  enable_nat_gateway   = true
+  single_nat_gateway   = true
+  enable_dns_hostnames = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%main.tf
new file mode 100644
index 0000000..390edf3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%main.tf
@@ -0,0 +1,236 @@
+locals {
+  load_balancer = var.lb_enabled ? [{
+    target_group_arn = aws_lb_target_group.this[0].arn
+    container_name   = "consul-server"
+    container_port   = 8500
+  }] : []
+}
+
+resource "aws_ecs_service" "this" {
+  name            = var.name
+  cluster         = var.ecs_cluster_arn
+  task_definition = aws_ecs_task_definition.this.arn
+  desired_count   = 1
+  network_configuration {
+    subnets          = var.subnet_ids
+    assign_public_ip = var.assign_public_ip
+  }
+  launch_type = var.launch_type
+  dynamic "load_balancer" {
+    for_each = local.load_balancer
+    content {
+      target_group_arn = load_balancer.value["target_group_arn"]
+      container_name   = load_balancer.value["container_name"]
+      container_port   = load_balancer.value["container_port"]
+    }
+  }
+  enable_execute_command = true
+
+  depends_on = [
+    aws_iam_role.this_task
+  ]
+}
+
+resource "aws_ecs_task_definition" "this" {
+  family                   = var.name
+  requires_compatibilities = ["FARGATE", "EC2"]
+  network_mode             = "awsvpc"
+  cpu                      = 256
+  memory                   = 512
+  execution_role_arn       = aws_iam_role.this_execution.arn
+  task_role_arn            = aws_iam_role.this_task.arn
+  volume {
+    name = "consul-data"
+  }
+  container_definitions = jsonencode([
+    {
+      name      = "consul-server"
+      image     = var.consul_image
+      essential = true
+      portMappings = [
+        {
+          containerPort = 8301
+        },
+        {
+          containerPort = 8300
+        },
+        {
+          containerPort = 8500
+        }
+      ]
+      logConfiguration = var.log_configuration
+      entryPoint       = ["/bin/sh", "-ec"]
+      command          = [replace(local.consul_server_command, "\r", "")]
+      mountPoints = [
+        {
+          sourceVolume  = "consul-data"
+          containerPath = "/consul"
+        }
+      ]
+      linuxParameters = {
+        initProcessEnabled = true
+      }
+    }
+  ])
+}
+
+resource "aws_iam_policy" "this_execution" {
+  name        = "${var.name}_execution"
+  path        = "/ecs/"
+  description = "Consul server execution"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "logs:CreateLogStream",
+        "logs:PutLogEvents"
+      ],
+      "Resource": "*"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role" "this_execution" {
+  name = "${var.name}_execution"
+  path = "/ecs/"
+
+  assume_role_policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ecs-tasks.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy_attachment" "this_execution" {
+  role       = aws_iam_role.this_execution.id
+  policy_arn = aws_iam_policy.this_execution.arn
+}
+
+resource "aws_iam_role" "this_task" {
+  name = "${var.name}_task"
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Sid    = ""
+        Principal = {
+          Service = "ecs-tasks.amazonaws.com"
+        }
+      },
+    ]
+  })
+
+  inline_policy {
+    name = "exec"
+    policy = jsonencode({
+      Version = "2012-10-17"
+      Statement = [
+        {
+          Effect = "Allow"
+          Action = [
+            "ssmmessages:CreateControlChannel",
+            "ssmmessages:CreateDataChannel",
+            "ssmmessages:OpenControlChannel",
+            "ssmmessages:OpenDataChannel"
+          ]
+          Resource = "*"
+        }
+      ]
+    })
+  }
+}
+
+
+locals {
+  consul_server_command = <<EOF
+ECS_IPV4=$(curl -s $ECS_CONTAINER_METADATA_URI | jq -r '.Networks[0].IPv4Addresses[0]')
+
+exec consul agent -server \
+  -bootstrap \
+  -ui \
+  -advertise "$ECS_IPV4" \
+  -client 0.0.0.0 \
+  -data-dir /tmp/consul-data \
+  -encrypt "$CONSUL_GOSSIP_ENCRYPTION_KEY" \
+  -hcl 'telemetry { disable_compat_1.9 = true }' \
+  -hcl 'connect { enabled = true }' \
+  -hcl 'enable_central_service_config = true' \
+EOF
+}
+
+resource "aws_lb_target_group" "this" {
+  count                = var.lb_enabled ? 1 : 0
+  name                 = var.name
+  port                 = 8500
+  protocol             = "HTTP"
+  vpc_id               = var.lb_vpc_id
+  target_type          = "ip"
+  deregistration_delay = 10
+  health_check {
+    path                = "/v1/status/leader"
+    healthy_threshold   = 2
+    unhealthy_threshold = 10
+    timeout             = 30
+    interval            = 60
+  }
+}
+
+resource "aws_lb" "this" {
+  count              = var.lb_enabled ? 1 : 0
+  name               = var.name
+  internal           = false
+  load_balancer_type = "application"
+  security_groups    = [aws_security_group.load_balancer[count.index].id]
+  subnets            = var.lb_subnets
+}
+
+resource "aws_lb_listener" "this" {
+  count             = var.lb_enabled ? 1 : 0
+  load_balancer_arn = aws_lb.this[count.index].arn
+  port              = "8500"
+  protocol          = "HTTP"
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.this[count.index].arn
+  }
+}
+
+resource "aws_security_group" "load_balancer" {
+  count  = var.lb_enabled ? 1 : 0
+  name   = var.name
+  vpc_id = var.lb_vpc_id
+
+  ingress {
+    description     = "Access to Consul dev server HTTP API and UI."
+    from_port       = 8500
+    to_port         = 8500
+    protocol        = "tcp"
+    cidr_blocks     = var.lb_ingress_rule_cidr_blocks
+    security_groups = var.lb_ingress_rule_security_groups
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%outputs.tf
new file mode 100644
index 0000000..67d1894
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%outputs.tf
@@ -0,0 +1,14 @@
+output "ecs_service_name" {
+  description = "Name of created Consul server ECS service."
+  value       = aws_ecs_service.this.name
+}
+
+output "lb_dns_name" {
+  description = "DNS name of load balancer in front of Consul server."
+  value       = var.lb_enabled ? aws_lb.this[0].dns_name : null
+}
+
+output "lb_security_group_id" {
+  description = "Security group ID of load balancer in front of Consul server."
+  value       = var.lb_enabled ? aws_security_group.load_balancer[0].id : null
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%variables.tf
new file mode 100644
index 0000000..fc8a849
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%dev-server%variables.tf
@@ -0,0 +1,75 @@
+variable "ecs_cluster_arn" {
+  description = "ARN of pre-existing ECS cluster."
+  type        = string
+}
+
+variable "subnet_ids" {
+  description = "Subnet IDs into which the task should be deployed. If these are private subnets then there must be a NAT gateway for image pulls to work. If these are public subnets then you must also set assign_public_ip for image pulls to work."
+  type        = list(string)
+}
+
+variable "lb_enabled" {
+  description = "Whether to create an ALB for the server task. Useful for accessing the UI."
+  type        = bool
+  default     = false
+}
+
+variable "lb_vpc_id" {
+  description = "VPC ID for ALB."
+  type        = string
+  default     = null
+}
+
+variable "lb_subnets" {
+  description = "Subnet IDs to attach to the load balancer. NOTE: These must be public subnets if you wish to access the load balancer externally."
+  type        = list(string)
+  default     = null
+}
+
+variable "lb_ingress_rule_cidr_blocks" {
+  description = "CIDR blocks that are allowed access to the load balancer."
+  type        = list(string)
+  default     = null
+}
+
+variable "lb_ingress_rule_security_groups" {
+  description = "Security groups that are allowed access to the load balancer."
+  type        = list(string)
+  default     = null
+}
+
+variable "consul_image" {
+  description = "Consul Docker image."
+  type        = string
+  default     = "docker.mirror.hashicorp.services/hashicorp/consul:1.9.5"
+}
+
+variable "log_configuration" {
+  description = "Task definition log configuration object (https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_LogConfiguration.html)."
+  type        = any
+  default     = null
+}
+
+variable "name" {
+  description = "Name to be used on all the resources as identifier."
+  type        = string
+  default     = "consul-server"
+}
+
+variable "tags" {
+  description = "A map of tags to add to all resources."
+  type        = map(string)
+  default     = {}
+}
+
+variable "launch_type" {
+  description = "Launch type on which to run service. Valid values are EC2 and FARGATE."
+  type        = string
+  default     = "EC2"
+}
+
+variable "assign_public_ip" {
+  description = "Assign a public IP address to the ENI. If running in public subnets this is required so that ECS can pull the Docker images."
+  type        = bool
+  default     = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%main.tf
new file mode 100644
index 0000000..5c24286
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%main.tf
@@ -0,0 +1,185 @@
+locals {
+  dev_server_enabled = var.consul_server_service_name != ""
+  discover_server_container = {
+    name      = "discover-servers"
+    image     = var.consul_ecs_image
+    essential = false
+    user      = "root"
+    command = [
+      "discover-servers",
+      "-service-name=${var.consul_server_service_name}",
+      "-out=/consul/server-ip"
+    ]
+    mountPoints = [
+      local.consul_data_mount
+    ]
+    environment      = []
+    cpu              = 0
+    portMappings     = []
+    volumesFrom      = []
+    logConfiguration = var.log_configuration
+  }
+  discover_servers_containers = local.dev_server_enabled ? [local.discover_server_container] : []
+  consul_data_volume_name     = "consul_data"
+  consul_data_mount = {
+    sourceVolume  = local.consul_data_volume_name
+    containerPath = "/consul"
+  }
+
+  // container_defs_with_depends_on is the app's container definitions with their dependsOn keys
+  // modified to add in dependencies on mesh-init and sidecar-proxy.
+  // We add these dependencies in so that the app containers don't start until the proxy
+  // is ready to serve traffic.
+  container_defs_with_depends_on = [for def in var.container_definitions :
+    merge(
+      def,
+      {
+        dependsOn = flatten(
+          concat(
+            lookup(def, "dependsOn", []),
+            [
+              {
+                containerName = "mesh-init"
+                condition     = "SUCCESS"
+              },
+              {
+                containerName = "sidecar-proxy"
+                condition     = "HEALTHY"
+              }
+            ]
+        ))
+      }
+    )
+  ]
+  upstreams_flag = join(",", [for upstream in var.upstreams : "${upstream["destination_name"]}:${upstream["local_bind_port"]}"])
+}
+
+resource "aws_ecs_task_definition" "this" {
+  family                   = var.family
+  requires_compatibilities = ["FARGATE", "EC2"]
+  network_mode             = "awsvpc"
+  cpu                      = 256
+  memory                   = 512
+  execution_role_arn       = var.execution_role_arn
+  task_role_arn            = var.task_role_arn
+  volume {
+    name = local.consul_data_volume_name
+  }
+  tags = {
+    "consul.hashicorp.com/mesh" = "true"
+  }
+  container_definitions = jsonencode(
+    flatten(
+      concat(
+        local.discover_servers_containers,
+        local.container_defs_with_depends_on,
+        [
+          {
+            name             = "mesh-init"
+            image            = var.consul_ecs_image
+            essential        = false
+            logConfiguration = var.log_configuration
+            command = [
+              "mesh-init",
+              "-envoy-bootstrap-file=/consul/envoy-bootstrap.json",
+              "-port=${var.port}",
+              "-upstreams=${local.upstreams_flag}"
+            ]
+            user = "root"
+            mountPoints = [
+              local.consul_data_mount
+            ]
+            dependsOn = local.dev_server_enabled ? [
+              {
+                containerName = "discover-servers"
+                condition     = "SUCCESS"
+              },
+            ] : []
+            cpu          = 0
+            volumesFrom  = []
+            environment  = []
+            portMappings = []
+          },
+          {
+            name      = "consul-client"
+            image     = var.consul_image
+            essential = false
+            portMappings = [
+              {
+                containerPort = 8300
+                hostPort      = 8300
+                protocol      = "tcp"
+              },
+              {
+                containerPort = 8300
+                hostPort      = 8300
+                protocol      = "udp"
+              },
+              {
+                containerPort = 8500
+                hostPort      = 8500
+                protocol      = "tcp"
+              },
+            ]
+            logConfiguration = var.log_configuration
+            entryPoint       = ["/bin/sh", "-ec"]
+            command = [replace(
+              templatefile(
+                "${path.module}/templates/consul_client_command.tpl",
+                {
+                  dev_server_enabled = local.dev_server_enabled
+                  retry_join         = var.retry_join
+                }
+              ), "\r", "")
+            ]
+            mountPoints = [
+              local.consul_data_mount
+            ]
+            linuxParameters = {
+              initProcessEnabled = true
+            }
+            dependsOn = local.dev_server_enabled ? [{
+              containerName = "discover-servers"
+              condition     = "SUCCESS"
+            }] : []
+            cpu         = 0
+            volumesFrom = []
+            environment = []
+          },
+          {
+            name             = "sidecar-proxy"
+            image            = var.envoy_image
+            essential        = false
+            logConfiguration = var.log_configuration
+            command          = ["envoy", "--config-path", "/consul/envoy-bootstrap.json"]
+            portMappings = [
+              {
+                containerPort = 20000
+                hostPort      = 20000
+                protocol      = "tcp"
+              },
+            ]
+            mountPoints = [
+              local.consul_data_mount
+            ]
+            dependsOn = [
+              {
+                containerName = "mesh-init"
+                condition     = "SUCCESS"
+              },
+            ]
+            healthCheck = {
+              command  = ["nc", "-z", "127.0.0.1", "20000"]
+              interval = 30
+              retries  = 3
+              timeout  = 5
+            }
+            cpu         = 0
+            volumesFrom = []
+            environment = []
+          }
+        ]
+      )
+    )
+  )
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%outputs.tf
new file mode 100644
index 0000000..f772e78
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%outputs.tf
@@ -0,0 +1,3 @@
+output "task_definition_arn" {
+  value = aws_ecs_task_definition.this.arn
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%validation.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%validation.tf
new file mode 100644
index 0000000..4c8d8dc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%validation.tf
@@ -0,0 +1,4 @@
+locals {
+  require_retry_join               = (var.consul_server_service_name == "" && var.retry_join == "") ? file("ERROR: either consul_server_service_name or retry_join must be set so that Consul clients can join the cluster") : null
+  require_port_unless_no_port_true = !var.outbound_only && var.port == 0 ? file("ERROR: port must be set if outbound_only is false") : null
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%variables.tf
new file mode 100644
index 0000000..d434cb8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecsmodules%mesh-task%variables.tf
@@ -0,0 +1,89 @@
+variable "family" {
+  description = "Task definition family (https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#family). This name will also be used as the Consul service name."
+  type        = string
+}
+
+variable "execution_role_arn" {
+  description = "ARN for the task's execution role. This role is used internally by ECS."
+  type        = string
+}
+
+variable "task_role_arn" {
+  description = "ARN for the task's task role. This role defines permissions for the containers running in the task."
+  type        = string
+}
+
+variable "port" {
+  description = "Port that the application listens on. If the application does not listen on a port, set outbound_only to true."
+  type        = number
+  default     = 0
+}
+
+variable "outbound_only" {
+  description = "Whether the application only makes outward requests and does not receive any requests. Must be set to true if port is 0."
+  type        = bool
+  default     = false
+}
+
+variable "consul_image" {
+  description = "Consul Docker image."
+  type        = string
+  default     = "docker.mirror.hashicorp.services/hashicorp/consul:1.9.5"
+}
+
+variable "consul_ecs_image" {
+  description = "consul-ecs Docker image."
+  type        = string
+  default     = "docker.mirror.hashicorp.services/hashicorp/consul-ecs:0.1.2"
+}
+
+variable "envoy_image" {
+  description = "Envoy Docker image."
+  type        = string
+  default     = "docker.mirror.hashicorp.services/envoyproxy/envoy-alpine:v1.16.2"
+}
+
+variable "log_configuration" {
+  description = "Task definition log configuration object (https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_LogConfiguration.html)."
+  type        = any
+  default     = null
+}
+
+variable "container_definitions" {
+  description = "Application container definitions (https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#container_definitions)."
+  type        = list(any)
+}
+
+variable "upstreams" {
+  description = <<-EOT
+  Upstream services this service will call. In the form [{destination_name = $name, local_bind_port = $port}] where
+  destination_name is the name of the upstream service and local_bind_port is the local port that this application should
+  use when calling the upstream service.
+  EOT
+
+  type = list(
+    object({
+      destination_name = string
+      local_bind_port  = number
+    })
+  )
+  default = []
+}
+
+variable "consul_server_service_name" {
+  description = "Name of Consul server ECS service when using dev server. This or retry_join must be set."
+  type        = string
+  default     = ""
+}
+
+variable "retry_join" {
+  description = "Argument to pass to -retry-join (https://www.consul.io/docs/agent/options#_retry_join). This or consul_server_service_name must be set."
+  type        = string
+  default     = ""
+}
+
+variable "tags" {
+  description = "A map of tags to add to all resources."
+  type        = map(string)
+  default     = {}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%main.tf
new file mode 100644
index 0000000..44b3e26
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%main.tf
@@ -0,0 +1,46 @@
+provider "aws" {
+  region = var.region
+}
+
+locals {
+  name = "consul-ecs-${random_string.suffix.result}"
+}
+
+data "aws_availability_zones" "available" {
+  filter {
+    name   = "opt-in-status"
+    values = ["opt-in-not-required"]
+  }
+}
+
+resource "random_string" "suffix" {
+  length  = 8
+  special = false
+}
+
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "2.78.0"
+
+  name                 = local.name
+  cidr                 = "10.0.0.0/16"
+  azs                  = data.aws_availability_zones.available.names
+  private_subnets      = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
+  public_subnets       = ["10.0.4.0/24", "10.0.5.0/24", "10.0.6.0/24"]
+  enable_nat_gateway   = true
+  single_nat_gateway   = true
+  enable_dns_hostnames = true
+  tags                 = var.tags
+}
+
+resource "aws_ecs_cluster" "this" {
+  name               = local.name
+  capacity_providers = ["FARGATE"]
+  tags               = var.tags
+}
+
+resource "aws_cloudwatch_log_group" "log_group" {
+  name = local.name
+  tags = var.tags
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%outputs.tf
new file mode 100644
index 0000000..721ead8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%outputs.tf
@@ -0,0 +1,23 @@
+output "ecs_cluster_arn" {
+  value = aws_ecs_cluster.this.arn
+}
+
+output "private_subnets" {
+  value = module.vpc.private_subnets
+}
+
+output "suffix" {
+  value = random_string.suffix.result
+}
+
+output "log_group_name" {
+  value = aws_cloudwatch_log_group.log_group.name
+}
+
+output "region" {
+  value = var.region
+}
+
+output "tags" {
+  value = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%variables.tf
new file mode 100644
index 0000000..3e04e5a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%setup-terraform%variables.tf
@@ -0,0 +1,15 @@
+variable "region" {
+  default     = "us-west-2"
+  description = "AWS region"
+}
+
+variable "role_arn" {
+  default     = ""
+  description = "AWS role for the AWS provider to assume when running these templates."
+}
+
+variable "tags" {
+  type        = map(any)
+  default     = {}
+  description = "Tags to attach to the created resources."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%basic-install%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%basic-install%main.tf
new file mode 100644
index 0000000..3a35b00
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%basic-install%main.tf
@@ -0,0 +1,254 @@
+variable "ecs_cluster_arn" {
+  type        = string
+  description = "Cluster ARN of ECS cluster."
+}
+
+variable "subnets" {
+  type        = list(string)
+  description = "Subnets to deploy into."
+}
+
+variable "suffix" {
+  type        = string
+  default     = "nosuffix"
+  description = "Suffix to add to all resource names."
+}
+
+variable "region" {
+  type        = string
+  description = "Region."
+}
+
+variable "log_group_name" {
+  type        = string
+  description = "Name for cloudwatch log group."
+}
+
+variable "tags" {
+  description = "A map of tags to add to all resources."
+  type        = map(string)
+  default     = {}
+}
+
+provider "aws" {
+  region = var.region
+}
+
+module "consul_server" {
+  source          = "../../../../../../modules/dev-server"
+  lb_enabled      = false
+  ecs_cluster_arn = var.ecs_cluster_arn
+  subnet_ids      = var.subnets
+  name            = "consul_server_${var.suffix}"
+  log_configuration = {
+    logDriver = "awslogs"
+    options = {
+      awslogs-group         = var.log_group_name
+      awslogs-region        = var.region
+      awslogs-stream-prefix = "consul_server_${var.suffix}"
+    }
+  }
+  launch_type = "FARGATE"
+
+  tags = var.tags
+}
+
+resource "aws_ecs_service" "test_client" {
+  name            = "test_client_${var.suffix}"
+  cluster         = var.ecs_cluster_arn
+  task_definition = module.test_client.task_definition_arn
+  desired_count   = 1
+  network_configuration {
+    subnets = var.subnets
+  }
+  launch_type            = "FARGATE"
+  propagate_tags         = "TASK_DEFINITION"
+  enable_execute_command = true
+
+  tags = var.tags
+
+  depends_on = [
+    aws_iam_role.this_task
+  ]
+}
+
+module "test_client" {
+  source             = "../../../../../../modules/mesh-task"
+  family             = "test_client_${var.suffix}"
+  execution_role_arn = aws_iam_role.this_execution.arn
+  task_role_arn      = aws_iam_role.this_task.arn
+  container_definitions = [{
+    name      = "basic"
+    image     = "ghcr.io/lkysow/fake-service:v0.21.0"
+    essential = true
+    environment = [
+      {
+        name  = "UPSTREAM_URIS"
+        value = "http://localhost:1234"
+      }
+    ]
+    linuxParameters = {
+      initProcessEnabled = true
+    }
+  }]
+  consul_server_service_name = module.consul_server.ecs_service_name
+  upstreams = [
+    {
+      destination_name = "test_server_${var.suffix}"
+      local_bind_port  = 1234
+    }
+  ]
+  log_configuration = {
+    logDriver = "awslogs"
+    options = {
+      awslogs-group         = var.log_group_name
+      awslogs-region        = var.region
+      awslogs-stream-prefix = "test_client_${var.suffix}"
+    }
+  }
+  outbound_only = true
+}
+
+resource "aws_ecs_service" "test_server" {
+  name            = "test_server_${var.suffix}"
+  cluster         = var.ecs_cluster_arn
+  task_definition = module.test_server.task_definition_arn
+  desired_count   = 1
+  network_configuration {
+    subnets = var.subnets
+  }
+  launch_type            = "FARGATE"
+  propagate_tags         = "TASK_DEFINITION"
+  enable_execute_command = true
+
+  tags = var.tags
+
+  depends_on = [
+    aws_iam_role.this_task
+  ]
+}
+
+module "test_server" {
+  source             = "../../../../../../modules/mesh-task"
+  family             = "test_server_${var.suffix}"
+  execution_role_arn = aws_iam_role.this_execution.arn
+  task_role_arn      = aws_iam_role.this_task.arn
+  container_definitions = [{
+    name      = "basic"
+    image     = "ghcr.io/lkysow/fake-service:v0.21.0"
+    essential = true
+  }]
+  consul_server_service_name = module.consul_server.ecs_service_name
+  log_configuration = {
+    logDriver = "awslogs"
+    options = {
+      awslogs-group         = var.log_group_name
+      awslogs-region        = var.region
+      awslogs-stream-prefix = "test_server_${var.suffix}"
+    }
+  }
+  port = 9090
+}
+
+resource "aws_iam_policy" "this_execution" {
+  name = "basic_execution_${var.suffix}"
+  path = "/ecs/"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "logs:CreateLogStream",
+        "logs:PutLogEvents"
+      ],
+      "Resource": "*"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role" "this_execution" {
+  name = "basic_execution_${var.suffix}"
+  path = "/ecs/"
+
+  assume_role_policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ecs-tasks.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy_attachment" "this_execution" {
+  role       = aws_iam_role.this_execution.id
+  policy_arn = aws_iam_policy.this_execution.arn
+}
+
+data "aws_caller_identity" "this" {}
+
+resource "aws_iam_role" "this_task" {
+  name = "basic_task_${var.suffix}"
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Sid    = ""
+        Principal = {
+          Service = "ecs-tasks.amazonaws.com"
+        }
+      },
+    ]
+  })
+
+  inline_policy {
+    name = "basic_task_${var.suffix}"
+    policy = jsonencode({
+      Version = "2012-10-17"
+      Statement = [
+        {
+          Effect = "Allow"
+          Action = [
+            "ssmmessages:CreateControlChannel",
+            "ssmmessages:CreateDataChannel",
+            "ssmmessages:OpenControlChannel",
+            "ssmmessages:OpenDataChannel"
+          ]
+          Resource = "*"
+        },
+        {
+          Effect = "Allow"
+          Action = [
+            "ecs:ListTasks",
+          ]
+          Resource = "*"
+        },
+        {
+          Effect = "Allow"
+          Action = [
+            "ecs:DescribeTasks"
+          ]
+          Resource = [
+            "arn:aws:ecs:${var.region}:${data.aws_caller_identity.this.account_id}:task/*",
+          ]
+        }
+      ]
+    })
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%retry-join-validate%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%retry-join-validate%main.tf
new file mode 100644
index 0000000..89937b3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-consul-ecstest%acceptance%tests%basic%terraform%retry-join-validate%main.tf
@@ -0,0 +1,77 @@
+provider "aws" {
+  region = "us-west-2"
+}
+
+module "test_client" {
+  source             = "../../../../../../modules/mesh-task"
+  family             = "family"
+  execution_role_arn = aws_iam_role.this_execution.arn
+  task_role_arn      = aws_iam_role.this_task.arn
+  container_definitions = [{
+    name = "basic"
+  }]
+}
+
+resource "aws_iam_policy" "this_execution" {
+  name = "this_execution"
+  path = "/ecs/"
+
+  policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": [
+        "logs:CreateLogStream",
+        "logs:PutLogEvents"
+      ],
+      "Resource": "*"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role" "this_execution" {
+  name = "this_execution"
+  path = "/ecs/"
+
+  assume_role_policy = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Sid": "",
+      "Effect": "Allow",
+      "Principal": {
+        "Service": "ecs-tasks.amazonaws.com"
+      },
+      "Action": "sts:AssumeRole"
+    }
+  ]
+}
+EOF
+}
+
+resource "aws_iam_role_policy_attachment" "this_execution" {
+  role       = aws_iam_role.this_execution.id
+  policy_arn = aws_iam_policy.this_execution.arn
+}
+
+resource "aws_iam_role" "this_task" {
+  name = "this_task"
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Sid    = ""
+        Principal = {
+          Service = "ecs-tasks.amazonaws.com"
+        }
+      },
+    ]
+  })
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprise.tflint.hcl b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprise.tflint.hcl
new file mode 100644
index 0000000..4c2685d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprise.tflint.hcl
@@ -0,0 +1,49 @@
+config {
+  module = false
+  force = false
+  disabled_by_default = false
+}
+
+rule "terraform_deprecated_index" {
+  enabled = true
+}
+
+rule "terraform_unused_declarations" {
+  enabled = true
+}
+
+rule "terraform_comment_syntax" {
+  enabled = true
+}
+
+rule "terraform_documented_outputs" {
+  enabled = true
+}
+
+rule "terraform_documented_variables" {
+  enabled = true
+}
+
+rule "terraform_typed_variables" {
+  enabled = true
+}
+
+rule "terraform_naming_convention" {
+  enabled = true
+}
+
+rule "terraform_required_version" {
+  enabled = true
+}
+
+rule "terraform_required_providers" {
+  enabled = true
+}
+
+rule "terraform_unused_required_providers" {
+  enabled = true
+}
+
+rule "terraform_standard_module_structure" {
+  enabled = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%outputs.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%variables.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%versions.tf
new file mode 100644
index 0000000..5e4ce43
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%behind-proxy%versions.tf
@@ -0,0 +1,3 @@
+terraform {
+  required_version = ">= 0.14"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%main.tf
new file mode 100644
index 0000000..2f420b5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%main.tf
@@ -0,0 +1,36 @@
+locals {
+  ami_search = var.ami_id == null ? true : false
+  ami_id     = local.ami_search ? data.aws_ami.existing[0].id : var.ami_id
+}
+
+data "aws_ami" "existing" {
+  count = local.ami_search ? 1 : 0
+
+  owners      = var.ami_owners
+  most_recent = var.ami_most_recent
+
+  filter {
+    name   = var.ami_filter_name
+    values = [var.ami_filter_value]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+}
+
+module "existing_image_example" {
+  source = "../../"
+
+  acm_certificate_arn  = var.acm_certificate_arn
+  domain_name          = var.domain_name
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_subdomain        = var.tfe_subdomain
+  tfe_license_name     = var.tfe_license_name
+  tfe_license_filepath = var.tfe_license_filepath
+
+  ami_id                = local.ami_id
+  iact_subnet_list      = var.iact_subnet_list
+  load_balancing_scheme = var.load_balancing_scheme
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%outputs.tf
new file mode 100644
index 0000000..88096fe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%outputs.tf
@@ -0,0 +1,19 @@
+output "tfe_url" {
+  value       = module.existing_image_example.tfe_url
+  description = "The URL to the TFE application."
+}
+
+output "health_check_url" {
+  value       = "${module.existing_image_example.tfe_url}/_health_check"
+  description = "The URL with path to access the TFE instance health check."
+}
+
+output "iact_url" {
+  value       = "${module.existing_image_example.tfe_url}/admin/retrieve-iact"
+  description = "The URL with path to access the TFE instance Retrieve IACT."
+}
+
+output "initial_admin_user_url" {
+  value       = "${module.existing_image_example.tfe_url}/admin/initial-admin-user"
+  description = "The URL with path to access the TFE instance Initial Admin User."
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%variables.tf
new file mode 100644
index 0000000..57f2246
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%variables.tf
@@ -0,0 +1,85 @@
+# -------
+# General
+# -------
+
+variable "acm_certificate_arn" {
+  type        = string
+  description = "ACM certificate ARN to use with load balancer"
+}
+
+variable "domain_name" {
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "Name prefix used for resources"
+}
+
+variable "tfe_subdomain" {
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+variable "tfe_license_name" {
+  type        = string
+  default     = "ptfe-license.rli"
+  description = "The name to use when copying the TFE license file to the EC2 instance."
+}
+
+variable "tfe_license_filepath" {
+  type        = string
+  description = "The absolute path to the TFE license file on the system running Terraform."
+}
+
+variable "iact_subnet_list" {
+  default     = ["0.0.0.0/0"]
+  type        = list(string)
+  description = "A list of CIDR masks that configure the ability to retrieve the IACT from outside the host."
+}
+
+variable "load_balancing_scheme" {
+  type        = string
+  default     = "PUBLIC"
+  description = "Load Balancing Scheme. Supported values are: \"PRIVATE\"; \"PRIVATE_TCP\"; \"PUBLIC\"."
+
+  validation {
+    condition     = contains(["PRIVATE", "PRIVATE_TCP", "PUBLIC"], var.load_balancing_scheme)
+    error_message = "The load_balancer value must be one of: \"PRIVATE\"; \"PRIVATE_TCP\"; \"PUBLIC\"."
+  }
+}
+
+# ---
+# AMI
+# ---
+
+variable "ami_id" {
+  type        = string
+  default     = null
+  description = "AMI ID of the custom image to use for TFE instances. If this value is provided, you do not need any of the following ami variable values."
+}
+
+variable "ami_owners" {
+  type        = list(string)
+  default     = ["self"]
+  description = "List of AMI owners to limit search. (Not needed if providing ami_id value.)"
+}
+
+variable "ami_filter_name" {
+  type        = string
+  default     = null
+  description = "The name of a key off of which to filter with a key/value pair. Example: \"tag:Distro\" (Not needed if providing ami_id value.)"
+}
+
+variable "ami_filter_value" {
+  type        = string
+  default     = null
+  description = "The value off of which to filter with a key/value pair. Example: \"Ubuntu\" (Not needed if providing ami_id value.)"
+}
+
+variable "ami_most_recent" {
+  type        = bool
+  default     = true
+  description = "If more than one result is returned, use the most recent AMI. (Not needed if providing ami_id value.)"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%versions.tf
new file mode 100644
index 0000000..e7c8bf5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-image%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%main.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%outputs.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%variables.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%versions.tf
new file mode 100644
index 0000000..5e4ce43
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%existing-private-network%versions.tf
@@ -0,0 +1,3 @@
+terraform {
+  required_version = ">= 0.14"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%main.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%outputs.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%variables.tf
new file mode 100644
index 0000000..e69de29
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%versions.tf
new file mode 100644
index 0000000..5e4ce43
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseexamples%external-dns%versions.tf
@@ -0,0 +1,3 @@
+terraform {
+  required_version = ">= 0.14"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemain.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemain.tf
new file mode 100644
index 0000000..c0749dd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemain.tf
@@ -0,0 +1,200 @@
+data "aws_region" "current" {}
+
+data "aws_ami" "ubuntu" {
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  owners = ["099720109477"] # Canonical
+}
+
+resource "aws_kms_key" "tfe_key" {
+  deletion_window_in_days = var.kms_key_deletion_window
+  description             = "AWS KMS Customer-managed key to encrypt TFE and other resources"
+  enable_key_rotation     = false
+  is_enabled              = true
+  key_usage               = "ENCRYPT_DECRYPT"
+
+  # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+  tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-kms-key"
+    Name = "tfe-kms-key"
+  }
+}
+
+resource "aws_kms_alias" "key_alias" {
+  name          = "alias/${var.kms_key_alias}"
+  target_key_id = aws_kms_key.tfe_key.key_id
+}
+
+locals {
+  active_active  = var.node_count >= 2
+  ami_id         = local.default_ami_id ? data.aws_ami.ubuntu.id : var.ami_id
+  default_ami_id = var.ami_id == ""
+  fqdn           = "${var.tfe_subdomain}.${var.domain_name}"
+}
+
+module "object_storage" {
+  source = "./modules/object_storage"
+
+  friendly_name_prefix       = var.friendly_name_prefix
+  kms_key_arn                = aws_kms_key.tfe_key.arn
+  tfe_license_filepath       = var.tfe_license_filepath
+  external_bootstrap_bucket  = var.external_bootstrap_bucket
+  tfe_license_name           = var.tfe_license_name
+  proxy_cert_bundle_filepath = var.proxy_cert_bundle_filepath
+  proxy_cert_bundle_name     = var.proxy_cert_bundle_name
+}
+
+module "service_accounts" {
+  source = "./modules/service_accounts"
+
+  aws_bucket_bootstrap_arn = module.object_storage.s3_bucket_bootstrap_arn
+  aws_bucket_data_arn      = module.object_storage.s3_bucket_data_arn
+  friendly_name_prefix     = var.friendly_name_prefix
+  kms_key_arn              = aws_kms_key.tfe_key.arn
+  iam_role_policy_arns     = var.iam_role_policy_arns
+}
+
+module "secrets_manager" {
+  source = "./modules/secrets_manager"
+
+  friendly_name_prefix  = var.friendly_name_prefix
+  deploy_secretsmanager = var.deploy_secretsmanager
+}
+
+module "networking" {
+  count = var.deploy_vpc ? 1 : 0
+
+  source = "./modules/networking"
+
+  friendly_name_prefix         = var.friendly_name_prefix
+  network_cidr                 = var.network_cidr
+  network_private_subnet_cidrs = var.network_private_subnet_cidrs
+  network_public_subnet_cidrs  = var.network_public_subnet_cidrs
+}
+
+locals {
+  network_id                   = var.deploy_vpc ? module.networking[0].network_id : var.network_id
+  network_private_subnets      = var.deploy_vpc ? module.networking[0].network_private_subnets : var.network_private_subnets
+  network_public_subnets       = var.deploy_vpc ? module.networking[0].network_public_subnets : var.network_public_subnets
+  network_private_subnet_cidrs = var.deploy_vpc ? module.networking[0].network_private_subnet_cidrs : var.network_private_subnet_cidrs
+}
+
+module "redis" {
+  source = "./modules/redis"
+
+  active_active                = local.active_active
+  friendly_name_prefix         = var.friendly_name_prefix
+  network_id                   = local.network_id
+  network_private_subnet_cidrs = var.network_private_subnet_cidrs
+  network_subnets_private      = local.network_private_subnets
+  tfe_instance_sg              = module.vm.tfe_instance_sg
+
+  cache_size           = var.redis_cache_size
+  engine_version       = var.redis_engine_version
+  parameter_group_name = var.redis_parameter_group_name
+
+  kms_key_arn                 = aws_kms_key.tfe_key.arn
+  redis_encryption_in_transit = var.redis_encryption_in_transit
+  redis_encryption_at_rest    = var.redis_encryption_at_rest
+  redis_require_password      = var.redis_require_password
+}
+
+module "database" {
+  source = "./modules/database"
+
+  db_size                      = var.db_size
+  engine_version               = var.postgres_engine_version
+  friendly_name_prefix         = var.friendly_name_prefix
+  network_id                   = local.network_id
+  network_private_subnet_cidrs = var.network_private_subnet_cidrs
+  network_subnets_private      = local.network_private_subnets
+  tfe_instance_sg              = module.vm.tfe_instance_sg
+}
+
+module "user_data" {
+  source = "./modules/user_data"
+
+  active_active           = local.active_active
+  aws_bucket_bootstrap    = var.external_bootstrap_bucket != null ? var.external_bootstrap_bucket : module.object_storage.s3_bucket_bootstrap
+  aws_bucket_data         = module.object_storage.s3_bucket_data
+  aws_region              = data.aws_region.current.name
+  fqdn                    = local.fqdn
+  iact_subnet_list        = var.iact_subnet_list
+  iact_subnet_time_limit  = var.iact_subnet_time_limit
+  kms_key_arn             = aws_kms_key.tfe_key.arn
+  pg_dbname               = module.database.db_name
+  pg_password             = module.database.db_password
+  pg_netloc               = module.database.db_endpoint
+  pg_user                 = module.database.db_username
+  proxy_cert_bundle_name  = var.proxy_cert_bundle_name
+  proxy_ip                = var.proxy_ip
+  no_proxy                = var.no_proxy
+  redis_host              = module.redis.redis_endpoint
+  redis_pass              = module.redis.redis_password
+  redis_port              = module.redis.redis_port
+  redis_use_password_auth = module.redis.redis_use_password_auth
+  redis_use_tls           = module.redis.redis_transit_encryption_enabled
+  tfe_license             = var.tfe_license_name
+}
+
+module "load_balancer" {
+  count  = var.load_balancing_scheme != "PRIVATE_TCP" ? 1 : 0
+  source = "./modules/application_load_balancer"
+
+  active_active                  = local.active_active
+  admin_dashboard_ingress_ranges = var.admin_dashboard_ingress_ranges
+  certificate_arn                = var.acm_certificate_arn
+  domain_name                    = var.domain_name
+  friendly_name_prefix           = var.friendly_name_prefix
+  fqdn                           = local.fqdn
+  load_balancing_scheme          = var.load_balancing_scheme
+  network_id                     = local.network_id
+  network_public_subnets         = local.network_public_subnets
+  network_private_subnets        = local.network_private_subnets
+  ssl_policy                     = var.ssl_policy
+}
+
+module "private_tcp_load_balancer" {
+  count  = var.load_balancing_scheme == "PRIVATE_TCP" ? 1 : 0
+  source = "./modules/network_load_balancer"
+
+  active_active           = local.active_active
+  certificate_arn         = var.acm_certificate_arn
+  domain_name             = var.domain_name
+  friendly_name_prefix    = var.friendly_name_prefix
+  fqdn                    = local.fqdn
+  network_id              = local.network_id
+  network_private_subnets = local.network_private_subnets
+  ssl_policy              = var.ssl_policy
+}
+
+module "vm" {
+  source = "./modules/vm"
+
+  active_active                       = local.active_active
+  aws_iam_instance_profile            = module.service_accounts.aws_iam_instance_profile
+  ami_id                              = local.ami_id
+  aws_lb                              = var.load_balancing_scheme == "PRIVATE_TCP" ? null : module.load_balancer[0].aws_lb_security_group
+  aws_lb_target_group_tfe_tg_443_arn  = var.load_balancing_scheme == "PRIVATE_TCP" ? module.private_tcp_load_balancer[0].aws_lb_target_group_tfe_tg_443_arn : module.load_balancer[0].aws_lb_target_group_tfe_tg_443_arn
+  aws_lb_target_group_tfe_tg_8800_arn = var.load_balancing_scheme == "PRIVATE_TCP" ? module.private_tcp_load_balancer[0].aws_lb_target_group_tfe_tg_8800_arn : module.load_balancer[0].aws_lb_target_group_tfe_tg_8800_arn
+  asg_tags                            = var.asg_tags
+  default_ami_id                      = local.default_ami_id
+  friendly_name_prefix                = var.friendly_name_prefix
+  key_name                            = var.key_name
+  instance_type                       = var.instance_type
+  network_id                          = local.network_id
+  network_subnets_private             = local.network_private_subnets
+  network_private_subnet_cidrs        = local.network_private_subnet_cidrs
+  node_count                          = var.node_count
+  user_data_base64                    = module.user_data.tfe_user_data_base64
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%main.tf
new file mode 100644
index 0000000..9a7c530
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%main.tf
@@ -0,0 +1,151 @@
+resource "aws_security_group" "tfe_lb_allow" {
+  name   = "${var.friendly_name_prefix}-tfe-lb-allow"
+  vpc_id = var.network_id
+}
+
+resource "aws_security_group_rule" "tfe_lb_allow_inbound_http" {
+  type              = "ingress"
+  from_port         = 80
+  to_port           = 80
+  protocol          = "tcp"
+  cidr_blocks       = ["0.0.0.0/0"]
+  description       = "Allow HTTP (port 80) traffic inbound to TFE LB"
+  security_group_id = aws_security_group.tfe_lb_allow.id
+}
+
+resource "aws_security_group_rule" "tfe_lb_allow_inbound_https" {
+  type              = "ingress"
+  from_port         = 443
+  to_port           = 443
+  protocol          = "tcp"
+  cidr_blocks       = ["0.0.0.0/0"]
+  description       = "Allow HTTPS (port 443) traffic inbound to TFE LB"
+  security_group_id = aws_security_group.tfe_lb_allow.id
+}
+
+resource "aws_security_group_rule" "tfe_lb_allow_inbound_dashboard" {
+  count             = var.active_active ? 0 : 1
+  type              = "ingress"
+  from_port         = 8800
+  to_port           = 8800
+  protocol          = "tcp"
+  cidr_blocks       = var.admin_dashboard_ingress_ranges
+  description       = "Allow dashboard traffic inbound to TFE LB"
+  security_group_id = aws_security_group.tfe_lb_allow.id
+}
+
+resource "aws_security_group" "tfe_outbound_allow" {
+  name   = "${var.friendly_name_prefix}-tfe-outbound-allow"
+  vpc_id = var.network_id
+}
+
+resource "aws_security_group_rule" "tfe_outbound_allow_all" {
+  type        = "egress"
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+  description = "Allow all traffic outbound from TFE"
+
+  security_group_id = aws_security_group.tfe_outbound_allow.id
+}
+
+resource "aws_lb" "tfe_lb" {
+  name               = "${var.friendly_name_prefix}-tfe-web-alb"
+  internal           = (var.load_balancing_scheme == "PRIVATE")
+  load_balancer_type = "application"
+  subnets            = var.load_balancing_scheme == "PRIVATE" ? var.network_private_subnets : var.network_public_subnets
+
+  security_groups = [
+    aws_security_group.tfe_lb_allow.id,
+    aws_security_group.tfe_outbound_allow.id
+  ]
+}
+
+resource "aws_lb_listener" "tfe_listener_80" {
+  load_balancer_arn = aws_lb.tfe_lb.arn
+  port              = 80
+  protocol          = "HTTP"
+
+  default_action {
+    type = "redirect"
+
+    redirect {
+      port        = 443
+      protocol    = "HTTPS"
+      status_code = "HTTP_301"
+    }
+  }
+}
+
+resource "aws_lb_listener" "tfe_listener_443" {
+  load_balancer_arn = aws_lb.tfe_lb.arn
+  port              = 443
+  protocol          = "HTTPS"
+  ssl_policy        = var.ssl_policy
+  certificate_arn   = var.certificate_arn
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.tfe_tg_443.arn
+  }
+}
+
+resource "aws_lb_target_group" "tfe_tg_443" {
+  name     = "${var.friendly_name_prefix}-tfe-alb-tg-443"
+  port     = 443
+  protocol = "HTTPS"
+  vpc_id   = var.network_id
+
+  health_check {
+    path     = "/_health_check"
+    protocol = "HTTPS"
+    matcher  = "200-399"
+  }
+}
+
+resource "aws_lb_listener" "tfe_listener_8800" {
+  count             = var.active_active ? 0 : 1
+  load_balancer_arn = aws_lb.tfe_lb.arn
+  port              = 8800
+  protocol          = "HTTPS"
+  ssl_policy        = var.ssl_policy
+  certificate_arn   = var.certificate_arn
+
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.tfe_tg_8800[0].arn
+  }
+}
+
+resource "aws_lb_target_group" "tfe_tg_8800" {
+  count    = var.active_active ? 0 : 1
+  name     = "${var.friendly_name_prefix}-tfe-alb-tg-8800"
+  port     = 8800
+  protocol = "HTTPS"
+  vpc_id   = var.network_id
+
+  health_check {
+    path     = "/"
+    protocol = "HTTPS"
+    matcher  = "200-399"
+  }
+}
+
+data "aws_route53_zone" "tfe" {
+  name         = var.domain_name
+  private_zone = false
+}
+
+resource "aws_route53_record" "tfe" {
+  zone_id = data.aws_route53_zone.tfe.zone_id
+  name    = var.fqdn
+  type    = "A"
+
+  alias {
+    name                   = aws_lb.tfe_lb.dns_name
+    zone_id                = aws_lb.tfe_lb.zone_id
+    evaluate_target_health = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%outputs.tf
new file mode 100644
index 0000000..6329681
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%outputs.tf
@@ -0,0 +1,23 @@
+output "aws_lb_security_group" {
+  value = aws_security_group.tfe_lb_allow.id
+
+  description = "The identity of the security group attached to the load balancer."
+}
+
+output "aws_lb_target_group_tfe_tg_443_arn" {
+  value = aws_lb_target_group.tfe_tg_443.arn
+
+  description = "The Amazon Resource Name of the load balancer target group for traffic on port 443."
+}
+
+output "aws_lb_target_group_tfe_tg_8800_arn" {
+  value = var.active_active ? null : aws_lb_target_group.tfe_tg_8800[0].arn
+
+  description = "The Amazon Resource Name of the load balancer target group for traffic on port 8800."
+}
+
+output "load_balancer_address" {
+  value = aws_lb.tfe_lb.dns_name
+
+  description = "The DNS name of the load balancer."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%variables.tf
new file mode 100644
index 0000000..5e0ddd8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%variables.tf
@@ -0,0 +1,59 @@
+variable "domain_name" {
+  description = "The name of the Route 53 Hosted Zone in which a record will be created."
+  type        = string
+}
+
+variable "admin_dashboard_ingress_ranges" {
+  description = "A list of the CIDR blocks from which traffic will be authorized to access the administrator dashboard."
+  type        = list(string)
+}
+
+variable "certificate_arn" {
+  description = "The Amazon Resource Name of the SSL certificate to associate with the load balancer."
+  type        = string
+}
+
+variable "fqdn" {
+  description = "The fully qualified domain name to assign to the Route 53 record."
+  type        = string
+}
+
+variable "load_balancing_scheme" {
+  default     = "PRIVATE"
+  description = "Load Balancing Scheme. Supported values are: \"PRIVATE\"; \"PUBLIC\"."
+  type        = string
+
+  validation {
+    condition     = contains(["PRIVATE", "PUBLIC"], var.load_balancing_scheme)
+    error_message = "The load_balancer value must be one of: \"PRIVATE\"; \"PUBLIC\"."
+  }
+}
+
+variable "ssl_policy" {
+  description = "The name of the SSL policy to assign to the load balancer listeners."
+  type        = string
+}
+
+variable "network_id" {
+  description = "The identity of the VPC in which to deploy the load balancer target groups."
+  type        = string
+}
+
+variable "network_public_subnets" {
+  description = "A list of the identities of the public subnetworks in which to deploy the load balancer."
+  type        = list(string)
+}
+variable "network_private_subnets" {
+  description = "A list of the identities of the private subnetworks in which to deploy the load balancer."
+  type        = list(string)
+}
+
+variable "active_active" {
+  type        = bool
+  description = "Flag for active-active configuation: true for active-active, false for standalone."
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%versions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%application_load_balancer%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%main.tf
new file mode 100644
index 0000000..8937ce8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%main.tf
@@ -0,0 +1,79 @@
+resource "random_string" "postgresql_password" {
+  length  = 128
+  special = false
+}
+
+resource "aws_security_group" "postgresql" {
+  description = "The security group of the PostgreSQL deployment for TFE."
+  name        = "${var.friendly_name_prefix}-tfe-postgresql"
+  vpc_id      = var.network_id
+}
+
+resource "aws_security_group_rule" "postgresql_tfe_ingress" {
+  security_group_id        = aws_security_group.postgresql.id
+  type                     = "ingress"
+  from_port                = 5432
+  to_port                  = 5432
+  protocol                 = "tcp"
+  source_security_group_id = var.tfe_instance_sg
+}
+
+resource "aws_security_group_rule" "postgresql_tfe_egress" {
+  security_group_id        = aws_security_group.postgresql.id
+  type                     = "egress"
+  from_port                = 0
+  to_port                  = 0
+  protocol                 = "-1"
+  source_security_group_id = var.tfe_instance_sg
+}
+
+resource "aws_security_group_rule" "postgresql_ingress" {
+  security_group_id = aws_security_group.postgresql.id
+  type              = "ingress"
+  from_port         = 5432
+  to_port           = 5432
+  protocol          = "tcp"
+  cidr_blocks       = var.network_private_subnet_cidrs
+}
+
+resource "aws_security_group_rule" "postgresql_egress" {
+  security_group_id = aws_security_group.postgresql.id
+  type              = "egress"
+  from_port         = 5432
+  to_port           = 5432
+  protocol          = "tcp"
+  cidr_blocks       = var.network_private_subnet_cidrs
+}
+
+resource "aws_db_subnet_group" "tfe" {
+  name       = var.friendly_name_prefix
+  subnet_ids = var.network_subnets_private
+}
+
+resource "aws_db_instance" "postgresql" {
+  allocated_storage = 20
+  engine            = "postgres"
+  instance_class    = var.db_size
+  password          = random_string.postgresql_password.result
+  # no special characters allowed
+  username = "espdtfe"
+
+  allow_major_version_upgrade = false
+  apply_immediately           = true
+  backup_retention_period     = 0
+  db_subnet_group_name        = aws_db_subnet_group.tfe.name
+  delete_automated_backups    = true
+  deletion_protection         = false
+  engine_version              = var.engine_version
+  identifier_prefix           = "${var.friendly_name_prefix}-tfe"
+  max_allocated_storage       = 0
+  multi_az                    = true
+  # no special characters allowed
+  name                   = "espdtfe"
+  port                   = 5432
+  publicly_accessible    = false
+  skip_final_snapshot    = true
+  storage_encrypted      = true
+  storage_type           = "gp2"
+  vpc_security_group_ids = [aws_security_group.postgresql.id]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%outputs.tf
new file mode 100644
index 0000000..5efeebc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%outputs.tf
@@ -0,0 +1,23 @@
+output "db_endpoint" {
+  value = aws_db_instance.postgresql.endpoint
+
+  description = "The connection endpoint of the PostgreSQL RDS instance in address:port format."
+}
+
+output "db_name" {
+  value = aws_db_instance.postgresql.name
+
+  description = "The name of the PostgreSQL RDS instance."
+}
+
+output "db_password" {
+  value = aws_db_instance.postgresql.password
+
+  description = "The password of the main PostgreSQL user."
+}
+
+output "db_username" {
+  value = aws_db_instance.postgresql.username
+
+  description = "The name of the main PostgreSQL user."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%variables.tf
new file mode 100644
index 0000000..8cce30c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%variables.tf
@@ -0,0 +1,43 @@
+variable "network_id" {
+  description = <<-EOD
+  The identity of the VPC in which the security group attached to the PostgreSQL RDS instance will be deployed.
+  EOD
+  type        = string
+}
+
+variable "db_size" {
+  type        = string
+  default     = "db.m4.xlarge"
+  description = "PostgreSQL instance size."
+}
+
+variable "engine_version" {
+  type        = string
+  default     = "9.5.15"
+  description = "PostgreSQL version."
+}
+
+variable "network_subnets_private" {
+  description = <<-EOD
+  A list of the identities of the private subnetworks in which the PostgreSQL RDS instance will be deployed.
+  EOD
+  type        = list(string)
+}
+
+variable "tfe_instance_sg" {
+  description = <<-EOD
+  The identity of the security group attached to the TFE EC2 instance(s), which will be authorized for communication with the PostgreSQL RDS instance.
+  EOD
+  type        = string
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
+
+variable "network_private_subnet_cidrs" {
+  type        = list(string)
+  description = "(Optional) List of private subnet CIDR ranges to create in VPC."
+  default     = ["10.0.32.0/20", "10.0.48.0/20"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%versions.tf
new file mode 100644
index 0000000..4c3fe64
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%database%versions.tf
@@ -0,0 +1,13 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.1"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%main.tf
new file mode 100644
index 0000000..5cd31dc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%main.tf
@@ -0,0 +1,73 @@
+resource "aws_lb" "tfe_lb" {
+  name               = "${var.friendly_name_prefix}-tfe-nlb"
+  internal           = true
+  load_balancer_type = "network"
+  subnets            = var.network_private_subnets
+}
+
+resource "aws_lb_listener" "tfe_listener_443" {
+  load_balancer_arn = aws_lb.tfe_lb.arn
+  port              = 443
+  protocol          = "TCP"
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.tfe_tg_443.arn
+  }
+}
+
+resource "aws_lb_target_group" "tfe_tg_443" {
+  name     = "${var.friendly_name_prefix}-tfe-alb-tg-443"
+  port     = 443
+  protocol = "TCP"
+  vpc_id   = var.network_id
+
+  health_check {
+    protocol = "TCP"
+  }
+}
+
+resource "aws_lb_listener" "tfe_listener_8800" {
+  count             = var.active_active ? 0 : 1
+  load_balancer_arn = aws_lb.tfe_lb.arn
+  port              = 8800
+  protocol          = "TCP"
+  ssl_policy        = var.ssl_policy
+  certificate_arn   = var.certificate_arn
+
+
+  default_action {
+    type             = "forward"
+    target_group_arn = aws_lb_target_group.tfe_tg_8800[0].arn
+  }
+}
+
+resource "aws_lb_target_group" "tfe_tg_8800" {
+  count    = var.active_active ? 0 : 1
+  name     = "${var.friendly_name_prefix}-tfe-alb-tg-8800"
+  port     = 8800
+  protocol = "TCP"
+  vpc_id   = var.network_id
+
+  health_check {
+    path     = "/"
+    protocol = "TCP"
+  }
+}
+
+data "aws_route53_zone" "tfe" {
+  name         = var.domain_name
+  private_zone = false
+}
+
+resource "aws_route53_record" "tfe" {
+  zone_id = data.aws_route53_zone.tfe.zone_id
+  name    = var.fqdn
+  type    = "A"
+
+  alias {
+    name                   = aws_lb.tfe_lb.dns_name
+    zone_id                = aws_lb.tfe_lb.zone_id
+    evaluate_target_health = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%outputs.tf
new file mode 100644
index 0000000..f3cd06e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%outputs.tf
@@ -0,0 +1,17 @@
+output "aws_lb_target_group_tfe_tg_443_arn" {
+  value = aws_lb_target_group.tfe_tg_443.arn
+
+  description = "The Amazon Resource Name of the load balancer target group for traffic on port 443."
+}
+
+output "aws_lb_target_group_tfe_tg_8800_arn" {
+  value = var.active_active ? null : aws_lb_target_group.tfe_tg_8800[0].arn
+
+  description = "The Amazon Resource Name of the load balancer target group for traffic on port 8800."
+}
+
+output "load_balancer_address" {
+  value = aws_lb.tfe_lb.dns_name
+
+  description = "The DNS name of the load balancer."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%variables.tf
new file mode 100644
index 0000000..62f1d81
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%variables.tf
@@ -0,0 +1,39 @@
+variable "domain_name" {
+  description = "The name of the Route 53 Hosted Zone in which a record will be created."
+  type        = string
+}
+
+variable "certificate_arn" {
+  description = "The Amazon Resource Name of the SSL certificate to associate with the load balancer."
+  type        = string
+}
+
+variable "fqdn" {
+  description = "The fully qualified domain name to assign to the Route 53 record."
+  type        = string
+}
+
+variable "ssl_policy" {
+  description = "The name of the SSL policy to assign to the load balancer listeners."
+  type        = string
+}
+
+variable "network_id" {
+  description = "The identity of the VPC in which to deploy the load balancer target groups."
+  type        = string
+}
+
+variable "network_private_subnets" {
+  description = "A list of the identities of the private subnetworks in which to deploy the load balancer."
+  type        = list(string)
+}
+
+variable "active_active" {
+  type        = bool
+  description = "Flag for active-active configuation: true for active-active, false for standalone."
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%versions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%network_load_balancer%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%main.tf
new file mode 100644
index 0000000..54f0533
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%main.tf
@@ -0,0 +1,145 @@
+#################################################
+# AZs
+#################################################
+data "aws_availability_zones" "available" {
+  state = "available"
+}
+
+#################################################
+# VPC
+#################################################
+module "vpc" {
+  source  = "terraform-aws-modules/vpc/aws"
+  version = "~> 3.0"
+
+  azs                            = data.aws_availability_zones.available.names
+  cidr                           = var.network_cidr
+  create_igw                     = true
+  default_security_group_egress  = []
+  default_security_group_ingress = []
+  enable_dns_hostnames           = true
+  enable_dns_support             = true
+  enable_nat_gateway             = true
+  manage_default_security_group  = true
+  map_public_ip_on_launch        = true
+  name                           = "${var.friendly_name_prefix}-tfe-vpc"
+  one_nat_gateway_per_az         = false
+  private_subnets                = var.network_private_subnet_cidrs
+  public_subnets                 = var.network_public_subnet_cidrs
+  single_nat_gateway             = false
+
+  # Prefixes removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+  igw_tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-igw"
+    Name = "tfe-igw"
+  }
+  nat_eip_tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-nat-eip"
+    Name = "tfe-nat-eip"
+  }
+  nat_gateway_tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-tgw"
+    Name = "tfe-tgw"
+  }
+  private_route_table_tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-rtb-private"
+    Name = "tfe-rtb-private"
+  }
+  private_subnet_tags = {
+    # Name = "${var.friendly_name_prefix}-private"
+    Name = "private"
+  }
+  public_route_table_tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-rtb-public"
+    Name = "tfe-rtb-public"
+  }
+  public_subnet_tags = {
+    # Name = "${var.friendly_name_prefix}-public"
+    Name = "public"
+  }
+  vpc_tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-vpc"
+    Name = "tfe-vpc"
+  }
+}
+
+resource "aws_security_group" "ssm" {
+  description = "The security group of Systems Manager for TFE."
+  name        = "${var.friendly_name_prefix}-tfe"
+  vpc_id      = module.vpc.vpc_id
+
+  ingress {
+    from_port = 443
+    protocol  = "tcp"
+    to_port   = 443
+
+    cidr_blocks = module.vpc.private_subnets_cidr_blocks
+    description = "Allow the ingress of HTTPS traffic from all private subnets."
+  }
+}
+
+module "vpc_endpoints" {
+  source  = "terraform-aws-modules/vpc/aws//modules/vpc-endpoints"
+  version = "~> 3.0"
+
+  security_group_ids = [aws_security_group.ssm.id]
+  vpc_id             = module.vpc.vpc_id
+
+  endpoints = {
+    ec2 = {
+      service             = "ec2"
+      service_type        = "Interface"
+      private_dns_enabled = true
+      subnet_ids          = module.vpc.private_subnets
+    }
+    ec2messages = {
+      private_dns_enabled = true
+      service             = "ec2messages"
+      service_type        = "Interface"
+      subnet_ids          = module.vpc.private_subnets
+      # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+      tags = {
+        # Name = "${var.friendly_name_prefix}-tfe-ec2messages-vpc-endpoint"
+        Name = "tfe-ec2messages-vpc-endpoint"
+      }
+    }
+    kms = {
+      service             = "kms"
+      service_type        = "Interface"
+      private_dns_enabled = true
+      subnet_ids          = module.vpc.private_subnets
+    }
+    s3 = {
+      route_table_ids = module.vpc.private_route_table_ids
+      service         = "s3"
+      service_type    = "Gateway"
+      # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+      tags = {
+        # Name = "${var.friendly_name_prefix}-tfe-s3-vpc-endpoint"
+        Name = "tfe-s3-vpc-endpoint"
+      }
+    }
+    ssm = {
+      private_dns_enabled = true
+      service             = "ssm"
+      service_type        = "Interface"
+      subnet_ids          = module.vpc.private_subnets
+      # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+      tags = {
+        # Name = "${var.friendly_name_prefix}-tfe-ssm-vpc-endpoint"
+        Name = "tfe-ssm-vpc-endpoint"
+      }
+    }
+    ssmmessages = {
+      private_dns_enabled = true
+      service             = "ssmmessages"
+      service_type        = "Interface"
+      subnet_ids          = module.vpc.private_subnets
+      # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+      tags = {
+        # Name = "${var.friendly_name_prefix}-tfe-ssmmessages-vpc-endpoint"
+        Name = "tfe-ssmmessages-vpc-endpoint"
+      }
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%outputs.tf
new file mode 100644
index 0000000..bf59383
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%outputs.tf
@@ -0,0 +1,23 @@
+output "network_id" {
+  value = module.vpc.vpc_id
+
+  description = "The identity of the VPC in which resources will be delpoyed."
+}
+
+output "network_private_subnets" {
+  value = module.vpc.private_subnets
+
+  description = "A list of the identities of the private subnetworks in which resources will be deployed."
+}
+
+output "network_public_subnets" {
+  value = module.vpc.public_subnets
+
+  description = "A list of the identities of the public subnetworks in which resources will be deployed."
+}
+
+output "network_private_subnet_cidrs" {
+  value = module.vpc.private_subnets_cidr_blocks
+
+  description = "A list of the CIDR blocks which comprise the private subnetworks."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%variables.tf
new file mode 100644
index 0000000..b20b974
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%variables.tf
@@ -0,0 +1,23 @@
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
+
+# Network
+variable "network_cidr" {
+  type        = string
+  description = "(Optional) CIDR block for VPC."
+  default     = "10.0.0.0/16"
+}
+
+variable "network_private_subnet_cidrs" {
+  type        = list(string)
+  description = "(Optional) List of private subnet CIDR ranges to create in VPC."
+  default     = ["10.0.32.0/20", "10.0.48.0/20"]
+}
+
+variable "network_public_subnet_cidrs" {
+  type        = list(string)
+  description = "(Optional) List of public subnet CIDR ranges to create in VPC."
+  default     = ["10.0.0.0/20", "10.0.16.0/20"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%versions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%networking%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%main.tf
new file mode 100644
index 0000000..70b7de8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%main.tf
@@ -0,0 +1,71 @@
+resource "aws_s3_bucket" "tfe_bootstrap_bucket" {
+  bucket = "${var.friendly_name_prefix}-tfe-bootstrap"
+  acl    = "private"
+
+  versioning {
+    enabled = true
+  }
+
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        kms_master_key_id = var.kms_key_arn
+        sse_algorithm     = "aws:kms"
+      }
+    }
+  }
+
+  force_destroy = true
+}
+
+resource "aws_s3_bucket_object" "tfe_license" {
+  count  = var.external_bootstrap_bucket == null ? 1 : 0
+  bucket = aws_s3_bucket.tfe_bootstrap_bucket.id
+  key    = var.tfe_license_name
+  source = var.tfe_license_filepath
+}
+
+resource "aws_s3_bucket_object" "proxy_cert_bundle" {
+  count  = (var.proxy_cert_bundle_name != "" && var.external_bootstrap_bucket == null) ? 1 : 0
+  bucket = aws_s3_bucket.tfe_bootstrap_bucket.id
+  key    = var.proxy_cert_bundle_name
+  source = var.proxy_cert_bundle_filepath
+}
+
+resource "aws_s3_bucket_public_access_block" "tfe_bootstrap_bucket" {
+  bucket = aws_s3_bucket.tfe_bootstrap_bucket.id
+
+  block_public_acls       = true
+  block_public_policy     = true
+  restrict_public_buckets = true
+  ignore_public_acls      = true
+}
+
+resource "aws_s3_bucket" "tfe_data_bucket" {
+  bucket = "${var.friendly_name_prefix}-tfe-data"
+  acl    = "private"
+
+  versioning {
+    enabled = true
+  }
+
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        kms_master_key_id = var.kms_key_arn
+        sse_algorithm     = "aws:kms"
+      }
+    }
+  }
+
+  force_destroy = true
+}
+
+resource "aws_s3_bucket_public_access_block" "tfe_data" {
+  bucket = aws_s3_bucket.tfe_data_bucket.id
+
+  block_public_acls       = true
+  block_public_policy     = true
+  restrict_public_buckets = true
+  ignore_public_acls      = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%outputs.tf
new file mode 100644
index 0000000..a134e0e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%outputs.tf
@@ -0,0 +1,23 @@
+output "s3_bucket_bootstrap" {
+  value = aws_s3_bucket.tfe_bootstrap_bucket.id
+
+  description = "The name of the S3 bucket which contains TFE bootstrap artifacts."
+}
+
+output "s3_bucket_bootstrap_arn" {
+  value = aws_s3_bucket.tfe_bootstrap_bucket.arn
+
+  description = "The Amazon Resource Name of the S3 bucket which contains TFE bootstrap artifacts."
+}
+
+output "s3_bucket_data" {
+  value = aws_s3_bucket.tfe_data_bucket.id
+
+  description = "The name of the S3 bucket which contains TFE runtime data."
+}
+
+output "s3_bucket_data_arn" {
+  value = aws_s3_bucket.tfe_data_bucket.arn
+
+  description = "The Amazon Resource Name of the S3 bucket which contains TFE runtime data."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%variables.tf
new file mode 100644
index 0000000..9f873ae
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%variables.tf
@@ -0,0 +1,38 @@
+variable "kms_key_arn" {
+  description = "The Amazon Resource Name of the KMS key with which S3 storage bucket objects will be encrypted."
+  type        = string
+}
+
+variable "tfe_license_name" {
+  type        = string
+  default     = "ptfe-license.rli"
+  description = "(Required) Filename for PTFE license file."
+}
+
+variable "tfe_license_filepath" {
+  type        = string
+  description = "(Required) Absolute filepath to location of PTFE license file."
+}
+
+variable "external_bootstrap_bucket" {
+  type        = string
+  description = "The name of the S3 bucket for Replicated licenses."
+  default     = null
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
+
+variable "proxy_cert_bundle_filepath" {
+  description = "The pathname of the certificate bundle file for the HTTP proxy."
+  type        = string
+}
+
+variable "proxy_cert_bundle_name" {
+  description = <<-EOD
+  The name to assign to the S3 storage bucket object which will contain the certificate bundle file for the HTTP proxy.
+  EOD
+  type        = string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%versions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%object_storage%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%main.tf
new file mode 100644
index 0000000..a0ecf2f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%main.tf
@@ -0,0 +1,82 @@
+resource "random_id" "redis_password" {
+  count       = var.active_active ? 1 : 0
+  byte_length = 16
+}
+
+resource "aws_security_group" "redis" {
+  count       = var.active_active ? 1 : 0
+  description = "The security group of the Redis deployment for TFE."
+  name        = "${var.friendly_name_prefix}-tfe-redis"
+  vpc_id      = var.network_id
+}
+
+resource "aws_security_group_rule" "redis_tfe_ingress" {
+  count                    = var.active_active ? 1 : 0
+  security_group_id        = aws_security_group.redis[0].id
+  type                     = "ingress"
+  from_port                = var.redis_port
+  to_port                  = var.redis_port
+  protocol                 = "tcp"
+  source_security_group_id = var.tfe_instance_sg
+}
+
+resource "aws_security_group_rule" "redis_tfe_egress" {
+  count                    = var.active_active ? 1 : 0
+  security_group_id        = aws_security_group.redis[0].id
+  type                     = "egress"
+  from_port                = 0
+  to_port                  = 0
+  protocol                 = "-1"
+  source_security_group_id = var.tfe_instance_sg
+}
+
+resource "aws_security_group_rule" "redis_ingress" {
+  count             = var.active_active ? 1 : 0
+  security_group_id = aws_security_group.redis[0].id
+  type              = "ingress"
+  from_port         = var.redis_port
+  to_port           = var.redis_port
+  protocol          = "tcp"
+  cidr_blocks       = var.network_private_subnet_cidrs
+}
+
+resource "aws_security_group_rule" "redis_egress" {
+  count             = var.active_active ? 1 : 0
+  security_group_id = aws_security_group.redis[0].id
+  type              = "egress"
+  from_port         = var.redis_port
+  to_port           = var.redis_port
+  protocol          = "tcp"
+  cidr_blocks       = var.network_private_subnet_cidrs
+}
+
+resource "aws_elasticache_subnet_group" "tfe" {
+  count      = var.active_active ? 1 : 0
+  name       = "${var.friendly_name_prefix}-tfe-redis"
+  subnet_ids = var.network_subnets_private
+}
+
+resource "aws_elasticache_replication_group" "redis" {
+  count                         = var.active_active ? 1 : 0
+  node_type                     = var.cache_size
+  number_cache_clusters         = 1
+  replication_group_description = "The replication group of the Redis deployment for TFE."
+  replication_group_id          = "${var.friendly_name_prefix}-tfe"
+
+  apply_immediately          = true
+  automatic_failover_enabled = false
+  auto_minor_version_upgrade = true
+  engine                     = "redis"
+  engine_version             = var.engine_version
+  parameter_group_name       = var.parameter_group_name
+  port                       = var.redis_port
+  security_group_ids         = [aws_security_group.redis[0].id]
+  snapshot_retention_limit   = 0
+  subnet_group_name          = aws_elasticache_subnet_group.tfe[0].name
+
+  auth_token                 = (var.redis_encryption_in_transit == true && var.redis_require_password == true) ? random_id.redis_password[0].hex : null
+  transit_encryption_enabled = var.redis_encryption_in_transit
+
+  at_rest_encryption_enabled = var.redis_encryption_at_rest
+  kms_key_id                 = (var.redis_encryption_at_rest == true) ? var.kms_key_arn : null
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%outputs.tf
new file mode 100644
index 0000000..c18bfb8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%outputs.tf
@@ -0,0 +1,45 @@
+output "aws_elasticache_subnet_group_name" {
+  value = var.active_active ? aws_elasticache_subnet_group.tfe[0].name : ""
+
+  description = "The name of the subnetwork group in which the Redis Elasticache replication group is deployed."
+}
+
+output "aws_security_group_redis" {
+  value = var.active_active ? aws_security_group.redis[0].id : ""
+
+  description = "The identity of the security group attached to the Redis Elasticache replication group."
+}
+
+output "redis_endpoint" {
+  value = var.active_active ? aws_elasticache_replication_group.redis[0].primary_endpoint_address : ""
+
+  description = "The IP address of the primary node in the Redis Elasticache replication group."
+}
+
+output "redis_port" {
+  value = var.active_active ? aws_elasticache_replication_group.redis[0].port : ""
+
+  description = "The port number on which the Redis Elasticache replication group accepts connections."
+}
+
+output "redis_password" {
+  value = (var.active_active == true && var.redis_require_password == true) ? random_id.redis_password[0].hex : ""
+
+  description = "The password which is required to create connections with the Redis Elasticache replication group."
+}
+
+output "redis_use_password_auth" {
+  value = (var.active_active == true && var.redis_require_password == true) ? true : false
+
+  description = <<-EOD
+  A boolean which indicates if password authentication is required by the Redis Elasticache replication group.
+  EOD
+}
+
+output "redis_transit_encryption_enabled" {
+  value = (var.active_active == true) ? aws_elasticache_replication_group.redis[0].transit_encryption_enabled : false
+
+  description = <<-EOD
+  A boolean which indicates if transit encryption is required by the Redis Elasticache replication group.
+  EOD
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%variables.tf
new file mode 100644
index 0000000..2be3793
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%variables.tf
@@ -0,0 +1,89 @@
+variable "active_active" {
+  type        = bool
+  description = "Flag for active-active configuation: true for active-active, false for standalone"
+}
+
+variable "kms_key_arn" {
+  description = <<-EOD
+  The Amazon Resource Name of the KMS key which will be used by the Redis Elasticache replication group to encrypt data 
+  at rest.
+  EOD
+  type        = string
+}
+
+variable "tfe_instance_sg" {
+  description = <<-EOD
+  The identity of the security group attached to the TFE EC2 instance(s) which will be authorized to communicate with 
+  the Redis Elasticache replication group.
+  EOD
+  type        = string
+}
+
+variable "network_id" {
+  description = <<-EOD
+  The identity of the VPC in which the security group attached to the Redis Elasticache replication group will be 
+  deployed.
+  EOD
+  type        = string
+}
+
+variable "network_subnets_private" {
+  description = <<-EOD
+  A list of the identities of the private subnetworks in which the Redis Elasticache replication group will be deployed.
+  EOD
+  type        = list(string)
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
+
+variable "network_private_subnet_cidrs" {
+  type        = list(string)
+  description = "(Optional) List of private subnet CIDR ranges to create in VPC."
+  default     = ["10.0.32.0/20", "10.0.48.0/20"]
+}
+
+variable "redis_port" {
+  type        = number
+  description = "Set port for Redis. Defaults to 6379 default port"
+  default     = 6379
+}
+
+variable "cache_size" {
+  type        = string
+  default     = "cache.m4.large"
+  description = "Redis instance size."
+}
+
+variable "engine_version" {
+  type        = string
+  default     = "5.0.6"
+  description = "Redis enginer version."
+}
+
+variable "parameter_group_name" {
+  type        = string
+  default     = "default.redis5.0"
+  description = "Redis parameter group name."
+}
+
+# Security
+variable "redis_encryption_in_transit" {
+  type        = bool
+  description = "Determine whether Redis traffic is encrypted in transit."
+  default     = false
+}
+
+variable "redis_encryption_at_rest" {
+  type        = bool
+  description = "Determine whether Redis data is encrypted at rest."
+  default     = false
+}
+
+variable "redis_require_password" {
+  type        = bool
+  description = "Determine if a password is required for Redis."
+  default     = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%versions.tf
new file mode 100644
index 0000000..4c3fe64
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%redis%versions.tf
@@ -0,0 +1,13 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.1"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%main.tf
new file mode 100644
index 0000000..0bacba6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%main.tf
@@ -0,0 +1,20 @@
+resource "aws_secretsmanager_secret" "tfe_install" {
+  count = var.deploy_secretsmanager == true ? 1 : 0
+
+  name        = var.secretsmanager_secret_name == null ? "${var.friendly_name_prefix}-tfe-install-secrets" : var.secretsmanager_secret_name
+  description = "TFE install secret metadata"
+
+  # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+  tags = {
+    # Name = "${var.friendly_name_prefix}-tfe-install-secrets"
+    Name = "tfe-install-secrets"
+  }
+}
+
+resource "aws_secretsmanager_secret_version" "tfe_install_secrets" {
+  count = var.secretsmanager_secrets != {} && var.deploy_secretsmanager == true ? 1 : 0
+
+  secret_id     = aws_secretsmanager_secret.tfe_install[0].id
+  secret_string = jsonencode(var.secretsmanager_secrets)
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%outputs.tf
new file mode 100644
index 0000000..39751f4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%outputs.tf
@@ -0,0 +1,5 @@
+output "secretsmanager_secret_arn" {
+  value = (var.deploy_secretsmanager == true) ? aws_secretsmanager_secret.tfe_install[0].arn : null
+
+  description = "The Amazon Resource Name of the Secrets Manager secret."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%variables.tf
new file mode 100644
index 0000000..fbbd0c0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%variables.tf
@@ -0,0 +1,22 @@
+variable "friendly_name_prefix" {
+  description = "The friendly name prefix which will be used for tagging and naming the Secrets Manager secret."
+  type        = string
+}
+
+variable "deploy_secretsmanager" {
+  type        = bool
+  description = "(Optional) Boolean indicating whether to deploy AWS Secrets Manager secret (true) or not (false)."
+  default     = true
+}
+
+variable "secretsmanager_secret_name" {
+  type        = string
+  description = "(Optional) Name of AWS Secrets Manager secret metadata. Only specify if deploy_secretsmanager is true (this value will be auto-generated if left unspecified and deploy_secretsmanager is true)."
+  default     = null
+}
+
+variable "secretsmanager_secrets" {
+  type        = map(string)
+  description = "(Optional) Map of key/value pairs of TFE install secrets. Only specify if deploy_secretsmanager is true."
+  default     = null
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%versions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%secrets_manager%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%main.tf
new file mode 100644
index 0000000..5b059ce
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%main.tf
@@ -0,0 +1,117 @@
+resource "aws_iam_instance_profile" "tfe" {
+  name_prefix = "${var.friendly_name_prefix}-tfe"
+  role        = aws_iam_role.instance_role.name
+}
+
+resource "aws_iam_role" "instance_role" {
+  name_prefix        = "${var.friendly_name_prefix}-tfe"
+  assume_role_policy = data.aws_iam_policy_document.instance_role.json
+}
+
+data "aws_iam_policy_document" "instance_role" {
+  statement {
+    effect = "Allow"
+    actions = [
+      "sts:AssumeRole",
+    ]
+
+    principals {
+      type        = "Service"
+      identifiers = ["ec2.amazonaws.com"]
+    }
+  }
+}
+
+resource "aws_iam_role_policy" "s3_bootstrap_bucket" {
+  name   = "${var.friendly_name_prefix}-tfe-bootstrap"
+  role   = aws_iam_role.instance_role.id
+  policy = data.aws_iam_policy_document.tfe_s3_bootstrap_bucket.json
+}
+
+data "aws_iam_policy_document" "tfe_s3_bootstrap_bucket" {
+  statement {
+    sid    = "AllowS3ActionsBootstrap"
+    effect = "Allow"
+    actions = [
+      "s3:Get*",
+      "s3:List*",
+      "s3:PutObject*"
+    ]
+    resources = [
+      var.aws_bucket_bootstrap_arn,
+      "${var.aws_bucket_bootstrap_arn}/*",
+    ]
+  }
+  statement {
+    sid    = "AllowKMSActionsBootstrap"
+    effect = "Allow"
+    actions = [
+      "kms:Decrypt",
+      "kms:ReEncrypt",
+      "kms:GenerateDataKey",
+      "kms:DescribeKey",
+    ]
+    resources = [
+      var.kms_key_arn,
+    ]
+  }
+}
+
+resource "aws_iam_role_policy" "s3_data_bucket_put" {
+  name   = "${var.friendly_name_prefix}-tfe-data"
+  role   = aws_iam_role.instance_role.id
+  policy = data.aws_iam_policy_document.tfe_s3_data_bucket_put.json
+}
+
+data "aws_iam_policy_document" "tfe_s3_data_bucket_put" {
+  statement {
+    sid    = "AllowS3ActionsData"
+    effect = "Allow"
+    actions = [
+      "s3:*"
+    ]
+    resources = [
+      var.aws_bucket_data_arn,
+      "${var.aws_bucket_data_arn}/*"
+    ]
+  }
+
+  statement {
+    sid    = "AllowKMSActionsData"
+    effect = "Allow"
+    actions = [
+      "kms:Decrypt",
+      "kms:ReEncrypt",
+      "kms:GenerateDataKey",
+      "kms:DescribeKey",
+    ]
+    resources = [
+      var.kms_key_arn,
+    ]
+  }
+}
+
+resource "aws_iam_role_policy" "tfe_asg_discovery" {
+  name   = "${var.friendly_name_prefix}-tfe-asg-discovery"
+  role   = aws_iam_role.instance_role.id
+  policy = data.aws_iam_policy_document.tfe_asg_discovery.json
+}
+
+data "aws_iam_policy_document" "tfe_asg_discovery" {
+  statement {
+    effect = "Allow"
+
+    actions = [
+      "autoscaling:Describe*"
+    ]
+
+    resources = ["*"]
+  }
+}
+
+resource "aws_iam_role_policy_attachment" "misc" {
+  for_each = var.iam_role_policy_arns
+
+  role       = aws_iam_role.instance_role.name
+  policy_arn = each.value
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%outputs.tf
new file mode 100644
index 0000000..924cee4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%outputs.tf
@@ -0,0 +1,9 @@
+output "aws_iam_instance_profile" {
+  value = aws_iam_instance_profile.tfe.name
+
+  description = <<-EOD
+  The name of the IAM instance profile to be attached to the TFE EC2 instance(s) which is authorized to access the S3 
+  storage buckets and EC2 autoscaling group.
+  EOD
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%variables.tf
new file mode 100644
index 0000000..f264d3e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%variables.tf
@@ -0,0 +1,25 @@
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
+
+variable "aws_bucket_bootstrap_arn" {
+  description = "The Amazon Resource Name of the S3 storage bucket which contains TFE bootstarp artifacts."
+  type        = string
+}
+
+variable "aws_bucket_data_arn" {
+  description = "The Amazon Resource Name of the S3 storage bucket whih contains TFE runtime data."
+  type        = string
+}
+
+variable "kms_key_arn" {
+  description = "The Amazon Resource Name of the KMS key which is used to encrypt S3 storage bucket objects."
+  type        = string
+}
+
+variable "iam_role_policy_arns" {
+  default     = []
+  description = "A set of Amazon Resource Names of IAM role policys to be attached to the TFE IAM role."
+  type        = set(string)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%versions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%service_accounts%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%main.tf
new file mode 100644
index 0000000..cbb090d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%main.tf
@@ -0,0 +1,219 @@
+resource "random_string" "password" {
+  length  = 16
+  special = false
+}
+
+resource "random_id" "archivist_token" {
+  byte_length = 16
+}
+
+resource "random_id" "cookie_hash" {
+  byte_length = 16
+}
+
+resource "random_id" "enc_password" {
+  byte_length = 16
+}
+
+resource "random_id" "install_id" {
+  byte_length = 16
+}
+
+resource "random_id" "internal_api_token" {
+  byte_length = 16
+}
+
+resource "random_id" "root_secret" {
+  byte_length = 16
+}
+
+resource "random_id" "registry_session_secret_key" {
+  byte_length = 16
+}
+
+resource "random_id" "registry_session_encryption_key" {
+  byte_length = 16
+}
+
+resource "random_id" "user_token" {
+  byte_length = 16
+}
+
+locals {
+  base_configs = {
+    installation_type = {
+      value = "production"
+    }
+
+    production_type = {
+      value = "external"
+    }
+
+    hostname = {
+      value = var.fqdn
+    }
+    user_token = {
+      value = random_id.user_token.hex
+    }
+
+    archivist_token = {
+      value = random_id.archivist_token.hex
+    }
+
+    cookie_hash = {
+      value = random_id.cookie_hash.hex
+    }
+
+    root_secret = {
+      value = random_id.root_secret.hex
+    }
+
+    registry_session_secret_key = {
+      value = random_id.registry_session_secret_key.hex
+    }
+
+    registry_session_encryption_key = {
+      value = random_id.registry_session_encryption_key.hex
+    }
+
+    internal_api_token = {
+      value = random_id.internal_api_token.hex
+    }
+
+    install_id = {
+      value = random_id.install_id.hex
+    }
+
+    iact_subnet_list = {
+      value = join(",", var.iact_subnet_list)
+    }
+
+    iact_subnet_time_limit = {
+      value = var.iact_subnet_time_limit != null ? tostring(var.iact_subnet_time_limit) : ""
+    }
+  }
+
+  base_external_configs = {
+    enable_active_active = {
+      value = var.active_active ? "1" : "0"
+    }
+
+    pg_dbname = {
+      value = var.pg_dbname
+    }
+
+    pg_netloc = {
+      value = var.pg_netloc
+    }
+
+    pg_password = {
+      value = var.pg_password
+    }
+
+    pg_user = {
+      value = var.pg_user
+    }
+
+    enc_password = {
+      value = random_id.enc_password.hex
+    }
+  }
+
+  external_aws_configs = {
+    placement = {
+      value = "placement_s3"
+    }
+
+    aws_instance_profile = {
+      value = "1"
+    }
+
+    s3_bucket = {
+      value = var.aws_bucket_data
+    }
+
+    s3_region = {
+      value = var.aws_region
+    }
+
+    s3_sse = {
+      value = "aws:kms"
+    }
+
+    s3_sse_kms_key_id = {
+      value = var.kms_key_arn
+    }
+  }
+
+  redis_configs = {
+    redis_host = {
+      value = var.redis_host
+    }
+
+    redis_pass = {
+      value = var.redis_pass
+    }
+
+    redis_port = {
+      value = var.redis_port
+    }
+
+    redis_use_password_auth = {
+      value = var.redis_use_password_auth
+    }
+
+    redis_use_tls = {
+      value = var.redis_use_tls
+    }
+  }
+}
+
+locals {
+  replicated_base_config = {
+    BypassPreflightChecks        = true
+    DaemonAuthenticationPassword = random_string.password.result
+    DaemonAuthenticationType     = "password"
+    ImportSettingsFrom           = "/etc/ptfe-settings.json"
+    LicenseFileLocation          = "/etc/ptfe-license.rli"
+    TlsBootstrapType             = "self-signed"
+    TlsBootstrapHostname         = var.fqdn
+  }
+}
+
+## Build tfe config json
+locals {
+  # take all the partials and merge them into the base configs, if false, merging empty map is noop
+  is_redis_configs = var.active_active ? local.redis_configs : {}
+  tfe_configs      = jsonencode(merge(local.base_configs, local.base_external_configs, local.external_aws_configs, local.is_redis_configs))
+}
+
+## build replicated config json
+locals {
+  repl_configs = jsonencode(merge(local.replicated_base_config))
+}
+
+locals {
+  tfe_user_data = templatefile(
+    "${path.module}/templates/tfe_ec2.sh.tpl",
+    {
+      s3_bucket_bootstrap = var.aws_bucket_bootstrap
+      tfe_license         = var.tfe_license
+      replicated          = base64encode(local.repl_configs)
+      settings            = base64encode(local.tfe_configs)
+      active_active       = var.active_active
+      proxy_ip            = var.proxy_ip
+      proxy_cert          = var.proxy_cert_bundle_name
+      no_proxy = join(
+        ",",
+        concat(
+          [
+            "127.0.0.1",
+            "169.254.169.254",
+            ".aws.ce.redhat.com",
+          ],
+          var.no_proxy
+        )
+      )
+    }
+  )
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%outputs.tf
new file mode 100644
index 0000000..411d2f1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%outputs.tf
@@ -0,0 +1,17 @@
+output "replicated_dashboard_password" {
+  value = random_string.password.result
+
+  description = "The password which is required to access the administrator dashboard."
+}
+
+output "tfe_user_data_base64" {
+  value = base64encode(local.tfe_user_data)
+
+  description = "The Base64 encoded user data script to be executed when the TFE EC2 instances are launched."
+}
+
+output "user_token" {
+  value = local.base_configs.user_token
+
+  description = "The token which is required to create the initial TFE administrator user."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%variables.tf
new file mode 100644
index 0000000..fbdcf3b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%variables.tf
@@ -0,0 +1,101 @@
+
+variable "fqdn" {
+  description = "The fully qualified domain name of the load balancer."
+  type        = string
+}
+variable "active_active" {
+  default     = true
+  description = "A boolean that indicates if the TFE deployment is Active/Active or Standalone."
+  type        = bool
+}
+variable "aws_bucket_bootstrap" {
+  description = "The name of the S3 storage bucket which contains TFE bootstrap artifacts."
+  type        = string
+}
+variable "aws_bucket_data" {
+  description = "The name of the S3 storage bucket which contains TFE runtime data."
+  type        = string
+}
+variable "aws_region" {
+  description = "The region in which the S3 storage bucket which contains TFE runtime data is deployed."
+  type        = string
+}
+variable "tfe_license" {
+  description = "The name of the S3 storage bucket object which contains the TFE license."
+  type        = string
+}
+variable "kms_key_arn" {
+  description = "The Amazon Resource Name of the KMS key which is used to encrypt S3 storage bucket objects."
+  type        = string
+}
+variable "redis_host" {
+  default     = ""
+  description = "The IP address of the primary node in the Redis Elasticache replication group."
+  type        = string
+}
+variable "redis_pass" {
+  default     = ""
+  description = "The password which is required to create connections with the Redis Elasticache replication group."
+  type        = string
+}
+variable "redis_port" {
+  default     = ""
+  description = "The port number on which the Redis Elasticache replication group accepts connections."
+  type        = string
+}
+
+variable "redis_use_password_auth" {
+  type        = bool
+  default     = false
+  description = "Determines if the Replicated configuration is aware to use password auth."
+}
+
+variable "redis_use_tls" {
+  type        = bool
+  default     = false
+  description = "Determines if the Replicated configuration is aware to use TLS/HTTPS."
+}
+
+variable "pg_netloc" {
+  description = "The connection endpoint of the PostgreSQL RDS instance in address:port format."
+  type        = string
+}
+variable "pg_dbname" {
+  description = "The name of the PostgreSQL RDS instance."
+  type        = string
+}
+variable "pg_user" {
+  description = "The name of the main PostgreSQL user."
+  type        = string
+}
+variable "pg_password" {
+  description = "The password of the main PostgreSQL user."
+  type        = string
+}
+
+variable "proxy_ip" {
+  description = "The IP address of the HTTP proxy through which TFE traffic will be routed."
+  type        = string
+}
+variable "proxy_cert_bundle_name" {
+  type        = string
+  description = "(Optional) name of cert bundle stored in S3"
+  default     = ""
+}
+variable "no_proxy" {
+  type        = list(string)
+  description = "(Optional) List of IP addresses to not proxy"
+  default     = []
+}
+
+variable "iact_subnet_list" {
+  default     = []
+  description = "A list of CIDR masks that configure the ability to retrieve the IACT from outside the host."
+  type        = list(string)
+}
+
+variable "iact_subnet_time_limit" {
+  default     = 60
+  description = "The time limit that requests from the subnets listed can request the IACT, as measured from the instance creation in minutes."
+  type        = number
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%versions.tf
new file mode 100644
index 0000000..4ccbd83
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%user_data%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.1"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%main.tf
new file mode 100644
index 0000000..919c59c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%main.tf
@@ -0,0 +1,113 @@
+###############
+# TFE CLUSTER #
+###############
+resource "aws_security_group" "tfe_instance" {
+  name   = "${var.friendly_name_prefix}-tfe-ec2-sg"
+  vpc_id = var.network_id
+}
+
+resource "aws_security_group_rule" "tfe_ui" {
+  security_group_id        = aws_security_group.tfe_instance.id
+  type                     = "ingress"
+  from_port                = 443
+  to_port                  = 443
+  protocol                 = "tcp"
+  source_security_group_id = var.aws_lb
+  cidr_blocks              = var.aws_lb == null ? var.network_private_subnet_cidrs : null
+}
+
+resource "aws_security_group_rule" "tfe_inbound" {
+  security_group_id = aws_security_group.tfe_instance.id
+  type              = "ingress"
+  from_port         = 0
+  to_port           = 0
+  protocol          = "-1"
+  self              = true
+}
+
+resource "aws_security_group_rule" "tfe_outbound" {
+  security_group_id = aws_security_group.tfe_instance.id
+  type              = "egress"
+  from_port         = 0
+  to_port           = 0
+  protocol          = "-1"
+  cidr_blocks       = ["0.0.0.0/0"]
+}
+
+resource "aws_security_group_rule" "tfe_dashboard" {
+  count                    = var.active_active ? 0 : 1
+  security_group_id        = aws_security_group.tfe_instance.id
+  type                     = "ingress"
+  from_port                = 8800
+  to_port                  = 8800
+  protocol                 = "tcp"
+  source_security_group_id = var.aws_lb
+  cidr_blocks              = var.aws_lb == null ? var.network_private_subnet_cidrs : null
+}
+
+resource "aws_launch_configuration" "tfe" {
+  name_prefix      = "${var.friendly_name_prefix}-tfe-ec2-asg-lt-"
+  image_id         = var.ami_id
+  instance_type    = var.instance_type
+  user_data_base64 = var.user_data_base64
+
+  iam_instance_profile = var.aws_iam_instance_profile
+  key_name             = var.key_name
+  security_groups      = [aws_security_group.tfe_instance.id]
+
+  metadata_options {
+    http_endpoint = "enabled"
+    # A hop limit of at least 2 is required for AWS Cost Estimation to function.
+    http_put_response_hop_limit = 2
+    http_tokens                 = "optional"
+  }
+
+  root_block_device {
+    encrypted             = true
+    volume_type           = "gp2"
+    volume_size           = 50
+    delete_on_termination = true
+  }
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_autoscaling_group" "tfe_asg" {
+  name                = "${var.friendly_name_prefix}-tfe-asg"
+  min_size            = var.node_count
+  max_size            = var.node_count
+  desired_capacity    = var.node_count
+  vpc_zone_identifier = var.network_subnets_private
+  target_group_arns = var.active_active ? [var.aws_lb_target_group_tfe_tg_443_arn] : [
+    var.aws_lb_target_group_tfe_tg_8800_arn,
+    var.aws_lb_target_group_tfe_tg_443_arn,
+  ]
+  # Increases grace period for any AMI that is not the default Ubuntu
+  # since RHEL has longer startup time
+  health_check_grace_period = var.default_ami_id ? 900 : 1500
+  health_check_type         = "ELB"
+  launch_configuration      = aws_launch_configuration.tfe.name
+
+  tags = concat(
+    [
+      {
+        key                 = "Name"
+        value               = "${var.friendly_name_prefix}-tfe"
+        propagate_at_launch = true
+      },
+    ],
+    [
+      for k, v in var.asg_tags : {
+        key                 = k
+        value               = v
+        propagate_at_launch = true
+      }
+    ]
+  )
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%outputs.tf
new file mode 100644
index 0000000..28d5e47
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%outputs.tf
@@ -0,0 +1,13 @@
+output "tfe_instance_sg" {
+  value = aws_security_group.tfe_instance.id
+
+  description = "The identity of the security group attached to the TFE EC2 instance."
+}
+
+output "tfe_autoscaling_group" {
+  value = aws_autoscaling_group.tfe_asg
+
+  description = "The autoscaling group which hosts the TFE EC2 instance(s)."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%variables.tf
new file mode 100644
index 0000000..a814c2d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%variables.tf
@@ -0,0 +1,97 @@
+variable "default_ami_id" {
+  description = "The identity of the AMI which will be used to provision the TFE EC2 instance(s)."
+  type        = string
+}
+
+variable "user_data_base64" {
+  description = "A Base64 encoded user data script to be executed when launching the TFE EC2 instance(s)."
+  type        = string
+}
+
+variable "aws_lb" {
+  description = <<-EOD
+  The identity of the security group attached to the load balancer which will be
+  authorized to communicate with the TFE EC2 instance(s).
+  EOD
+  type        = string
+}
+
+variable "aws_lb_target_group_tfe_tg_443_arn" {
+  description = <<-EOD
+  The Amazon Resource Name of the load balancer target group for traffic on port
+  443 which will be backed by the TFE EC2 autoscaling group.
+  EOD
+  type        = string
+}
+
+variable "aws_lb_target_group_tfe_tg_8800_arn" {
+  description = <<-EOD
+  The Amazon Resource Name of the load balancer target group for traffic on port
+  8800 which will be backed by the TFE EC2 autoscaling group.
+  EOD
+  type        = string
+}
+
+variable "aws_iam_instance_profile" {
+  description = "The name of the IAM instance profile to be associated with the TFE EC2 instance(s)."
+  type        = string
+}
+
+variable "network_id" {
+  description = "The identity of the VPC in which the security group attached to the TFE EC2 instance will be delpoyed."
+  type        = string
+}
+
+variable "network_subnets_private" {
+  description = <<-EOD
+  A list of the identities of the private subnetworks in which the EC2 autoscaling group will be deployed.
+  EOD
+  type        = list(string)
+}
+
+variable "instance_type" {
+  description = "The instance type of TFE EC2 instance(s) to create."
+  type        = string
+}
+
+variable "active_active" {
+  type        = bool
+  description = "Flag for active-active configuation: true for active-active, false for standalone"
+}
+
+variable "ami_id" {
+  type        = string
+  description = "AMI ID to use for TFE instances"
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
+
+variable "node_count" {
+  type        = number
+  description = "The number of nodes you want in your autoscaling group (1 for standalone, 2 for active-active configuration)"
+}
+
+variable "asg_tags" {
+  type        = map(string)
+  description = <<DESC
+  (Optional) Map of tags only used for the autoscaling group. If you are using the AWS provider's default_tags, 
+  please note that it tags every taggable resource except for the autoscaling group, therefore this variable may
+  be used to duplicate the key/value pairs in the default_tags if you wish.
+  DESC
+  default     = {}
+}
+
+variable "network_private_subnet_cidrs" {
+  type        = list(string)
+  description = "(Optional) List of private subnet CIDR ranges to create in VPC."
+  default     = ["10.0.32.0/20", "10.0.48.0/20"]
+}
+
+variable "key_name" {
+  default     = null
+  description = "The name of the key pair to be used for SSH access to the EC2 instance(s)."
+  type        = string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%versions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisemodules%vm%versions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseoutputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseoutputs.tf
new file mode 100644
index 0000000..e0422fe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseoutputs.tf
@@ -0,0 +1,103 @@
+# KMS
+output "kms_key_arn" {
+  value = aws_kms_key.tfe_key.arn
+
+  description = "The Amazon Resource Name of the KMS key used to encrypt data at rest."
+}
+
+output "kms_key_id" {
+  value = aws_kms_key.tfe_key.key_id
+
+  description = "The identity of the KMS key used to encrypt data at rest."
+}
+
+# Network
+output "network_id" {
+  value = local.network_id
+
+  description = "The identity of the VPC in which resources are deployed."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
+
+output "private_subnet_ids" {
+  value = local.network_private_subnets
+
+  description = "The identities of the private subnetworks deployed within the VPC."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
+
+output "public_subnet_ids" {
+  value = local.network_public_subnets
+
+  description = "The identities of the public subnetworks deployed within the VPC."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
+
+output "network_private_subnet_cidrs" {
+  value = local.network_private_subnet_cidrs
+
+  description = "The CIDR blocks of the private subnetworks deployed within the VPC."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
+
+# Security Groups
+output "tfe_instance_sg" {
+  value = module.vm.tfe_instance_sg
+
+  description = "The identity of the security group attached to the TFE EC2 instance."
+}
+
+# Secrets Manager
+output "secretsmanager_secret_arn" {
+  value = module.secrets_manager.secretsmanager_secret_arn
+
+  description = "The Amazon Resource Name of the Secrets Manager secret."
+}
+
+# S3
+output "bootstrap_bucket_name" {
+  value = module.object_storage.s3_bucket_bootstrap
+
+  description = "The name of the S3 bucket which contains TFE bootstrap artifacts."
+}
+
+output "bootstrap_bucket_arn" {
+  value = module.object_storage.s3_bucket_bootstrap_arn
+
+  description = "The Amazon Resource Name of the S3 bucket which contains TFE bootstrap artifacts."
+}
+
+# Load balancer
+output "load_balancer_address" {
+  value = var.load_balancing_scheme == "PRIVATE_TCP" ? module.private_tcp_load_balancer[0].load_balancer_address : module.load_balancer[0].load_balancer_address
+
+  description = "The DNS name of the load balancer."
+}
+
+output "dns_configuration_notice" {
+  value = "If you are using external DNS, please make sure to create a DNS record using the load_balancer_address output that has been provided"
+
+  description = "A notice to inform users of how to configure an external DNS service to direct traffic to the load balancer."
+}
+
+output "login_url" {
+  value       = "https://${local.fqdn}/admin/account/new?token=${module.user_data.user_token.value}"
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+output "tfe_url" {
+  value       = "https://${local.fqdn}/"
+  description = "The URL to the TFE application."
+}
+
+output "tfe_autoscaling_group" {
+  value = module.vm.tfe_autoscaling_group
+
+  description = "The autoscaling group which hosts the TFE EC2 instance(s)."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%locals.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%locals.tf
new file mode 100644
index 0000000..863a341
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%locals.tf
@@ -0,0 +1,14 @@
+locals {
+  common_tags = {
+    Terraform   = "cloud"
+    Environment = "tfe_modules_test"
+    Description = "Private Active/Active"
+    Repository  = "hashicorp/terraform-aws-terraform-enterprise"
+    Team        = "Terraform Enterprise on Prem"
+    OkToDelete  = "True"
+  }
+
+  friendly_name_prefix = random_string.friendly_name.id
+  ssm_policy_arn       = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
+  test_name            = "${local.friendly_name_prefix}-test-private-active-active"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%main.tf
new file mode 100644
index 0000000..da7d763
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%main.tf
@@ -0,0 +1,64 @@
+provider "aws" {
+  assume_role {
+    role_arn = var.aws_role_arn
+  }
+
+  default_tags {
+    tags = local.common_tags
+  }
+}
+
+resource "random_string" "friendly_name" {
+  length  = 4
+  upper   = false # Some AWS resources do not accept uppercase characters.
+  number  = false
+  special = false
+}
+
+data "aws_ami" "rhel" {
+  owners = ["309956199498"] # RedHat
+
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["RHEL-7.9_HVM-*-x86_64-*-Hourly2-GP2"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+}
+
+locals {
+  http_proxy_port = 3128
+}
+
+module "private_active_active" {
+  source = "../../"
+
+  acm_certificate_arn  = var.acm_certificate_arn
+  domain_name          = var.domain_name
+  friendly_name_prefix = local.friendly_name_prefix
+  tfe_license_name     = "terraform-aws-terraform-enterprise.rli"
+
+  ami_id                      = data.aws_ami.rhel.id
+  deploy_secretsmanager       = false
+  external_bootstrap_bucket   = var.external_bootstrap_bucket
+  iact_subnet_list            = ["0.0.0.0/0"]
+  iam_role_policy_arns        = [local.ssm_policy_arn, "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess"]
+  instance_type               = "m5.4xlarge"
+  key_name                    = var.key_name
+  kms_key_alias               = local.test_name
+  load_balancing_scheme       = "PRIVATE"
+  node_count                  = 2
+  proxy_ip                    = "${aws_instance.proxy.private_ip}:${local.http_proxy_port}"
+  redis_encryption_at_rest    = false
+  redis_encryption_in_transit = true
+  redis_require_password      = true
+  tfe_license_filepath        = ""
+  tfe_subdomain               = local.test_name
+
+  asg_tags = local.common_tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%outputs.tf
new file mode 100644
index 0000000..accf685
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%outputs.tf
@@ -0,0 +1,37 @@
+output "private_active_active" {
+  value = module.private_active_active
+
+  description = "The outputs of the private_active_active module."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
+
+output "tfe_url" {
+  value = module.private_active_active.tfe_url
+
+  description = "The URL to the TFE application."
+}
+
+output "health_check_url" {
+  value = "${module.private_active_active.tfe_url}/_health_check"
+
+  description = "The URL with path to access the TFE instance health check."
+}
+
+output "iact_url" {
+  value = "${module.private_active_active.tfe_url}/admin/retrieve-iact"
+
+  description = "The URL with path to access the TFE instance Retrieve IACT."
+}
+
+output "initial_admin_user_url" {
+  value = "${module.private_active_active.tfe_url}/admin/initial-admin-user"
+
+  description = "The URL with path to access the TFE instance Initial Admin User."
+}
+
+output "proxy_instance_id" {
+  value = aws_instance.proxy.id
+
+  description = "The ID of the proxy EC2 instance."
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%proxy.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%proxy.tf
new file mode 100644
index 0000000..ab7e93d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%proxy.tf
@@ -0,0 +1,104 @@
+data "aws_ami" "ubuntu" {
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  owners = ["099720109477"] # Canonical
+}
+
+resource "aws_instance" "proxy" {
+  ami                  = data.aws_ami.ubuntu.id
+  instance_type        = "m4.large"
+  iam_instance_profile = aws_iam_instance_profile.proxy_ssm.name
+  key_name             = var.key_name
+
+  subnet_id = module.private_active_active.private_subnet_ids[0]
+
+  vpc_security_group_ids = [
+    aws_security_group.proxy.id,
+  ]
+
+  user_data_base64 = base64encode(
+    templatefile(
+      "${path.module}/templates/squidproxy.sh.tpl",
+      {
+        http_proxy_port = local.http_proxy_port
+      }
+    )
+  )
+
+  root_block_device {
+    volume_type = "gp2"
+    volume_size = 20
+  }
+}
+
+resource "aws_security_group" "proxy" {
+  name   = "${local.friendly_name_prefix}-sg-proxy-allow"
+  vpc_id = module.private_active_active.network_id
+
+  # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+  tags = {
+    # Name = "${local.friendly_name_prefix}-sg-proxy-allow"
+    Name = "sg-proxy-allow"
+  }
+}
+
+resource "aws_security_group_rule" "proxy_ingress" {
+  type        = "ingress"
+  from_port   = local.http_proxy_port
+  to_port     = local.http_proxy_port
+  protocol    = "tcp"
+  cidr_blocks = module.private_active_active.network_private_subnet_cidrs
+  description = "Allow internal traffic to proxy instance"
+
+  security_group_id = aws_security_group.proxy.id
+}
+
+resource "aws_security_group_rule" "proxy_egress" {
+  type        = "egress"
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+  description = "Allow all egress traffic from proxy instance"
+
+  security_group_id = aws_security_group.proxy.id
+}
+
+resource "aws_iam_instance_profile" "proxy_ssm" {
+  name_prefix = "${local.friendly_name_prefix}-proxy-ssm"
+  role        = aws_iam_role.proxy_instance_role.name
+}
+
+resource "aws_iam_role" "proxy_instance_role" {
+  name_prefix        = "${local.friendly_name_prefix}-proxy-ssm"
+  assume_role_policy = data.aws_iam_policy_document.proxy_instance_role.json
+}
+
+data "aws_iam_policy_document" "proxy_instance_role" {
+  statement {
+    effect = "Allow"
+    actions = [
+      "sts:AssumeRole",
+    ]
+
+    principals {
+      type        = "Service"
+      identifiers = ["ec2.amazonaws.com"]
+    }
+  }
+}
+
+resource "aws_iam_role_policy_attachment" "ssm" {
+  role       = aws_iam_role.proxy_instance_role.name
+  policy_arn = local.ssm_policy_arn
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%variables.tf
new file mode 100644
index 0000000..4196313
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%variables.tf
@@ -0,0 +1,25 @@
+variable "aws_role_arn" {
+  type        = string
+  description = "The AWS Role ARN to assume for this module."
+}
+
+variable "domain_name" {
+  type        = string
+  description = "Domain for creating the Terraform Enterprise subdomain on."
+}
+
+variable "external_bootstrap_bucket" {
+  type        = string
+  description = "The name of the S3 bucket for bootstrap artifacts."
+  default     = null
+}
+
+variable "acm_certificate_arn" {
+  type        = string
+  description = "The ARN of an existing ACM certificate."
+}
+
+variable "key_name" {
+  description = "The name of the key pair to be used for SSH access to the EC2 instance(s)."
+  type        = string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%versions.tf
new file mode 100644
index 0000000..14b990a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-active-active%versions.tf
@@ -0,0 +1,21 @@
+terraform {
+  backend "remote" {
+    organization = "terraform-enterprise-modules-test"
+
+    workspaces {
+      name = "aws-private-active-active"
+    }
+  }
+
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.1"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%certificates.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%certificates.tf
new file mode 100644
index 0000000..3f4e006
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%certificates.tf
@@ -0,0 +1,9 @@
+data "aws_s3_bucket_object" "proxy_certificate" {
+  bucket = var.external_bootstrap_bucket
+  key    = var.proxy_certificate_bucket_object_key
+}
+
+data "aws_s3_bucket_object" "proxy_private_key" {
+  bucket = var.external_bootstrap_bucket
+  key    = var.proxy_private_key_bucket_object_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%locals.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%locals.tf
new file mode 100644
index 0000000..e63653d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%locals.tf
@@ -0,0 +1,16 @@
+locals {
+  http_proxy_port = 3128
+
+  common_tags = {
+    Terraform   = "cloud"
+    Environment = "tfe_modules_test"
+    Description = "Private TCP Active/Active"
+    Repository  = "hashicorp/terraform-aws-terraform-enterprise"
+    Team        = "Terraform Enterprise on Prem"
+    OkToDelete  = "True"
+  }
+
+  friendly_name_prefix = random_string.friendly_name.id
+  ssm_policy_arn       = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
+  test_name            = "${local.friendly_name_prefix}-test-private-tcp-active-active"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%main.tf
new file mode 100644
index 0000000..9b13615
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%main.tf
@@ -0,0 +1,76 @@
+provider "aws" {
+  assume_role {
+    role_arn = var.aws_role_arn
+  }
+
+  default_tags {
+    tags = local.common_tags
+  }
+}
+
+resource "random_string" "friendly_name" {
+  length  = 4
+  upper   = false # Some AWS resources do not accept uppercase characters.
+  number  = false
+  special = false
+}
+
+data "aws_ami" "rhel" {
+  owners = ["309956199498"] # RedHat
+
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["RHEL-7.9_HVM-*-x86_64-*-Hourly2-GP2"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+}
+
+data "aws_ami" "ubuntu" {
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["ubuntu/images/hvm-ssd/ubuntu-focal-20.04-amd64-server-*"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  owners = ["099720109477"] # Canonical
+}
+
+module "private_tcp_active_active" {
+  source = "../../"
+
+  acm_certificate_arn  = var.acm_certificate_arn
+  domain_name          = var.domain_name
+  friendly_name_prefix = local.friendly_name_prefix
+  tfe_license_name     = "terraform-aws-terraform-enterprise.rli"
+
+  ami_id                      = data.aws_ami.rhel.id
+  deploy_secretsmanager       = false
+  external_bootstrap_bucket   = var.external_bootstrap_bucket
+  iact_subnet_list            = ["0.0.0.0/0"]
+  iam_role_policy_arns        = [local.ssm_policy_arn, "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess"]
+  instance_type               = "m5.8xlarge"
+  kms_key_alias               = local.test_name
+  load_balancing_scheme       = "PRIVATE_TCP"
+  node_count                  = 2
+  proxy_ip                    = "${aws_instance.proxy.private_ip}:${local.http_proxy_port}"
+  proxy_cert_bundle_name      = data.aws_s3_bucket_object.proxy_certificate.key
+  redis_encryption_at_rest    = true
+  redis_encryption_in_transit = true
+  redis_require_password      = true
+  tfe_license_filepath        = ""
+  tfe_subdomain               = local.test_name
+
+  asg_tags = local.common_tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%outputs.tf
new file mode 100644
index 0000000..8e34e3c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%outputs.tf
@@ -0,0 +1,45 @@
+output "private_tcp_active_active" {
+  value = module.private_tcp_active_active
+
+  description = "The outputs of the private_tcp_active_active module."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
+
+output "tfe_url" {
+  value = module.private_tcp_active_active.tfe_url
+
+  description = "The URL to the TFE application."
+}
+
+output "health_check_url" {
+  value = "${module.private_tcp_active_active.tfe_url}/_health_check"
+
+  description = "The URL with path to access the TFE instance health check."
+}
+
+output "iact_url" {
+  value = "${module.private_tcp_active_active.tfe_url}/admin/retrieve-iact"
+
+  description = "The URL with path to access the TFE instance Retrieve IACT."
+}
+
+output "initial_admin_user_url" {
+  value = "${module.private_tcp_active_active.tfe_url}/admin/initial-admin-user"
+
+  description = "The URL with path to access the TFE instance Initial Admin User."
+}
+
+output "proxy_instance_id" {
+  value = aws_instance.proxy.id
+
+  description = "The ID of the proxy EC2 instance."
+}
+
+output "tfe_autoscaling_group_name" {
+  value = module.private_tcp_active_active.tfe_autoscaling_group.name
+
+  description = "The name of the autoscaling group which hosts the TFE EC2 instance(s)."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%proxy.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%proxy.tf
new file mode 100644
index 0000000..71eebd1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%proxy.tf
@@ -0,0 +1,90 @@
+resource "aws_security_group" "proxy" {
+  name   = "${local.friendly_name_prefix}-sg-proxy-allow"
+  vpc_id = module.private_tcp_active_active.network_id
+
+  # Prefix removed until https://github.com/hashicorp/terraform-provider-aws/issues/19583 is resolved
+  tags = {
+    # Name = "${local.friendly_name_prefix}-sg-proxy-allow"
+    Name = "sg-proxy-allow"
+  }
+}
+
+resource "aws_security_group_rule" "proxy_ingress_mitmproxy" {
+  type        = "ingress"
+  from_port   = local.http_proxy_port
+  to_port     = local.http_proxy_port
+  protocol    = "tcp"
+  cidr_blocks = ["0.0.0.0/0"]
+  description = "Allow TFE traffic to proxy instance"
+
+  security_group_id = aws_security_group.proxy.id
+}
+
+resource "aws_security_group_rule" "proxy_egress" {
+  type        = "egress"
+  from_port   = 0
+  to_port     = 0
+  protocol    = "-1"
+  cidr_blocks = ["0.0.0.0/0"]
+  description = "Allow all egress traffic from proxy instance"
+
+  security_group_id = aws_security_group.proxy.id
+}
+
+resource "aws_iam_instance_profile" "proxy" {
+  name_prefix = "${local.friendly_name_prefix}-proxy"
+  role        = aws_iam_role.instance_role.name
+}
+
+resource "aws_iam_role" "instance_role" {
+  name_prefix        = "${local.friendly_name_prefix}-proxy"
+  assume_role_policy = data.aws_iam_policy_document.instance_role.json
+}
+
+data "aws_iam_policy_document" "instance_role" {
+  statement {
+    effect = "Allow"
+    actions = [
+      "sts:AssumeRole",
+    ]
+
+    principals {
+      type        = "Service"
+      identifiers = ["ec2.amazonaws.com"]
+    }
+  }
+}
+
+resource "aws_iam_role_policy_attachment" "ssm" {
+  role       = aws_iam_role.instance_role.name
+  policy_arn = local.ssm_policy_arn
+}
+
+resource "aws_instance" "proxy" {
+  ami           = data.aws_ami.ubuntu.id
+  instance_type = "m4.xlarge"
+
+  iam_instance_profile = aws_iam_instance_profile.proxy.name
+  key_name             = var.key_name
+  subnet_id            = module.private_tcp_active_active.private_subnet_ids[0]
+
+  vpc_security_group_ids = [
+    aws_security_group.proxy.id
+  ]
+
+  user_data = base64encode(
+    templatefile(
+      "${path.module}/templates/mitmproxy.sh.tpl",
+      {
+        certificate     = data.aws_s3_bucket_object.proxy_certificate.body
+        http_proxy_port = local.http_proxy_port
+        private_key     = data.aws_s3_bucket_object.proxy_private_key.body
+      }
+    )
+  )
+
+  root_block_device {
+    volume_type = "gp2"
+    volume_size = "100"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%variables.tf
new file mode 100644
index 0000000..dad75bb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%variables.tf
@@ -0,0 +1,35 @@
+variable "aws_role_arn" {
+  type        = string
+  description = "The AWS Role ARN to assume for this module."
+}
+
+variable "domain_name" {
+  type        = string
+  description = "Domain for creating the Terraform Enterprise subdomain on."
+}
+
+variable "external_bootstrap_bucket" {
+  type        = string
+  description = "The name of the S3 bucket for bootstrap artifacts."
+  default     = null
+}
+
+variable "acm_certificate_arn" {
+  type        = string
+  description = "The ARN of an existing ACM certificate."
+}
+
+variable "key_name" {
+  description = "The name of the key pair to be used for SSH access to the EC2 instance(s)."
+  type        = string
+}
+
+variable "proxy_certificate_bucket_object_key" {
+  description = "The key of the proxy certificate bucket object."
+  type        = string
+}
+
+variable "proxy_private_key_bucket_object_key" {
+  description = "The key of the proxy private key bucket object."
+  type        = string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%versions.tf
new file mode 100644
index 0000000..51865c2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%private-tcp-active-active%versions.tf
@@ -0,0 +1,21 @@
+terraform {
+  backend "remote" {
+    organization = "terraform-enterprise-modules-test"
+
+    workspaces {
+      name = "aws-private-tcp-active-active"
+    }
+  }
+
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.1"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%locals.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%locals.tf
new file mode 100644
index 0000000..c8bef4a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%locals.tf
@@ -0,0 +1,13 @@
+locals {
+  common_tags = {
+    Terraform   = "cloud"
+    Environment = "tfe_modules_test"
+    Description = "Public Active/Active"
+    Repository  = "hashicorp/terraform-aws-terraform-enterprise"
+    Team        = "Terraform Enterprise on Prem"
+    OkToDelete  = "True"
+  }
+
+  friendly_name_prefix = random_string.friendly_name.id
+  test_name            = "${local.friendly_name_prefix}-test-public-active-active"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%main.tf
new file mode 100644
index 0000000..b32d3b1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%main.tf
@@ -0,0 +1,41 @@
+provider "aws" {
+  assume_role {
+    role_arn = var.aws_role_arn
+  }
+
+  default_tags {
+    tags = local.common_tags
+  }
+}
+
+resource "random_string" "friendly_name" {
+  length  = 4
+  upper   = false # Some AWS resources do not accept uppercase characters.
+  number  = false
+  special = false
+}
+
+module "public_active_active" {
+  source = "../../"
+
+  acm_certificate_arn  = var.acm_certificate_arn
+  domain_name          = var.domain_name
+  friendly_name_prefix = local.friendly_name_prefix
+  tfe_license_name     = "terraform-aws-terraform-enterprise.rli"
+
+  deploy_secretsmanager       = false
+  external_bootstrap_bucket   = var.external_bootstrap_bucket
+  iam_role_policy_arns        = ["arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess"]
+  iact_subnet_list            = var.iact_subnet_list
+  instance_type               = "m5.xlarge"
+  kms_key_alias               = local.test_name
+  load_balancing_scheme       = "PUBLIC"
+  node_count                  = 2
+  redis_encryption_at_rest    = false
+  redis_encryption_in_transit = false
+  redis_require_password      = false
+  tfe_license_filepath        = ""
+  tfe_subdomain               = local.test_name
+
+  asg_tags = local.common_tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%outputs.tf
new file mode 100644
index 0000000..852c48b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%outputs.tf
@@ -0,0 +1,26 @@
+output "public_active_active" {
+  value       = module.public_active_active
+  description = "The output of all the public_active_active module."
+  # This output is marked as sensitive to work around a bug in Terraform 0.14
+  sensitive = true
+}
+
+output "tfe_url" {
+  value       = module.public_active_active.tfe_url
+  description = "The URL to the TFE application."
+}
+
+output "health_check_url" {
+  value       = "${module.public_active_active.tfe_url}/_health_check"
+  description = "The URL with path to access the TFE instance health check."
+}
+
+output "iact_url" {
+  value       = "${module.public_active_active.tfe_url}/admin/retrieve-iact"
+  description = "The URL with path to access the TFE instance Retrieve IACT."
+}
+
+output "initial_admin_user_url" {
+  value       = "${module.public_active_active.tfe_url}/admin/initial-admin-user"
+  description = "The URL with path to access the TFE instance Initial Admin User."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%variables.tf
new file mode 100644
index 0000000..64a7066
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%variables.tf
@@ -0,0 +1,25 @@
+variable "aws_role_arn" {
+  type        = string
+  description = "The AWS Role ARN to assume for this module."
+}
+
+variable "domain_name" {
+  type        = string
+  description = "Domain for creating the Terraform Enterprise subdomain on."
+}
+
+variable "external_bootstrap_bucket" {
+  type        = string
+  description = "The name of the S3 bucket for bootstrap artifacts."
+  default     = null
+}
+
+variable "iact_subnet_list" {
+  description = "A list of CIDR masks that configure the ability to retrieve the IACT from outside the host."
+  type        = list(string)
+}
+
+variable "acm_certificate_arn" {
+  type        = string
+  description = "The ARN of an existing ACM certificate."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%versions.tf
new file mode 100644
index 0000000..f5947b7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisetests%public-active-active%versions.tf
@@ -0,0 +1,21 @@
+terraform {
+  backend "remote" {
+    organization = "terraform-enterprise-modules-test"
+
+    workspaces {
+      name = "aws-public-active-active"
+    }
+  }
+
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.1"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisevariables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisevariables.tf
new file mode 100644
index 0000000..4c3167c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterprisevariables.tf
@@ -0,0 +1,258 @@
+# Common
+
+variable "ami_id" {
+  type        = string
+  default     = ""
+  description = "AMI ID to use for TFE instances"
+}
+
+variable "acm_certificate_arn" {
+  type        = string
+  description = "ACM certificate ARN to use with load balancer"
+}
+
+variable "asg_tags" {
+  type        = map(string)
+  description = <<DESC
+  (Optional) Map of tags only used for the autoscaling group. If you are using the AWS provider's default_tags, 
+  please note that it tags every taggable resource except for the autoscaling group, therefore this variable may
+  be used to duplicate the key/value pairs in the default_tags if you wish.
+  DESC
+  default     = {}
+}
+
+variable "redis_cache_size" {
+  type        = string
+  default     = "cache.m4.large"
+  description = "Redis instance size."
+}
+
+variable "redis_engine_version" {
+  type        = string
+  default     = "5.0.6"
+  description = "Redis enginer version."
+}
+
+variable "redis_parameter_group_name" {
+  type        = string
+  default     = "default.redis5.0"
+  description = "Redis parameter group name."
+}
+
+variable "db_size" {
+  type        = string
+  default     = "db.m4.xlarge"
+  description = "PostgreSQL instance size."
+}
+
+variable "postgres_engine_version" {
+  type        = string
+  default     = "9.6.20"
+  description = "PostgreSQL version."
+}
+
+variable "domain_name" {
+  type        = string
+  description = "Domain for creating the Terraform Enterprise subdomain on."
+}
+
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Friendly name prefix used for tagging and naming AWS resources."
+}
+
+variable "instance_type" {
+  default     = "m5.xlarge"
+  description = "The instance type of EC2 instance(s) to create."
+  type        = string
+}
+
+variable "network_id" {
+  default     = ""
+  description = "The identity of the VPC in which resources will be deployed."
+  type        = string
+}
+
+variable "network_private_subnets" {
+  default     = []
+  description = "A list of the identities of the private subnetworks in which resources will be deployed."
+  type        = list(string)
+}
+
+variable "network_public_subnets" {
+  default     = []
+  description = "A list of the identities of the public subnetworks in which resources will be deployed."
+  type        = list(string)
+}
+
+variable "node_count" {
+  type        = number
+  default     = 2
+  description = "The number of nodes you want in your autoscaling group (1 for standalone, 2 for active-active configuration)"
+
+  validation {
+    condition     = var.node_count <= 5
+    error_message = "The node_count value must be less than or equal to 5."
+  }
+}
+
+variable "ssl_policy" {
+  type        = string
+  default     = "ELBSecurityPolicy-2016-08"
+  description = "SSL policy to use on ALB listener"
+}
+
+variable "tfe_subdomain" {
+  type        = string
+  default     = "tfe"
+  description = "Subdomain for accessing the Terraform Enterprise UI."
+}
+
+variable "tfe_license_name" {
+  type        = string
+  default     = "ptfe-license.rli"
+  description = "The name to use when copying the TFE license file to the EC2 instance."
+}
+
+variable "tfe_license_filepath" {
+  description = "The pathname of the TFE license file on the system running Terraform."
+  type        = string
+}
+
+variable "external_bootstrap_bucket" {
+  type        = string
+  description = "The name of the S3 bucket for Replicated licenses."
+  default     = null
+}
+
+variable "iact_subnet_list" {
+  default     = []
+  description = "A list of CIDR masks that configure the ability to retrieve the IACT from outside the host."
+  type        = list(string)
+}
+
+variable "iact_subnet_time_limit" {
+  default     = 60
+  description = "The time limit that requests from the subnets listed can request the IACT, as measured from the instance creation in minutes."
+  type        = number
+}
+
+variable "iam_role_policy_arns" {
+  default     = []
+  description = "A set of Amazon Resource Names of IAM role policies to be attached to the TFE IAM role."
+  type        = set(string)
+}
+
+variable "key_name" {
+  default     = null
+  description = "The name of the key pair to be used for SSH access to the EC2 instance(s)."
+  type        = string
+}
+
+# KMS
+variable "kms_key_alias" {
+  type        = string
+  description = "KMS key alias for AWS KMS Customer managed key."
+  default     = "tfe-managed-kms"
+}
+
+variable "kms_key_deletion_window" {
+  type        = number
+  description = "(Optional) Duration in days to destroy the key after it is deleted. Must be between 7 and 30 days."
+  default     = 7
+}
+
+# Secrets Manager
+variable "deploy_secretsmanager" {
+  type        = bool
+  description = "(Optional) Boolean indicating whether to deploy AWS Secrets Manager secret (true) or not (false)."
+  default     = false
+}
+
+# Load Balancer
+variable "load_balancing_scheme" {
+  default     = "PRIVATE"
+  description = "Load Balancing Scheme. Supported values are: \"PRIVATE\"; \"PRIVATE_TCP\"; \"PUBLIC\"."
+  type        = string
+
+  validation {
+    condition     = contains(["PRIVATE", "PRIVATE_TCP", "PUBLIC"], var.load_balancing_scheme)
+    error_message = "The load_balancer value must be one of: \"PRIVATE\"; \"PRIVATE_TCP\"; \"PUBLIC\"."
+  }
+}
+
+# Network
+variable "deploy_vpc" {
+  type        = bool
+  description = "(Optional) Boolean indicating whether to deploy a VPC (true) or not (false)."
+  default     = true
+}
+
+variable "network_cidr" {
+  type        = string
+  description = "(Optional) CIDR block for VPC."
+  default     = "10.0.0.0/16"
+}
+
+variable "network_private_subnet_cidrs" {
+  type        = list(string)
+  description = "(Optional) List of private subnet CIDR ranges to create in VPC."
+  default     = ["10.0.32.0/20", "10.0.48.0/20"]
+}
+
+variable "network_public_subnet_cidrs" {
+  type        = list(string)
+  description = "(Optional) List of public subnet CIDR ranges to create in VPC."
+  default     = ["10.0.0.0/20", "10.0.16.0/20"]
+}
+
+variable "admin_dashboard_ingress_ranges" {
+  type        = list(string)
+  description = "(Optional) List of CIDR ranges that are allowed to acces the admin dashboard. Only used for standalone installations."
+  default     = ["0.0.0.0/0"]
+}
+
+# PROXY SETTINGS
+
+variable "proxy_ip" {
+  type        = string
+  description = "(Optional) IP address of existing web proxy to route TFE traffic through."
+  default     = ""
+}
+
+variable "proxy_cert_bundle_name" {
+  type        = string
+  description = "(Optional) Name for proxy cert bundle in S3."
+  default     = ""
+}
+
+variable "proxy_cert_bundle_filepath" {
+  type        = string
+  description = "(Optional) Filepath for proxy cert bundle to copy to S3."
+  default     = ""
+}
+
+variable "no_proxy" {
+  type        = list(string)
+  description = "(Optional) List of IP addresses to not proxy"
+  default     = []
+}
+
+# Redis
+variable "redis_encryption_in_transit" {
+  type        = bool
+  description = "Determine whether Redis traffic is encrypted in transit."
+  default     = false
+}
+
+variable "redis_encryption_at_rest" {
+  type        = bool
+  description = "Determine whether Redis data is encrypted at rest."
+  default     = false
+}
+
+variable "redis_require_password" {
+  type        = bool
+  description = "Determine if a password is required for Redis."
+  default     = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseversions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseversions.tf
new file mode 100644
index 0000000..241fbd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-aws-terraform-enterpriseversions.tf
@@ -0,0 +1,9 @@
+terraform {
+  required_version = ">= 0.14"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.38"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisedata.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisedata.tf
new file mode 100644
index 0000000..48b1cd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisedata.tf
@@ -0,0 +1,8 @@
+data "azurerm_client_config" "current" {}
+
+data "azurerm_storage_account" "tfe_redis_existing_storage_account" {
+  count = var.redis_rdb_backup_enabled == true && var.redis_rdb_existing_storage_account != "" ? 1 : 0
+
+  name                = var.redis_rdb_existing_storage_account
+  resource_group_name = var.redis_rdb_existing_storage_account_rg
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%main.tf
new file mode 100644
index 0000000..6ee2cf7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%main.tf
@@ -0,0 +1,24 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/license.rli"
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  key_vault_name   = var.key_vault_name
+  certificate_name = var.certificate_name
+
+  tags = var.tags
+
+  vm_node_count = 2
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%variables.tf
new file mode 100644
index 0000000..8ee3236
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%active_active%variables.tf
@@ -0,0 +1,57 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%main.tf
new file mode 100644
index 0000000..84def76
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%main.tf
@@ -0,0 +1,10 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/license.rli"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%variables.tf
new file mode 100644
index 0000000..a89b11b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%bare_minimum%variables.tf
@@ -0,0 +1,6 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%main.tf
new file mode 100644
index 0000000..5a2f12b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%main.tf
@@ -0,0 +1,31 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/license.rli"
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  key_vault_name   = var.key_vault_name
+  certificate_name = var.certificate_name
+
+  # Behind proxy information
+  proxy_ip   = var.proxy_ip
+  proxy_port = var.proxy_port
+
+  # Existing network information
+  network_id                 = var.network_id
+  network_private_subnet_id  = var.network_private_subnet_id
+  network_bastion_subnet_id  = var.network_bastion_subnet_id
+  network_frontend_subnet_id = var.network_frontend_subnet_id
+  network_redis_subnet_id    = var.network_redis_subnet_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%main.tf
new file mode 100644
index 0000000..a34b83a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%main.tf
@@ -0,0 +1,162 @@
+provider "azurerm" {
+  features {}
+}
+
+# Create cloud init for proxy, will be used if user data not otherwise provided
+# -----------------------------------------------------------------------------
+locals {
+  user_data_script = templatefile(
+    "${path.module}/files/proxy.sh.tpl",
+    {
+      http_proxy_port = var.vm_userdata_http_proxy_port
+    }
+  )
+}
+
+# Create a virtual network for proxy example
+# ------------------------------------------
+module "network" {
+  source = "../../existing_network/mock_resources"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  location             = var.location
+  resource_group_name  = var.resource_group_name
+
+  network_cidr                 = "10.0.0.0/16"
+  network_frontend_subnet_cidr = "10.0.0.0/20"
+  network_bastion_subnet_cidr  = "10.0.16.0/20"
+  network_private_subnet_cidr  = "10.0.32.0/20"
+  network_redis_subnet_cidr    = "10.0.48.0/20"
+}
+
+# Create an SSH key for proxy instance
+# ------------------------------------
+resource "tls_private_key" "proxy_ssh" {
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}
+
+resource "random_pet" "vm" {
+  length = 2
+}
+
+# Create public ip if desired
+# ---------------------------
+resource "azurerm_public_ip" "vm" {
+  count = var.vm_public_ip == true ? 1 : 0
+
+  name                = format("%s-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  allocation_method = "Dynamic"
+  domain_name_label = random_pet.vm.id
+
+  tags = var.tags
+}
+
+# Create a subnet for proxy
+# -------------------------
+resource "azurerm_subnet" "vm" {
+  name                = "${var.friendly_name_prefix}-vm-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_subnet_cidr]
+  virtual_network_name = "${var.friendly_name_prefix}-network"
+
+  depends_on = [module.network]
+}
+
+# Create a security group for proxy, default access is currently wide open
+# ------------------------------------------------------------------------
+resource "azurerm_network_security_group" "vm" {
+  name                = "${var.friendly_name_prefix}-vm-nsg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  security_rule {
+    name      = "allow-inbound"
+    priority  = 100
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.network_allow_range
+    source_port_range     = "*"
+
+    destination_port_range     = "*"
+    destination_address_prefix = var.network_subnet_cidr
+  }
+
+  tags = var.tags
+}
+
+# Associate proxy subnet with nsg
+# -------------------------------
+resource "azurerm_subnet_network_security_group_association" "vm_subnet_nsg_association" {
+  subnet_id                 = azurerm_subnet.vm.id
+  network_security_group_id = azurerm_network_security_group.vm.id
+}
+
+# Create a network interface for the proxy virtual machine
+# --------------------------------------------------------
+resource "azurerm_network_interface" "vm" {
+  name                = format("%s-vm-nic", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  ip_configuration {
+    name                          = "ipconfig"
+    subnet_id                     = azurerm_subnet.vm.id
+    public_ip_address_id          = var.vm_public_ip == true ? azurerm_public_ip.vm[0].id : null
+    private_ip_address_allocation = "dynamic"
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_network_interface_security_group_association" "vm" {
+  network_interface_id      = azurerm_network_interface.vm.id
+  network_security_group_id = azurerm_network_security_group.vm.id
+}
+
+# Create the proxy virtual machine
+# --------------------------------
+resource "azurerm_linux_virtual_machine" "vm" {
+  name                = format("%s-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  network_interface_ids = [azurerm_network_interface.vm.id]
+  size                  = "Standard_D1_v2"
+  admin_username        = var.vm_user
+
+  custom_data = var.vm_userdata_script == "" ? base64encode(local.user_data_script) : base64encode(var.vm_userdata_script)
+
+  # Source image id will be used if vm_image_id anything other than 'ubuntu' or 'rhel'
+  source_image_id = var.vm_image_id == "ubuntu" || var.vm_image_id == "rhel" ? null : var.vm_image_id
+
+  # Source image reference will be used if vm_image_id is 'ubuntu' or 'rhel'
+  dynamic "source_image_reference" {
+    for_each = var.vm_image_id == "ubuntu" || var.vm_image_id == "rhel" ? [1] : []
+
+    content {
+      publisher = var.vm_image_id == "ubuntu" ? "Canonical" : "RedHat"
+      offer     = var.vm_image_id == "ubuntu" ? "0001-com-ubuntu-server-focal" : "RHEL"
+      sku       = var.vm_image_id == "ubuntu" ? "20_04-lts" : "7.8"
+      version   = var.vm_image_id == "ubuntu" ? "latest" : "latest"
+    }
+  }
+
+  os_disk {
+    caching              = "ReadWrite"
+    storage_account_type = "Standard_LRS"
+  }
+
+  admin_ssh_key {
+    username   = var.vm_user
+    public_key = tls_private_key.proxy_ssh.public_key_openssh
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%outputs.tf
new file mode 100644
index 0000000..276b2ed
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%outputs.tf
@@ -0,0 +1,39 @@
+output "host_id" {
+  value = azurerm_linux_virtual_machine.vm.id
+}
+
+output "host_public_ip" {
+  value = azurerm_public_ip.vm.*.ip_address
+}
+
+output "host_dns" {
+  value = azurerm_public_ip.vm.*.fqdn
+}
+
+output "host_private_ip" {
+  value = azurerm_linux_virtual_machine.vm.private_ip_address
+}
+
+output "instance_private_key" {
+  value = tls_private_key.proxy_ssh.private_key_pem
+}
+
+output "network_id" {
+  value = module.network.network_id
+}
+
+output "network_redis_subnet_id" {
+  value = module.network.network_redis_subnet_id
+}
+
+output "network_private_subnet_id" {
+  value = module.network.network_private_subnet_id
+}
+
+output "network_frontend_subnet_id" {
+  value = module.network.network_frontend_subnet_id
+}
+
+output "network_bastion_subnet_id" {
+  value = module.network.network_bastion_subnet_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%variables.tf
new file mode 100644
index 0000000..5c95e1f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%mock_resources%variables.tf
@@ -0,0 +1,81 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  default     = "examplename"
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+# VM
+# --
+variable "vm_image_id" {
+  default     = "ubuntu"
+  type        = string
+  description = "Virtual machine image id - may be 'ubuntu' (default), 'rhel', or custom image resource id"
+
+  validation {
+    condition = (
+      var.vm_image_id == "ubuntu" ||
+      var.vm_image_id == "rhel" ||
+      substr(var.vm_image_id, 0, 14) == "/subscriptions"
+    )
+
+    error_message = "The vm_image_id value must be 'ubuntu', 'rhel', or an Azure image resource ID beginning with \"/subscriptions\"."
+  }
+}
+
+variable "vm_user" {
+  default     = "proxyuser"
+  type        = string
+  description = "Virtual machine user name"
+}
+
+variable "vm_public_ip" {
+  default     = false
+  type        = bool
+  description = "If true, will create a public IP resource and associate with VM NIC."
+}
+
+variable "vm_userdata_script" {
+  default = ""
+  type    = string
+}
+
+variable "vm_userdata_http_proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+# Network
+variable "network_allow_range" {
+  default     = "*"
+  type        = string
+  description = "Network range to allow access to TFE"
+}
+
+variable "network_subnet_cidr" {
+  default     = "10.0.64.0/20"
+  type        = string
+  description = "Subnet CIDR range for additional compute instance"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%variables.tf
new file mode 100644
index 0000000..68be9b2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%behind_proxy%variables.tf
@@ -0,0 +1,113 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# Network
+# -------
+variable "network_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network ID"
+}
+
+variable "network_private_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network private subnet ID"
+}
+
+variable "network_frontend_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network public subnet ID"
+}
+
+variable "network_bastion_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network Bastion subnet ID"
+}
+
+variable "network_redis_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network Redis subnet ID"
+}
+
+# Proxy
+# -----
+variable "proxy_ip" {
+  type        = string
+  description = "(Required) IP Address of the proxy server"
+}
+
+variable "proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+# variable "proxy_cert_name" {
+#   default     = ""
+#   type        = string
+#   description = "Name for the stored proxy certificate bundle"
+# }
+
+# variable "proxy_cert_path" {
+#   default     = ""
+#   type        = string
+#   description = "Local path to the proxy certificate bundle"
+# }
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%main.tf
new file mode 100644
index 0000000..7c89504
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%main.tf
@@ -0,0 +1,27 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/license.rli"
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  key_vault_name   = var.key_vault_name
+  certificate_name = var.certificate_name
+
+  tags = var.tags
+
+  vm_node_count = 2
+
+  # Existing custom image information
+  vm_image_id = var.vm_image_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%variables.tf
new file mode 100644
index 0000000..1cfd2ec
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%custom_image%variables.tf
@@ -0,0 +1,74 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# VM
+# --
+variable "vm_image_id" {
+  type        = string
+  description = "(Required) Virtual machine image id - may be 'ubuntu' (default), 'rhel', or custom image resource id"
+
+  validation {
+    condition = (
+      var.vm_image_id == "ubuntu" ||
+      var.vm_image_id == "rhel" ||
+      substr(var.vm_image_id, 0, 14) == "/subscriptions"
+    )
+
+    error_message = "The vm_image_id value must be 'ubuntu', 'rhel', or an Azure image resource ID beginning with \"/subscriptions\"."
+  }
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%main.tf
new file mode 100644
index 0000000..4539cc0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%main.tf
@@ -0,0 +1,31 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/license.rli"
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  key_vault_name   = var.key_vault_name
+  certificate_name = var.certificate_name
+
+  tags = var.tags
+
+  vm_node_count = 2
+
+  # Existing network information
+  network_id                 = var.network_id
+  network_private_subnet_id  = var.network_private_subnet_id
+  network_bastion_subnet_id  = var.network_bastion_subnet_id
+  network_frontend_subnet_id = var.network_frontend_subnet_id
+  network_redis_subnet_id    = var.network_redis_subnet_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%main.tf
new file mode 100644
index 0000000..21cb058
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%main.tf
@@ -0,0 +1,48 @@
+provider "azurerm" {
+  features {}
+}
+
+# Local variables and conditionals
+# --------------------------------
+locals {
+  resource_group_name = var.resource_group_name == "" ? azurerm_resource_group.tfe_resource_group[0].name : var.resource_group_name
+
+  active_active = var.vm_node_count >= 2 ? true : false
+}
+
+# Create Azure resource group
+# ---------------------------
+resource "azurerm_resource_group" "tfe_resource_group" {
+  count = var.resource_group_name == "" ? 1 : 0
+
+  name     = "${var.friendly_name_prefix}-rg"
+  location = var.location
+
+  tags = var.tags
+}
+
+# Create Azure virtual network for 'existing_network' example
+# -----------------------------------------------------------
+module "network" {
+  source = "../../../modules/network"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  resource_group_name  = local.resource_group_name
+  location             = var.location
+
+  active_active = local.active_active
+
+  network_cidr                 = var.network_cidr
+  network_private_subnet_cidr  = var.network_private_subnet_cidr
+  network_frontend_subnet_cidr = var.network_frontend_subnet_cidr
+  network_bastion_subnet_cidr  = var.network_bastion_subnet_cidr
+  network_redis_subnet_cidr    = var.network_redis_subnet_cidr
+  network_allow_range          = var.network_allow_range
+
+  load_balancer_type   = var.load_balancer_type
+  load_balancer_public = var.load_balancer_public
+
+  tags = var.tags
+
+  create_bastion = var.create_bastion
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%outputs.tf
new file mode 100644
index 0000000..dcbe822
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%outputs.tf
@@ -0,0 +1,27 @@
+# General
+# -------
+output "resource_group_name" {
+  value = local.resource_group_name
+}
+
+# Network
+# -------
+output "network_id" {
+  value = module.network.network_id
+}
+
+output "network_redis_subnet_id" {
+  value = module.network.network_redis_subnet_id
+}
+
+output "network_private_subnet_id" {
+  value = module.network.network_private_subnet_id
+}
+
+output "network_frontend_subnet_id" {
+  value = module.network.network_frontend_subnet_id
+}
+
+output "network_bastion_subnet_id" {
+  value = module.network.network_bastion_subnet_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%variables.tf
new file mode 100644
index 0000000..48a4f73
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%mock_resources%variables.tf
@@ -0,0 +1,152 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  default     = "examplename"
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = "example.com"
+  type        = string
+  description = "(Required) Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = "tfe"
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+# Bastion
+# -------
+variable "create_bastion" {
+  default     = true
+  type        = bool
+  description = "If true, will create Azure Bastion PaaS and required resources https://azure.microsoft.com/en-us/services/azure-bastion/"
+}
+
+# Network
+# -------
+variable "network_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network ID"
+}
+
+variable "network_private_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network private subnet ID"
+}
+
+variable "network_frontend_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network public subnet ID"
+}
+
+variable "network_bastion_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network Bastion subnet ID"
+}
+
+variable "network_redis_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network Redis subnet ID"
+}
+
+variable "network_cidr" {
+  default     = "10.0.0.0/16"
+  type        = string
+  description = "(Optional) CIDR range for network"
+}
+
+variable "network_private_subnet_cidr" {
+  default     = "10.0.32.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for TFE"
+}
+
+variable "network_frontend_subnet_cidr" {
+  default     = "10.0.0.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for frontend"
+}
+
+variable "network_bastion_subnet_cidr" {
+  default     = "10.0.16.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Bastion"
+}
+
+variable "network_redis_subnet_cidr" {
+  default     = "10.0.48.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Redis"
+}
+
+variable "network_allow_range" {
+  default     = "*"
+  type        = string
+  description = "(Optional) Network range to allow access to TFE"
+}
+
+# Load Balancer
+# -------------
+variable "load_balancer_type" {
+  default     = "application_gateway"
+  type        = string
+  description = "Expected value of 'application_gateway' or 'load_balancer'"
+
+  validation {
+    condition = (
+      var.load_balancer_type == "application_gateway" ||
+      var.load_balancer_type == "load_balancer"
+    )
+
+    error_message = "The load_balancer_type value must be 'application_gateway' or 'load_balancer'."
+  }
+}
+
+variable "load_balancer_public" {
+  default     = true
+  type        = bool
+  description = "Load balancer will use public IP if true"
+}
+
+# VM
+# --
+variable "vm_node_count" {
+  default     = 2
+  type        = number
+  description = "The number of instances to create for TFE environment."
+
+  validation {
+    condition     = var.vm_node_count <= 5
+    error_message = "The vm_node_count value must be less than or equal to 5."
+  }
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%variables.tf
new file mode 100644
index 0000000..13a14f5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%existing_network%variables.tf
@@ -0,0 +1,84 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# Network
+# -------
+variable "network_id" {
+  type        = string
+  description = "(Required) Existing network ID"
+}
+
+variable "network_private_subnet_id" {
+  type        = string
+  description = "(Required) Existing network private subnet ID"
+}
+
+variable "network_frontend_subnet_id" {
+  type        = string
+  description = "(Required) Existing network public subnet ID"
+}
+
+variable "network_bastion_subnet_id" {
+  type        = string
+  description = "(Required) Existing network Bastion subnet ID"
+}
+
+variable "network_redis_subnet_id" {
+  type        = string
+  description = "(Required) Existing network Redis subnet ID"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%main.tf
new file mode 100644
index 0000000..256fe4d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%main.tf
@@ -0,0 +1,28 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/ptfe-license.rli"
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  key_vault_name   = var.key_vault_name
+  certificate_name = var.certificate_name
+
+  tags = var.tags
+
+  vm_node_count = 2
+
+  # External DNS information
+  dns_create_record = false
+  dns_external_fqdn = var.dns_external_fqdn
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%outputs.tf
new file mode 100644
index 0000000..b4f39b6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%outputs.tf
@@ -0,0 +1,25 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+output "load_balancer_ip" {
+  value = module.tfe.load_balancer_ip
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%variables.tf
new file mode 100644
index 0000000..45dde00
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%external_dns%variables.tf
@@ -0,0 +1,64 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# DNS
+# ---
+variable "dns_external_fqdn" {
+  type        = string
+  description = "External DNS FQDN should be supplied if dns_create_record is false"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%main.tf
new file mode 100644
index 0000000..c8ce917
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%main.tf
@@ -0,0 +1,48 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = var.tfe_license_filepath
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  tags = var.tags
+
+  vm_node_count = 2
+
+  # Behind proxy information
+  proxy_ip        = var.proxy_ip
+  proxy_port      = var.proxy_port
+  proxy_cert_name = var.proxy_cert_name
+  proxy_cert_path = var.proxy_cert_path
+
+  # Existing network information
+  network_id                 = var.network_id
+  network_private_subnet_id  = var.network_private_subnet_id
+  network_frontend_subnet_id = var.network_frontend_subnet_id
+  network_redis_subnet_id    = var.network_redis_subnet_id
+
+  # Persona - Bank
+  vm_sku                                = "Standard_D32a_v4"
+  vm_image_id                           = "rhel"
+  load_balancer_public                  = false
+  load_balancer_type                    = "load_balancer"
+  redis_enable_non_ssl_port             = false
+  redis_enable_authentication           = true
+  user_data_redis_use_tls               = true
+  redis_rdb_backup_enabled              = true
+  redis_rdb_backup_frequency            = 60
+  redis_rdb_existing_storage_account    = var.redis_rdb_existing_storage_account
+  redis_rdb_existing_storage_account_rg = var.redis_rdb_existing_storage_account_rg
+
+  create_bastion = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main-bastion.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main-bastion.tf
new file mode 100644
index 0000000..4c6d3b4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main-bastion.tf
@@ -0,0 +1,102 @@
+# Create an SSH key for bastion instance
+# --------------------------------------
+resource "tls_private_key" "bastion_ssh" {
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}
+
+# Bastion Networking
+# ------------------
+resource "azurerm_subnet" "vm_bastion" {
+  name                = "${var.friendly_name_prefix}-vm-bastion-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_bastion_subnet_cidr]
+  virtual_network_name = "${var.friendly_name_prefix}-network"
+
+  depends_on = [module.network]
+}
+
+resource "azurerm_public_ip" "vm_bastion" {
+  name                = format("%s-vm-bastion", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  allocation_method = "Dynamic"
+  domain_name_label = random_pet.vm.id
+  tags              = var.tags
+}
+
+resource "azurerm_network_interface" "vm_bastion" {
+  name                = format("%s-vm-bastion-nic", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  ip_configuration {
+    name                          = "ipconfig"
+    subnet_id                     = azurerm_subnet.vm_bastion.id
+    public_ip_address_id          = azurerm_public_ip.vm_bastion.id
+    private_ip_address_allocation = "dynamic"
+  }
+  tags = var.tags
+}
+
+resource "azurerm_network_security_group" "vm_bastion_nsg" {
+  name                = "${var.friendly_name_prefix}-vm-bastion-nsg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  # Allow inbound SSH traffic to bastion
+  # default value for network_allow_range is * so it is open to world if not supplied
+  security_rule {
+    name      = "allow-inbound-ssh"
+    priority  = 125
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.network_allow_range
+    source_port_range     = "*"
+
+    destination_port_range     = "22"
+    destination_address_prefix = var.network_bastion_subnet_cidr
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_network_interface_security_group_association" "bastion" {
+  network_interface_id      = azurerm_network_interface.vm_bastion.id
+  network_security_group_id = azurerm_network_security_group.vm_bastion_nsg.id
+}
+
+# VM bastion
+# ----------
+resource "azurerm_linux_virtual_machine" "vm_bastion" {
+  name                = format("%s-bastion-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  network_interface_ids = [azurerm_network_interface.vm_bastion.id]
+  size                  = "Standard_D1_v2"
+  admin_username        = "bastionuser"
+
+  source_image_reference {
+    publisher = "Canonical"
+    offer     = "UbuntuServer"
+    sku       = "18.04-LTS"
+    version   = "latest"
+  }
+
+  os_disk {
+    caching              = "ReadWrite"
+    storage_account_type = "Standard_LRS"
+  }
+
+  admin_ssh_key {
+    username   = "bastionuser"
+    public_key = tls_private_key.bastion_ssh.public_key_openssh
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main.tf
new file mode 100644
index 0000000..9cb87f1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%main.tf
@@ -0,0 +1,197 @@
+provider "azurerm" {
+  features {}
+}
+
+# Create cloud init for proxy, will be used if user data not otherwise provided
+# -----------------------------------------------------------------------------
+locals {
+  user_data_script = templatefile(
+    "${path.module}/files/mitm.sh.tpl",
+    {
+      http_proxy_port = var.vm_userdata_http_proxy_port
+      certificate     = tls_self_signed_cert.ca.cert_pem
+      private_key     = tls_private_key.ca.private_key_pem
+    }
+
+  )
+}
+
+# Create a virtual network for proxy example
+# ------------------------------------------
+module "network" {
+  source = "../../existing_network/mock_resources"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  location             = var.location
+  resource_group_name  = var.resource_group_name
+
+  network_cidr                 = "10.0.0.0/16"
+  network_frontend_subnet_cidr = "10.0.0.0/20"
+  network_private_subnet_cidr  = "10.0.32.0/20"
+  network_redis_subnet_cidr    = "10.0.48.0/20"
+
+  create_bastion = false
+}
+
+# Create an SSH key for proxy instance
+# ------------------------------------
+resource "tls_private_key" "proxy_ssh" {
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}
+
+# Create a certificate for proxy instance
+# ---------------------------------------
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "local_file" "ca" {
+  filename = "${path.module}/files/mitmproxy.pem"
+  content  = tls_self_signed_cert.ca.cert_pem
+}
+
+resource "random_pet" "vm" {
+  length = 2
+}
+
+# Create public ip if desired
+# ---------------------------
+resource "azurerm_public_ip" "vm" {
+  count = var.vm_public_ip == true ? 1 : 0
+
+  name                = format("%s-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  allocation_method = "Dynamic"
+  domain_name_label = random_pet.vm.id
+
+  tags = var.tags
+}
+
+# Create a subnet for proxy
+# -------------------------
+resource "azurerm_subnet" "vm" {
+  name                = "${var.friendly_name_prefix}-vm-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_subnet_cidr]
+  virtual_network_name = "${var.friendly_name_prefix}-network"
+
+  depends_on = [module.network]
+}
+
+# Create a security group for proxy, default access is currently wide open
+# ------------------------------------------------------------------------
+resource "azurerm_network_security_group" "vm" {
+  name                = "${var.friendly_name_prefix}-vm-nsg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  security_rule {
+    name      = "allow-inbound"
+    priority  = 100
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.network_allow_range
+    source_port_range     = "*"
+
+    destination_port_range     = "*"
+    destination_address_prefix = var.network_subnet_cidr
+  }
+
+  tags = var.tags
+}
+
+# Associate proxy subnet with nsg
+# -------------------------------
+resource "azurerm_subnet_network_security_group_association" "vm_subnet_nsg_association" {
+  subnet_id                 = azurerm_subnet.vm.id
+  network_security_group_id = azurerm_network_security_group.vm.id
+}
+
+# Create a network interface for the proxy virtual machine
+# --------------------------------------------------------
+resource "azurerm_network_interface" "vm" {
+  name                = format("%s-vm-nic", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  ip_configuration {
+    name                          = "ipconfig"
+    subnet_id                     = azurerm_subnet.vm.id
+    public_ip_address_id          = var.vm_public_ip == true ? azurerm_public_ip.vm[0].id : null
+    private_ip_address_allocation = "dynamic"
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_network_interface_security_group_association" "vm" {
+  network_interface_id      = azurerm_network_interface.vm.id
+  network_security_group_id = azurerm_network_security_group.vm.id
+}
+
+# Create the proxy virtual machine
+# --------------------------------
+resource "azurerm_linux_virtual_machine" "vm" {
+  name                = format("%s-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  network_interface_ids = [azurerm_network_interface.vm.id]
+  size                  = "Standard_D1_v2"
+  admin_username        = var.vm_user
+
+  custom_data = var.vm_userdata_script == "" ? base64encode(local.user_data_script) : base64encode(var.vm_userdata_script)
+
+  # Source image id will be used if vm_image_id anything other than 'ubuntu'
+  source_image_id = var.vm_image_id == "ubuntu" ? null : var.vm_image_id
+
+  dynamic "source_image_reference" {
+    for_each = var.vm_image_id == "ubuntu" ? [1] : []
+
+    content {
+      publisher = "Canonical"
+      offer     = "UbuntuServer"
+      sku       = "18.04-LTS"
+      version   = "latest"
+    }
+  }
+
+  os_disk {
+    caching              = "ReadWrite"
+    storage_account_type = "Standard_LRS"
+  }
+
+  admin_ssh_key {
+    username   = var.vm_user
+    public_key = tls_private_key.proxy_ssh.public_key_openssh
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%outputs.tf
new file mode 100644
index 0000000..e878de3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%outputs.tf
@@ -0,0 +1,56 @@
+output "host_id" {
+  value = azurerm_linux_virtual_machine.vm.id
+}
+
+output "host_public_ip" {
+  value = azurerm_public_ip.vm.*.ip_address
+}
+
+output "host_dns" {
+  value = azurerm_public_ip.vm.*.fqdn
+}
+
+output "host_private_ip" {
+  value = azurerm_linux_virtual_machine.vm.private_ip_address
+}
+
+output "network_id" {
+  value = module.network.network_id
+}
+
+output "network_redis_subnet_id" {
+  value = module.network.network_redis_subnet_id
+}
+
+output "network_private_subnet_id" {
+  value = module.network.network_private_subnet_id
+}
+
+output "network_frontend_subnet_id" {
+  value = module.network.network_frontend_subnet_id
+}
+
+output "proxy_ca_cert" {
+  value = tls_self_signed_cert.ca.cert_pem
+}
+
+# private key local file excluded via gitignore
+# ---------------------------------------------
+resource "local_file" "proxy_key" {
+  filename        = "${path.module}/proxy_key.pem"
+  file_permission = "0600"
+  content         = tls_private_key.proxy_ssh.private_key_pem
+}
+
+# bastion fqdn
+output "bastion_fqdn" {
+  value = azurerm_public_ip.vm_bastion.fqdn
+}
+
+# private key local file excluded via gitignore
+# ---------------------------------------------
+resource "local_file" "bastion_key" {
+  filename        = "${path.module}/bastion_key.pem"
+  file_permission = "0600"
+  content         = tls_private_key.bastion_ssh.private_key_pem
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%variables.tf
new file mode 100644
index 0000000..ebe1414
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%mock_resources%variables.tf
@@ -0,0 +1,88 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  default     = "examplename"
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+# VM
+# --
+variable "vm_image_id" {
+  default     = "ubuntu"
+  type        = string
+  description = "Virtual machine image id - may be 'ubuntu' (default) or custom image resource id"
+
+  validation {
+    condition = (
+      var.vm_image_id == "ubuntu" ||
+      substr(var.vm_image_id, 0, 14) == "/subscriptions"
+    )
+
+    error_message = "The vm_image_id value must be 'ubuntu' or an Azure image resource ID beginning with \"/subscriptions\"."
+  }
+}
+
+variable "vm_user" {
+  default     = "proxyuser"
+  type        = string
+  description = "Virtual machine user name"
+}
+
+variable "vm_public_ip" {
+  default     = false
+  type        = bool
+  description = "If true, will create a public IP resource and associate with VM NIC."
+}
+
+variable "vm_userdata_script" {
+  default = ""
+  type    = string
+}
+
+variable "vm_userdata_http_proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+# Network
+# -------
+variable "network_allow_range" {
+  default     = "*"
+  type        = string
+  description = "Network range to allow access to TFE"
+}
+
+variable "network_subnet_cidr" {
+  default     = "10.0.64.0/20"
+  type        = string
+  description = "Subnet CIDR range for additional compute instance"
+}
+
+variable "network_bastion_subnet_cidr" {
+  default     = "10.0.16.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Bastion"
+}
+
+# Tagging
+# -------
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%variables.tf
new file mode 100644
index 0000000..53dca45
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_bank%variables.tf
@@ -0,0 +1,116 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+variable "tfe_license_filepath" {
+  default     = null
+  type        = string
+  description = "TFE License filepath"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+# Network
+# -------
+variable "network_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network ID"
+}
+
+variable "network_private_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network private subnet ID"
+}
+
+variable "network_frontend_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network public subnet ID"
+}
+
+variable "network_redis_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network Redis subnet ID"
+}
+
+# Storage
+# -------
+variable "redis_rdb_existing_storage_account" {
+  default     = ""
+  type        = string
+  description = "(Optional) Name of an existing Premium Storage Account for data encryption at rest. If empty string is given, a new, Premium storage account will be created."
+}
+
+variable "redis_rdb_existing_storage_account_rg" {
+  default     = ""
+  type        = string
+  description = "(Optional) Name of the resource group that contains the existing Premium Storage Account for data encryption at rest."
+}
+
+# Proxy
+# -----
+variable "proxy_ip" {
+  type        = string
+  description = "(Required) IP Address of the proxy server"
+}
+
+variable "proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+variable "proxy_cert_name" {
+  default = "mitmproxy"
+  type    = string
+}
+
+variable "proxy_cert_path" {
+  default     = ""
+  type        = string
+  description = "Local path to the proxy's CA cert pem"
+}
+
+
+# Tagging
+# -------
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%main.tf
new file mode 100644
index 0000000..f12ed48
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%main.tf
@@ -0,0 +1,47 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/ptfe-license.rli"
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  key_vault_name   = var.key_vault_name
+  certificate_name = var.certificate_name
+
+  tags = var.tags
+
+  vm_node_count = 2
+
+  # Behind proxy information
+  proxy_ip   = var.proxy_ip
+  proxy_port = var.proxy_port
+
+  # Existing network information
+  network_id                 = var.network_id
+  network_private_subnet_id  = var.network_private_subnet_id
+  network_frontend_subnet_id = var.network_frontend_subnet_id
+  network_redis_subnet_id    = var.network_redis_subnet_id
+
+  # Persona - Retailer
+  vm_sku                      = "Standard_D16as_v4"
+  vm_image_id                 = "rhel"
+  load_balancer_public        = false
+  load_balancer_type          = "application_gateway"
+  load_balancer_sku_name      = "WAF_v2"
+  load_balancer_sku_tier      = "WAF_v2"
+  redis_enable_non_ssl_port   = true
+  redis_enable_authentication = true
+  user_data_redis_use_tls     = false
+
+  create_bastion = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main-bastion.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main-bastion.tf
new file mode 100644
index 0000000..b553d5a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main-bastion.tf
@@ -0,0 +1,102 @@
+# Create an SSH key for bastion instance
+# --------------------------------------
+resource "tls_private_key" "bastion_ssh" {
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}
+
+# Bastion Networking
+# ------------------
+resource "azurerm_subnet" "vm_bastion" {
+  name                = "${var.friendly_name_prefix}-vm-bastion-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_bastion_subnet_cidr]
+  virtual_network_name = "${var.friendly_name_prefix}-network"
+
+  depends_on = [module.network]
+}
+
+resource "azurerm_public_ip" "vm_bastion" {
+  name                = format("%s-vm-bastion", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  allocation_method = "Dynamic"
+  domain_name_label = random_pet.vm.id
+  tags              = var.tags
+}
+
+resource "azurerm_network_interface" "vm_bastion" {
+  name                = format("%s-vm-bastion-nic", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  ip_configuration {
+    name                          = "ipconfig"
+    subnet_id                     = azurerm_subnet.vm_bastion.id
+    public_ip_address_id          = azurerm_public_ip.vm_bastion.id
+    private_ip_address_allocation = "dynamic"
+  }
+  tags = var.tags
+}
+
+resource "azurerm_network_security_group" "vm_bastion_nsg" {
+  name                = "${var.friendly_name_prefix}-vm-bastion-nsg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  # Allow inbound SSH traffic to bastion
+  # default value for network_allow_range is * so it is open to world if not supplied
+  security_rule {
+    name      = "allow-inbound-ssh"
+    priority  = 125
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.network_allow_range
+    source_port_range     = "*"
+
+    destination_port_range     = "22"
+    destination_address_prefix = var.network_bastion_subnet_cidr
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_network_interface_security_group_association" "bastion" {
+  network_interface_id      = azurerm_network_interface.vm_bastion.id
+  network_security_group_id = azurerm_network_security_group.vm_bastion_nsg.id
+}
+
+# VM bastion
+# ----------
+resource "azurerm_linux_virtual_machine" "vm_bastion" {
+  name                = format("%s-bastion-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  network_interface_ids = [azurerm_network_interface.vm_bastion.id]
+  size                  = "Standard_D1_v2"
+  admin_username        = "bastionuser"
+
+  source_image_reference {
+    publisher = "RedHat"
+    offer     = "RHEL"
+    sku       = "7.8"
+    version   = "latest"
+  }
+
+  os_disk {
+    caching              = "ReadWrite"
+    storage_account_type = "Standard_LRS"
+  }
+
+  admin_ssh_key {
+    username   = "bastionuser"
+    public_key = tls_private_key.bastion_ssh.public_key_openssh
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main.tf
new file mode 100644
index 0000000..bf213c2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%main.tf
@@ -0,0 +1,163 @@
+provider "azurerm" {
+  features {}
+}
+
+# Create cloud init for proxy, will be used if user data not otherwise provided
+# -----------------------------------------------------------------------------
+locals {
+  user_data_script = templatefile(
+    "${path.module}/files/proxy.sh.tpl",
+    {
+      http_proxy_port = var.vm_userdata_http_proxy_port
+    }
+  )
+}
+
+# Create a virtual network for proxy example
+# ------------------------------------------
+module "network" {
+  source = "../../existing_network/mock_resources"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  location             = var.location
+  resource_group_name  = var.resource_group_name
+
+  network_cidr                 = "10.0.0.0/16"
+  network_frontend_subnet_cidr = "10.0.0.0/20"
+  network_private_subnet_cidr  = "10.0.32.0/20"
+  network_redis_subnet_cidr    = "10.0.48.0/20"
+
+  create_bastion = false
+}
+
+# Create an SSH key for proxy instance
+# ------------------------------------
+resource "tls_private_key" "proxy_ssh" {
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}
+
+resource "random_pet" "vm" {
+  length = 2
+}
+
+# Create public ip if desired
+# ---------------------------
+resource "azurerm_public_ip" "vm" {
+  count = var.vm_public_ip == true ? 1 : 0
+
+  name                = format("%s-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  allocation_method = "Dynamic"
+  domain_name_label = random_pet.vm.id
+
+  tags = var.tags
+}
+
+# Create a subnet for proxy
+# -------------------------
+resource "azurerm_subnet" "vm" {
+  name                = "${var.friendly_name_prefix}-vm-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_subnet_cidr]
+  virtual_network_name = "${var.friendly_name_prefix}-network"
+
+  depends_on = [module.network]
+}
+
+# Create a security group for proxy, default access is currently wide open
+# ------------------------------------------------------------------------
+resource "azurerm_network_security_group" "vm" {
+  name                = "${var.friendly_name_prefix}-vm-nsg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  security_rule {
+    name      = "allow-inbound"
+    priority  = 100
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.network_allow_range
+    source_port_range     = "*"
+
+    destination_port_range     = "*"
+    destination_address_prefix = var.network_subnet_cidr
+  }
+
+  tags = var.tags
+}
+
+# Associate proxy subnet with nsg
+# -------------------------------
+resource "azurerm_subnet_network_security_group_association" "vm_subnet_nsg_association" {
+  subnet_id                 = azurerm_subnet.vm.id
+  network_security_group_id = azurerm_network_security_group.vm.id
+}
+
+# Create a network interface for the proxy virtual machine
+# --------------------------------------------------------
+resource "azurerm_network_interface" "vm" {
+  name                = format("%s-vm-nic", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  ip_configuration {
+    name                          = "ipconfig"
+    subnet_id                     = azurerm_subnet.vm.id
+    public_ip_address_id          = var.vm_public_ip == true ? azurerm_public_ip.vm[0].id : null
+    private_ip_address_allocation = "dynamic"
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_network_interface_security_group_association" "vm" {
+  network_interface_id      = azurerm_network_interface.vm.id
+  network_security_group_id = azurerm_network_security_group.vm.id
+}
+
+# Create the proxy virtual machine
+# --------------------------------
+resource "azurerm_linux_virtual_machine" "vm" {
+  name                = format("%s-vm", var.friendly_name_prefix)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  network_interface_ids = [azurerm_network_interface.vm.id]
+  size                  = "Standard_D1_v2"
+  admin_username        = var.vm_user
+
+  custom_data = var.vm_userdata_script == "" ? base64encode(local.user_data_script) : base64encode(var.vm_userdata_script)
+
+  # Source image id will be used if vm_image_id anything other than 'ubuntu' or 'rhel'
+  source_image_id = var.vm_image_id == "ubuntu" || var.vm_image_id == "rhel" ? null : var.vm_image_id
+
+  # Source image reference will be used if vm_image_id is 'ubuntu' or 'rhel'
+  dynamic "source_image_reference" {
+    for_each = var.vm_image_id == "ubuntu" || var.vm_image_id == "rhel" ? [1] : []
+
+    content {
+      publisher = var.vm_image_id == "ubuntu" ? "Canonical" : "RedHat"
+      offer     = var.vm_image_id == "ubuntu" ? "0001-com-ubuntu-server-focal" : "RHEL"
+      sku       = var.vm_image_id == "ubuntu" ? "20_04-lts" : "7.8"
+      version   = var.vm_image_id == "ubuntu" ? "latest" : "latest"
+    }
+  }
+
+  os_disk {
+    caching              = "ReadWrite"
+    storage_account_type = "Standard_LRS"
+  }
+
+  admin_ssh_key {
+    username   = var.vm_user
+    public_key = tls_private_key.proxy_ssh.public_key_openssh
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%outputs.tf
new file mode 100644
index 0000000..c79760e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%outputs.tf
@@ -0,0 +1,50 @@
+output "host_id" {
+  value = azurerm_linux_virtual_machine.vm.id
+}
+
+output "host_public_ip" {
+  value = azurerm_public_ip.vm.*.ip_address
+}
+
+output "host_dns" {
+  value = azurerm_public_ip.vm.*.fqdn
+}
+
+output "host_private_ip" {
+  value = azurerm_linux_virtual_machine.vm.private_ip_address
+}
+
+output "network_id" {
+  value = module.network.network_id
+}
+
+output "network_redis_subnet_id" {
+  value = module.network.network_redis_subnet_id
+}
+
+output "network_private_subnet_id" {
+  value = module.network.network_private_subnet_id
+}
+
+output "network_frontend_subnet_id" {
+  value = module.network.network_frontend_subnet_id
+}
+
+# private key local file excluded via gitignore
+resource "local_file" "proxy_key" {
+  filename        = "${path.module}/proxy_key.pem"
+  file_permission = "0600"
+  content         = tls_private_key.proxy_ssh.private_key_pem
+}
+
+# bastion fqdn
+output "bastion_fqdn" {
+  value = azurerm_public_ip.vm_bastion.fqdn
+}
+
+# private key local file excluded via gitignore
+resource "local_file" "bastion_key" {
+  filename        = "${path.module}/bastion_key.pem"
+  file_permission = "0600"
+  content         = tls_private_key.bastion_ssh.private_key_pem
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%variables.tf
new file mode 100644
index 0000000..817004b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%mock_resources%variables.tf
@@ -0,0 +1,87 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  default     = "examplename"
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+# VM
+# --
+variable "vm_image_id" {
+  default     = "ubuntu"
+  type        = string
+  description = "Virtual machine image id - may be 'ubuntu' (default), 'rhel', or custom image resource id"
+
+  validation {
+    condition = (
+      var.vm_image_id == "ubuntu" ||
+      var.vm_image_id == "rhel" ||
+      substr(var.vm_image_id, 0, 14) == "/subscriptions"
+    )
+
+    error_message = "The vm_image_id value must be 'ubuntu', 'rhel', or an Azure image resource ID beginning with \"/subscriptions\"."
+  }
+}
+
+variable "vm_user" {
+  default     = "proxyuser"
+  type        = string
+  description = "Virtual machine user name"
+}
+
+variable "vm_public_ip" {
+  default     = false
+  type        = bool
+  description = "If true, will create a public IP resource and associate with VM NIC."
+}
+
+variable "vm_userdata_script" {
+  default = ""
+  type    = string
+}
+
+variable "vm_userdata_http_proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+# Network
+variable "network_allow_range" {
+  default     = "*"
+  type        = string
+  description = "Network range to allow access to TFE"
+}
+
+variable "network_subnet_cidr" {
+  default     = "10.0.64.0/20"
+  type        = string
+  description = "Subnet CIDR range for additional compute instance"
+}
+
+variable "network_bastion_subnet_cidr" {
+  default     = "10.0.16.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Bastion"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%variables.tf
new file mode 100644
index 0000000..a59012f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_retailer%variables.tf
@@ -0,0 +1,101 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# Network
+# -------
+variable "network_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network ID"
+}
+
+variable "network_private_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network private subnet ID"
+}
+
+variable "network_frontend_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network public subnet ID"
+}
+
+variable "network_bastion_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network Bastion subnet ID"
+}
+
+variable "network_redis_subnet_id" {
+  default     = null
+  type        = string
+  description = "(Optional) Existing network Redis subnet ID"
+}
+
+# Proxy
+# -----
+variable "proxy_ip" {
+  type        = string
+  description = "(Required) IP Address of the proxy server"
+}
+
+variable "proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%main.tf
new file mode 100644
index 0000000..49ee04f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%main.tf
@@ -0,0 +1,27 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  friendly_name_prefix = "example"                          # Friendly name to use for resources
+  tfe_license_filepath = "${path.module}/files/license.rli" # Relative local file path to TFE license
+
+  resource_group_name = "example" # Existing Azure Resource Group to build TFE environment within
+  # resource_group_name_dns = "example" # Existing Azure Resource Group which contains desired DNS zone
+
+  domain_name   = "example.com" # Domain used to determine existing DNS zone
+  tfe_subdomain = "tfe"         # Desired DNS record subdomain
+
+  vm_node_count = 2 # Number of instances >= 2 indicates active active environment
+
+  # Persona - Startup
+  vm_sku                      = "Standard_D4_v3"
+  vm_image_id                 = "ubuntu"
+  load_balancer_public        = true
+  load_balancer_type          = "load_balancer"
+  redis_enable_non_ssl_port   = true
+  redis_enable_authentication = false
+  user_data_redis_use_tls     = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%outputs.tf
new file mode 100644
index 0000000..77295b8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%persona_startup%outputs.tf
@@ -0,0 +1,21 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%main.tf
new file mode 100644
index 0000000..5ddba5b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%main.tf
@@ -0,0 +1,24 @@
+provider "azurerm" {
+  features {}
+}
+
+module "tfe" {
+  source = "../../"
+
+  location             = var.location
+  friendly_name_prefix = var.friendly_name_prefix
+  tfe_license_filepath = "${path.module}/files/license.rli"
+
+  resource_group_name     = var.resource_group_name
+  resource_group_name_dns = var.resource_group_name_dns
+
+  domain_name   = var.domain_name
+  tfe_subdomain = var.tfe_subdomain
+
+  key_vault_name   = var.key_vault_name
+  certificate_name = var.certificate_name
+
+  tags = var.tags
+
+  vm_node_count = 1
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%outputs.tf
new file mode 100644
index 0000000..9f7b590
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%outputs.tf
@@ -0,0 +1,30 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = module.tfe.tfe_application_url
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+output "tfe_console_url" {
+  value       = module.tfe.tfe_console_url
+  description = "Terraform Enterprise Console URL"
+}
+
+output "tfe_console_password" {
+  value = module.tfe.tfe_console_password
+}
+
+# SSH
+# ---
+output "instance_user_name" {
+  value = module.tfe.instance_user_name
+}
+
+output "instance_private_key" {
+  value = module.tfe.instance_private_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%variables.tf
new file mode 100644
index 0000000..8ee3236
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseexamples%standalone%variables.tf
@@ -0,0 +1,57 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemain.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemain.tf
new file mode 100644
index 0000000..b3a9002
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemain.tf
@@ -0,0 +1,416 @@
+# Required Providers
+# ------------------
+# https://registry.terraform.io/providers/hashicorp/azurerm/latest
+terraform {
+  required_version = ">= 0.13"
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = "~> 2.41.0"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.0.0"
+    }
+    template = {
+      source  = "hashicorp/template"
+      version = "~> 2.1.2"
+    }
+  }
+}
+
+# Local variables and conditionals
+# --------------------------------
+locals {
+  # TFE Architecture
+  # ----------------
+  # Determine whether or not TFE in active-active mode based on node count, by default standalone is assumed
+  active_active = var.vm_node_count >= 2 ? true : false
+
+  # DNS
+  # ---
+  tfe_subdomain     = var.tfe_subdomain == "" ? substr(random_pet.tfe_subdomain[0].id, 0, 24) : var.tfe_subdomain
+  dns_internal_fqdn = var.domain_name == "" ? azurerm_public_ip.tfe_pip.fqdn : "${local.tfe_subdomain}.${var.domain_name}"
+  fqdn              = var.dns_external_fqdn == "" ? local.dns_internal_fqdn : var.dns_external_fqdn
+
+  # Network
+  # -------
+  network_id                 = var.network_id == "" ? module.network[0].network_id : var.network_id
+  network_private_subnet_id  = var.network_private_subnet_id == "" ? module.network[0].network_private_subnet_id : var.network_private_subnet_id
+  network_frontend_subnet_id = var.network_frontend_subnet_id == "" ? module.network[0].network_frontend_subnet_id : var.network_frontend_subnet_id
+  network_bastion_subnet_id  = var.network_bastion_subnet_id == "" && var.create_bastion == true ? module.network[0].network_bastion_subnet_id : var.network_bastion_subnet_id
+  network_redis_subnet_id    = var.network_redis_subnet_id == "" && local.active_active == true ? module.network[0].network_redis_subnet_id : var.network_redis_subnet_id
+
+  # Redis
+  # -----
+  redis_port = var.redis_enable_non_ssl_port == true ? "6379" : "6380"
+}
+
+# Azure resource groups
+# ---------------------
+module "resource_groups" {
+  source = "./modules/resource_groups"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  location             = var.location
+
+  resource_group_name           = var.resource_group_name
+  resource_group_name_dns       = var.resource_group_name_dns
+  resource_group_name_kv        = var.resource_group_name_kv
+  resource_group_name_bootstrap = var.resource_group_name_bootstrap
+
+  tags = var.tags
+}
+
+# Subdomain
+# ---------
+resource "random_pet" "tfe_subdomain" {
+  count = var.tfe_subdomain == "" ? 1 : 0
+
+  length    = 3
+  separator = ""
+}
+
+# Public IP
+# ---------
+resource "azurerm_public_ip" "tfe_pip" {
+  name                = "${var.friendly_name_prefix}-lb-pip"
+  location            = var.location
+  resource_group_name = module.resource_groups.resource_group_name
+
+  sku               = "Standard"
+  allocation_method = "Static"
+  domain_name_label = var.domain_name == "" ? local.tfe_subdomain : null
+
+  tags = var.tags
+}
+
+# SSH for instances
+# -----------------
+resource "tls_private_key" "tfe_ssh" {
+  count = var.vm_public_key == "" ? 1 : 0
+
+  algorithm = "RSA"
+  rsa_bits  = 4096
+}
+
+# TLS for backend
+# ---------------
+module "certificates" {
+  source = "./modules/certificates"
+
+  friendly_name_prefix   = var.friendly_name_prefix
+  resource_group_name    = module.resource_groups.resource_group_name
+  resource_group_name_kv = module.resource_groups.resource_group_name_kv
+  location               = var.location
+
+  tenant_id = data.azurerm_client_config.current.tenant_id
+  object_id = data.azurerm_client_config.current.object_id
+
+  fqdn               = local.fqdn
+  key_vault_name     = var.key_vault_name
+  certificate_name   = var.certificate_name
+  user_data_ca       = var.user_data_ca
+  user_data_cert     = var.user_data_cert
+  user_data_cert_key = var.user_data_cert_key
+  load_balancer_type = var.load_balancer_type
+
+  tags = var.tags
+}
+
+# Azure storage account
+# ---------------------
+module "service_accounts" {
+  source = "./modules/service_accounts"
+
+  friendly_name_prefix          = var.friendly_name_prefix
+  resource_group_name           = module.resource_groups.resource_group_name
+  resource_group_name_bootstrap = module.resource_groups.resource_group_name_bootstrap
+  location                      = var.location
+
+  storage_account_tier             = var.storage_account_tier
+  storage_account_replication_type = var.storage_account_replication_type
+
+  # Application storage
+  storage_account_name                           = var.storage_account_name
+  storage_account_key                            = var.storage_account_key
+  storage_account_primary_blob_connection_string = var.storage_account_primary_blob_connection_string
+
+  # Bootstrap storage
+  bootstrap_storage_account_name = var.bootstrap_storage_account_name
+
+  tags = var.tags
+
+  depends_on = [
+    module.resource_groups
+  ]
+}
+
+# Azure storage container and storage blob for TFE license file
+# -------------------------------------------------------------
+module "object_storage" {
+  source = "./modules/object_storage"
+
+  friendly_name_prefix = var.friendly_name_prefix
+
+  # TFE License
+  tfe_license_name     = var.tfe_license_name
+  tfe_license_filepath = var.tfe_license_filepath
+
+  # Proxy
+  proxy_cert_name = var.proxy_cert_name
+  proxy_cert_path = var.proxy_cert_path
+
+  # Application storage
+  storage_account_name = module.service_accounts.storage_account_name
+
+  # Bootstrap storage
+  bootstrap_storage_account_name = module.service_accounts.bootstrap_storage_account_name
+
+  depends_on = [
+    module.resource_groups,
+    module.service_accounts
+  ]
+}
+
+# Azure virtual network, subnet, and security group
+# -------------------------------------------------
+module "network" {
+  source = "./modules/network"
+  count  = var.network_id == "" ? 1 : 0
+
+  friendly_name_prefix = var.friendly_name_prefix
+  resource_group_name  = module.resource_groups.resource_group_name
+  location             = var.location
+
+  active_active = local.active_active
+
+  network_cidr                 = var.network_cidr
+  network_private_subnet_cidr  = var.network_private_subnet_cidr
+  network_frontend_subnet_cidr = var.network_frontend_subnet_cidr
+  network_bastion_subnet_cidr  = var.network_bastion_subnet_cidr
+  network_redis_subnet_cidr    = var.network_redis_subnet_cidr
+  network_allow_range          = var.network_allow_range
+
+  create_bastion = var.create_bastion
+
+  load_balancer_type   = var.load_balancer_type
+  load_balancer_public = var.load_balancer_public
+
+  tags = var.tags
+
+  depends_on = [
+    module.resource_groups
+  ]
+}
+
+# Azure cache
+# -----------
+module "redis" {
+  source = "./modules/redis"
+  count  = local.active_active == true ? 1 : 0
+
+  friendly_name_prefix = var.friendly_name_prefix
+  resource_group_name  = module.resource_groups.resource_group_name
+  location             = var.location
+
+  redis_family                        = var.redis_family
+  redis_sku_name                      = var.redis_sku_name
+  redis_size                          = var.redis_size
+  redis_subnet_id                     = local.network_redis_subnet_id
+  redis_enable_authentication         = var.redis_enable_authentication
+  redis_enable_non_ssl_port           = var.redis_enable_non_ssl_port
+  redis_rdb_backup_enabled            = var.redis_rdb_backup_enabled
+  redis_rdb_backup_frequency          = var.redis_rdb_backup_frequency
+  redis_rdb_backup_max_snapshot_count = var.redis_rdb_backup_max_snapshot_count
+  redis_rdb_existing_storage_account  = var.redis_rdb_existing_storage_account != "" ? data.azurerm_storage_account.tfe_redis_existing_storage_account[0].primary_blob_connection_string : ""
+
+  tags = var.tags
+
+  depends_on = [
+    module.resource_groups,
+    module.network
+  ]
+}
+
+# Azure postgres
+# --------------
+module "database" {
+  source = "./modules/database"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  resource_group_name  = module.resource_groups.resource_group_name
+  location             = var.location
+
+  database_user         = var.database_user
+  database_machine_type = var.database_machine_type
+  database_size_mb      = var.database_size_mb
+  database_version      = var.database_version
+  database_subnet       = local.network_private_subnet_id
+
+  tags = var.tags
+
+  depends_on = [
+    module.resource_groups,
+    module.network
+  ]
+}
+
+# Azure user data / cloud init used to install and configure TFE on instance(s)
+# -----------------------------------------------------------------------------
+module "user_data" {
+  source = "./modules/user_data"
+
+  # General
+  fqdn          = local.fqdn
+  active_active = local.active_active
+
+  # Database
+  user_data_pg_dbname   = module.database.database_name
+  user_data_pg_netloc   = "${module.database.database_server_fqdn}:5432"
+  user_data_pg_user     = "${module.database.database_user}@${module.database.database_server_name}"
+  user_data_pg_password = module.database.database_password
+
+  # Redis
+  user_data_redis_host        = local.active_active == true ? module.redis[0].redis_hostname : ""
+  user_data_redis_port        = local.active_active == true ? local.redis_port : ""
+  user_data_redis_pass        = local.active_active == true ? module.redis[0].redis_pass : ""
+  user_data_redis_use_tls     = local.active_active == true ? var.user_data_redis_use_tls : true
+  redis_enable_authentication = local.active_active == true ? var.redis_enable_authentication : true
+
+  # Azure
+  user_data_azure_account_key                = module.service_accounts.storage_account_key
+  user_data_azure_account_name               = module.service_accounts.storage_account_name
+  user_data_azure_container_name             = module.object_storage.storage_account_container_name
+  user_data_bootstrap_storage_account_name   = module.service_accounts.bootstrap_storage_account_name
+  user_data_bootstrap_storage_container_name = module.object_storage.bootstrap_storage_account_container_name
+
+  # TFE
+  user_data_tfe_license_name = var.tfe_license_name
+  user_data_release_sequence = var.user_data_release_sequence
+
+  # Certificates
+  user_data_ca       = var.user_data_ca == "" ? replace(module.certificates.tls_ca_cert, "\n", "\n") : replace(var.user_data_ca, "\n", "\n")
+  user_data_cert     = var.user_data_cert == "" ? module.certificates.tls_cert : var.user_data_cert
+  user_data_cert_key = var.user_data_cert_key == "" ? module.certificates.tls_key : var.user_data_cert_key
+
+  # Proxy
+  proxy_ip        = var.proxy_ip
+  proxy_port      = var.proxy_port
+  proxy_cert_name = var.proxy_cert_name
+  proxy_cert_path = var.proxy_cert_path
+  no_proxy        = [local.fqdn, var.network_cidr]
+
+  depends_on = [
+    module.service_accounts,
+    module.object_storage,
+    module.certificates,
+    module.network
+  ]
+}
+
+# Azure bastion service used to connect to TFE instance(s)
+# --------------------------------------------------------
+module "bastion" {
+  source = "./modules/bastion"
+  count  = var.create_bastion == true ? 1 : 0
+
+  friendly_name_prefix = var.friendly_name_prefix
+  resource_group_name  = module.resource_groups.resource_group_name
+  location             = var.location
+
+  bastion_subnet_id = local.network_bastion_subnet_id
+
+  tags = var.tags
+
+  depends_on = [
+    module.resource_groups,
+    module.network
+  ]
+}
+
+# Azure load balancer
+# -------------------
+module "load_balancer" {
+  source = "./modules/load_balancer"
+
+  friendly_name_prefix = var.friendly_name_prefix
+  resource_group_name  = module.resource_groups.resource_group_name
+  location             = var.location
+  zones                = var.zones
+
+  # General
+  fqdn                    = local.fqdn
+  active_active           = local.active_active
+  domain_name             = var.domain_name
+  tfe_subdomain           = local.tfe_subdomain
+  tfe_pip_id              = azurerm_public_ip.tfe_pip.id
+  tfe_pip_ip_address      = azurerm_public_ip.tfe_pip.ip_address
+  resource_group_name_dns = module.resource_groups.resource_group_name_dns
+  dns_create_record       = var.dns_create_record
+  tenant_id               = data.azurerm_client_config.current.tenant_id
+
+  # Secrets
+  key_vault_id                    = var.load_balancer_type == "application_gateway" ? module.certificates.key_vault_id : ""
+  certificate_name                = var.load_balancer_type == "application_gateway" ? module.certificates.certificate_name : ""
+  certificate_key_vault_secret_id = var.load_balancer_type == "application_gateway" ? module.certificates.certificate_key_vault_secret_id : ""
+  trusted_root_certificate        = var.load_balancer_type == "application_gateway" && var.user_data_ca == "" ? module.certificates.tls_ca_cert : var.user_data_ca
+
+  # Network
+  network_frontend_subnet_id = local.network_frontend_subnet_id
+
+  # Load balancer
+  load_balancer_type                         = var.load_balancer_type
+  load_balancer_public                       = var.load_balancer_public
+  load_balancer_sku_name                     = var.load_balancer_sku_name
+  load_balancer_sku_tier                     = var.load_balancer_sku_tier
+  load_balancer_waf_firewall_mode            = var.load_balancer_waf_firewall_mode
+  load_balancer_waf_rule_set_version         = var.load_balancer_waf_rule_set_version
+  load_balancer_waf_file_upload_limit_mb     = var.load_balancer_waf_file_upload_limit_mb
+  load_balancer_waf_max_request_body_size_kb = var.load_balancer_waf_max_request_body_size_kb
+
+  tags = var.tags
+
+  depends_on = [
+    module.resource_groups,
+    module.certificates,
+    module.network
+  ]
+}
+
+# Azure virtual machine scale set
+# -------------------------------
+module "vm" {
+  source = "./modules/vm"
+
+  friendly_name_prefix        = var.friendly_name_prefix
+  resource_group_name         = module.resource_groups.resource_group_name
+  resource_group_id_bootstrap = module.resource_groups.resource_group_id_bootstrap
+  location                    = var.location
+
+  # VM
+  vm_sku                                 = var.vm_sku
+  vm_image_id                            = var.vm_image_id
+  vm_os_disk_disk_size_gb                = var.vm_os_disk_disk_size_gb
+  vm_subnet_id                           = local.network_private_subnet_id
+  vm_user                                = var.vm_user
+  vm_public_key                          = var.vm_public_key == "" ? tls_private_key.tfe_ssh[0].public_key_openssh : var.vm_public_key
+  vm_userdata_script                     = module.user_data.tfe_userdata_base64_encoded
+  vm_node_count                          = var.vm_node_count
+  vm_user_assigned_identity_id           = module.service_accounts.vmss_user_assigned_identity.id
+  vm_user_assigned_identity_principal_id = module.service_accounts.vmss_user_assigned_identity.principal_id
+
+  # Load balancer
+  load_balancer_type       = var.load_balancer_type
+  load_balancer_backend_id = module.load_balancer.load_balancer_backend_id
+  load_balancer_public     = var.load_balancer_public
+
+  tags = var.tags
+
+  depends_on = [
+    module.resource_groups,
+    module.network,
+    module.load_balancer,
+    module.user_data
+  ]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%main.tf
new file mode 100644
index 0000000..a365598
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%main.tf
@@ -0,0 +1,23 @@
+resource "azurerm_public_ip" "bastion_pip" {
+  name                = "${var.friendly_name_prefix}-bastion-pip"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+  allocation_method   = var.bastion_allocation_method
+  sku                 = var.bastion_sku
+
+  tags = var.tags
+}
+
+resource "azurerm_bastion_host" "bastion_host" {
+  name                = "${var.friendly_name_prefix}-bastion-host"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  ip_configuration {
+    name                 = "tfebastion"
+    subnet_id            = var.bastion_subnet_id
+    public_ip_address_id = azurerm_public_ip.bastion_pip.id
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%outputs.tf
new file mode 100644
index 0000000..e86c897
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%outputs.tf
@@ -0,0 +1,7 @@
+output "bastion_host_id" {
+  value = azurerm_bastion_host.bastion_host.id
+}
+
+output "bastion_host_dns_name" {
+  value = azurerm_bastion_host.bastion_host.dns_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%variables.tf
new file mode 100644
index 0000000..c2722be
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%bastion%variables.tf
@@ -0,0 +1,45 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+# Network
+# -------
+variable "bastion_subnet_id" {
+  type        = string
+  description = "(Required) Network public subnet ID for Bastion Service"
+}
+
+# ----
+variable "bastion_allocation_method" {
+  default     = "Static"
+  type        = string
+  description = "Defines the allocation method for this IP address. Possible values are Static or Dynamic."
+}
+
+variable "bastion_sku" {
+  default     = "Standard"
+  type        = string
+  description = "The SKU of the Public IP. Accepted values are Basic and Standard."
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%data.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%data.tf
new file mode 100644
index 0000000..3277d6f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%data.tf
@@ -0,0 +1,13 @@
+data "azurerm_key_vault" "kv" {
+  count = var.key_vault_name != "" ? 1 : 0
+
+  name                = var.key_vault_name
+  resource_group_name = var.resource_group_name_kv
+}
+
+data "azurerm_key_vault_certificate" "cert" {
+  count = var.certificate_name != "" ? 1 : 0
+
+  name         = var.certificate_name
+  key_vault_id = data.azurerm_key_vault.kv[0].id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%main.tf
new file mode 100644
index 0000000..134c81b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%main.tf
@@ -0,0 +1,207 @@
+# Self Signed Certificate
+# -----------------------
+# CA Key
+resource "tls_private_key" "ca" {
+  count = var.user_data_cert == "" ? 1 : 0
+
+  algorithm   = var.private_key_algorithm
+  ecdsa_curve = var.private_key_ecdsa_curve
+  rsa_bits    = var.private_key_rsa_bits
+}
+
+# CA Cert
+resource "tls_self_signed_cert" "ca" {
+  count = var.user_data_cert == "" ? 1 : 0
+
+  is_ca_certificate = true
+
+  key_algorithm   = tls_private_key.ca[0].algorithm
+  private_key_pem = tls_private_key.ca[0].private_key_pem
+
+  validity_period_hours = var.validity_period_hours
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+
+  subject {
+    common_name  = "${var.organization_name} Private Certificate Authority"
+    organization = var.organization_name
+  }
+}
+
+# Cert Key
+resource "tls_private_key" "cert" {
+  count = var.user_data_cert == "" ? 1 : 0
+
+  algorithm   = var.private_key_algorithm
+  ecdsa_curve = var.private_key_ecdsa_curve
+  rsa_bits    = var.private_key_rsa_bits
+}
+
+# Cert Request
+resource "tls_cert_request" "cert" {
+  count = var.user_data_cert == "" ? 1 : 0
+
+  key_algorithm   = tls_private_key.cert[0].algorithm
+  private_key_pem = tls_private_key.cert[0].private_key_pem
+
+  dns_names = [var.fqdn]
+
+  subject {
+    common_name  = var.fqdn
+    organization = var.organization_name
+  }
+}
+
+# Cert
+resource "tls_locally_signed_cert" "cert" {
+  count = var.user_data_cert == "" ? 1 : 0
+
+  cert_request_pem = tls_cert_request.cert[0].cert_request_pem
+
+  ca_key_algorithm   = tls_private_key.ca[0].algorithm
+  ca_private_key_pem = tls_private_key.ca[0].private_key_pem
+  ca_cert_pem        = tls_self_signed_cert.ca[0].cert_pem
+
+  validity_period_hours = var.validity_period_hours
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+    "server_auth",
+  ]
+}
+
+# Azure Key Vault
+# ---------------
+# Create a new Azure Key Vault if not supplied
+resource "azurerm_key_vault" "kv" {
+  count = var.key_vault_name == "" && var.load_balancer_type == "application_gateway" ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-kv"
+  location            = var.location
+  resource_group_name = var.resource_group_name_kv
+
+  tenant_id                   = var.tenant_id
+  sku_name                    = var.sku_name
+  soft_delete_retention_days  = var.soft_delete_retention_days
+  enabled_for_deployment      = var.enabled_for_deployment
+  enabled_for_disk_encryption = var.enabled_for_disk_encryption
+
+  tags = var.tags
+}
+
+resource "azurerm_key_vault_access_policy" "tfe_kv_acl" {
+  count = var.key_vault_name == "" && var.load_balancer_type == "application_gateway" ? 1 : 0
+
+  key_vault_id = azurerm_key_vault.kv[0].id
+  tenant_id    = var.tenant_id
+  object_id    = var.object_id
+
+  certificate_permissions = [
+    "create",
+    "delete",
+    "get",
+    "import",
+    "list",
+    "listissuers",
+    "managecontacts",
+    "manageissuers",
+    "purge",
+    "setissuers",
+    "update",
+  ]
+
+  key_permissions = [
+    "backup",
+    "create",
+    "decrypt",
+    "delete",
+    "encrypt",
+    "get",
+    "import",
+    "list",
+    "purge",
+    "recover",
+    "restore",
+    "sign",
+    "unwrapKey",
+    "update",
+    "verify",
+    "wrapKey",
+  ]
+
+  secret_permissions = [
+    "backup",
+    "delete",
+    "get",
+    "list",
+    "purge",
+    "recover",
+    "restore",
+    "set",
+  ]
+}
+
+# Azure Key Vault Certificate
+# ---------------------------
+resource "azurerm_key_vault_certificate" "cert" {
+  count = (var.certificate_name == "" || var.key_vault_name == "") && var.load_balancer_type == "application_gateway" ? 1 : 0
+
+  name         = "${var.friendly_name_prefix}cert"
+  key_vault_id = azurerm_key_vault.kv[0].id
+
+  certificate_policy {
+    issuer_parameters {
+      name = "Self"
+    }
+
+    key_properties {
+      exportable = true
+      key_size   = 2048
+      key_type   = "RSA"
+      reuse_key  = true
+    }
+
+    lifetime_action {
+      action {
+        action_type = "AutoRenew"
+      }
+
+      trigger {
+        days_before_expiry = 30
+      }
+    }
+
+    secret_properties {
+      content_type = "application/x-pkcs12"
+    }
+
+    x509_certificate_properties {
+      # Server Authentication = 1.3.6.1.5.5.7.3.1
+      # Client Authentication = 1.3.6.1.5.5.7.3.2
+      extended_key_usage = ["1.3.6.1.5.5.7.3.1"]
+
+      key_usage = [
+        "cRLSign",
+        "dataEncipherment",
+        "digitalSignature",
+        "keyAgreement",
+        "keyCertSign",
+        "keyEncipherment",
+      ]
+
+      subject_alternative_names {
+        dns_names = [var.fqdn]
+      }
+
+      subject            = "CN=${var.fqdn}"
+      validity_in_months = 12
+    }
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%outputs.tf
new file mode 100644
index 0000000..644d3a8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%outputs.tf
@@ -0,0 +1,24 @@
+output "tls_ca_cert" {
+  value = var.user_data_cert == "" ? tls_self_signed_cert.ca[0].cert_pem : var.user_data_ca
+}
+
+output "tls_cert" {
+  value = var.user_data_cert == "" ? tls_locally_signed_cert.cert[0].cert_pem : var.user_data_cert
+}
+
+output "tls_key" {
+  value = var.user_data_cert == "" ? tls_private_key.cert[0].private_key_pem : var.user_data_cert_key
+}
+
+output "key_vault_id" {
+  value = var.load_balancer_type == "application_gateway" ? element(concat(azurerm_key_vault.kv.*.id, data.azurerm_key_vault.kv.*.id), 0) : ""
+}
+
+# makes sure that if cert name supplied but kv not, then new is used
+output "certificate_name" {
+  value = var.load_balancer_type == "application_gateway" ? element(concat(azurerm_key_vault_certificate.cert.*.name, data.azurerm_key_vault_certificate.cert.*.name), 0) : ""
+}
+
+output "certificate_key_vault_secret_id" {
+  value = var.load_balancer_type == "application_gateway" ? element(concat(azurerm_key_vault_certificate.cert.*.secret_id, data.azurerm_key_vault_certificate.cert.*.secret_id), 0) : ""
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%variables.tf
new file mode 100644
index 0000000..fbd6857
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%certificates%variables.tf
@@ -0,0 +1,158 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "fqdn" {}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_kv" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired key vault"
+}
+
+variable "tenant_id" {
+  default     = null
+  type        = string
+  description = "The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault."
+}
+
+variable "object_id" {
+  default     = null
+  type        = string
+  description = "The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies."
+}
+
+# Certificate
+# -----------
+variable "validity_period_hours" {
+  default     = 24 * 30 * 6
+  description = "The number of hours after initial issuing that the certificate will become invalid."
+}
+
+variable "private_key_algorithm" {
+  default     = "RSA"
+  description = "The name of the algorithm to use for private keys (RSA or ECDSA)"
+}
+
+variable "private_key_ecdsa_curve" {
+  default     = "P256"
+  description = "ECDS - The name of the elliptic curve to use (P224, P256, P384 or P521)"
+}
+
+variable "private_key_rsa_bits" {
+  default     = "2048"
+  description = "RSA - The size of the generated RSA key in bits"
+}
+
+variable "organization_name" {
+  default     = "Terraform Enterprise (untrusted)"
+  description = "The name of the organization to associate with the certificates"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+variable "user_data_ca" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for TFE ca_cert setting"
+}
+
+variable "user_data_cert" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for Replicated TlsBootstrapCert setting"
+}
+
+variable "user_data_cert_key" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for Replicated TlsBootstrapKey setting"
+}
+
+# Key Vault
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "sku_name" {
+  default     = "standard"
+  type        = string
+  description = "The Name of the SKU used for this Key Vault. Possible values are standard and premium."
+}
+
+variable "soft_delete_retention_days" {
+  default     = 7
+  type        = number
+  description = "The number of days that items should be retained for once soft-deleted. This value can be between 7 and 90 (the default) days."
+}
+
+variable "enabled_for_deployment" {
+  default     = true
+  type        = bool
+  description = "Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault. Defaults to false."
+}
+
+variable "enabled_for_disk_encryption" {
+  default     = true
+  type        = bool
+  description = "Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys."
+}
+
+variable "certificate_permissions" {
+  default = []
+  type    = list(string)
+}
+
+variable "key_permissions" {
+  default = []
+  type    = list(string)
+}
+
+variable "secret_permissions" {
+  default = []
+  type    = list(string)
+}
+
+# Load balancer
+# -------------
+variable "load_balancer_type" {
+  default     = "application_gateway"
+  type        = string
+  description = "Expected value of 'application_gateway' or 'load_balancer'"
+  validation {
+    condition = (
+      var.load_balancer_type == "application_gateway" ||
+      var.load_balancer_type == "load_balancer"
+    )
+
+    error_message = "The load_balancer_type value must be 'application_gateway' or 'load_balancer'."
+  }
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%main.tf
new file mode 100644
index 0000000..3f38a4b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%main.tf
@@ -0,0 +1,41 @@
+resource "random_string" "tfe_pg_password" {
+  length  = 24
+  special = true
+}
+
+resource "azurerm_postgresql_server" "tfe_pg" {
+  name                = "${var.friendly_name_prefix}-pg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  sku_name   = var.database_machine_type
+  storage_mb = var.database_size_mb
+  version    = var.database_version
+
+  administrator_login          = var.database_user
+  administrator_login_password = random_string.tfe_pg_password.result
+
+  backup_retention_days        = var.database_backup_retention_days
+  geo_redundant_backup_enabled = var.database_geo_redundant_backup_enabled
+  auto_grow_enabled            = var.database_auto_grow_enabled
+  ssl_enforcement_enabled      = var.database_ssl_enforcement_enabled
+
+  tags = var.tags
+}
+
+resource "azurerm_postgresql_database" "tfe_pg_db" {
+  name                = "${var.friendly_name_prefix}-pg-db"
+  resource_group_name = var.resource_group_name
+
+  server_name = azurerm_postgresql_server.tfe_pg.name
+  charset     = "UTF8"
+  collation   = "English_United States.1252"
+}
+
+resource "azurerm_postgresql_virtual_network_rule" "tfe_pg_vnet_rule" {
+  name                = "${var.friendly_name_prefix}-db-vnet-rule"
+  resource_group_name = var.resource_group_name
+
+  subnet_id   = var.database_subnet
+  server_name = azurerm_postgresql_server.tfe_pg.name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%outputs.tf
new file mode 100644
index 0000000..e1d454f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%outputs.tf
@@ -0,0 +1,27 @@
+output "database_server_id" {
+  value = azurerm_postgresql_server.tfe_pg.id
+}
+
+output "database_server_name" {
+  value = azurerm_postgresql_server.tfe_pg.name
+}
+
+output "database_server_fqdn" {
+  value = azurerm_postgresql_server.tfe_pg.fqdn
+}
+
+output "database_user" {
+  value = var.database_user
+}
+
+output "database_password" {
+  value = random_string.tfe_pg_password.result
+}
+
+output "database_id" {
+  value = azurerm_postgresql_database.tfe_pg_db.id
+}
+
+output "database_name" {
+  value = azurerm_postgresql_database.tfe_pg_db.name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%variables.tf
new file mode 100644
index 0000000..9a7e47d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%database%variables.tf
@@ -0,0 +1,76 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+# Database
+# --------
+variable "database_user" {
+  default     = "tfeuser"
+  description = "Postgres username"
+}
+
+variable "database_machine_type" {
+  default     = "GP_Gen5_4"
+  type        = string
+  description = "Postgres sku short name: tier + family + cores"
+}
+
+variable "database_size_mb" {
+  default     = 5120
+  type        = number
+  description = "Postgres storage size in MB"
+}
+
+variable "database_version" {
+  default     = "9.6"
+  type        = string
+  description = "Postgres version"
+}
+
+variable "database_subnet" {
+  type        = string
+  description = "(Required) Network subnet id for database"
+}
+
+# ----
+variable "database_backup_retention_days" {
+  default = 7
+  type    = number
+}
+
+variable "database_geo_redundant_backup_enabled" {
+  default = true
+  type    = bool
+}
+
+variable "database_auto_grow_enabled" {
+  default = true
+  type    = bool
+}
+
+variable "database_ssl_enforcement_enabled" {
+  default = true
+  type    = bool
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%main.tf
new file mode 100644
index 0000000..dc369f2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%main.tf
@@ -0,0 +1,342 @@
+locals {
+  # Determine private IP address based on CIDR range if not already supplied and if load balancer public is false
+  private_ip_address = var.network_private_ip == "" && var.load_balancer_public == false ? cidrhost(var.network_frontend_subnet_cidr, 16) : var.network_private_ip
+
+  # Determine the resulting TFE IP
+  load_balancer_ip = var.load_balancer_public == true ? var.tfe_pip_ip_address : local.private_ip_address
+
+  # Application Gateway
+  # -------------------
+  gateway_ip_configuration_name          = "tfe-ag-gateway-ip-config"
+  trusted_root_certificate_name          = "${var.friendly_name_prefix}-trusted-root-cert"
+  frontend_ip_configuration_name_public  = "tfe-ag-frontend-ip-config-pub"
+  frontend_ip_configuration_name_private = "tfe-ag-frontend-ip-config-priv"
+  frontend_ip_configuration_name         = var.load_balancer_public == true ? local.frontend_ip_configuration_name_public : local.frontend_ip_configuration_name_private
+  backend_address_pool_name              = "tfe-ag-backend-address-pool"
+
+  # TFE Application Configuration
+  app_frontend_port_name          = "tfe-ag-frontend-port-app"
+  app_frontend_http_listener_name = "tfe-ag-http-listener-frontend-port-app"
+  app_backend_http_settings_name  = "tfe-ag-backend-http-settings-app"
+  app_request_routing_rule_name   = "tfe-ag-routing-rule-app"
+
+  # TFE Console Configuration (standalone only)
+  console_frontend_port_name          = "tfe-ag-frontend-port-console"
+  console_frontend_http_listener_name = "tfe-ag-http-listener-frontend-port-console"
+  console_backend_http_settings_name  = "tfe-ag-backend-http-settings-console"
+  console_request_routing_rule_name   = "tfe-ag-routing-rule-console"
+}
+
+# New DNS Record
+# --------------
+resource "azurerm_dns_a_record" "tfe_pip_dns" {
+  count = var.domain_name != "" && var.dns_create_record == true ? 1 : 0
+
+  name                = var.tfe_subdomain
+  zone_name           = var.domain_name
+  resource_group_name = var.resource_group_name_dns
+  ttl                 = 300
+
+  # Public
+  target_resource_id = var.load_balancer_public == true ? var.tfe_pip_id : null
+
+  # Private
+  records = var.load_balancer_public == false ? [local.private_ip_address] : null
+
+  tags = var.tags
+}
+
+# Managed Service Identity
+# ------------------------
+resource "azurerm_user_assigned_identity" "tfe_ag_msi" {
+  count = var.load_balancer_type == "application_gateway" ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-msi"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  tags = var.tags
+}
+
+# Key Vault Policy - allow 'get' permission for application gateway managed identity
+# ----------------
+resource "azurerm_key_vault_access_policy" "tfe_kv_acl" {
+  count = var.load_balancer_type == "application_gateway" ? 1 : 0
+
+  key_vault_id = var.key_vault_id
+  tenant_id    = var.tenant_id
+  object_id    = azurerm_user_assigned_identity.tfe_ag_msi[0].principal_id
+
+  certificate_permissions = [
+    "get",
+    "list"
+  ]
+
+  secret_permissions = [
+    "get",
+    "list"
+  ]
+}
+
+# Application Gateway
+# -------------------
+resource "azurerm_application_gateway" "tfe_ag" {
+  count = var.load_balancer_type == "application_gateway" ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-ag"
+  resource_group_name = var.resource_group_name
+  location            = var.location
+
+  enable_http2 = var.load_balancer_enable_http2
+  zones        = var.zones
+
+  sku {
+    name     = var.load_balancer_sku_name
+    tier     = var.load_balancer_sku_tier
+    capacity = var.load_balancer_sku_capacity
+  }
+
+  dynamic "waf_configuration" {
+    for_each = var.load_balancer_sku_name == "WAF_v2" ? [1] : []
+
+    content {
+      enabled                  = true
+      firewall_mode            = var.load_balancer_waf_firewall_mode
+      rule_set_type            = "OWASP"
+      rule_set_version         = var.load_balancer_waf_rule_set_version
+      file_upload_limit_mb     = var.load_balancer_waf_file_upload_limit_mb
+      max_request_body_size_kb = var.load_balancer_waf_max_request_body_size_kb
+    }
+  }
+
+  identity {
+    type         = "UserAssigned"
+    identity_ids = [azurerm_user_assigned_identity.tfe_ag_msi[0].id]
+  }
+
+  gateway_ip_configuration {
+    name      = local.gateway_ip_configuration_name
+    subnet_id = var.network_frontend_subnet_id
+  }
+
+  ssl_certificate {
+    name                = var.certificate_name
+    key_vault_secret_id = var.certificate_key_vault_secret_id
+  }
+
+  trusted_root_certificate {
+    name = local.trusted_root_certificate_name
+    data = var.trusted_root_certificate
+  }
+
+  # Public front end configuration
+  frontend_ip_configuration {
+    name                 = local.frontend_ip_configuration_name_public
+    public_ip_address_id = var.tfe_pip_id
+  }
+
+  # Private front end configuration
+  dynamic "frontend_ip_configuration" {
+    for_each = var.load_balancer_public == false ? [1] : []
+
+    content {
+      name                          = local.frontend_ip_configuration_name_private
+      subnet_id                     = var.network_frontend_subnet_id
+      private_ip_address_allocation = "Static"
+      private_ip_address            = local.private_ip_address
+    }
+  }
+
+  backend_address_pool {
+    name = local.backend_address_pool_name
+  }
+
+  # TFE Application
+  frontend_port {
+    name = local.app_frontend_port_name
+    port = 443
+  }
+
+  http_listener {
+    name                           = local.app_frontend_http_listener_name
+    frontend_ip_configuration_name = local.frontend_ip_configuration_name
+    frontend_port_name             = local.app_frontend_port_name
+    protocol                       = "Https"
+    ssl_certificate_name           = var.certificate_name
+  }
+
+  backend_http_settings {
+    name                  = local.app_backend_http_settings_name
+    cookie_based_affinity = "Disabled"
+    path                  = ""
+    protocol              = "Https"
+    port                  = 443
+    request_timeout       = 60
+    host_name             = var.fqdn
+
+    trusted_root_certificate_names = [local.trusted_root_certificate_name]
+  }
+
+  request_routing_rule {
+    name                       = local.app_request_routing_rule_name
+    rule_type                  = "Basic"
+    http_listener_name         = local.app_frontend_http_listener_name
+    backend_address_pool_name  = local.backend_address_pool_name
+    backend_http_settings_name = local.app_backend_http_settings_name
+  }
+
+  # TFE Console
+  dynamic "frontend_port" {
+    for_each = var.active_active == false ? [1] : []
+
+    content {
+      name = local.console_frontend_port_name
+      port = 8800
+    }
+  }
+
+  dynamic "http_listener" {
+    for_each = var.active_active == false ? [1] : []
+
+    content {
+      name                           = local.console_frontend_http_listener_name
+      frontend_ip_configuration_name = local.frontend_ip_configuration_name
+      frontend_port_name             = local.console_frontend_port_name
+      protocol                       = "Https"
+      ssl_certificate_name           = var.certificate_name
+    }
+  }
+
+  dynamic "backend_http_settings" {
+    for_each = var.active_active == false ? [1] : []
+
+    content {
+      name                  = local.console_backend_http_settings_name
+      cookie_based_affinity = "Disabled"
+      path                  = ""
+      protocol              = "Https"
+      port                  = 8800
+      request_timeout       = 60
+      host_name             = var.fqdn
+
+      trusted_root_certificate_names = [local.trusted_root_certificate_name]
+    }
+  }
+
+  dynamic "request_routing_rule" {
+    for_each = var.active_active == false ? [1] : []
+
+    content {
+      name                       = local.console_request_routing_rule_name
+      rule_type                  = "Basic"
+      http_listener_name         = local.console_frontend_http_listener_name
+      backend_address_pool_name  = local.backend_address_pool_name
+      backend_http_settings_name = local.console_backend_http_settings_name
+    }
+  }
+
+  lifecycle {
+    ignore_changes = [identity.0.identity_ids]
+  }
+
+  tags = var.tags
+}
+
+# Load balancer
+# -------------
+resource "azurerm_lb" "tfe_load_balancer" {
+  count = var.load_balancer_type == "load_balancer" ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-lb"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  sku = "Standard"
+
+  # Public front end configuration
+  dynamic "frontend_ip_configuration" {
+    for_each = var.load_balancer_public == true ? [1] : []
+
+    content {
+      name                 = "${var.friendly_name_prefix}-lb-fe"
+      public_ip_address_id = var.tfe_pip_id
+    }
+  }
+
+  # Private front end configuration
+  dynamic "frontend_ip_configuration" {
+    for_each = var.load_balancer_public == false ? [1] : []
+
+    content {
+      name                          = "${var.friendly_name_prefix}-lb-fe"
+      subnet_id                     = var.network_frontend_subnet_id
+      private_ip_address_allocation = "Static"
+      private_ip_address            = local.private_ip_address
+    }
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_lb_backend_address_pool" "tfe_load_balancer_be" {
+  count = var.load_balancer_type == "load_balancer" ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-lb-be"
+  resource_group_name = var.resource_group_name
+
+  loadbalancer_id = azurerm_lb.tfe_load_balancer[0].id
+}
+
+resource "azurerm_lb_probe" "tfe_load_balancer_probe_console" {
+  count = var.load_balancer_type == "load_balancer" && var.active_active == false ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-lb-probe-console"
+  resource_group_name = var.resource_group_name
+
+  loadbalancer_id = azurerm_lb.tfe_load_balancer[0].id
+  protocol        = "Https"
+  request_path    = "/authenticate"
+  port            = 8800
+}
+
+resource "azurerm_lb_rule" "tfe_load_balancer_rule_console" {
+  count = var.load_balancer_type == "load_balancer" && var.active_active == false ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-lb-rule-console"
+  resource_group_name = var.resource_group_name
+
+  loadbalancer_id                = azurerm_lb.tfe_load_balancer[0].id
+  probe_id                       = azurerm_lb_probe.tfe_load_balancer_probe_console[0].id
+  protocol                       = "Tcp"
+  frontend_ip_configuration_name = "${var.friendly_name_prefix}-lb-fe"
+  frontend_port                  = 8800
+  backend_address_pool_id        = azurerm_lb_backend_address_pool.tfe_load_balancer_be[0].id
+  backend_port                   = 8800
+}
+
+resource "azurerm_lb_probe" "tfe_load_balancer_probe_app" {
+  count = var.load_balancer_type == "load_balancer" ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-lb-probe-app"
+  resource_group_name = var.resource_group_name
+
+  loadbalancer_id = azurerm_lb.tfe_load_balancer[0].id
+  protocol        = "Https"
+  request_path    = "/_health_check"
+  port            = 443
+}
+
+resource "azurerm_lb_rule" "tfe_load_balancer_rule_app" {
+  count = var.load_balancer_type == "load_balancer" ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-lb-rule-app"
+  resource_group_name = var.resource_group_name
+
+  loadbalancer_id                = azurerm_lb.tfe_load_balancer[0].id
+  probe_id                       = azurerm_lb_probe.tfe_load_balancer_probe_app[0].id
+  protocol                       = "Tcp"
+  frontend_ip_configuration_name = "${var.friendly_name_prefix}-lb-fe"
+  frontend_port                  = 443
+  backend_address_pool_id        = azurerm_lb_backend_address_pool.tfe_load_balancer_be[0].id
+  backend_port                   = 443
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%outputs.tf
new file mode 100644
index 0000000..1890796
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%outputs.tf
@@ -0,0 +1,7 @@
+output "load_balancer_backend_id" {
+  value = var.load_balancer_type == "application_gateway" ? azurerm_application_gateway.tfe_ag[0].backend_address_pool[0].id : azurerm_lb_backend_address_pool.tfe_load_balancer_be[0].id
+}
+
+output "load_balancer_ip" {
+  value = local.load_balancer_ip
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%variables.tf
new file mode 100644
index 0000000..2427cc2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%load_balancer%variables.tf
@@ -0,0 +1,219 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+variable "fqdn" {
+  default     = ""
+  type        = string
+  description = "The fully qualified domain name for the TFE environment"
+}
+
+variable "tfe_pip_id" {
+  default     = ""
+  type        = string
+  description = "The TFE public ip resource ID"
+}
+
+variable "tfe_pip_ip_address" {
+  default     = ""
+  type        = string
+  description = "The TFE public ip address"
+}
+
+variable "active_active" {
+  default     = true
+  type        = bool
+  description = "True if TFE running in active-active configuration"
+}
+
+# DNS
+# ---
+variable "dns_create_record" {
+  default     = true
+  type        = bool
+  description = "If true, will create a DNS record. If false, no record will be created and IP of load balancer will instead be output."
+}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "zones" {
+  default     = ["1", "2", "3"]
+  type        = list(string)
+  description = "Azure zones to use for applicable resources"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+variable "tenant_id" {
+  default     = null
+  type        = string
+  description = "The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault."
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name to use for DNS"
+}
+
+variable "key_vault_id" {
+  type        = string
+  description = "ID of Azure Key Vault containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "Name of Azure Key Vault Certificate for Application Gateway"
+}
+
+variable "certificate_key_vault_secret_id" {
+  default     = ""
+  type        = string
+  description = "Secret ID of Azure Key Vault Certificate for Application Gateway"
+}
+
+variable "trusted_root_certificate" {
+  default     = ""
+  type        = string
+  description = "Backend root certificate for Application Gateway to trust"
+}
+
+# Load balancer
+# -------------
+variable "load_balancer_type" {
+  default     = "application_gateway"
+  type        = string
+  description = "Expected value of 'application_gateway' or 'load_balancer'"
+
+  validation {
+    condition = (
+      var.load_balancer_type == "application_gateway" ||
+      var.load_balancer_type == "load_balancer"
+    )
+
+    error_message = "The load_balancer_type value must be 'application_gateway' or 'load_balancer'."
+  }
+}
+
+variable "load_balancer_public" {
+  default     = true
+  type        = bool
+  description = "Load balancer will use public IP if true"
+}
+
+variable "load_balancer_enable_http2" {
+  default     = true
+  type        = bool
+  description = "Determine if HTTP2 enabled on Application Gateway"
+}
+
+
+variable "load_balancer_sku_name" {
+  default     = "Standard_v2"
+  type        = string
+  description = "The Name of the SKU to use for Application Gateway, Standard_v2 or WAF_v2 accepted"
+
+  validation {
+    condition = (
+      var.load_balancer_sku_name == "Standard_v2" ||
+      var.load_balancer_sku_name == "WAF_v2"
+    )
+
+    error_message = "The load_balancer_sku_name value must be 'Standard_v2' or 'WAF_v2'."
+  }
+}
+
+variable "load_balancer_sku_tier" {
+  default     = "Standard_v2"
+  type        = string
+  description = "The Tier of the SKU to use for Application Gateway, Standard_v2 or WAF_v2 accepted"
+
+  validation {
+    condition = (
+      var.load_balancer_sku_tier == "Standard_v2" ||
+      var.load_balancer_sku_tier == "WAF_v2"
+    )
+
+    error_message = "The load_balancer_sku_tier value must be 'Standard_v2' or 'WAF_v2'."
+  }
+}
+
+variable "load_balancer_waf_firewall_mode" {
+  default     = "Prevention"
+  type        = string
+  description = "The Web Application Firewall mode (Detection or Prevention)"
+}
+
+variable "load_balancer_waf_rule_set_version" {
+  default     = "3.1"
+  type        = string
+  description = "The Version of the Rule Set used for this Web Application Firewall. Possible values are 2.2.9, 3.0, and 3.1."
+}
+
+variable "load_balancer_waf_file_upload_limit_mb" {
+  default     = 100
+  type        = number
+  description = "The File Upload Limit in MB. Accepted values are in the range 1MB to 750MB for the WAF_v2 SKU, and 1MB to 500MB for all other SKUs. Defaults to 100MB."
+}
+
+variable "load_balancer_waf_max_request_body_size_kb" {
+  default     = 128
+  type        = number
+  description = "The Maximum Request Body Size in KB. Accepted values are in the range 1KB to 128KB. Defaults to 128KB."
+}
+
+variable "load_balancer_sku_capacity" {
+  default     = 2
+  type        = number
+  description = "The Capacity of the SKU to use for Application Gateway (1 to 125)."
+}
+
+# Network
+# -------
+variable "network_frontend_subnet_id" {
+  type        = string
+  description = "(Required) Azure resource ID of frontend subnet for LB/AG"
+}
+
+variable "network_private_ip" {
+  default     = ""
+  type        = string
+  description = "(optional) Private IP address to use for LB/AG endpoint"
+}
+
+variable "network_frontend_subnet_cidr" {
+  default     = "10.0.0.0/20"
+  type        = string
+  description = "(Optional) Public subnet CIDR range for Bastion"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%main.tf
new file mode 100644
index 0000000..5f81f48
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%main.tf
@@ -0,0 +1,246 @@
+# Virtual network
+# ---------------
+resource "azurerm_virtual_network" "tfe_network" {
+  name                = "${var.friendly_name_prefix}-network"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  address_space = [var.network_cidr]
+
+  tags = var.tags
+}
+
+# Private subnet
+# --------------
+resource "azurerm_subnet" "tfe_network_private_subnet" {
+  name                = "${var.friendly_name_prefix}-private-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_private_subnet_cidr]
+  virtual_network_name = azurerm_virtual_network.tfe_network.name
+
+  service_endpoints = [
+    "Microsoft.Sql",
+    "Microsoft.Storage",
+    "Microsoft.KeyVault"
+  ]
+}
+
+# Private subnet network security group
+resource "azurerm_network_security_group" "tfe_network_private_nsg" {
+  name                = "${var.friendly_name_prefix}-private-nsg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  # Allow inbound traffic to TFE Application
+  security_rule {
+    name      = "allow-private-inbound-https"
+    priority  = 125
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.load_balancer_type == "application_gateway" ? var.network_frontend_subnet_cidr : var.network_allow_range
+    source_port_range     = "*"
+
+    destination_port_range     = "443"
+    destination_address_prefix = var.network_private_subnet_cidr
+  }
+
+  # Allow inbound TFE Console
+  dynamic "security_rule" {
+    for_each = var.active_active == false ? [1] : []
+
+    content {
+      name      = "allow-private-inbound-console"
+      priority  = 150
+      direction = "Inbound"
+      access    = "Allow"
+      protocol  = "Tcp"
+
+      source_address_prefix = var.load_balancer_type == "application_gateway" ? var.network_frontend_subnet_cidr : var.network_allow_range
+      source_port_range     = "*"
+
+      destination_port_range     = "8800"
+      destination_address_prefix = var.network_private_subnet_cidr
+    }
+  }
+
+  # Allow inbound SSH from bastion subnet
+  security_rule {
+    name      = "allow-private-inbound-ssh"
+    priority  = 200
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.network_bastion_subnet_cidr
+    source_port_range     = "*"
+
+    destination_port_range     = "22"
+    destination_address_prefix = var.network_private_subnet_cidr
+  }
+
+  # Allow Application Gateway traffic
+  security_rule {
+    name      = "allow-private-inbound-ag"
+    priority  = 250
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "*"
+
+    source_address_prefix = var.network_frontend_subnet_cidr
+    source_port_range     = "*"
+
+    destination_port_range     = "65200-65535"
+    destination_address_prefix = var.network_private_subnet_cidr
+  }
+
+  tags = var.tags
+}
+
+# Private subnet network security group association
+resource "azurerm_subnet_network_security_group_association" "tfe_nsg_association" {
+  subnet_id                 = azurerm_subnet.tfe_network_private_subnet.id
+  network_security_group_id = azurerm_network_security_group.tfe_network_private_nsg.id
+}
+
+# Public subnet
+# -------------
+resource "azurerm_subnet" "tfe_network_frontend_subnet" {
+  name                = "${var.friendly_name_prefix}-frontend-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_frontend_subnet_cidr]
+  virtual_network_name = azurerm_virtual_network.tfe_network.name
+}
+
+# Public subnet network securtiy group
+resource "azurerm_network_security_group" "tfe_network_frontend_nsg" {
+  name                = "${var.friendly_name_prefix}-frontend-nsg"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  # Allow inbound traffic to TFE Application
+  security_rule {
+    name      = "allow-frontend-inbound-https"
+    priority  = 125
+    direction = "Inbound"
+    access    = "Allow"
+    protocol  = "Tcp"
+
+    source_address_prefix = var.network_allow_range
+    source_port_range     = "*"
+
+    destination_port_range     = "443"
+    destination_address_prefix = var.network_frontend_subnet_cidr
+  }
+
+  # Allow inbound TFE Console, only used for standalone deployment
+  dynamic "security_rule" {
+    for_each = var.active_active == false ? [1] : []
+
+    content {
+      name      = "allow-frontend-inbound-console"
+      priority  = 150
+      direction = "Inbound"
+      access    = "Allow"
+      protocol  = "Tcp"
+
+      source_address_prefix = var.network_allow_range
+      source_port_range     = "*"
+
+      destination_port_range     = "8800"
+      destination_address_prefix = var.network_frontend_subnet_cidr
+    }
+  }
+
+  # Allow Application Gateway traffic
+  dynamic "security_rule" {
+    for_each = var.load_balancer_type == "application_gateway" ? [1] : []
+
+    content {
+      name      = "allow-frontend-inbound-ag"
+      priority  = 250
+      direction = "Inbound"
+      access    = "Allow"
+      protocol  = "*"
+
+      source_address_prefix = "GatewayManager"
+      source_port_range     = "*"
+
+      destination_port_range     = "65200-65535"
+      destination_address_prefix = "*"
+    }
+  }
+
+  # Allow Azure Load Balancer when private
+  dynamic "security_rule" {
+    for_each = var.load_balancer_public == false ? [1] : []
+
+    content {
+      name      = "allow-frontend-inbound-ag-lb"
+      priority  = 300
+      direction = "Inbound"
+      access    = "Allow"
+      protocol  = "*"
+
+      source_address_prefix = "AzureLoadBalancer"
+      source_port_range     = "*"
+
+      destination_port_range     = "*"
+      destination_address_prefix = "*"
+    }
+  }
+
+  # Deny Internet inbound when private
+  dynamic "security_rule" {
+    for_each = var.load_balancer_public == false ? [1] : []
+
+    content {
+      name      = "deny-frontend-inbound-ag-internet"
+      priority  = 500
+      direction = "Inbound"
+      access    = "Deny"
+      protocol  = "*"
+
+      source_address_prefix = "Internet"
+      source_port_range     = "*"
+
+      destination_port_range     = "*"
+      destination_address_prefix = "*"
+    }
+  }
+
+  tags = var.tags
+}
+
+# Public subnet network securtiy group association
+resource "azurerm_subnet_network_security_group_association" "tfe_network_frontend_nsg_association" {
+  subnet_id                 = azurerm_subnet.tfe_network_frontend_subnet.id
+  network_security_group_id = azurerm_network_security_group.tfe_network_frontend_nsg.id
+}
+
+# Bastion subnet
+# --------------
+resource "azurerm_subnet" "tfe_network_bastion_subnet" {
+  count = var.create_bastion == true ? 1 : 0
+
+  name                = "AzureBastionSubnet" # Azure requires this specific name
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_bastion_subnet_cidr]
+  virtual_network_name = azurerm_virtual_network.tfe_network.name
+}
+
+# Redis subnet
+# -------------
+resource "azurerm_subnet" "tfe_network_redis_subnet" {
+  count = var.active_active == true ? 1 : 0
+
+  name                = "${var.friendly_name_prefix}-redis-subnet"
+  resource_group_name = var.resource_group_name
+
+  address_prefixes     = [var.network_redis_subnet_cidr]
+  virtual_network_name = azurerm_virtual_network.tfe_network.name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%outputs.tf
new file mode 100644
index 0000000..4c76e40
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%outputs.tf
@@ -0,0 +1,19 @@
+output "network_id" {
+  value = azurerm_virtual_network.tfe_network.id
+}
+
+output "network_private_subnet_id" {
+  value = azurerm_subnet.tfe_network_private_subnet.id
+}
+
+output "network_frontend_subnet_id" {
+  value = azurerm_subnet.tfe_network_frontend_subnet.id
+}
+
+output "network_bastion_subnet_id" {
+  value = var.create_bastion == true ? azurerm_subnet.tfe_network_bastion_subnet[0].id : ""
+}
+
+output "network_redis_subnet_id" {
+  value = var.active_active == true ? azurerm_subnet.tfe_network_redis_subnet[0].id : ""
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%variables.tf
new file mode 100644
index 0000000..72ff70a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%network%variables.tf
@@ -0,0 +1,99 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "Name prefix used for resources"
+}
+
+variable "active_active" {
+  default     = true
+  type        = bool
+  description = "True if TFE running in active-active configuration"
+}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "Azure resource group name"
+}
+
+# Bastion
+# -------
+variable "create_bastion" {
+  default     = true
+  type        = bool
+  description = "If true, will create Azure Bastion PaaS and required resources https://azure.microsoft.com/en-us/services/azure-bastion/"
+}
+
+# Network
+# -------
+variable "network_cidr" {
+  default     = "10.0.0.0/16"
+  type        = string
+  description = "(Optional) CIDR range for network"
+}
+
+variable "network_private_subnet_cidr" {
+  default     = "10.0.32.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for TFE"
+}
+
+variable "network_frontend_subnet_cidr" {
+  default     = "10.0.0.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for frontend"
+}
+
+variable "network_bastion_subnet_cidr" {
+  default     = "10.0.16.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Bastion"
+}
+
+variable "network_redis_subnet_cidr" {
+  default     = "10.0.48.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Redis"
+}
+
+variable "network_allow_range" {
+  default     = "*"
+  type        = string
+  description = "(Optional) Network range to allow access to TFE"
+}
+
+# Load balancer
+# -------------
+variable "load_balancer_type" {
+  default     = "application_gateway"
+  type        = string
+  description = "Expected value of 'application_gateway' or 'load_balancer'"
+  validation {
+    condition = (
+      var.load_balancer_type == "application_gateway" ||
+      var.load_balancer_type == "load_balancer"
+    )
+
+    error_message = "The load_balancer_type value must be 'application_gateway' or 'load_balancer'."
+  }
+}
+
+variable "load_balancer_public" {
+  default     = true
+  type        = bool
+  description = "Load balancer will use public IP if true"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%main.tf
new file mode 100644
index 0000000..8740b57
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%main.tf
@@ -0,0 +1,40 @@
+locals {
+  storage_account_container_name           = var.storage_account_container_name == "" ? azurerm_storage_container.storage_account_container[0].name : var.storage_account_container_name
+  bootstrap_storage_account_container_name = var.bootstrap_storage_account_container_name == "" ? azurerm_storage_container.bootstrap_storage_account_container[0].name : var.bootstrap_storage_account_container_name
+}
+
+resource "azurerm_storage_container" "storage_account_container" {
+  count = var.storage_account_container_name == "" ? 1 : 0
+
+  name                  = var.storage_account_name
+  storage_account_name  = var.storage_account_name
+  container_access_type = "private"
+}
+
+resource "azurerm_storage_container" "bootstrap_storage_account_container" {
+  count = var.bootstrap_storage_account_container_name == "" ? 1 : 0
+
+  name                  = var.bootstrap_storage_account_name
+  storage_account_name  = var.bootstrap_storage_account_name
+  container_access_type = "private"
+}
+
+resource "azurerm_storage_blob" "bootstrap_license" {
+  count = var.bootstrap_storage_account_container_name == "" ? 1 : 0
+
+  source                 = var.tfe_license_filepath
+  name                   = var.tfe_license_name
+  storage_account_name   = var.bootstrap_storage_account_name
+  storage_container_name = azurerm_storage_container.bootstrap_storage_account_container[0].name
+  type                   = "Page"
+}
+
+resource "azurerm_storage_blob" "proxy_cert" {
+  count = var.proxy_cert_name != "" && var.bootstrap_storage_account_container_name == "" ? 1 : 0
+
+  source                 = var.proxy_cert_path
+  name                   = var.proxy_cert_name
+  storage_account_name   = var.bootstrap_storage_account_name
+  storage_container_name = azurerm_storage_container.bootstrap_storage_account_container[0].name
+  type                   = "Block"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%outputs.tf
new file mode 100644
index 0000000..760398f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%outputs.tf
@@ -0,0 +1,7 @@
+output "storage_account_container_name" {
+  value = local.storage_account_container_name
+}
+
+output "bootstrap_storage_account_container_name" {
+  value = local.bootstrap_storage_account_container_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%variables.tf
new file mode 100644
index 0000000..25ee9ce
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%object_storage%variables.tf
@@ -0,0 +1,56 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "Name prefix used for resources"
+}
+
+# Object Storage
+# --------------
+variable "tfe_license_name" {
+  default     = "license.rli"
+  type        = string
+  description = "TFE License name"
+}
+
+variable "tfe_license_filepath" {
+  default     = null
+  type        = string
+  description = "TFE License filepath"
+}
+
+variable "storage_account_name" {
+  default     = ""
+  type        = string
+  description = "Storage account name"
+}
+
+variable "storage_account_container_name" {
+  default     = ""
+  type        = string
+  description = "Storage account container name"
+}
+
+variable "bootstrap_storage_account_name" {
+  default     = ""
+  type        = string
+  description = "Bootstrap storage account name"
+}
+
+variable "bootstrap_storage_account_container_name" {
+  default     = ""
+  type        = string
+  description = "Bootstrap storage account container name"
+}
+
+# Proxy
+# -----
+variable "proxy_cert_name" {
+  default     = ""
+  description = "Name for the stored proxy certificate bundle"
+}
+
+variable "proxy_cert_path" {
+  default     = ""
+  description = "Local path to the proxy certificate bundle"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%main.tf
new file mode 100644
index 0000000..594a531
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%main.tf
@@ -0,0 +1,37 @@
+resource "random_pet" "tfe_redis_random_pet" {
+  length    = 3
+  separator = ""
+}
+
+resource "azurerm_redis_cache" "tfe_redis" {
+  name                = substr(random_pet.tfe_redis_random_pet.id, 0, 24)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  subnet_id = var.redis_subnet_id
+  capacity  = var.redis_size
+  family    = var.redis_family
+  sku_name  = var.redis_sku_name
+
+  enable_non_ssl_port = var.redis_enable_non_ssl_port
+
+  minimum_tls_version = var.redis_minimum_tls_version
+
+  redis_configuration {
+    enable_authentication         = var.redis_enable_authentication
+    rdb_backup_enabled            = var.redis_rdb_backup_enabled
+    rdb_backup_frequency          = var.redis_rdb_backup_frequency
+    rdb_backup_max_snapshot_count = var.redis_rdb_backup_max_snapshot_count
+    rdb_storage_connection_string = var.redis_rdb_backup_enabled == true && var.redis_rdb_existing_storage_account == "" ? azurerm_storage_account.tfe_redis_storage_account[0].primary_blob_connection_string : var.redis_rdb_existing_storage_account
+  }
+
+  lifecycle {
+    ignore_changes = [
+      redis_configuration.0.rdb_backup_frequency,
+      redis_configuration.0.rdb_backup_max_snapshot_count,
+      redis_configuration.0.rdb_storage_connection_string,
+    ]
+  }
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%outputs.tf
new file mode 100644
index 0000000..4fe87f3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%outputs.tf
@@ -0,0 +1,11 @@
+output "redis_hostname" {
+  value = azurerm_redis_cache.tfe_redis.hostname
+}
+
+output "redis_ssl_port" {
+  value = azurerm_redis_cache.tfe_redis.ssl_port
+}
+
+output "redis_pass" {
+  value = azurerm_redis_cache.tfe_redis.primary_access_key
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%storage.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%storage.tf
new file mode 100644
index 0000000..7c0ffcf
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%storage.tf
@@ -0,0 +1,12 @@
+resource "azurerm_storage_account" "tfe_redis_storage_account" {
+  count = var.redis_rdb_backup_enabled == true && var.redis_rdb_existing_storage_account == "" ? 1 : 0
+
+  name                = substr(random_pet.tfe_redis_random_pet.id, 0, 24)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  account_tier             = "Premium"
+  account_replication_type = "LRS"
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%variables.tf
new file mode 100644
index 0000000..48f5648
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%redis%variables.tf
@@ -0,0 +1,93 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+# Redis
+# -----
+variable "redis_size" {
+  default     = "3"
+  type        = string
+  description = "The size of the Redis cache to deploy. Valid values for a SKU family of C (Basic/Standard) are 0, 1, 2, 3, 4, 5, 6, and for P (Premium) family are 1, 2, 3, 4."
+}
+
+variable "redis_subnet_id" {
+  type        = string
+  description = "(Required) Network subnet id for redis"
+}
+
+# ----
+variable "redis_family" {
+  default     = "P"
+  type        = string
+  description = "(Required) The SKU family/pricing group to use. Valid values are C (for Basic/Standard SKU family) and P (for Premium)"
+}
+
+variable "redis_sku_name" {
+  default     = "Premium"
+  type        = string
+  description = "(Required) The SKU of Redis to use. Possible values are Basic, Standard and Premium."
+}
+
+variable "redis_enable_non_ssl_port" {
+  default     = false
+  type        = bool
+  description = "Enable the non-SSL port (6379)"
+}
+
+variable "redis_enable_authentication" {
+  default     = true
+  type        = bool
+  description = "If set to false, the Redis instance will be accessible without authentication. enable_authentication can only be set to false if a subnet_id is specified; and only works if there aren't existing instances within the subnet with enable_authentication set to true."
+}
+
+variable "redis_rdb_backup_enabled" {
+  default     = false
+  type        = bool
+  description = "(Optional) Is Backup Enabled? Only supported on Premium SKU's."
+}
+
+variable "redis_rdb_backup_frequency" {
+  default     = 60
+  type        = number
+  description = "(Optional) The Backup Frequency in Minutes. Only supported on Premium SKU's. Possible values are: 15, 30, 60, 360, 720 and 1440."
+}
+
+variable "redis_rdb_backup_max_snapshot_count" {
+  default     = null
+  type        = number
+  description = "(Optional) The maximum number of snapshots to create as a backup. Only supported for Premium SKU's."
+}
+
+variable "redis_rdb_existing_storage_account" {
+  default     = ""
+  type        = string
+  description = "(Optional) Existing Premium Storage Account for data encryption at rest. If empty string is given and backup is true, a new, Premium storage account will be created."
+}
+
+variable "redis_minimum_tls_version" {
+  default     = "1.2"
+  type        = string
+  description = "(Optional) The minimum TLS version."
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%main.tf
new file mode 100644
index 0000000..c6d1d07
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%main.tf
@@ -0,0 +1,36 @@
+locals {
+  # Azure Resource Groups
+  # ---------------------
+  # Determine Azure resource group names based on optional values
+  #   by default a new resource group will be created and used
+  #   additionally, the same resource group will be used for dns and kv if alternative resource group names are not supplied
+  resource_group_name           = var.resource_group_name == "" ? azurerm_resource_group.tfe_resource_group[0].name : var.resource_group_name
+  resource_group_name_dns       = var.resource_group_name_dns == "" ? local.resource_group_name : var.resource_group_name_dns
+  resource_group_name_kv        = var.resource_group_name_kv == "" ? local.resource_group_name : var.resource_group_name_kv
+  resource_group_name_bootstrap = var.resource_group_name_bootstrap == "" ? azurerm_resource_group.tfe_resource_group_bootstrap[0].name : var.resource_group_name_bootstrap
+  resource_group_id_bootstrap   = var.resource_group_name_bootstrap == "" ? azurerm_resource_group.tfe_resource_group_bootstrap[0].id : data.azurerm_resource_group.bootstrap_resource_group[0].id
+}
+
+resource "azurerm_resource_group" "tfe_resource_group" {
+  count = var.resource_group_name == "" ? 1 : 0
+
+  name     = "${var.friendly_name_prefix}-rg"
+  location = var.location
+
+  tags = var.tags
+}
+
+resource "azurerm_resource_group" "tfe_resource_group_bootstrap" {
+  count = var.resource_group_name_bootstrap == "" ? 1 : 0
+
+  name     = "${var.friendly_name_prefix}-bootstrap-rg"
+  location = var.location
+
+  tags = var.tags
+}
+
+data "azurerm_resource_group" "bootstrap_resource_group" {
+  count = var.resource_group_name_bootstrap == "" ? 0 : 1
+
+  name = var.resource_group_name_bootstrap
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%outputs.tf
new file mode 100644
index 0000000..29f3d84
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%outputs.tf
@@ -0,0 +1,19 @@
+output "resource_group_name" {
+  value = local.resource_group_name
+}
+
+output "resource_group_name_dns" {
+  value = local.resource_group_name_dns
+}
+
+output "resource_group_name_kv" {
+  value = local.resource_group_name_kv
+}
+
+output "resource_group_id_bootstrap" {
+  value = local.resource_group_id_bootstrap
+}
+
+output "resource_group_name_bootstrap" {
+  value = local.resource_group_name_bootstrap
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%variables.tf
new file mode 100644
index 0000000..154e7a1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%resource_groups%variables.tf
@@ -0,0 +1,46 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "resource_group_name_kv" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired key vault"
+}
+
+variable "resource_group_name_bootstrap" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name for bootstrap"
+}
+
+# Tagging
+# -------
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%main.tf
new file mode 100644
index 0000000..188201e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%main.tf
@@ -0,0 +1,54 @@
+locals {
+  storage_account_name                           = var.storage_account_name == "" ? azurerm_storage_account.tfe_storage_account[0].name : var.storage_account_name
+  storage_account_key                            = var.storage_account_key == "" ? azurerm_storage_account.tfe_storage_account[0].primary_access_key : var.storage_account_key
+  storage_account_primary_blob_connection_string = var.storage_account_primary_blob_connection_string == "" ? azurerm_storage_account.tfe_storage_account[0].primary_blob_connection_string : var.storage_account_primary_blob_connection_string
+  bootstrap_storage_account_name                 = var.bootstrap_storage_account_name == "" ? azurerm_storage_account.bootstrap_storage_account[0].name : var.bootstrap_storage_account_name
+}
+
+resource "random_pet" "random_pet_tfe_storage_account_name" {
+  count = var.storage_account_name == "" ? 1 : 0
+
+  length    = 3
+  separator = ""
+}
+
+resource "azurerm_storage_account" "tfe_storage_account" {
+  count = var.storage_account_name == "" ? 1 : 0
+
+  name                = substr(random_pet.random_pet_tfe_storage_account_name[0].id, 0, 24)
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  account_tier             = "Standard"
+  account_replication_type = var.storage_account_replication_type
+
+  tags = var.tags
+}
+
+resource "random_pet" "random_pet_bootstrap_storage_account_name" {
+  count = var.bootstrap_storage_account_name == "" ? 1 : 0
+
+  length    = 3
+  separator = ""
+}
+
+resource "azurerm_storage_account" "bootstrap_storage_account" {
+  count = var.bootstrap_storage_account_name == "" ? 1 : 0
+
+  name                = substr(random_pet.random_pet_bootstrap_storage_account_name[0].id, 0, 24)
+  location            = var.location
+  resource_group_name = var.resource_group_name_bootstrap
+
+  account_tier             = var.storage_account_tier
+  account_replication_type = var.storage_account_replication_type
+
+  tags = var.tags
+}
+
+resource "azurerm_user_assigned_identity" "vmss" {
+  location            = var.location
+  name                = "${var.friendly_name_prefix}-vmss"
+  resource_group_name = var.resource_group_name
+
+  tags = var.tags
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%outputs.tf
new file mode 100644
index 0000000..a39fbb6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%outputs.tf
@@ -0,0 +1,21 @@
+output "storage_account_name" {
+  value = local.storage_account_name
+}
+
+output "storage_account_key" {
+  value = local.storage_account_key
+}
+
+output "storage_account_primary_blob_connection_string" {
+  value = local.storage_account_primary_blob_connection_string
+}
+
+output "bootstrap_storage_account_name" {
+  value = local.bootstrap_storage_account_name
+}
+
+output "vmss_user_assigned_identity" {
+  value = azurerm_user_assigned_identity.vmss
+
+  description = "The user assigned identity to be assigned to the virtual machine scale set."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%variables.tf
new file mode 100644
index 0000000..4d36e1b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%service_accounts%variables.tf
@@ -0,0 +1,68 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_name_bootstrap" {
+  type        = string
+  description = "Azure resource group name for bootstrap"
+}
+
+# Service Accounts
+# ----------------
+variable "storage_account_tier" {
+  default     = "Standard"
+  type        = string
+  description = "Storage account tier Standard or Premium"
+}
+
+variable "storage_account_replication_type" {
+  default     = "ZRS"
+  type        = string
+  description = "Storage account type LRS, GRS, RAGRS, ZRS"
+}
+
+variable "storage_account_name" {
+  default     = ""
+  type        = string
+  description = "Storage account name"
+}
+
+variable "storage_account_key" {
+  default     = ""
+  type        = string
+  description = "Storage account key"
+}
+
+variable "storage_account_primary_blob_connection_string" {
+  default     = ""
+  type        = string
+  description = "Storage account primary blob endpoint"
+}
+
+variable "bootstrap_storage_account_name" {
+  default     = ""
+  type        = string
+  description = "Bootstrap storage account name"
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%main.tf
new file mode 100644
index 0000000..b0fa387
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%main.tf
@@ -0,0 +1,230 @@
+locals {
+  replicated_base_config = {
+    BypassPreflightChecks        = true
+    DaemonAuthenticationPassword = random_string.password.result
+    DaemonAuthenticationType     = "password"
+    ImportSettingsFrom           = "/etc/ptfe-settings.json"
+    LicenseFileLocation          = "/etc/${var.user_data_tfe_license_name}"
+    TlsBootstrapHostname         = var.fqdn
+    TlsBootstrapCert             = "/etc/tfe/tls.pem"
+    TlsBootstrapKey              = "/etc/tfe/tls.key"
+    TlsBootstrapType             = "server-path"
+  }
+
+  user_data_release_sequence = {
+    ReleaseSequence = var.user_data_release_sequence
+  }
+}
+
+locals {
+  # Build TFE configuration in JSON format by merging partial config local variables
+  release_sequence = var.user_data_release_sequence != "" ? local.user_data_release_sequence : {}
+
+  redis_configuration      = var.active_active ? local.redis_configs : {}
+  tfe_configuration        = jsonencode(merge(local.base_configs, local.base_external_configs, local.external_azure_configs, local.redis_configuration))
+  replicated_configuration = jsonencode(merge(local.replicated_base_config, local.release_sequence))
+}
+
+locals {
+  # Build TFE user data / custom data / cloud init
+  tfe_user_data = templatefile(
+    "${path.module}/templates/tfe.sh.tpl",
+    {
+      # Configuration data
+      replicated    = base64encode(local.replicated_configuration)
+      settings      = base64encode(local.tfe_configuration)
+      active_active = var.active_active
+      fqdn          = var.fqdn
+
+      # Storage account info for access to license and config files
+      bootstrap_storage_account_container_name = var.user_data_bootstrap_storage_container_name
+      bootstrap_storage_account_name           = var.user_data_bootstrap_storage_account_name
+      tfe_license_name                         = var.user_data_tfe_license_name
+
+      # Certificate information
+      user_data_cert = base64encode(var.user_data_cert)
+      user_data_key  = base64encode(var.user_data_cert_key)
+
+      # Proxy information
+      proxy_ip   = var.proxy_ip
+      proxy_port = var.proxy_port
+      proxy_cert = var.proxy_cert_name
+      no_proxy = join(
+        ",",
+        concat(
+          [
+            "127.0.0.1",
+            "169.254.169.254",
+            ".azure.com",
+            ".windows.net",
+            ".microsoft.com",
+          ],
+          var.no_proxy
+        )
+      )
+    }
+  )
+}
+
+resource "random_string" "password" {
+  length  = 16
+  special = false
+}
+
+resource "random_id" "archivist_token" {
+  byte_length = 16
+}
+
+resource "random_id" "cookie_hash" {
+  byte_length = 16
+}
+
+resource "random_id" "enc_password" {
+  byte_length = 16
+}
+
+resource "random_id" "install_id" {
+  byte_length = 16
+}
+
+resource "random_id" "internal_api_token" {
+  byte_length = 16
+}
+
+resource "random_id" "root_secret" {
+  byte_length = 16
+}
+
+resource "random_id" "registry_session_secret_key" {
+  byte_length = 16
+}
+
+resource "random_id" "registry_session_encryption_key" {
+  byte_length = 16
+}
+
+resource "random_id" "user_token" {
+  byte_length = 16
+}
+
+locals {
+  base_configs = {
+    hostname = {
+      value = var.fqdn
+    }
+
+    installation_type = {
+      value = "production"
+    }
+
+    production_type = {
+      value = "external"
+    }
+
+    archivist_token = {
+      value = random_id.archivist_token.hex
+    }
+
+    ca_certs = {
+      value = var.user_data_ca
+    }
+
+    cookie_hash = {
+      value = random_id.cookie_hash.hex
+    }
+
+    enc_password = {
+      value = random_id.enc_password.hex
+    }
+
+    extra_no_proxy = {
+      value = ""
+    }
+
+    install_id = {
+      value = random_id.install_id.hex
+    }
+
+    internal_api_token = {
+      value = random_id.internal_api_token.hex
+    }
+
+    registry_session_encryption_key = {
+      value = random_id.registry_session_encryption_key.hex
+    }
+
+    registry_session_secret_key = {
+      value = random_id.registry_session_secret_key.hex
+    }
+
+    root_secret = {
+      value = random_id.root_secret.hex
+    }
+
+    user_token = {
+      value = random_id.user_token.hex
+    }
+  }
+
+  base_external_configs = {
+    enable_active_active = {
+      value = var.active_active ? "1" : "0"
+    }
+
+    pg_dbname = {
+      value = var.user_data_pg_dbname
+    }
+
+    pg_netloc = {
+      value = var.user_data_pg_netloc
+    }
+
+    pg_password = {
+      value = var.user_data_pg_password
+    }
+
+    pg_user = {
+      value = var.user_data_pg_user
+    }
+  }
+
+  redis_configs = {
+    redis_host = {
+      value = var.user_data_redis_host
+    }
+
+    redis_pass = {
+      value = var.user_data_redis_pass
+    }
+
+    redis_port = {
+      value = var.user_data_redis_port
+    }
+
+    redis_use_password_auth = {
+      value = var.redis_enable_authentication == true ? "1" : "0"
+    }
+
+    redis_use_tls = {
+      value = var.user_data_redis_use_tls == true ? "1" : "0"
+    }
+  }
+
+  external_azure_configs = {
+    azure_account_name = {
+      value = var.user_data_azure_account_name
+    }
+
+    azure_account_key = {
+      value = var.user_data_azure_account_key
+    }
+
+    azure_container = {
+      value = var.user_data_azure_container_name
+    }
+
+    placement = {
+      value = "placement_azure"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%outputs.tf
new file mode 100644
index 0000000..a9f9022
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%outputs.tf
@@ -0,0 +1,11 @@
+output "tfe_userdata_base64_encoded" {
+  value = base64encode(local.tfe_user_data)
+}
+
+output "tfe_console_password" {
+  value = random_string.password.result
+}
+
+output "user_token" {
+  value = local.base_configs.user_token
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%variables.tf
new file mode 100644
index 0000000..058a786
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%user_data%variables.tf
@@ -0,0 +1,154 @@
+# General
+# -------
+variable "fqdn" {
+  type        = string
+  description = "The fully qualified domain name for the TFE environment"
+}
+
+variable "active_active" {
+  default     = true
+  type        = bool
+  description = "True if TFE running in active-active configuration"
+}
+
+# Database
+# --------
+variable "user_data_pg_dbname" {
+  type        = string
+  description = "Postgres database name"
+}
+
+variable "user_data_pg_netloc" {
+  type        = string
+  description = "Postgres database fqdn and port"
+}
+
+variable "user_data_pg_user" {
+  type        = string
+  description = "Postgres database username"
+}
+
+variable "user_data_pg_password" {
+  type        = string
+  description = "Postgres database password"
+}
+
+# Redis
+# -----
+variable "redis_enable_authentication" {
+  default     = true
+  type        = bool
+  description = "If set to false, the Redis instance will be accessible without authentication."
+}
+
+variable "user_data_redis_host" {
+  type        = string
+  description = "Redis hostname"
+}
+
+variable "user_data_redis_port" {
+  default     = "6380"
+  type        = string
+  description = "Redis port to use for communication"
+}
+
+variable "user_data_redis_pass" {
+  type        = string
+  description = "Redis password"
+}
+
+variable "user_data_redis_use_tls" {
+  default     = true
+  type        = bool
+  description = "Boolean to determine if TLS should be used"
+}
+
+# Azure
+# -----
+variable "user_data_azure_container_name" {
+  type        = string
+  description = "Azure storage container name"
+}
+
+variable "user_data_azure_account_key" {
+  type        = string
+  description = "Azure storage account key"
+}
+
+variable "user_data_azure_account_name" {
+  type        = string
+  description = "Azure storage account name"
+}
+
+variable "user_data_bootstrap_storage_account_name" {
+  type        = string
+  description = "Azure bootstrap storage account name"
+}
+
+variable "user_data_bootstrap_storage_container_name" {
+  type        = string
+  description = "Azure boostrap storage container name"
+}
+
+# TFE
+# ---
+variable "user_data_release_sequence" {
+  default     = ""
+  type        = string
+  description = "Terraform Enterprise version release sequence"
+}
+
+variable "user_data_tfe_license_name" {
+  default     = ""
+  type        = string
+  description = "Terraform Enterprise license file name"
+}
+
+variable "user_data_ca" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for TFE ca_cert setting"
+}
+
+variable "user_data_cert" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for Replicated TlsBootstrapCert setting"
+}
+
+variable "user_data_cert_key" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for Replicated TlsBootstrapKey setting"
+}
+
+# Proxy
+# -----
+variable "proxy_ip" {
+  default     = ""
+  type        = string
+  description = "IP Address of the proxy server"
+}
+
+variable "proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+variable "proxy_cert_name" {
+  default     = ""
+  type        = string
+  description = "Name for the stored proxy certificate bundle"
+}
+
+variable "proxy_cert_path" {
+  default     = ""
+  type        = string
+  description = "Local path to the proxy certificate bundle"
+}
+
+variable "no_proxy" {
+  default     = []
+  type        = list(string)
+  description = "Addresses which should not be accessed through the proxy server located at proxy_ip. This list will be combined with internal GCP addresses."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%main.tf
new file mode 100644
index 0000000..ee639bc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%main.tf
@@ -0,0 +1,92 @@
+resource "azurerm_linux_virtual_machine_scale_set" "tfe_vmss" {
+  name                = "${var.friendly_name_prefix}-vmss"
+  location            = var.location
+  resource_group_name = var.resource_group_name
+
+  overprovision  = var.vm_overprovision
+  instances      = var.vm_node_count
+  sku            = var.vm_sku
+  admin_username = var.vm_user
+
+  upgrade_mode = var.vm_upgrade_mode
+
+  zone_balance = var.vm_zone_balance
+  zones        = var.zones
+
+  custom_data = var.vm_userdata_script
+
+  identity {
+    type = "UserAssigned"
+
+    identity_ids = [var.vm_user_assigned_identity_id]
+  }
+
+  # Source image id will be used if vm_image_id anything other than 'ubuntu' or 'rhel'
+  source_image_id = var.vm_image_id == "ubuntu" || var.vm_image_id == "rhel" ? null : var.vm_image_id
+
+  # Source image reference will be used if vm_image_id is 'ubuntu' or 'rhel'
+  dynamic "source_image_reference" {
+    for_each = var.vm_image_id == "ubuntu" || var.vm_image_id == "rhel" ? [1] : []
+
+    content {
+      publisher = var.vm_image_id == "ubuntu" ? "Canonical" : "RedHat"
+      offer     = var.vm_image_id == "ubuntu" ? "0001-com-ubuntu-server-focal" : "RHEL"
+      sku       = var.vm_image_id == "ubuntu" ? "20_04-lts" : "7.8"
+      version   = var.vm_image_id == "ubuntu" ? "latest" : "latest"
+    }
+  }
+
+  admin_ssh_key {
+    username   = var.vm_user
+    public_key = var.vm_public_key
+  }
+
+  os_disk {
+    caching              = var.vm_os_disk_caching
+    storage_account_type = var.vm_os_disk_storage_account_type
+    disk_size_gb         = var.vm_os_disk_disk_size_gb
+  }
+
+  network_interface {
+    name    = "${var.friendly_name_prefix}-nic"
+    primary = true
+
+    ip_configuration {
+      name      = "${var.friendly_name_prefix}-ip"
+      primary   = true
+      subnet_id = var.vm_subnet_id
+
+      load_balancer_backend_address_pool_ids       = var.load_balancer_type == "load_balancer" ? [var.load_balancer_backend_id] : null
+      application_gateway_backend_address_pool_ids = var.load_balancer_type == "application_gateway" ? [var.load_balancer_backend_id] : null
+
+      dynamic "public_ip_address" {
+        for_each = var.load_balancer_public == false ? [1] : []
+        content {
+          name = "${var.friendly_name_prefix}-public-ip"
+        }
+      }
+    }
+  }
+
+  tags = var.tags
+}
+
+resource "azurerm_role_assignment" "tfe_vmss_role_assignment" {
+  scope                = var.resource_group_id_bootstrap
+  role_definition_name = "Storage Blob Data Reader"
+  principal_id         = var.vm_user_assigned_identity_principal_id
+}
+
+resource "azurerm_virtual_machine_scale_set_extension" "main" {
+  name                         = "${var.friendly_name_prefix}-vmss-ext"
+  virtual_machine_scale_set_id = azurerm_linux_virtual_machine_scale_set.tfe_vmss.id
+  publisher                    = "Microsoft.ManagedServices"
+  type                         = "ApplicationHealthLinux"
+  auto_upgrade_minor_version   = true
+  type_handler_version         = "1.0"
+  settings = jsonencode({
+    "protocol" : "http",
+    "port" : 80,
+    "requestPath" : "/_health_check"
+  })
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%variables.tf
new file mode 100644
index 0000000..62e0023
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisemodules%vm%variables.tf
@@ -0,0 +1,169 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "Name prefix used for resources"
+}
+
+# Provider
+# --------
+variable "location" {
+  type        = string
+  description = "Azure location name e.g. East US"
+}
+
+variable "zones" {
+  default     = ["1", "2", "3"]
+  type        = list(string)
+  description = "Azure zones to use for applicable resources"
+}
+
+variable "resource_group_name" {
+  type        = string
+  description = "Azure resource group name"
+}
+
+variable "resource_group_id_bootstrap" {
+  type        = string
+  description = "Azure resource group ID for bootstrap"
+}
+
+variable "load_balancer_type" {
+  default     = "application_gateway"
+  type        = string
+  description = "Expected value of 'application_gateway' or 'load_balancer'"
+  validation {
+    condition = (
+      var.load_balancer_type == "application_gateway" ||
+      var.load_balancer_type == "load_balancer"
+    )
+
+    error_message = "The load_balancer_type value must be 'application_gateway' or 'load_balancer'."
+  }
+}
+
+# Load balancer
+# -------------
+variable "load_balancer_backend_id" {}
+
+variable "load_balancer_public" {
+  default     = true
+  type        = bool
+  description = "Load balancer will use public IP if true"
+}
+
+# Vm
+# --
+variable "vm_node_count" {
+  default     = 1
+  type        = number
+  description = "The number of instances to create for TFE environment."
+
+  validation {
+    condition     = var.vm_node_count <= 5
+    error_message = "The vm_node_count value must be less than or equal to 5."
+  }
+}
+
+variable "vm_userdata_script" {
+  default = ""
+  type    = string
+}
+
+variable "vm_subnet_id" {
+  type        = string
+  description = "Network subnet id for vm"
+}
+
+variable "vm_user" {
+  type        = string
+  description = "Virtual machine user name"
+}
+
+variable "vm_public_key" {
+  type        = string
+  description = "Virtual machine ssh public key"
+}
+
+variable "vm_image_id" {
+  default     = "ubuntu"
+  type        = string
+  description = "Virtual machine image id - may be 'ubuntu' (default), 'rhel', or custom image resource id"
+
+  validation {
+    condition = (
+      var.vm_image_id == "ubuntu" ||
+      var.vm_image_id == "rhel" ||
+      substr(var.vm_image_id, 0, 14) == "/subscriptions"
+    )
+
+    error_message = "The vm_image_id value must be 'ubuntu', 'rhel', or an Azure image resource ID beginning with \"/subscriptions\"."
+  }
+}
+
+variable "vm_user_assigned_identity_id" {
+  description = "The identity of the user assigned identity to be assigned to the virtual machine scale set."
+  type        = string
+}
+
+variable "vm_user_assigned_identity_principal_id" {
+  description = <<EOD
+  The Service Principal identity of the user assigned identity to be assigned to the virtual machine scale set.
+  EOD
+  type        = string
+}
+
+# Optional variables not currently specified in root module
+variable "vm_overprovision" {
+  default = false
+  type    = bool
+}
+
+variable "vm_sku" {
+  default     = "Standard_D4_v3"
+  type        = string
+  description = "Azure virtual machine sku"
+}
+
+variable "vm_upgrade_mode" {
+  default     = "Manual"
+  type        = string
+  description = "Specifies how Upgrades (e.g. changing the Image/SKU) should be performed to Virtual Machine Instances. Possible values are Automatic, Manual and Rolling. Defaults to Manual."
+}
+
+variable "vm_zone_balance" {
+  default     = true
+  type        = bool
+  description = "Should the Virtual Machines in this Scale Set be strictly evenly distributed across Availability Zones? Defaults to false. Changing this forces a new resource to be created."
+}
+
+variable "vm_os_disk_caching" {
+  default     = "ReadWrite"
+  type        = string
+  description = "The type of Caching which should be used for this Data Disk. Possible values are None, ReadOnly and ReadWrite."
+}
+
+variable "vm_os_disk_storage_account_type" {
+  default     = "StandardSSD_LRS"
+  type        = string
+  description = "The Type of Storage Account which should back this Data Disk. Possible values include Standard_LRS, StandardSSD_LRS, Premium_LRS and UltraSSD_LRS."
+}
+
+variable "vm_os_disk_disk_size_gb" {
+  default     = 100
+  type        = number
+  description = "The size of the Data Disk which should be created."
+}
+
+variable "vm_identity_type" {
+  default     = "SystemAssigned"
+  type        = string
+  description = "The type of Managed Identity which should be assigned to the Linux Virtual Machine Scale Set. Possible values are SystemAssigned, UserAssigned and SystemAssigned, UserAssigned."
+}
+
+# Tagging
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseoutputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseoutputs.tf
new file mode 100644
index 0000000..4090e01
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterpriseoutputs.tf
@@ -0,0 +1,154 @@
+# Application
+# -----------
+output "tfe_application_url" {
+  value       = "https://${local.fqdn}"
+  description = "Terraform Enterprise Application URL"
+}
+
+output "login_url" {
+  value       = "https://${local.fqdn}/admin/account/new?token=${module.user_data.user_token.value}"
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+output "tfe_console_url" {
+  value       = "https://${local.fqdn}:8800"
+  description = "Terraform Enterprise Console URL"
+}
+
+# General
+# -------
+output "resource_group_name" {
+  value = module.resource_groups.resource_group_name
+}
+
+output "resource_group_name_bootstrap" {
+  value = module.resource_groups.resource_group_name_bootstrap
+}
+
+# Network
+# -------
+output "network_id" {
+  value = local.network_id
+}
+
+output "network_private_subnet_id" {
+  value = local.network_private_subnet_id
+}
+
+output "network_frontend_subnet_id" {
+  value = local.network_frontend_subnet_id
+}
+
+output "network_bastion_subnet_id" {
+  value = var.network_id != "" && var.create_bastion == true ? module.network.*.network_bastion_subnet_id : []
+}
+
+output "network_redis_subnet_id" {
+  value = var.network_id != "" && local.active_active == true ? module.network.*.network_redis_subnet_id : []
+}
+
+# Service Accounts
+# ----------------
+output "storage_account_name" {
+  value = module.service_accounts.storage_account_name
+}
+
+output "bootstrap_storage_account_name" {
+  value = module.service_accounts.bootstrap_storage_account_name
+}
+
+# Object Storage
+# --------------
+output "storage_account_container_name" {
+  value = module.object_storage.storage_account_container_name
+}
+
+output "bootstrap_storage_account_container_name" {
+  value = module.object_storage.bootstrap_storage_account_container_name
+}
+
+# Database
+# --------
+output "database_server_id" {
+  value = module.database.database_server_id
+}
+
+output "database_server_name" {
+  value = module.database.database_server_name
+}
+
+output "database_server_fqdn" {
+  value = module.database.database_server_fqdn
+}
+
+output "database_user" {
+  value = module.database.database_user
+}
+
+output "database_password" {
+  value = module.database.database_password
+}
+
+output "database_id" {
+  value = module.database.database_id
+}
+
+output "database_name" {
+  value = module.database.database_name
+}
+
+# SSH
+# ---
+output "instance_private_key" {
+  value = var.vm_public_key == "" ? tls_private_key.tfe_ssh[0].private_key_pem : "An existing 'vm_public_key' was provided"
+}
+
+# Bastion
+# -------
+output "bastion_host_id" {
+  value = var.create_bastion == true ? module.bastion.*.bastion_host_id : []
+}
+
+output "bastion_host_dns_name" {
+  value = var.create_bastion == true ? module.bastion.*.bastion_host_dns_name : []
+}
+
+# User_data
+# ---------
+output "tfe_userdata_base64_encoded" {
+  value = module.user_data.tfe_userdata_base64_encoded
+}
+
+output "tfe_console_password" {
+  value = module.user_data.tfe_console_password
+}
+
+# Redis
+# -----
+output "redis_hostname" {
+  value = local.active_active == true ? module.redis[0].redis_hostname : null
+}
+
+output "redis_ssl_port" {
+  value = local.active_active == true ? module.redis[0].redis_ssl_port : null
+}
+
+output "redis_pass" {
+  value = local.active_active == true ? module.redis[0].redis_pass : null
+}
+
+# Load balancer
+# -------------
+output "load_balancer_backend_id" {
+  value = module.load_balancer.load_balancer_backend_id
+}
+
+output "load_balancer_ip" {
+  value = var.dns_create_record == false ? "External DNS record must be configured for: ${module.load_balancer.load_balancer_ip}" : module.load_balancer.load_balancer_ip
+}
+
+# VM
+# --
+output "instance_user_name" {
+  value = var.vm_user
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisevariables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisevariables.tf
new file mode 100644
index 0000000..f51d65d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-azurerm-terraform-enterprisevariables.tf
@@ -0,0 +1,514 @@
+# General
+# -------
+variable "friendly_name_prefix" {
+  type        = string
+  description = "(Required) Name prefix used for resources"
+}
+
+variable "domain_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Domain to create Terraform Enterprise subdomain within"
+}
+
+variable "tfe_subdomain" {
+  default     = ""
+  type        = string
+  description = "Subdomain for TFE"
+}
+
+# DNS
+# ---
+variable "dns_create_record" {
+  default     = true
+  type        = bool
+  description = "If true, will create a DNS record. If false, no record will be created and IP of load balancer will instead be output."
+}
+
+variable "dns_external_fqdn" {
+  default     = ""
+  type        = string
+  description = "External DNS FQDN should be supplied if dns_create_record is false"
+}
+
+# Provider
+# --------
+variable "location" {
+  default     = "East US"
+  type        = string
+  description = "(Required) Azure location name e.g. East US"
+}
+
+variable "zones" {
+  default     = ["1", "2", "3"]
+  type        = list(string)
+  description = "Azure zones to use for applicable resources"
+}
+
+variable "resource_group_name" {
+  default     = ""
+  type        = string
+  description = "(Required) Azure resource group name"
+}
+
+variable "resource_group_name_dns" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired DNS zone"
+}
+
+variable "resource_group_name_kv" {
+  default     = ""
+  type        = string
+  description = "Name of resource group which contains desired key vault"
+}
+
+variable "resource_group_name_bootstrap" {
+  default     = ""
+  type        = string
+  description = "Azure resource group name for bootstrap"
+}
+
+variable "key_vault_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault name containing required certificate"
+}
+
+variable "certificate_name" {
+  default     = ""
+  type        = string
+  description = "(recommended) Azure Key Vault Certificate name for Application Gateway"
+}
+
+# Bastion
+# -------
+variable "create_bastion" {
+  default     = true
+  type        = bool
+  description = "If true, will create Azure Bastion PaaS and required resources https://azure.microsoft.com/en-us/services/azure-bastion/"
+}
+
+# Network
+# -------
+variable "network_id" {
+  default     = ""
+  type        = string
+  description = "(Optional) Existing network ID"
+}
+
+variable "network_private_subnet_id" {
+  default     = ""
+  type        = string
+  description = "(Optional) Existing network private subnet ID"
+}
+
+variable "network_frontend_subnet_id" {
+  default     = ""
+  type        = string
+  description = "(Optional) Existing network frontend subnet ID"
+}
+
+variable "network_bastion_subnet_id" {
+  default     = ""
+  type        = string
+  description = "(Optional) Existing network Bastion subnet ID"
+}
+
+variable "network_redis_subnet_id" {
+  default     = ""
+  type        = string
+  description = "(Optional) Existing network Redis subnet ID"
+}
+
+variable "network_cidr" {
+  default     = "10.0.0.0/16"
+  type        = string
+  description = "(Optional) CIDR range for network"
+}
+
+variable "network_private_subnet_cidr" {
+  default     = "10.0.32.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for TFE"
+}
+
+variable "network_frontend_subnet_cidr" {
+  default     = "10.0.0.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for frontend"
+}
+
+variable "network_bastion_subnet_cidr" {
+  default     = "10.0.16.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Bastion"
+}
+
+variable "network_redis_subnet_cidr" {
+  default     = "10.0.48.0/20"
+  type        = string
+  description = "(Optional) Subnet CIDR range for Redis"
+}
+
+variable "network_allow_range" {
+  default     = "*"
+  type        = string
+  description = "(Optional) Network range to allow access to TFE"
+}
+
+# Object Storage
+# --------------
+variable "tfe_license_name" {
+  default     = "license.rli"
+  type        = string
+  description = "TFE License name"
+}
+
+variable "tfe_license_filepath" {
+  default     = null
+  type        = string
+  description = "TFE License filepath"
+}
+
+variable "storage_account_name" {
+  default     = ""
+  type        = string
+  description = "Storage account name"
+}
+
+variable "storage_account_key" {
+  default     = ""
+  type        = string
+  description = "Storage account key"
+}
+
+variable "storage_account_container_name" {
+  default     = ""
+  type        = string
+  description = "Storage account container name"
+}
+
+variable "storage_account_primary_blob_connection_string" {
+  default     = ""
+  type        = string
+  description = "Storage account primary blob endpoint"
+}
+
+variable "bootstrap_storage_account_name" {
+  default     = ""
+  type        = string
+  description = "Bootstrap storage account name"
+}
+
+variable "bootstrap_storage_account_container_name" {
+  default     = ""
+  type        = string
+  description = "Bootstrap storage account container name"
+}
+
+# Service Accounts
+# ----------------
+variable "storage_account_tier" {
+  default     = "Standard"
+  type        = string
+  description = "Storage account tier Standard or Premium"
+}
+
+variable "storage_account_replication_type" {
+  default     = "ZRS"
+  type        = string
+  description = "Storage account type LRS, GRS, RAGRS, ZRS"
+}
+
+# Database
+# --------
+variable "database_user" {
+  default     = "tfeuser"
+  description = "Postgres username"
+}
+
+variable "database_machine_type" {
+  default     = "GP_Gen5_4"
+  type        = string
+  description = "Postgres sku short name: tier + family + cores"
+}
+
+variable "database_size_mb" {
+  default     = 5120
+  type        = number
+  description = "Postgres storage size in MB"
+}
+
+variable "database_version" {
+  default     = "9.5"
+  type        = string
+  description = "Postgres version"
+}
+
+# Load Balancer
+# -------------
+variable "load_balancer_type" {
+  default     = "application_gateway"
+  type        = string
+  description = "Expected value of 'application_gateway' or 'load_balancer'"
+
+  validation {
+    condition = (
+      var.load_balancer_type == "application_gateway" ||
+      var.load_balancer_type == "load_balancer"
+    )
+
+    error_message = "The load_balancer_type value must be 'application_gateway' or 'load_balancer'."
+  }
+}
+
+variable "load_balancer_public" {
+  default     = true
+  type        = bool
+  description = "Load balancer will use public IP if true"
+}
+
+variable "load_balancer_sku_name" {
+  default     = "Standard_v2"
+  type        = string
+  description = "The Name of the SKU to use for Application Gateway, Standard_v2 or WAF_v2 accepted"
+
+  validation {
+    condition = (
+      var.load_balancer_sku_name == "Standard_v2" ||
+      var.load_balancer_sku_name == "WAF_v2"
+    )
+
+    error_message = "The load_balancer_sku_name value must be 'Standard_v2' or 'WAF_v2'."
+  }
+}
+
+variable "load_balancer_sku_tier" {
+  default     = "Standard_v2"
+  type        = string
+  description = "The Tier of the SKU to use for Application Gateway, Standard_v2 or WAF_v2 accepted"
+
+  validation {
+    condition = (
+      var.load_balancer_sku_tier == "Standard_v2" ||
+      var.load_balancer_sku_tier == "WAF_v2"
+    )
+
+    error_message = "The load_balancer_sku_tier value must be 'Standard_v2' or 'WAF_v2'."
+  }
+}
+
+variable "load_balancer_waf_firewall_mode" {
+  default     = "Prevention"
+  type        = string
+  description = "The Web Application Firewall mode (Detection or Prevention)"
+}
+
+variable "load_balancer_waf_rule_set_version" {
+  default     = "3.1"
+  type        = string
+  description = "The Version of the Rule Set used for this Web Application Firewall. Possible values are 2.2.9, 3.0, and 3.1."
+}
+
+variable "load_balancer_waf_file_upload_limit_mb" {
+  default     = 100
+  type        = number
+  description = "The File Upload Limit in MB. Accepted values are in the range 1MB to 750MB for the WAF_v2 SKU, and 1MB to 500MB for all other SKUs. Defaults to 100MB."
+}
+
+variable "load_balancer_waf_max_request_body_size_kb" {
+  default     = 128
+  type        = number
+  description = "The Maximum Request Body Size in KB. Accepted values are in the range 1KB to 128KB. Defaults to 128KB."
+}
+
+# Redis
+# -----
+variable "redis_family" {
+  default     = "P"
+  type        = string
+  description = "(Required) The SKU family/pricing group to use. Valid values are C (for Basic/Standard SKU family) and P (for Premium)"
+}
+
+variable "redis_sku_name" {
+  default     = "Premium"
+  type        = string
+  description = "(Required) The SKU of Redis to use. Possible values are Basic, Standard and Premium."
+}
+
+variable "redis_size" {
+  default     = "3"
+  type        = string
+  description = "The size of the Redis cache to deploy. Valid values for a SKU family of C (Basic/Standard) are 0, 1, 2, 3, 4, 5, 6, and for P (Premium) family are 1, 2, 3, 4."
+}
+
+variable "redis_enable_non_ssl_port" {
+  default     = false
+  type        = bool
+  description = "Enable the non-SSL port (6379)"
+}
+
+variable "redis_enable_authentication" {
+  default     = true
+  type        = bool
+  description = "If set to false, the Redis instance will be accessible without authentication. enable_authentication can only be set to false if a subnet_id is specified; and only works if there aren't existing instances within the subnet with enable_authentication set to true."
+}
+
+variable "redis_rdb_backup_enabled" {
+  default     = false
+  type        = bool
+  description = "(Optional) Is Backup Enabled? Only supported on Premium SKU's. If rdb_backup_enabled is true and redis_rdb_storage_connection_string is null, a new, Premium storage account will be created."
+}
+
+variable "redis_rdb_backup_frequency" {
+  default     = null
+  type        = number
+  description = "(Optional) The Backup Frequency in Minutes. Only supported on Premium SKU's. Possible values are: 15, 30, 60, 360, 720 and 1440."
+}
+
+variable "redis_rdb_backup_max_snapshot_count" {
+  default     = null
+  type        = number
+  description = "(Optional) The maximum number of snapshots to create as a backup. Only supported for Premium SKU's."
+}
+
+variable "redis_rdb_existing_storage_account" {
+  default     = ""
+  type        = string
+  description = "(Optional) Name of an existing Premium Storage Account for data encryption at rest. If empty string is given, a new, Premium storage account will be created."
+}
+
+variable "redis_rdb_existing_storage_account_rg" {
+  default     = ""
+  type        = string
+  description = "(Optional) Name of the resource group that contains the existing Premium Storage Account for data encryption at rest."
+}
+
+variable "redis_minimum_tls_version" {
+  default     = "1.2"
+  type        = string
+  description = "(Optional) The minimum TLS version."
+}
+
+# VM
+# --
+variable "vm_node_count" {
+  default     = 2
+  type        = number
+  description = "The number of instances to create for TFE environment."
+
+  validation {
+    condition     = var.vm_node_count <= 5
+    error_message = "The vm_node_count value must be less than or equal to 5."
+  }
+}
+
+variable "vm_user" {
+  default     = "tfeuser"
+  type        = string
+  description = "Virtual machine user name"
+}
+
+variable "vm_public_key" {
+  default     = ""
+  type        = string
+  description = "Virtual machine public key for authentication (2048-bit ssh-rsa)"
+}
+
+variable "vm_image_id" {
+  default     = "ubuntu"
+  type        = string
+  description = "Virtual machine image id - may be 'ubuntu' (default), 'rhel', or custom image resource id"
+
+  validation {
+    condition = (
+      var.vm_image_id == "ubuntu" ||
+      var.vm_image_id == "rhel" ||
+      substr(var.vm_image_id, 0, 14) == "/subscriptions"
+    )
+
+    error_message = "The vm_image_id value must be 'ubuntu', 'rhel', or an Azure image resource ID beginning with \"/subscriptions\"."
+  }
+}
+
+variable "vm_sku" {
+  default     = "Standard_D4_v3"
+  type        = string
+  description = "Azure virtual machine sku"
+}
+
+variable "vm_os_disk_storage_account_type" {
+  default = "StandardSSD_LRS"
+  type    = string
+}
+
+variable "vm_os_disk_disk_size_gb" {
+  default     = 100
+  type        = number
+  description = "The size of the Data Disk which should be created."
+}
+
+# User Data
+# ---------
+variable "user_data_release_sequence" {
+  default     = ""
+  type        = string
+  description = "Terraform Enterprise release sequence"
+}
+
+variable "user_data_ca" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for TFE ca_cert setting"
+}
+
+variable "user_data_cert" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for Replicated TlsBootstrapCert setting"
+}
+
+variable "user_data_cert_key" {
+  default     = ""
+  type        = string
+  description = "(optional) Value to be provided for Replicated TlsBootstrapKey setting"
+}
+
+variable "user_data_redis_use_tls" {
+  default = true
+  type    = bool
+}
+
+# Proxy
+# -----
+variable "proxy_ip" {
+  default     = ""
+  type        = string
+  description = "IP Address of the proxy server"
+}
+
+variable "proxy_port" {
+  default = "3128"
+  type    = string
+}
+
+variable "proxy_cert_name" {
+  default     = ""
+  type        = string
+  description = "Name for the stored proxy certificate bundle"
+}
+
+variable "proxy_cert_path" {
+  default     = ""
+  type        = string
+  description = "Local path to the proxy certificate bundle"
+}
+
+# Tagging
+# -------
+variable "tags" {
+  default     = {}
+  type        = map(string)
+  description = "Map of tags for resource"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%main.tf
new file mode 100644
index 0000000..06022a2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%main.tf
@@ -0,0 +1,88 @@
+provider "google" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+provider "google-beta" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+resource "tls_locally_signed_cert" "main" {
+  cert_request_pem      = tls_cert_request.main.cert_request_pem
+  ca_key_algorithm      = tls_private_key.ca.algorithm
+  ca_private_key_pem    = tls_private_key.ca.private_key_pem
+  ca_cert_pem           = tls_self_signed_cert.ca.cert_pem
+  validity_period_hours = 24 * 30 * 6
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+  ]
+}
+
+resource "tls_cert_request" "main" {
+  key_algorithm   = tls_private_key.main.algorithm
+  private_key_pem = tls_private_key.main.private_key_pem
+
+  subject {
+    common_name  = var.fqdn
+    organization = "Terraform Enterprise Private Certificate"
+  }
+
+  dns_names = [var.fqdn]
+}
+
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "tls_private_key" "main" {
+  algorithm = "RSA"
+}
+
+resource "google_compute_region_ssl_certificate" "main" {
+  certificate = "${tls_locally_signed_cert.main.cert_pem}\n${tls_self_signed_cert.ca.cert_pem}"
+  private_key = tls_private_key.main.private_key_pem
+
+  description = "The regional SSL certificate of the private load balancer for TFE."
+  name_prefix = "ptfe-"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+module "tfe" {
+  source = "../../"
+
+  namespace            = var.namespace
+  node_count           = var.node_count
+  tfe_license_path     = var.tfe_license_path
+  tfe_license_name     = var.tfe_license_name
+  fqdn                 = var.fqdn
+  ssl_certificate_name = google_compute_region_ssl_certificate.main.name
+  dns_zone_name        = var.dns_zone_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%outputs.tf
new file mode 100644
index 0000000..aeeced8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%outputs.tf
@@ -0,0 +1,9 @@
+output "lb_address" {
+  value       = module.tfe.lb_address
+  description = "Load Balancer Address"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%variables.tf
new file mode 100644
index 0000000..93ea29a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%active-active%variables.tf
@@ -0,0 +1,10 @@
+variable "project" {}
+variable "region" {}
+variable "credentials_file" {}
+variable "node_count" {}
+variable "namespace" {}
+variable "tfe_license_name" {}
+variable "tfe_license_path" {}
+variable "fqdn" {}
+variable "ssl_certificate_name" {}
+variable "dns_zone_name" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%main.tf
new file mode 100644
index 0000000..dcbbbc3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%main.tf
@@ -0,0 +1,146 @@
+locals {
+  http_proxy_port = "3128"
+  name            = "${var.namespace}-tfe-http-proxy"
+  subnet_range    = "10.0.0.0/16"
+}
+
+resource "google_service_account" "http_proxy" {
+  account_id = local.name
+
+  description  = "The service account of the HTTP proxy for TFE."
+  display_name = "TFE HTTP Proxy"
+}
+
+resource "google_project_iam_member" "log_writer" {
+  member = "serviceAccount:${google_service_account.http_proxy.email}"
+  role   = "roles/logging.logWriter"
+}
+
+resource "google_compute_firewall" "http_proxy" {
+  name    = local.name
+  network = module.tfe.network
+
+  description             = "The firewall which allows internal access to the HTTP proxy."
+  direction               = "INGRESS"
+  source_ranges           = [local.subnet_range]
+  target_service_accounts = [google_service_account.http_proxy.email]
+
+  allow {
+    protocol = "tcp"
+
+    ports = [local.http_proxy_port]
+  }
+
+  log_config {
+    metadata = "INCLUDE_ALL_METADATA"
+  }
+}
+
+resource "google_compute_firewall" "ssh" {
+  name    = "${local.name}-ssh"
+  network = module.tfe.network
+
+  description             = "The firewall which allows the ingress of Identity-Aware Proxy SSH traffic to the HTTP proxy."
+  direction               = "INGRESS"
+  source_ranges           = ["35.235.240.0/20"]
+  target_service_accounts = [google_service_account.http_proxy.email]
+
+  allow {
+    protocol = "tcp"
+
+    ports = ["22"]
+  }
+}
+
+data "google_compute_image" "ubuntu" {
+  name = "ubuntu-2004-focal-v20210119a"
+
+  project = "ubuntu-os-cloud"
+}
+
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "local_file" "ca" {
+  filename = "${path.module}/files/mitmproxy.pem"
+
+  content         = tls_self_signed_cert.ca.cert_pem
+  file_permission = "0644"
+}
+
+resource "google_compute_instance" "http_proxy" {
+  boot_disk {
+    initialize_params {
+      image = data.google_compute_image.ubuntu.id
+    }
+  }
+
+  machine_type = "n1-standard-2"
+  name         = local.name
+
+  description = "An HTTP proxy for TFE."
+  metadata_startup_script = templatefile(
+    "${path.module}/templates/startup.sh.tpl",
+    {
+      certificate     = tls_self_signed_cert.ca.cert_pem
+      http_proxy_port = local.http_proxy_port
+      private_key     = tls_private_key.ca.private_key_pem
+    }
+  )
+
+  network_interface {
+    subnetwork = module.tfe.subnetwork
+  }
+
+  service_account {
+    scopes = ["cloud-platform"]
+
+    email = google_service_account.http_proxy.email
+  }
+}
+
+data "google_compute_image" "rhel" {
+  name    = "rhel-7-v20200403"
+  project = "gce-uefi-images"
+}
+
+module "tfe" {
+  source = "../.."
+
+  dns_zone_name    = var.dns_zone_name
+  fqdn             = var.fqdn
+  namespace        = var.namespace
+  node_count       = 2
+  tfe_license_name = "bank.rli"
+  tfe_license_path = var.tfe_license_path
+
+  load_balancer           = "PRIVATE_TCP"
+  networking_subnet_range = local.subnet_range
+  proxy_cert_name         = "mitmproxy"
+  proxy_cert_path         = local_file.ca.filename
+  proxy_ip                = "${google_compute_instance.http_proxy.network_interface[0].network_ip}:${local.http_proxy_port}"
+  redis_auth_enabled      = true
+  vm_disk_source_image    = data.google_compute_image.rhel.self_link
+  vm_machine_type         = "n1-standard-32"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%outputs.tf
new file mode 100644
index 0000000..b4d7aba
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%outputs.tf
@@ -0,0 +1,3 @@
+output "tfe" {
+  value = module.tfe
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%variables.tf
new file mode 100644
index 0000000..281da20
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%variables.tf
@@ -0,0 +1,4 @@
+variable "dns_zone_name" {}
+variable "fqdn" {}
+variable "namespace" {}
+variable "tfe_license_path" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%versions.tf
new file mode 100644
index 0000000..d19c621
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%bank-persona%versions.tf
@@ -0,0 +1,15 @@
+terraform {
+  required_version = ">= 0.13"
+
+  required_providers {
+    local = {
+      source  = "hashicorp/local"
+      version = "~> 2.0"
+    }
+
+    tls = {
+      source  = "hashicorp/tls"
+      version = "~> 3.0"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%main.tf
new file mode 100644
index 0000000..43a8c30
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%main.tf
@@ -0,0 +1,90 @@
+provider "google" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+provider "google-beta" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+resource "tls_locally_signed_cert" "main" {
+  cert_request_pem      = tls_cert_request.main.cert_request_pem
+  ca_key_algorithm      = tls_private_key.ca.algorithm
+  ca_private_key_pem    = tls_private_key.ca.private_key_pem
+  ca_cert_pem           = tls_self_signed_cert.ca.cert_pem
+  validity_period_hours = 24 * 30 * 6
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+  ]
+}
+
+resource "tls_cert_request" "main" {
+  key_algorithm   = tls_private_key.main.algorithm
+  private_key_pem = tls_private_key.main.private_key_pem
+
+  subject {
+    common_name  = var.fqdn
+    organization = "Terraform Enterprise Private Certificate"
+  }
+
+  dns_names = [var.fqdn]
+}
+
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "tls_private_key" "main" {
+  algorithm = "RSA"
+}
+
+resource "google_compute_region_ssl_certificate" "main" {
+  certificate = "${tls_locally_signed_cert.main.cert_pem}\n${tls_self_signed_cert.ca.cert_pem}"
+  private_key = tls_private_key.main.private_key_pem
+
+  description = "The regional SSL certificate of the private load balancer for TFE."
+  name_prefix = "ptfe-"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+module "tfe" {
+  source = "../../"
+
+  namespace            = var.namespace
+  node_count           = var.node_count
+  tfe_license_path     = var.tfe_license_path
+  tfe_license_name     = var.tfe_license_name
+  fqdn                 = var.fqdn
+  ssl_certificate_name = google_compute_region_ssl_certificate.main.name
+  network              = var.network
+  subnetwork           = var.subnetwork
+  dns_zone_name        = var.dns_zone_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%outputs.tf
new file mode 100644
index 0000000..aeeced8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%outputs.tf
@@ -0,0 +1,9 @@
+output "lb_address" {
+  value       = module.tfe.lb_address
+  description = "Load Balancer Address"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%variables.tf
new file mode 100644
index 0000000..88e1358
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%existing-network%variables.tf
@@ -0,0 +1,12 @@
+variable "project" {}
+variable "region" {}
+variable "node_count" {}
+variable "credentials_file" {}
+variable "namespace" {}
+variable "tfe_license_name" {}
+variable "tfe_license_path" {}
+variable "fqdn" {}
+variable "ssl_certificate_name" {}
+variable "network" {}
+variable "subnetwork" {}
+variable "dns_zone_name" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%main.tf
new file mode 100644
index 0000000..f20bf31
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%main.tf
@@ -0,0 +1,89 @@
+provider "google" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+provider "google-beta" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+resource "tls_locally_signed_cert" "main" {
+  cert_request_pem      = tls_cert_request.main.cert_request_pem
+  ca_key_algorithm      = tls_private_key.ca.algorithm
+  ca_private_key_pem    = tls_private_key.ca.private_key_pem
+  ca_cert_pem           = tls_self_signed_cert.ca.cert_pem
+  validity_period_hours = 24 * 30 * 6
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+  ]
+}
+
+resource "tls_cert_request" "main" {
+  key_algorithm   = tls_private_key.main.algorithm
+  private_key_pem = tls_private_key.main.private_key_pem
+
+  subject {
+    common_name  = var.fqdn
+    organization = "Terraform Enterprise Private Certificate"
+  }
+
+  dns_names = [var.fqdn]
+}
+
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "tls_private_key" "main" {
+  algorithm = "RSA"
+}
+
+resource "google_compute_region_ssl_certificate" "main" {
+  certificate = "${tls_locally_signed_cert.main.cert_pem}\n${tls_self_signed_cert.ca.cert_pem}"
+  private_key = tls_private_key.main.private_key_pem
+
+  description = "The regional SSL certificate of the private load balancer for TFE."
+  name_prefix = "ptfe-"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+module "tfe" {
+  source = "../../"
+
+  namespace            = var.namespace
+  node_count           = 1
+  tfe_license_path     = var.tfe_license_path
+  tfe_license_name     = var.tfe_license_name
+  fqdn                 = var.fqdn
+  ssl_certificate_name = google_compute_region_ssl_certificate.main.name
+  dns_create_record    = var.dns_create_record
+  dns_zone_name        = var.dns_zone_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%outputs.tf
new file mode 100644
index 0000000..f044be6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%outputs.tf
@@ -0,0 +1,19 @@
+output "replicated_console_password" {
+  value       = module.tfe.replicated_console_password
+  description = "Generated password for replicated dashboard"
+}
+
+output "lb_address" {
+  value       = module.tfe.lb_address
+  description = "Load Balancer Address"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+output "dns_configuration_notice" {
+  value       = module.tfe.dns_configuration_notice
+  description = "A warning message."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%variables.tf
new file mode 100644
index 0000000..c569ed6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%external-dns%variables.tf
@@ -0,0 +1,10 @@
+variable "project" {}
+variable "region" {}
+variable "credentials_file" {}
+variable "namespace" {}
+variable "tfe_license_name" {}
+variable "tfe_license_path" {}
+variable "fqdn" {}
+variable "ssl_certificate_name" {}
+variable "dns_zone_name" {}
+variable "dns_create_record" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%main.tf
new file mode 100644
index 0000000..b3691d4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%main.tf
@@ -0,0 +1,93 @@
+provider "google" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+provider "google-beta" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+resource "tls_locally_signed_cert" "main" {
+  cert_request_pem      = tls_cert_request.main.cert_request_pem
+  ca_key_algorithm      = tls_private_key.ca.algorithm
+  ca_private_key_pem    = tls_private_key.ca.private_key_pem
+  ca_cert_pem           = tls_self_signed_cert.ca.cert_pem
+  validity_period_hours = 24 * 30 * 6
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+  ]
+}
+
+resource "tls_cert_request" "main" {
+  key_algorithm   = tls_private_key.main.algorithm
+  private_key_pem = tls_private_key.main.private_key_pem
+
+  subject {
+    common_name  = var.fqdn
+    organization = "Terraform Enterprise Private Certificate"
+  }
+
+  dns_names = [var.fqdn]
+}
+
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "tls_private_key" "main" {
+  algorithm = "RSA"
+}
+
+resource "google_compute_region_ssl_certificate" "main" {
+  certificate = "${tls_locally_signed_cert.main.cert_pem}\n${tls_self_signed_cert.ca.cert_pem}"
+  private_key = tls_private_key.main.private_key_pem
+
+  description = "The regional SSL certificate of the private load balancer for TFE."
+  name_prefix = "ptfe-"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+module "tfe" {
+  source = "../../"
+
+  namespace            = var.namespace
+  node_count           = 1
+  tfe_license_path     = var.tfe_license_path
+  tfe_license_name     = var.tfe_license_name
+  fqdn                 = var.fqdn
+  ssl_certificate_name = google_compute_region_ssl_certificate.main.name
+  proxy_ip             = var.proxy_ip
+  proxy_cert_name      = var.proxy_cert_name
+  proxy_cert_path      = var.proxy_cert_path
+  network              = var.network
+  subnetwork           = var.subnetwork
+  dns_zone_name        = var.dns_zone_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%outputs.tf
new file mode 100644
index 0000000..0297e5e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%outputs.tf
@@ -0,0 +1,14 @@
+output "replicated_console_password" {
+  value       = module.tfe.replicated_console_password
+  description = "Generated password for replicated dashboard"
+}
+
+output "lb_address" {
+  value       = module.tfe.lb_address
+  description = "Load Balancer Address"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%variables.tf
new file mode 100644
index 0000000..32d87af
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%proxy%variables.tf
@@ -0,0 +1,14 @@
+variable "project" {}
+variable "region" {}
+variable "credentials_file" {}
+variable "namespace" {}
+variable "tfe_license_name" {}
+variable "tfe_license_path" {}
+variable "fqdn" {}
+variable "ssl_certificate_name" {}
+variable "proxy_ip" {}
+variable "proxy_cert_name" {}
+variable "proxy_cert_path" {}
+variable "network" {}
+variable "subnetwork" {}
+variable "dns_zone_name" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%main.tf
new file mode 100644
index 0000000..61abfaa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%main.tf
@@ -0,0 +1,172 @@
+locals {
+  http_proxy_port = "3128"
+  name            = "${var.namespace}-tfe-http-proxy"
+  subnet_range    = "10.0.0.0/16"
+}
+
+resource "google_service_account" "http_proxy" {
+  account_id = local.name
+
+  description  = "The service account of the HTTP proxy for TFE."
+  display_name = "TFE HTTP Proxy"
+}
+
+resource "google_project_iam_member" "log_writer" {
+  member = "serviceAccount:${google_service_account.http_proxy.email}"
+  role   = "roles/logging.logWriter"
+}
+
+resource "google_compute_firewall" "http_proxy" {
+  name    = local.name
+  network = module.tfe.network
+
+  description             = "The firewall which allows internal access to the HTTP proxy."
+  direction               = "INGRESS"
+  source_ranges           = [local.subnet_range]
+  target_service_accounts = [google_service_account.http_proxy.email]
+
+  allow {
+    protocol = "tcp"
+
+    ports = [local.http_proxy_port]
+  }
+
+  log_config {
+    metadata = "INCLUDE_ALL_METADATA"
+  }
+}
+
+resource "google_compute_firewall" "ssh" {
+  name    = "${local.name}-ssh"
+  network = module.tfe.network
+
+  description             = "The firewall which allows the ingress of Identity-Aware Proxy SSH traffic to the HTTP proxy."
+  direction               = "INGRESS"
+  source_ranges           = ["35.235.240.0/20"]
+  target_service_accounts = [google_service_account.http_proxy.email]
+
+  allow {
+    protocol = "tcp"
+
+    ports = ["22"]
+  }
+}
+
+data "google_compute_image" "rhel" {
+  name = "rhel-7-v20200403"
+
+  project = "gce-uefi-images"
+}
+
+resource "google_compute_instance" "http_proxy" {
+  boot_disk {
+    initialize_params {
+      image = data.google_compute_image.rhel.id
+    }
+  }
+
+  machine_type = "n1-standard-2"
+  name         = local.name
+
+  description = "An HTTP proxy for TFE."
+  metadata_startup_script = templatefile(
+    "${path.module}/templates/startup.sh.tpl",
+    {
+      http_proxy_port = local.http_proxy_port
+    }
+  )
+
+  network_interface {
+    subnetwork = module.tfe.subnetwork
+  }
+
+  service_account {
+    scopes = ["cloud-platform"]
+
+    email = google_service_account.http_proxy.email
+  }
+}
+
+resource "tls_locally_signed_cert" "main" {
+  cert_request_pem      = tls_cert_request.main.cert_request_pem
+  ca_key_algorithm      = tls_private_key.ca.algorithm
+  ca_private_key_pem    = tls_private_key.ca.private_key_pem
+  ca_cert_pem           = tls_self_signed_cert.ca.cert_pem
+  validity_period_hours = 24 * 30 * 6
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+  ]
+}
+
+resource "tls_cert_request" "main" {
+  key_algorithm   = tls_private_key.main.algorithm
+  private_key_pem = tls_private_key.main.private_key_pem
+
+  subject {
+    common_name  = var.fqdn
+    organization = "Terraform Enterprise Private Certificate"
+  }
+
+  dns_names = [var.fqdn]
+}
+
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "tls_private_key" "main" {
+  algorithm = "RSA"
+}
+
+resource "google_compute_region_ssl_certificate" "main" {
+  certificate = "${tls_locally_signed_cert.main.cert_pem}\n${tls_self_signed_cert.ca.cert_pem}"
+  private_key = tls_private_key.main.private_key_pem
+
+  description = "The regional SSL certificate of the private load balancer for TFE."
+  name_prefix = "ptfe-"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+module "tfe" {
+  source = "../.."
+
+  dns_zone_name        = var.dns_zone_name
+  fqdn                 = var.fqdn
+  namespace            = var.namespace
+  node_count           = 2
+  tfe_license_name     = "retailer.rli"
+  tfe_license_path     = var.tfe_license_path
+  ssl_certificate_name = google_compute_region_ssl_certificate.main.name
+
+  load_balancer           = "PRIVATE"
+  networking_subnet_range = local.subnet_range
+  proxy_ip                = "${google_compute_instance.http_proxy.network_interface[0].network_ip}:${local.http_proxy_port}"
+  redis_auth_enabled      = true
+  vm_disk_source_image    = data.google_compute_image.rhel.self_link
+  vm_machine_type         = "n1-standard-16"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%outputs.tf
new file mode 100644
index 0000000..b4d7aba
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%outputs.tf
@@ -0,0 +1,3 @@
+output "tfe" {
+  value = module.tfe
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%variables.tf
new file mode 100644
index 0000000..281da20
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%variables.tf
@@ -0,0 +1,4 @@
+variable "dns_zone_name" {}
+variable "fqdn" {}
+variable "namespace" {}
+variable "tfe_license_path" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%versions.tf
new file mode 100644
index 0000000..0638ca4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%retailer-persona%versions.tf
@@ -0,0 +1,10 @@
+terraform {
+  required_version = ">= 0.13"
+
+  required_providers {
+    tls = {
+      source  = "hashicorp/tls"
+      version = "~> 3.0"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%main.tf
new file mode 100644
index 0000000..43a8c30
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%main.tf
@@ -0,0 +1,90 @@
+provider "google" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+provider "google-beta" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+resource "tls_locally_signed_cert" "main" {
+  cert_request_pem      = tls_cert_request.main.cert_request_pem
+  ca_key_algorithm      = tls_private_key.ca.algorithm
+  ca_private_key_pem    = tls_private_key.ca.private_key_pem
+  ca_cert_pem           = tls_self_signed_cert.ca.cert_pem
+  validity_period_hours = 24 * 30 * 6
+
+  allowed_uses = [
+    "key_encipherment",
+    "digital_signature",
+  ]
+}
+
+resource "tls_cert_request" "main" {
+  key_algorithm   = tls_private_key.main.algorithm
+  private_key_pem = tls_private_key.main.private_key_pem
+
+  subject {
+    common_name  = var.fqdn
+    organization = "Terraform Enterprise Private Certificate"
+  }
+
+  dns_names = [var.fqdn]
+}
+
+resource "tls_private_key" "ca" {
+  algorithm = "RSA"
+}
+
+resource "tls_self_signed_cert" "ca" {
+  key_algorithm         = tls_private_key.ca.algorithm
+  private_key_pem       = tls_private_key.ca.private_key_pem
+  validity_period_hours = 24 * 30 * 6
+
+  subject {
+    organization = "HashiCorp (NonTrusted)"
+    common_name  = "HashiCorp (NonTrusted) Private Certificate Authority"
+    country      = "US"
+  }
+
+  is_ca_certificate = true
+
+  allowed_uses = [
+    "cert_signing",
+    "key_encipherment",
+    "digital_signature"
+  ]
+}
+
+resource "tls_private_key" "main" {
+  algorithm = "RSA"
+}
+
+resource "google_compute_region_ssl_certificate" "main" {
+  certificate = "${tls_locally_signed_cert.main.cert_pem}\n${tls_self_signed_cert.ca.cert_pem}"
+  private_key = tls_private_key.main.private_key_pem
+
+  description = "The regional SSL certificate of the private load balancer for TFE."
+  name_prefix = "ptfe-"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+module "tfe" {
+  source = "../../"
+
+  namespace            = var.namespace
+  node_count           = var.node_count
+  tfe_license_path     = var.tfe_license_path
+  tfe_license_name     = var.tfe_license_name
+  fqdn                 = var.fqdn
+  ssl_certificate_name = google_compute_region_ssl_certificate.main.name
+  network              = var.network
+  subnetwork           = var.subnetwork
+  dns_zone_name        = var.dns_zone_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%outputs.tf
new file mode 100644
index 0000000..aeeced8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%outputs.tf
@@ -0,0 +1,9 @@
+output "lb_address" {
+  value       = module.tfe.lb_address
+  description = "Load Balancer Address"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%variables.tf
new file mode 100644
index 0000000..50eba5b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%shared-vpc%variables.tf
@@ -0,0 +1,11 @@
+variable "project" {}
+variable "region" {}
+variable "node_count" {}
+variable "credentials_file" {}
+variable "namespace" {}
+variable "tfe_license_name" {}
+variable "tfe_license_path" {}
+variable "fqdn" {}
+variable "network" {}
+variable "subnetwork" {}
+variable "dns_zone_name" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%main.tf
new file mode 100644
index 0000000..cc05b93
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%main.tf
@@ -0,0 +1,24 @@
+provider "google" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+provider "google-beta" {
+  credentials = file(var.credentials_file)
+  project     = var.project
+  region      = var.region
+}
+
+module "tfe" {
+  source = "../../"
+
+  namespace            = var.namespace
+  node_count           = 1
+  tfe_license_path     = var.tfe_license_path
+  tfe_license_name     = var.tfe_license_name
+  fqdn                 = var.fqdn
+  ssl_certificate_name = var.ssl_certificate_name
+  dns_zone_name        = var.dns_zone_name
+  load_balancer        = "PUBLIC"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%outputs.tf
new file mode 100644
index 0000000..0297e5e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%outputs.tf
@@ -0,0 +1,14 @@
+output "replicated_console_password" {
+  value       = module.tfe.replicated_console_password
+  description = "Generated password for replicated dashboard"
+}
+
+output "lb_address" {
+  value       = module.tfe.lb_address
+  description = "Load Balancer Address"
+}
+
+output "login_url" {
+  value       = module.tfe.login_url
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%variables.tf
new file mode 100644
index 0000000..44202b3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%standalone%variables.tf
@@ -0,0 +1,9 @@
+variable "project" {}
+variable "region" {}
+variable "credentials_file" {}
+variable "namespace" {}
+variable "tfe_license_name" {}
+variable "tfe_license_path" {}
+variable "fqdn" {}
+variable "ssl_certificate_name" {}
+variable "dns_zone_name" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%main.tf
new file mode 100644
index 0000000..e6404fd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%main.tf
@@ -0,0 +1,22 @@
+data "google_compute_image" "ubuntu" {
+  name = "ubuntu-2004-focal-v20210211"
+
+  project = "ubuntu-os-cloud"
+}
+
+module "tfe" {
+  source = "../.."
+
+  dns_zone_name        = var.dns_zone_name
+  fqdn                 = var.fqdn
+  namespace            = var.namespace
+  node_count           = 2
+  tfe_license_name     = "startup.rli"
+  tfe_license_path     = var.tfe_license_path
+  ssl_certificate_name = var.ssl_certificate_name
+
+  load_balancer        = "PUBLIC"
+  redis_auth_enabled   = false
+  vm_disk_source_image = data.google_compute_image.ubuntu.self_link
+  vm_machine_type      = "n1-standard-4"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%outputs.tf
new file mode 100644
index 0000000..b4d7aba
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%outputs.tf
@@ -0,0 +1,3 @@
+output "tfe" {
+  value = module.tfe
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%variables.tf
new file mode 100644
index 0000000..0ef9dcd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%variables.tf
@@ -0,0 +1,5 @@
+variable "dns_zone_name" {}
+variable "fqdn" {}
+variable "namespace" {}
+variable "tfe_license_path" {}
+variable "ssl_certificate_name" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%versions.tf
new file mode 100644
index 0000000..6b6318d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseexamples%startup-persona%versions.tf
@@ -0,0 +1,3 @@
+terraform {
+  required_version = ">= 0.13"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemain.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemain.tf
new file mode 100644
index 0000000..eae7024
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemain.tf
@@ -0,0 +1,197 @@
+locals {
+  labels                      = { "label" : "label" } # TODO - not verified until apply
+  disable_services_on_destroy = false
+}
+
+resource "google_project_service" "iam" {
+  service            = "iam.googleapis.com"
+  disable_on_destroy = local.disable_services_on_destroy
+}
+
+resource "google_project_service" "cloudapi" {
+  service            = "cloudapis.googleapis.com"
+  disable_on_destroy = local.disable_services_on_destroy
+}
+
+resource "google_project_service" "servicenetworking" {
+  service            = "servicenetworking.googleapis.com"
+  disable_on_destroy = local.disable_services_on_destroy
+}
+
+resource "google_project_service" "sqladmin" {
+  service            = "sqladmin.googleapis.com"
+  disable_on_destroy = local.disable_services_on_destroy
+}
+
+resource "google_project_service" "redis" {
+  service            = "redis.googleapis.com"
+  disable_on_destroy = local.disable_services_on_destroy
+}
+
+locals {
+  active_active = var.node_count >= 2
+}
+
+module "object_storage" {
+  source = "./modules/object_storage"
+
+  namespace    = var.namespace
+  labels       = local.labels
+  license_name = var.tfe_license_name
+  license_path = var.tfe_license_path
+}
+
+resource "google_storage_bucket_object" "proxy_cert" {
+  count  = var.proxy_cert_path != "" ? 1 : 0
+  name   = var.proxy_cert_name
+  source = var.proxy_cert_path
+  bucket = module.object_storage.bucket
+}
+
+module "service_accounts" {
+  source = "./modules/service_accounts"
+
+  bucket    = module.object_storage.bucket
+  namespace = var.namespace
+}
+
+locals {
+  network_module_enabled = var.network != "" ? 0 : 1
+}
+
+module "networking" {
+  source = "./modules/networking"
+
+  count = local.network_module_enabled
+
+  namespace            = var.namespace
+  subnet_range         = var.networking_subnet_range
+  reserve_subnet_range = var.networking_reserve_subnet_range
+  firewall_ports       = var.networking_firewall_ports
+  healthcheck_ips      = var.networking_healthcheck_ips
+  service_account      = module.service_accounts.email
+  ip_allow_list        = var.networking_ip_allow_list
+}
+
+locals {
+  network    = local.network_module_enabled == 1 ? module.networking[0].network : var.network
+  subnetwork = local.network_module_enabled == 1 ? module.networking[0].subnetwork : var.subnetwork
+}
+
+module "database" {
+  source = "./modules/database"
+
+  dbname            = var.database_name
+  username          = var.database_user
+  machine_type      = var.database_machine_type
+  availability_type = var.database_availability_type
+  namespace         = var.namespace
+  backup_start_time = var.database_backup_start_time
+  labels            = local.labels
+  network           = local.network
+}
+
+module "redis" {
+  source = "./modules/redis"
+
+  auth_enabled = var.redis_auth_enabled
+  namespace    = var.namespace
+  memory_size  = var.redis_memory_size
+  network      = local.network
+  enabled      = local.active_active
+}
+
+locals {
+  proxy_cert = length(google_storage_bucket_object.proxy_cert) > 0 ? google_storage_bucket_object.proxy_cert[0].name : ""
+}
+
+module "user_data" {
+  source = "./modules/user_data"
+
+  fqdn                    = var.fqdn
+  install_id              = ""
+  airgap_url              = ""
+  gcs_bucket              = module.object_storage.bucket
+  gcs_credentials         = module.service_accounts.credentials
+  gcs_project             = module.object_storage.project
+  tfe_license             = var.tfe_license_name
+  pg_netloc               = module.database.netloc
+  pg_dbname               = module.database.dbname
+  pg_user                 = module.database.user
+  pg_password             = module.database.password
+  pg_extra_params         = "sslmode=require"
+  redis_host              = module.redis.host
+  redis_pass              = module.redis.password
+  redis_port              = module.redis.port
+  redis_use_password_auth = var.redis_auth_enabled
+  release_sequence        = var.release_sequence
+  active_active           = local.active_active
+  proxy_ip                = var.proxy_ip
+  proxy_cert              = local.proxy_cert
+  namespace               = var.namespace
+  no_proxy                = [var.fqdn, var.networking_subnet_range]
+}
+
+module "vm" {
+  source = "./modules/vm"
+
+  namespace               = var.namespace
+  machine_type            = var.vm_machine_type
+  disk_size               = var.vm_disk_size
+  disk_source_image       = var.vm_disk_source_image
+  disk_type               = var.vm_disk_type
+  subnetwork              = local.subnetwork
+  metadata_startup_script = module.user_data.script
+  labels                  = local.labels
+  auto_healing_enabled    = var.vm_auto_healing_enabled
+  service_account         = module.service_accounts.email
+  node_count              = var.node_count
+
+  // This is to prevent deleting the database user before the vm is completely destroyed
+  depends_on = [
+    module.database
+  ]
+}
+
+module "private_load_balancer" {
+  count                = var.load_balancer == "PRIVATE" ? 1 : 0
+  source               = "./modules/private_load_balancer"
+  namespace            = var.namespace
+  fqdn                 = var.fqdn
+  instance_group       = module.vm.instance_group
+  ssl_certificate_name = var.ssl_certificate_name
+  dns_zone_name        = var.dns_zone_name
+  subnet               = local.subnetwork
+  dns_create_record    = var.dns_create_record
+}
+
+module "private_tcp_load_balancer" {
+  count  = var.load_balancer == "PRIVATE_TCP" ? 1 : 0
+  source = "./modules/private_tcp_load_balancer"
+
+  namespace         = var.namespace
+  fqdn              = var.fqdn
+  instance_group    = module.vm.instance_group
+  dns_zone_name     = var.dns_zone_name
+  subnet            = local.subnetwork
+  dns_create_record = var.dns_create_record
+}
+
+module "load_balancer" {
+  count                = var.load_balancer == "PUBLIC" ? 1 : 0
+  source               = "./modules/load_balancer"
+  namespace            = var.namespace
+  fqdn                 = var.fqdn
+  instance_group       = module.vm.instance_group
+  ssl_certificate_name = var.ssl_certificate_name
+  dns_zone_name        = var.dns_zone_name
+  subnet               = local.subnetwork
+  dns_create_record    = var.dns_create_record
+}
+
+locals {
+  lb_address = var.load_balancer == "PUBLIC" ? module.load_balancer.0.address : (
+    var.load_balancer == "PRIVATE" ? module.private_load_balancer.0.address : module.private_tcp_load_balancer.0.address
+  )
+  hostname = var.dns_create_record ? var.fqdn : local.lb_address
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%main.tf
new file mode 100644
index 0000000..a945554
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%main.tf
@@ -0,0 +1,47 @@
+resource "random_pet" "postgres" {
+  length = 2
+}
+
+resource "google_sql_database_instance" "tfe" {
+  name             = "${var.namespace}-tfe-${random_pet.postgres.id}"
+  database_version = var.postgres_version
+
+  settings {
+    tier              = var.machine_type
+    availability_type = var.availability_type
+    disk_size         = var.disk_size
+    ip_configuration {
+      ipv4_enabled    = false
+      private_network = var.network
+    }
+
+    backup_configuration {
+      enabled    = var.backup_start_time == "" ? false : true
+      start_time = var.backup_start_time
+    }
+
+    user_labels = var.labels
+  }
+
+  deletion_protection = false
+}
+
+resource "random_string" "postgres_password" {
+  length  = 20
+  special = false
+}
+
+resource "google_sql_database" "tfe" {
+  name     = var.dbname
+  instance = google_sql_database_instance.tfe.name
+}
+
+resource "google_sql_user" "tfe" {
+  name     = var.username
+  instance = google_sql_database_instance.tfe.name
+
+  password = random_string.postgres_password.result
+
+  // Needs to be deleted before the instance gets deleted
+  depends_on = [google_sql_database_instance.tfe]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%outputs.tf
new file mode 100644
index 0000000..1b0e9e8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%outputs.tf
@@ -0,0 +1,12 @@
+output "netloc" {
+  value = google_sql_database_instance.tfe.private_ip_address
+}
+output "dbname" {
+  value = google_sql_database.tfe.name
+}
+output "user" {
+  value = google_sql_user.tfe.name
+}
+output "password" {
+  value = google_sql_user.tfe.password
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%variables.tf
new file mode 100644
index 0000000..c5debd8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%database%variables.tf
@@ -0,0 +1,14 @@
+variable "dbname" {}
+variable "username" {}
+variable "machine_type" {}
+variable "availability_type" {}
+variable "disk_size" {
+  default = 50
+}
+variable "postgres_version" {
+  default = "POSTGRES_9_6"
+}
+variable "namespace" {}
+variable "backup_start_time" {}
+variable "labels" {}
+variable "network" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%main.tf
new file mode 100644
index 0000000..dc8b8ca
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%main.tf
@@ -0,0 +1,87 @@
+resource "google_compute_global_address" "external" {
+  name = "${var.namespace}-tfe-external-lb"
+
+  description = "The global address of the public load balancer for TFE."
+}
+
+resource "google_dns_record_set" "main" {
+  count        = var.dns_create_record ? 1 : 0
+  managed_zone = var.dns_zone_name
+  # The name must end with a ".".
+  name    = "${var.fqdn}."
+  rrdatas = [google_compute_global_address.external.address]
+  ttl     = 300
+  type    = "A"
+}
+
+resource "google_compute_health_check" "lb" {
+  name = "${var.namespace}-tfe-public-lb"
+
+  check_interval_sec = 30
+  description        = "The health check of the public load balancer for TFE."
+  timeout_sec        = 4
+
+  https_health_check {
+    port         = 443
+    request_path = "/_health_check"
+  }
+
+}
+
+resource "google_compute_backend_service" "lb" {
+  health_checks = [google_compute_health_check.lb.self_link]
+  name          = "${var.namespace}-tfe-public-lb"
+
+  description           = "The backend service of the public load balancer for TFE."
+  load_balancing_scheme = "EXTERNAL"
+  port_name             = "https"
+  protocol              = "HTTPS"
+  timeout_sec           = 10
+
+  backend {
+    group = var.instance_group
+
+    balancing_mode  = "UTILIZATION"
+    description     = "The instance group of the compute deployment for TFE."
+    capacity_scaler = 1.0
+  }
+}
+
+resource "google_compute_url_map" "lb" {
+  default_service = google_compute_backend_service.lb.self_link
+  name            = "${var.namespace}-tfe-public-lb"
+
+  description = "The URL map of the public load balancer for TFE."
+}
+
+data "google_compute_ssl_certificate" "provisioned_cert" {
+  name = var.ssl_certificate_name
+}
+
+resource "google_compute_ssl_policy" "lb" {
+  name = "${var.namespace}-tfe-public-lb"
+
+  description     = "The SSL policy of the public load balancer for TFE."
+  min_tls_version = "TLS_1_2"
+  profile         = "RESTRICTED"
+}
+
+resource "google_compute_target_https_proxy" "lb" {
+  name             = "${var.namespace}-tfe-public-lb"
+  ssl_certificates = [data.google_compute_ssl_certificate.provisioned_cert.self_link]
+  url_map          = google_compute_url_map.lb.self_link
+
+  description = "The target HTTPS proxy of the public load balancer for TFE."
+  ssl_policy  = google_compute_ssl_policy.lb.self_link
+}
+
+resource "google_compute_global_forwarding_rule" "lb" {
+  name   = "${var.namespace}-tfe-public-lb"
+  target = google_compute_target_https_proxy.lb.self_link
+
+  description           = "The global forwarding rule of the public load balancer for TFE."
+  ip_address            = google_compute_global_address.external.address
+  ip_protocol           = "TCP"
+  load_balancing_scheme = "EXTERNAL"
+  port_range            = 443
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%outputs.tf
new file mode 100644
index 0000000..f1d9786
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%outputs.tf
@@ -0,0 +1,3 @@
+output "address" {
+  value = google_compute_global_address.external.address
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%variables.tf
new file mode 100644
index 0000000..545327a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%load_balancer%variables.tf
@@ -0,0 +1,7 @@
+variable "namespace" {}
+variable "fqdn" {}
+variable "instance_group" {}
+variable "ssl_certificate_name" {}
+variable "dns_zone_name" {}
+variable "subnet" {}
+variable "dns_create_record" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%main.tf
new file mode 100644
index 0000000..6e46f6b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%main.tf
@@ -0,0 +1,100 @@
+resource "google_compute_network" "tfe_vpc" {
+  name                    = "${var.namespace}-vpc"
+  description             = "Terraform Enterprise VPC Network"
+  auto_create_subnetworks = false
+}
+
+resource "google_compute_subnetwork" "tfe_subnet" {
+  name          = "${var.namespace}-subnet"
+  ip_cidr_range = var.subnet_range
+  network       = google_compute_network.tfe_vpc.self_link
+}
+
+resource "google_compute_subnetwork" "reserve" {
+  provider = google-beta
+
+  name          = "${var.namespace}-reserve"
+  ip_cidr_range = var.reserve_subnet_range
+  purpose       = "INTERNAL_HTTPS_LOAD_BALANCER"
+  role          = "ACTIVE"
+  network       = google_compute_network.tfe_vpc.self_link
+}
+
+resource "google_compute_router" "router" {
+  name    = "${var.namespace}-router"
+  network = google_compute_network.tfe_vpc.self_link
+}
+
+resource "google_compute_router_nat" "nat" {
+  name                               = "${var.namespace}-router-nat"
+  router                             = google_compute_router.router.name
+  nat_ip_allocate_option             = "AUTO_ONLY"
+  source_subnetwork_ip_ranges_to_nat = "ALL_SUBNETWORKS_ALL_IP_RANGES"
+
+  log_config {
+    enable = true
+    filter = "ERRORS_ONLY"
+  }
+}
+
+
+resource "google_compute_firewall" "tfe" {
+  name    = "${var.namespace}-firewall"
+  network = google_compute_network.tfe_vpc.name
+
+  target_service_accounts = [var.service_account]
+
+  allow {
+    protocol = "icmp"
+  }
+
+  allow {
+    protocol = "tcp"
+    ports    = concat(["80", "443", "6443", "8800", "23010"], var.firewall_ports)
+  }
+
+  source_ranges = var.ip_allow_list
+}
+
+resource "google_compute_firewall" "lb-healthchecks" {
+  name          = "${var.namespace}-lb-healthcheck-firewall"
+  network       = google_compute_network.tfe_vpc.name
+  source_ranges = concat([google_compute_subnetwork.tfe_subnet.ip_cidr_range], var.healthcheck_ips)
+
+  target_service_accounts = [var.service_account]
+
+  allow {
+    protocol = "tcp"
+  }
+}
+
+resource "google_compute_firewall" "ssh" {
+  name    = "${var.namespace}-ssh-firewall"
+  network = google_compute_network.tfe_vpc.name
+
+  description             = "The firewall which allows the ingress of SSH traffic to the TFE deployment."
+  direction               = "INGRESS"
+  source_ranges           = var.ssh_source_ranges
+  target_service_accounts = [var.service_account]
+
+  allow {
+    protocol = "tcp"
+
+    ports = ["22"]
+  }
+}
+
+resource "google_compute_global_address" "private_ip_address" {
+  name          = "${var.namespace}-private-ip-address"
+  purpose       = "VPC_PEERING"
+  address_type  = "INTERNAL"
+  prefix_length = 20
+  network       = google_compute_subnetwork.tfe_subnet.network
+}
+
+resource "google_service_networking_connection" "private_vpc_connection" {
+  network = google_compute_subnetwork.tfe_subnet.network
+  service = "servicenetworking.googleapis.com"
+
+  reserved_peering_ranges = [google_compute_global_address.private_ip_address.name]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%outputs.tf
new file mode 100644
index 0000000..dcecbba
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%outputs.tf
@@ -0,0 +1,6 @@
+output "subnetwork" {
+  value = google_compute_subnetwork.tfe_subnet.self_link
+}
+output "network" {
+  value = google_service_networking_connection.private_vpc_connection.network
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%variables.tf
new file mode 100644
index 0000000..b265ab9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%networking%variables.tf
@@ -0,0 +1,12 @@
+variable "namespace" {}
+variable "subnet_range" {}
+variable "reserve_subnet_range" {}
+variable "firewall_ports" {}
+variable "healthcheck_ips" {}
+variable "service_account" {}
+variable "ip_allow_list" {}
+variable "ssh_source_ranges" {
+  default     = ["35.235.240.0/20"]
+  description = "The source IP address ranges from which SSH traffic will be permitted; these ranges must be expressed in CIDR format. The default value permits traffic from GCP's Identity-Aware Proxy."
+  type        = list(string)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%main.tf
new file mode 100644
index 0000000..1eb5881
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%main.tf
@@ -0,0 +1,16 @@
+resource "random_pet" "gcs" {
+  length = 2
+}
+
+resource "google_storage_bucket" "tfe-bucket" {
+  name     = "${var.namespace}-storage-${random_pet.gcs.id}"
+  location = "us"
+
+  labels = var.labels
+}
+
+resource "google_storage_bucket_object" "license" {
+  name   = var.license_name
+  source = var.license_path
+  bucket = google_storage_bucket.tfe-bucket.name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%outputs.tf
new file mode 100644
index 0000000..f5d3e6d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%outputs.tf
@@ -0,0 +1,6 @@
+output "bucket" {
+  value = google_storage_bucket.tfe-bucket.name
+}
+output "project" {
+  value = google_storage_bucket.tfe-bucket.project
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%variables.tf
new file mode 100644
index 0000000..894f294
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%object_storage%variables.tf
@@ -0,0 +1,4 @@
+variable "namespace" {}
+variable "labels" {}
+variable "license_name" {}
+variable "license_path" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%main.tf
new file mode 100644
index 0000000..7d0122c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%main.tf
@@ -0,0 +1,74 @@
+resource "google_compute_address" "internal" {
+  name         = "${var.namespace}-tfe-internal-lb"
+  subnetwork   = var.subnet
+  address_type = "INTERNAL"
+  purpose      = "GCE_ENDPOINT"
+}
+
+resource "google_dns_record_set" "main" {
+  count        = var.dns_create_record ? 1 : 0
+  managed_zone = var.dns_zone_name
+  # The name must end with a ".".
+  name    = "${var.fqdn}."
+  rrdatas = [google_compute_address.internal.address]
+  ttl     = 300
+  type    = "A"
+}
+
+resource "google_compute_region_health_check" "lb" {
+  name = "${var.namespace}-tfe-interal-lb"
+
+  check_interval_sec = 30
+  description        = "The health check of the internal load balancer for TFE."
+  timeout_sec        = 4
+
+  https_health_check {
+    port         = 443
+    request_path = "/_health_check"
+  }
+
+}
+
+resource "google_compute_region_backend_service" "lb" {
+  health_checks = [google_compute_region_health_check.lb.self_link]
+  name          = "${var.namespace}-tfe-internal-lb"
+
+  description           = "The backend service of the internal load balancer for TFE."
+  load_balancing_scheme = "INTERNAL_MANAGED"
+  port_name             = "https"
+  protocol              = "HTTPS"
+  timeout_sec           = 10
+
+  backend {
+    group = var.instance_group
+
+    balancing_mode  = "UTILIZATION"
+    description     = "The instance group of the compute deployment for TFE."
+    capacity_scaler = 1.0
+  }
+}
+
+resource "google_compute_region_url_map" "lb" {
+  default_service = google_compute_region_backend_service.lb.self_link
+  name            = "${var.namespace}-tfe-internal-lb"
+
+  description = "The URL map of the internal load balancer for TFE."
+}
+
+resource "google_compute_region_target_https_proxy" "lb" {
+  name             = "${var.namespace}-tfe-internal-lb"
+  ssl_certificates = [var.ssl_certificate_name]
+  url_map          = google_compute_region_url_map.lb.self_link
+
+  description = "The target HTTPS proxy of the internal load balancer for TFE."
+}
+
+resource "google_compute_forwarding_rule" "lb" {
+  name                  = "${var.namespace}-tfe-internal-lb"
+  ip_address            = google_compute_address.internal.address
+  ip_protocol           = "TCP"
+  load_balancing_scheme = "INTERNAL_MANAGED"
+  port_range            = 443
+  subnetwork            = var.subnet
+  target                = google_compute_region_target_https_proxy.lb.self_link
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%outputs.tf
new file mode 100644
index 0000000..a179386
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%outputs.tf
@@ -0,0 +1,3 @@
+output "address" {
+  value = google_compute_address.internal.address
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%variables.tf
new file mode 100644
index 0000000..545327a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_load_balancer%variables.tf
@@ -0,0 +1,7 @@
+variable "namespace" {}
+variable "fqdn" {}
+variable "instance_group" {}
+variable "ssl_certificate_name" {}
+variable "dns_zone_name" {}
+variable "subnet" {}
+variable "dns_create_record" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%main.tf
new file mode 100644
index 0000000..5adc5c3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%main.tf
@@ -0,0 +1,60 @@
+resource "google_compute_address" "internal" {
+  name         = "${var.namespace}-tfe-internal-tcp-lb"
+  subnetwork   = var.subnet
+  address_type = "INTERNAL"
+  purpose      = "GCE_ENDPOINT"
+}
+
+resource "google_dns_record_set" "main" {
+  count = var.dns_create_record ? 1 : 0
+
+  managed_zone = var.dns_zone_name
+  # The name must end with a ".".
+  name    = "${var.fqdn}."
+  rrdatas = [google_compute_address.internal.address]
+  ttl     = 300
+  type    = "A"
+}
+
+resource "google_compute_region_health_check" "lb" {
+  name = "${var.namespace}-tfe-interal-tcp-lb"
+
+  check_interval_sec = 30
+  description        = "The health check of the internal TCP load balancer for TFE."
+  timeout_sec        = 4
+
+  https_health_check {
+    port         = 443
+    request_path = "/_health_check"
+  }
+
+}
+
+resource "google_compute_region_backend_service" "lb" {
+  health_checks = [google_compute_region_health_check.lb.self_link]
+  name          = "${var.namespace}-tfe-internal-tcp-lb"
+
+  description           = "The backend service of the internal TCP load balancer for TFE."
+  load_balancing_scheme = "INTERNAL"
+  protocol              = "TCP"
+  timeout_sec           = 10
+
+  backend {
+    group = var.instance_group
+
+    balancing_mode = "CONNECTION"
+    description    = "The instance group of the compute deployment for TFE."
+  }
+}
+
+resource "google_compute_forwarding_rule" "lb" {
+  name = "${var.namespace}-tfe-internal-tcp-lb"
+
+  backend_service       = google_compute_region_backend_service.lb.self_link
+  ip_address            = google_compute_address.internal.address
+  ip_protocol           = "TCP"
+  load_balancing_scheme = "INTERNAL"
+  # network               = google_compute_region_backend_service.lb.network
+  ports      = [443]
+  subnetwork = var.subnet
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%outputs.tf
new file mode 100644
index 0000000..a179386
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%outputs.tf
@@ -0,0 +1,3 @@
+output "address" {
+  value = google_compute_address.internal.address
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%variables.tf
new file mode 100644
index 0000000..1960c30
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%private_tcp_load_balancer%variables.tf
@@ -0,0 +1,6 @@
+variable "namespace" {}
+variable "fqdn" {}
+variable "instance_group" {}
+variable "dns_zone_name" {}
+variable "subnet" {}
+variable "dns_create_record" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%main.tf
new file mode 100644
index 0000000..54b5f26
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%main.tf
@@ -0,0 +1,17 @@
+resource "random_pet" "redis" {
+  length = 2
+}
+
+resource "google_redis_instance" "redis" {
+  count          = var.enabled ? 1 : 0
+  name           = "${var.namespace}-tfe-${random_pet.redis.id}"
+  tier           = "STANDARD_HA"
+  memory_size_gb = var.memory_size
+  auth_enabled   = var.auth_enabled
+
+  authorized_network = var.network
+  connect_mode       = "PRIVATE_SERVICE_ACCESS"
+
+  redis_version = "REDIS_5_0"
+  display_name  = "${var.namespace} TFE Instance"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%outputs.tf
new file mode 100644
index 0000000..d334a11
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%outputs.tf
@@ -0,0 +1,11 @@
+output "host" {
+  value = var.enabled ? google_redis_instance.redis[0].host : ""
+}
+
+output "port" {
+  value = var.enabled ? google_redis_instance.redis[0].port : ""
+}
+
+output "password" {
+  value = var.enabled ? google_redis_instance.redis[0].auth_string : ""
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%variables.tf
new file mode 100644
index 0000000..a3fafdb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%redis%variables.tf
@@ -0,0 +1,11 @@
+variable "namespace" {}
+variable "memory_size" {}
+variable "network" {}
+variable "enabled" {
+  default = true
+  type    = bool
+}
+
+variable "auth_enabled" {
+  type = bool
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%main.tf
new file mode 100644
index 0000000..5dbed46
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%main.tf
@@ -0,0 +1,30 @@
+resource "random_pet" "name" {
+  length = 2
+}
+
+resource "google_service_account" "main" {
+  account_id   = "${var.namespace}-tfe-${random_pet.name.id}"
+  display_name = "TFE"
+  description  = "Service Account used by Terraform Enterprise."
+}
+
+resource "google_service_account_key" "key" {
+  service_account_id = google_service_account.main.name
+}
+
+resource "google_storage_bucket_iam_member" "member-object" {
+  bucket = var.bucket
+  role   = "roles/storage.objectAdmin"
+  member = "serviceAccount:${google_service_account.main.email}"
+}
+
+resource "google_storage_bucket_iam_member" "member-bucket" {
+  bucket = var.bucket
+  role   = "roles/storage.legacyBucketReader"
+  member = "serviceAccount:${google_service_account.main.email}"
+}
+
+resource "google_project_iam_member" "log_writer" {
+  member = "serviceAccount:${google_service_account.main.email}"
+  role   = "roles/logging.logWriter"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%outputs.tf
new file mode 100644
index 0000000..cf528b4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%outputs.tf
@@ -0,0 +1,6 @@
+output "credentials" {
+  value = base64decode(google_service_account_key.key.private_key)
+}
+output "email" {
+  value = google_service_account.main.email
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%variables.tf
new file mode 100644
index 0000000..83c84cd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%service_accounts%variables.tf
@@ -0,0 +1,2 @@
+variable "bucket" {}
+variable "namespace" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%main.tf
new file mode 100644
index 0000000..7335667
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%main.tf
@@ -0,0 +1,292 @@
+resource "random_string" "password" {
+  length  = 16
+  special = false
+}
+
+resource "random_id" "archivist_token" {
+  byte_length = 16
+}
+
+resource "random_id" "cookie_hash" {
+  byte_length = 16
+}
+
+resource "random_id" "enc_password" {
+  byte_length = 16
+}
+
+resource "random_id" "install_id" {
+  byte_length = 16
+}
+
+resource "random_id" "internal_api_token" {
+  byte_length = 16
+}
+
+resource "random_id" "root_secret" {
+  byte_length = 16
+}
+
+resource "random_id" "registry_session_secret_key" {
+  byte_length = 16
+}
+
+resource "random_id" "registry_session_encryption_key" {
+  byte_length = 16
+}
+
+resource "random_id" "user_token" {
+  byte_length = 16
+}
+
+locals {
+  base_configs = {
+    archivist_token = {
+      value = random_id.archivist_token.hex
+    }
+
+    capacity_concurrency = {
+      value = var.capacity_concurrency
+    }
+
+    capacity_memory = {
+      value = var.capacity_memory
+    }
+
+    ca_certs = {
+      value = var.ca_certs
+    }
+
+    cookie_hash = {
+      value = random_id.cookie_hash.hex
+    }
+
+    custom_image_tag = {
+      value = var.custom_image_tag
+    }
+
+    disk_path = {
+      value = var.disk_path
+    }
+
+    enable_metrics_collection = {
+      value = var.enable_metrics_collection
+    }
+
+    enc_password = {
+      value = random_id.enc_password.hex
+    }
+
+    extra_no_proxy = {
+      value = var.extra_no_proxy
+    }
+
+    hairpin_addressing = {
+      value = var.hairpin_addressing ? "1" : "0"
+    }
+
+    hostname = {
+      value = var.fqdn
+    }
+
+    iact_subnet_list = {
+      value = var.iact_subnet_list
+    }
+
+    iact_subnet_time_limit = {
+      value = var.iact_subnet_time_limit
+    }
+
+    install_id = {
+      value = random_id.install_id.hex # var.install_id
+    }
+
+    installation_type = {
+      value = "production"
+    }
+
+    internal_api_token = {
+      value = random_id.internal_api_token.hex
+    }
+
+    production_type = {
+      # if external this will be overridden by the merge function
+      value = "disk"
+    }
+
+    registry_session_encryption_key = {
+      value = random_id.registry_session_encryption_key.hex
+    }
+
+    registry_session_secret_key = {
+      value = random_id.registry_session_secret_key.hex
+    }
+
+    root_secret = {
+      value = random_id.root_secret.hex
+    }
+
+    tbw_image = {
+      value = var.tbw_image
+    }
+
+    tls_vers = {
+      value = var.tls_vers
+    }
+
+    user_token = {
+      value = random_id.user_token.hex
+    }
+  }
+
+  base_external_configs = {
+    enable_active_active = {
+      value = var.active_active ? "1" : "0"
+    }
+
+    pg_dbname = {
+      value = var.pg_dbname
+    }
+
+    pg_extra_params = {
+      value = var.pg_extra_params
+    }
+
+    pg_netloc = {
+      value = var.pg_netloc
+    }
+
+    pg_password = {
+      value = var.pg_password
+    }
+
+    pg_user = {
+      value = var.pg_user
+    }
+
+    production_type = {
+      value = "external"
+    }
+  }
+
+  redis_configs = {
+    redis_host = {
+      value = var.redis_host
+    }
+
+    redis_pass = {
+      value = var.redis_pass
+    }
+
+    redis_port = {
+      value = var.redis_port
+    }
+
+    redis_use_password_auth = {
+      value = var.redis_use_password_auth ? "1" : "0"
+    }
+
+    redis_use_tls = {
+      value = var.redis_use_tls ? "1" : "0"
+    }
+  }
+
+  external_google_configs = {
+    gcs_bucket = {
+      value = var.gcs_bucket
+    }
+
+    gcs_credentials = {
+      value = var.gcs_credentials
+    }
+
+    gcs_project = {
+      value = var.gcs_project
+    }
+
+    placement = {
+      value = "placement_gcs"
+    }
+  }
+}
+
+locals {
+  replicated_base_config = {
+    BypassPreflightChecks        = true
+    DaemonAuthenticationPassword = random_string.password.result
+    DaemonAuthenticationType     = "password"
+    ImportSettingsFrom           = "/etc/ptfe-settings.json"
+    LicenseFileLocation          = "/etc/ptfe-license.rli"
+    TlsBootstrapType             = "self-signed"
+    TlsBootstrapHostname         = var.fqdn
+  }
+
+  airgap_config = {
+    LicenseBootstrapAirgapPackagePath = "/var/lib/ptfe/ptfe.airgap"
+  }
+
+  letsencrypt_config = {
+    TlsBootstrapCert = "/etc/letsencrypt/live/${var.fqdn}/fullchain.pem"
+    TlsBootstrapKey  = "/etc/letsencrypt/live/${var.fqdn}/privkey.pem"
+    TlsBootstrapType = "server-path"
+  }
+
+  generic_tls_config = {
+    TlsBootstrapCert = var.server_cert_path
+    TlsBootstrapKey  = var.server_key_path
+    TlsBootstrapType = "server-path"
+  }
+
+  release_pin_config = {
+    ReleaseSequence = var.release_sequence
+  }
+}
+
+## Build tfe config json
+locals {
+  # take all the partials and merge them into the base configs, if false, merging empty map is noop
+  is_redis_configs = var.active_active ? local.redis_configs : {}
+  tfe_configs      = jsonencode(merge(local.base_configs, local.base_external_configs, local.external_google_configs, local.is_redis_configs))
+}
+
+## build replicated config json
+locals {
+  is_airgap      = var.airgap_url != "" ? local.airgap_config : {}
+  is_letsencrypt = var.letsencrypt_email != "" ? local.letsencrypt_config : {}
+  is_generic_tls = var.server_cert_path != "" ? local.generic_tls_config : {}
+  is_pinned      = var.release_sequence != 0 ? local.release_pin_config : {}
+
+  repl_configs = jsonencode(merge(local.replicated_base_config, local.is_airgap, local.is_letsencrypt, local.is_generic_tls, local.is_pinned))
+}
+
+locals {
+  user_data = templatefile(
+    "${path.module}/templates/tfe_vm.sh.tpl",
+    {
+      airgap_url         = var.airgap_url
+      docker_config      = filebase64("${path.module}/files/daemon.json")
+      bucket_name        = var.gcs_bucket
+      tfe_license        = var.tfe_license
+      monitoring_enabled = var.monitoring_enabled
+      replicated         = base64encode(local.repl_configs)
+      settings           = base64encode(local.tfe_configs)
+      active_active      = var.active_active
+      namespace          = var.namespace
+      proxy_ip           = var.proxy_ip
+      proxy_cert         = var.proxy_cert
+      no_proxy = join(
+        ",",
+        concat(
+          [
+            "127.0.0.1",
+            "169.254.169.254",
+            ".googleapis.com",
+            ".google.internal",
+            ".googlecloud.com",
+          ],
+          var.no_proxy
+        )
+      )
+    }
+  )
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%outputs.tf
new file mode 100644
index 0000000..0a4c69a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%outputs.tf
@@ -0,0 +1,11 @@
+output "script" {
+  value = local.user_data
+}
+
+output "replicated_dashboard_password" {
+  value = random_string.password.result
+}
+
+output "user_token" {
+  value = local.base_configs.user_token
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%variables.tf
new file mode 100644
index 0000000..38f08b9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%user_data%variables.tf
@@ -0,0 +1,167 @@
+# Required Variables
+variable "fqdn" {}
+variable "install_id" {}
+variable "tfe_license" {}
+variable "active_active" {
+  default = false
+  type    = bool
+}
+variable "monitoring_enabled" {
+  default = false
+}
+variable "namespace" {}
+# Optional Variables
+variable "proxy_cert" {
+  default = ""
+}
+variable "proxy_ip" {
+  default = ""
+}
+variable "no_proxy" {
+  default     = []
+  description = "Addresses which should not be accessed through the proxy server located at proxy_ip. This list will be combined with internal GCP addresses."
+  type        = list(string)
+}
+
+## Base TFE Configs
+
+variable "capacity_concurrency" {
+  default = "10"
+}
+
+variable "capacity_memory" {
+  default = "512"
+}
+
+variable "ca_certs" {
+  default = ""
+}
+
+variable "custom_image_tag" {
+  default = "hashicorp/build-worker:now"
+}
+
+variable "disk_path" {
+  default = "/opt/hashicorp/data"
+}
+
+variable "enable_metrics_collection" {
+  default = "1"
+}
+
+variable "extra_no_proxy" {
+  default = ""
+}
+
+variable "hairpin_addressing" {
+  default = false
+  type    = bool
+}
+
+variable "iact_subnet_list" {
+  default = ""
+}
+variable "iact_subnet_time_limit" {
+  default = ""
+}
+
+variable "tbw_image" {
+  default = "default_image"
+}
+
+variable "tls_vers" {
+  default = "tls_1_2_tls_1_3"
+}
+
+
+## Base External Configs
+
+variable "pg_dbname" {
+  default = ""
+}
+
+variable "pg_extra_params" {
+  default = ""
+}
+
+variable "pg_netloc" {
+  default = ""
+}
+
+variable "pg_password" {
+  default = ""
+}
+
+variable "pg_user" {
+  default = ""
+}
+
+variable "redis_host" {
+  default = ""
+}
+
+variable "redis_pass" {
+  default = ""
+}
+
+variable "redis_port" {
+  default = ""
+}
+
+variable "redis_use_password_auth" {
+  default = true
+  type    = bool
+}
+
+variable "redis_use_tls" {
+  default = false
+  type    = bool
+}
+
+
+## Replicated Configs
+
+variable "airgap_url" {
+  default = ""
+}
+
+variable "release_sequence" {
+  description = "Release sequence of Terraform Enterprise to install."
+  type        = number
+  default     = 0
+}
+
+
+## External GCP Configs
+
+variable "gcs_bucket" {
+  default = ""
+}
+
+variable "gcs_credentials" {
+  default = ""
+}
+
+variable "gcs_project" {
+  default = ""
+}
+
+
+# Misc Variables
+
+variable "letsencrypt_email" {
+  default     = ""
+  description = "The email address to use when obtaining a certificate from Let's Encrypt. An empty string disables the Let's Encrypt integration. (Do not set this if you are using the server_cert_path/server_key_path parameters)"
+  type        = string
+}
+
+variable "server_cert_path" {
+  default     = ""
+  description = "Path on the remote server to a well known certificate in PEM format. (Do not set this if you are setting the letsencrypt_email parameter)"
+  type        = string
+}
+
+variable "server_key_path" {
+  default     = ""
+  description = "Path on the remote server to the private key of the well known certificate set in server_cert_path. Required if server_cert_path is set. (Do not set this if you are setting the letsencrypt_email parameter"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%main.tf
new file mode 100644
index 0000000..7b71143
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%main.tf
@@ -0,0 +1,79 @@
+resource "google_compute_instance_template" "main" {
+  name_prefix  = "${var.namespace}-tfe-template-"
+  machine_type = var.machine_type
+
+  disk {
+    source_image = var.disk_source_image
+    auto_delete  = true
+    boot         = true
+    disk_size_gb = var.disk_size
+    disk_type    = var.disk_type
+    mode         = "READ_WRITE"
+    type         = "PERSISTENT"
+  }
+
+  network_interface {
+    subnetwork = var.subnetwork
+  }
+
+  metadata_startup_script = var.metadata_startup_script
+
+  service_account {
+    scopes = ["cloud-platform"]
+
+    email = var.service_account
+  }
+
+  labels = var.labels
+
+  can_ip_forward       = true
+  description          = "The instance template of the compute deployment for TFE."
+  instance_description = "An instance of the compute deployment for TFE."
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "google_compute_region_instance_group_manager" "main" {
+  name = "${var.namespace}-tfe-group-manager"
+
+  base_instance_name = "${var.namespace}-tfe-vm"
+
+  version {
+    instance_template = google_compute_instance_template.main.self_link
+  }
+
+  target_size = var.node_count
+
+  named_port {
+    name = "https"
+    port = 443
+  }
+
+  named_port {
+    name = "console"
+    port = 8800
+  }
+
+  dynamic "auto_healing_policies" {
+    for_each = var.auto_healing_enabled ? ["one"] : []
+    content {
+      health_check      = google_compute_health_check.tfe-instance-health.self_link
+      initial_delay_sec = 600
+    }
+  }
+}
+
+resource "google_compute_health_check" "tfe-instance-health" {
+  name                = "${var.namespace}-tfe-health-check"
+  check_interval_sec  = 60
+  timeout_sec         = 10
+  healthy_threshold   = 2
+  unhealthy_threshold = 6
+
+  https_health_check {
+    port         = 443
+    request_path = "/_health_check"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%outputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%outputs.tf
new file mode 100644
index 0000000..07bdd4c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%outputs.tf
@@ -0,0 +1,3 @@
+output "instance_group" {
+  value = google_compute_region_instance_group_manager.main.instance_group
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%variables.tf
new file mode 100644
index 0000000..9cbf351
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisemodules%vm%variables.tf
@@ -0,0 +1,11 @@
+variable "disk_source_image" {}
+variable "namespace" {}
+variable "machine_type" {}
+variable "disk_size" {}
+variable "disk_type" {}
+variable "subnetwork" {}
+variable "metadata_startup_script" {}
+variable "labels" {}
+variable "auto_healing_enabled" {}
+variable "service_account" {}
+variable "node_count" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseoutputs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseoutputs.tf
new file mode 100644
index 0000000..0944665
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseoutputs.tf
@@ -0,0 +1,34 @@
+output "replicated_console_password" {
+  value       = module.user_data.replicated_dashboard_password
+  description = "Generated password for replicated dashboard"
+}
+
+output "lb_address" {
+  value       = local.lb_address
+  description = "Load Balancer Address"
+}
+
+output "login_url" {
+  value       = "https://${local.hostname}/admin/account/new?token=${module.user_data.user_token.value}"
+  description = "Login URL to setup the TFE instance once it is initialized"
+}
+
+output "network" {
+  value       = local.network
+  description = "The name of the VPC network to which TFE is attached."
+}
+
+output "service_account_email" {
+  value       = module.service_accounts.email
+  description = "The email address of the service account associated with the TFE instance."
+}
+
+output "subnetwork" {
+  value       = local.subnetwork
+  description = "The name of the VPC subnetwork to which TFE is attached."
+}
+
+output "dns_configuration_notice" {
+  value       = "If you are using external DNS, please make sure to create a DNS record using the lb_address output that has been provided"
+  description = "A warning message."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisevariables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisevariables.tf
new file mode 100644
index 0000000..7a6ca51
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterprisevariables.tf
@@ -0,0 +1,145 @@
+
+variable "dns_create_record" {
+  default     = true
+  type        = bool
+  description = "If true, will create a DNS record. If false, no record will be created and IP of load balancer will instead be output"
+}
+variable "dns_zone_name" {
+  default     = ""
+  type        = string
+  description = "Name of the DNS zone set up in GCP"
+}
+variable "namespace" {
+  description = "Prefix for naming resources"
+}
+variable "node_count" {
+  validation {
+    condition     = var.node_count <= 5
+    error_message = "The node_count value must be less than or equal to 5."
+  }
+  description = "Number of TFE nodes. Between 1 and 5"
+  type        = number
+}
+variable "proxy_ip" {
+  default     = ""
+  description = "IP Address of the proxy server"
+}
+variable "proxy_cert_name" {
+  default     = "proxy-cert"
+  description = "Name for the stored proxy certificate bundle"
+}
+variable "proxy_cert_path" {
+  default     = ""
+  description = "Local path to the proxy certificate bundle"
+}
+# NETWORKING VARS
+variable "networking_firewall_ports" {
+  type        = list(string)
+  default     = []
+  description = "Additional ports to open in the firewall"
+}
+variable "networking_healthcheck_ips" {
+  default     = ["35.191.0.0/16", "209.85.152.0/22", "209.85.204.0/22", "130.211.0.0/22"]
+  description = "Allowed IPs required for healthcheck. Provided by GCP"
+}
+variable "networking_subnet_range" {
+  default     = "10.0.0.0/16"
+  description = "CIDR block for the created subnet"
+}
+variable "networking_reserve_subnet_range" {
+  default = "10.1.0.0/16"
+}
+variable "networking_ip_allow_list" {
+  default     = ["0.0.0.0/0"]
+  description = "List of allowed IPs for the firewall"
+}
+variable "network" {
+  default     = ""
+  description = "Pre-existing network self-link"
+}
+variable "subnetwork" {
+  default     = ""
+  description = "Pre-existing subnetwork self-link"
+}
+variable "load_balancer" {
+  default     = "PRIVATE"
+  description = "Load Balancing Scheme. Supported values are: \"PRIVATE\"; \"PRIVATE_TCP\"; \"PUBLIC\"."
+  type        = string
+
+  validation {
+    condition     = contains(["PRIVATE", "PRIVATE_TCP", "PUBLIC"], var.load_balancer)
+    error_message = "The load_balancer value must be one of: \"PRIVATE\"; \"PRIVATE_TCP\"; \"PUBLIC\"."
+  }
+}
+# DATABASE VARS
+variable "database_name" {
+  default     = "tfe"
+  description = "Postgres database name"
+}
+variable "database_user" {
+  default     = "tfe_user"
+  description = "Postgres username"
+}
+variable "database_machine_type" {
+  default     = "db-custom-4-16384"
+  description = "Database machine type"
+}
+variable "database_availability_type" {
+  default     = "ZONAL"
+  description = "Database Availability Type"
+}
+variable "database_backup_start_time" {
+  default     = "00:00"
+  description = "Database backup start time"
+}
+# REDIS VARS
+variable "redis_auth_enabled" {
+  default     = true
+  description = "A toggle to enable Redis authentication"
+  type        = bool
+}
+variable "redis_memory_size" {
+  default     = 6
+  description = "Redis memory size in GiB"
+}
+# REPLICATED VARS
+variable "release_sequence" {
+  description = "Release sequence of Terraform Enterprise to install."
+  type        = number
+  default     = 0
+}
+# VM VARS
+variable "vm_machine_type" {
+  default     = "n1-standard-4"
+  description = "VM Machine Type"
+}
+variable "vm_disk_size" {
+  default     = 50
+  description = "VM Disk size. Should be at least 50"
+}
+variable "vm_disk_source_image" {
+  default     = "projects/ubuntu-os-cloud/global/images/family/ubuntu-2004-lts"
+  description = "VM Disk source image"
+}
+variable "vm_disk_type" {
+  default     = "pd-ssd"
+  description = "VM Disk type. SSD recommended"
+}
+variable "vm_auto_healing_enabled" {
+  default     = false
+  description = "Auto healing for the instance group"
+}
+# TFE VARS
+variable "tfe_license_name" {
+  default     = "license.rli"
+  description = "Name of the stored TFE license"
+}
+variable "tfe_license_path" {
+  description = "Local path to the TFE license file"
+}
+variable "fqdn" {
+  description = "Fully qualified domain name for the TFE endpoint"
+}
+variable "ssl_certificate_name" {
+  description = "Name of the created managed SSL certificate. Required when load_balancer == \"PUBLIC\" or load_balancer == \"PRIVATE\"."
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseversions.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseversions.tf
new file mode 100644
index 0000000..bef43c3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-google-terraform-enterpriseversions.tf
@@ -0,0 +1,18 @@
+terraform {
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = "~> 3.54"
+    }
+
+    google-beta = {
+      source  = "hashicorp/google-beta"
+      version = "~> 3.54"
+    }
+
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.0"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-awsinfrastructure%repository%labels-service.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-awsinfrastructure%repository%labels-service.tf
new file mode 100644
index 0000000..b63fdee
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-awsinfrastructure%repository%labels-service.tf
@@ -0,0 +1,224 @@
+#
+# For future consideration, this list could be automatically generated
+# via the AWS SDK service list.
+#
+
+variable "service_labels" {
+  default = [
+    "accessanalyzer",
+    "acm",
+    "acmpca",
+    "alexaforbusiness",
+    "amplify",
+    "apigateway",
+    "apigatewaymanagementapi",
+    "apigatewayv2",
+    "appconfig",
+    "appflow",
+    "applicationautoscaling",
+    "applicationdiscoveryservice",
+    "applicationinsights",
+    "appmesh",
+    "apprunner",
+    "appstream",
+    "appsync",
+    "athena",
+    "auditmanager",
+    "autoscaling",
+    "autoscalingplans",
+    "backup",
+    "batch",
+    "braket",
+    "budgets",
+    "chime",
+    "cloud9",
+    "clouddirectory",
+    "cloudformation",
+    "cloudfront",
+    "cloudhsm",
+    "cloudhsmv2",
+    "cloudsearch",
+    "cloudtrail",
+    "cloudwatch",
+    "cloudwatchevents",
+    "cloudwatchlogs",
+    "codeartifact",
+    "codebuild",
+    "codecommit",
+    "codedeploy",
+    "codeguruprofiler",
+    "codegurureviewer",
+    "codepipeline",
+    "codestar",
+    "codestarconnections",
+    "codestarnotifications",
+    "cognito",
+    "comprehend",
+    "comprehendmedical",
+    "computeoptimizer",
+    "configservice",
+    "connect",
+    "costandusagereportservice",
+    "costexplorer",
+    "databasemigrationservice",
+    "dataexchange",
+    "datapipeline",
+    "datasync",
+    "dax",
+    "detective",
+    "devicefarm",
+    "directconnect",
+    "directoryservice",
+    "dlm",
+    "docdb",
+    "dynamodb",
+    "ec2-classic",
+    "ec2",
+    "ecr",
+    "ecrpublic",
+    "ecs",
+    "efs",
+    "eks",
+    "elastic-transcoder",
+    "elasticache",
+    "elasticbeanstalk",
+    "elasticinference",
+    "elasticsearch",
+    "elb",
+    "elbv2",
+    "emr",
+    "emrcontainers",
+    "eventbridge",
+    "firehose",
+    "fms",
+    "forecastservice",
+    "frauddetector",
+    "fsx",
+    "gamelift",
+    "glacier",
+    "globalaccelerator",
+    "glue",
+    "greengrass",
+    "groundstation",
+    "guardduty",
+    "honeycode",
+    "iam",
+    "identitystore",
+    "imagebuilder",
+    "inspector",
+    "iot",
+    "iotanalytics",
+    "iotevents",
+    "iotsecuretunneling",
+    "iotsitewise",
+    "iotthingsgraph",
+    "ivs",
+    "kafka",
+    "kendra",
+    "kinesis",
+    "kinesisanalytics",
+    "kinesisanalyticsv2",
+    "kinesisvideo",
+    "kms",
+    "lakeformation",
+    "lambda",
+    "lexmodelbuildingservice",
+    "licensemanager",
+    "lightsail",
+    "location",
+    "machinelearning",
+    "macie",
+    "macie2",
+    "managedblockchain",
+    "marketplacecatalog",
+    "mediaconnect",
+    "mediaconvert",
+    "medialive",
+    "mediapackage",
+    "mediapackagevod",
+    "mediastore",
+    "mediatailor",
+    "meteringmarketplace",
+    "mobile",
+    "mq",
+    "mwaa",
+    "neptune",
+    "networkfirewall",
+    "networkmanager",
+    "opsworks",
+    "opsworkscm",
+    "organizations",
+    "outposts",
+    "personalize",
+    "pi",
+    "pinpoint",
+    "pinpointemail",
+    "pinpointsmsvoice",
+    "polly",
+    "pricing",
+    "prometheusservice",
+    "qldb",
+    "quicksight",
+    "ram",
+    "rds",
+    "redshift",
+    "resourcegroups",
+    "resourcegroupstaggingapi",
+    "robomaker",
+    "route53",
+    "route53domains",
+    "route53resolver",
+    "s3",
+    "s3control",
+    "s3outposts",
+    "sagemaker",
+    "savingsplans",
+    "schemas",
+    "secretsmanager",
+    "securityhub",
+    "serverlessapplicationrepository",
+    "servicecatalog",
+    "servicediscovery",
+    "servicequotas",
+    "ses",
+    "sesv2",
+    "sfn",
+    "shield",
+    "signer",
+    "simpledb",
+    "sms",
+    "snowball",
+    "sns",
+    "sqs",
+    "ssm",
+    "ssoadmin",
+    "storagegateway",
+    "sts",
+    "support",
+    "swf",
+    "synthetics",
+    "textract",
+    "timestreamwrite",
+    "transcribeservice",
+    "timestreamwrite",
+    "transfer",
+    "translate",
+    "waf",
+    "wafv2",
+    "workdocs",
+    "worklink",
+    "workmail",
+    "workspaces",
+    "xray",
+  ]
+  description = "Set of AWS Go SDK service labels"
+  type        = set(string)
+}
+
+resource "github_issue_label" "service" {
+  for_each = var.service_labels
+
+  repository = "terraform-provider-aws"
+  name       = "service/${each.value}"
+  color      = "bfd4f2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-awsinfrastructure%repository%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-awsinfrastructure%repository%main.tf
new file mode 100644
index 0000000..826dcb1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-awsinfrastructure%repository%main.tf
@@ -0,0 +1,22 @@
+terraform {
+  backend "remote" {
+    organization = "hashicorp-v2"
+
+    workspaces {
+      name = "terraform-provider-aws-repository"
+    }
+  }
+
+  required_providers {
+    github = {
+      source  = "hashicorp/github"
+      version = "4.11.0"
+    }
+  }
+
+  required_version = ">= 0.13.5"
+}
+
+provider "github" {
+  organization = "hashicorp"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%application%locals.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%application%locals.tf
new file mode 100644
index 0000000..0d14e84
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%application%locals.tf
@@ -0,0 +1,3 @@
+locals {
+  widgets_service_scopes = [for s in azuread_application.widgets_service.api.0.oauth2_permission_scope : "${azuread_application.widgets_service.identifier_uris[0]}/${s.value}"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%application%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%application%main.tf
new file mode 100644
index 0000000..e713d7f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%application%main.tf
@@ -0,0 +1,63 @@
+resource "random_uuid" "widgets_scope_id" {}
+
+resource "azuread_application" "widgets_service" {
+  display_name = "widgets-service"
+  type         = "webapp/api"
+
+  identifier_uris = ["api://widgets-service"]
+
+  api {
+    oauth2_permission_scope {
+      admin_consent_description  = "Access Widgets Service as a user"
+      admin_consent_display_name = "Access Widgets Service as a user"
+      id                         = random_uuid.widgets_scope_id.result
+      is_enabled                 = true
+      type                       = "User"
+      user_consent_description   = "Access Widgets Service as a user"
+      user_consent_display_name  = "Access Widgets Service as a user"
+      value                      = "access_as_user"
+    }
+  }
+}
+
+resource "azuread_application_password" "widgets_service" {
+  application_object_id = azuread_application.widgets_service.object_id
+}
+
+resource "azuread_application" "widgets_app" {
+  display_name = "widgets-app"
+  type         = "webapp/api"
+
+  logout_url = "https://widgets.example.net/logout"
+  reply_urls = [
+    "https://widgets.example.net/",
+    "https://widgets.example.net/login",
+  ]
+
+  oauth2_allow_implicit_flow = true
+
+  required_resource_access {
+    # Microsoft Graph
+    resource_app_id = "00000003-0000-0000-c000-000000000000"
+
+    resource_access {
+      # User.Read
+      id = "e1fe6dd8-ba31-4d61-89e7-88639da4683d"
+      type = "Scope"
+    }
+  }
+
+  required_resource_access {
+    resource_app_id = azuread_application.widgets_service.application_id
+
+    dynamic resource_access {
+      for_each = azuread_application.widgets_service.api.0.oauth2_permission_scope
+      iterator = scope
+
+      content {
+        id   = scope.value.id
+        type = "Scope"
+      }
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%create-for-rbac%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%create-for-rbac%main.tf
new file mode 100644
index 0000000..87bd59f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-azureadexamples%create-for-rbac%main.tf
@@ -0,0 +1,50 @@
+# Create Application
+resource "azuread_application" "example" {
+  display_name = "example"
+}
+
+# Create Service Principal linked to the Application
+resource "azuread_service_principal" "example" {
+  application_id = azuread_application.example.application_id
+}
+
+# Create role assignment for Service Principal
+resource "azurerm_role_assignment" "contributor" {
+  scope                = data.azurerm_subscription.main.id
+  role_definition_name = "Contributor"
+  principal_id         = azuread_service_principal.example.id
+}
+
+# Generate a private key
+resource "tls_private_key" "example" {
+  algorithm = "RSA"
+  rsa_bits  = 2048
+}
+
+# Generate a self signed certificate
+resource "tls_self_signed_cert" "example" {
+  key_algorithm   = "RSA"
+  private_key_pem = tls_private_key.example.private_key_pem
+
+  subject {
+    common_name  = azuread_application.example.name
+    organization = "Example Corp"
+  }
+
+  allowed_uses          = ["client_auth", "server_auth"]
+  validity_period_hours = 8760
+}
+
+# Create Application certificate (client certificate)
+resource "azuread_application_certificate" "example" {
+  application_object_id = azuread_application.example.object_id
+  type                  = "AsymmetricX509Cert"
+  end_date_relative     = "4320h" # expire in 6 months
+  value                 = tls_self_signed_cert.example.cert_pem
+}
+
+# Create Application password (client secret)
+resource "azuread_application_password" "example" {
+  application_object_id = azuread_application.example.object_id
+  end_date_relative     = "4320h" # expire in 6 months
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspace.github%infra%gcp.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspace.github%infra%gcp.tf
new file mode 100644
index 0000000..e72263f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspace.github%infra%gcp.tf
@@ -0,0 +1,59 @@
+variable "impersonated_user" {
+  description = "Google Workspace Admin User to impersonate"
+}
+
+// Google project to run from
+data "google_project" "project" {
+  project_id = "terraform-strategic-providers"
+}
+
+// Google service account to use
+resource "google_service_account" "acctest-sa" {
+  account_id   = "tf-acctest"
+  display_name = "Acceptance Test SA"
+  description  = "SA for Acceptance Testing"
+  project      = data.google_project.project.project_id
+}
+
+// Impersonate the User with admin permissions
+resource "google_service_account_iam_member" "tf-acctest-iam" {
+  service_account_id = google_service_account.acctest-sa.id
+  role               = "roles/iam.serviceAccountUser"
+  member             = "user:${var.impersonated_user}"
+}
+
+// Add necessary roles for vault
+resource "google_project_iam_member" "tf-acctest-sa-admin" {
+  project = data.google_project.project.project_id
+  role    = "roles/iam.serviceAccountAdmin"
+  member  = "serviceAccount:${google_service_account.acctest-sa.email}"
+}
+
+resource "google_project_iam_member" "tf-acctest-sa-key-admin" {
+  project = data.google_project.project.project_id
+  role    = "roles/iam.serviceAccountKeyAdmin"
+  member  = "serviceAccount:${google_service_account.acctest-sa.email}"
+}
+
+// generate the key to be used by vault
+resource "google_service_account_key" "tf-acctest-key" {
+  service_account_id = google_service_account.acctest-sa.name
+}
+
+// Enable the cloud resource manager service
+resource "google_project_service" "resource-manager" {
+  project = data.google_project.project.project_id
+  service = "cloudresourcemanager.googleapis.com"
+}
+
+// Enable the admin sdk api service
+resource "google_project_service" "admin" {
+  project = data.google_project.project.project_id
+  service = "admin.googleapis.com"
+}
+
+// Enable the group settings api service
+resource "google_project_service" "group-settings" {
+  project = data.google_project.project.project_id
+  service = "groupssettings.googleapis.com"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspace.github%infra%vault.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspace.github%infra%vault.tf
new file mode 100644
index 0000000..3f7efda
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspace.github%infra%vault.tf
@@ -0,0 +1,37 @@
+resource "vault_auth_backend" "approle" {
+  type = "approle"
+}
+
+resource "vault_policy" "tf-acctest-policy" {
+  name = "tf-acctest-policy"
+  policy = file("../vault/tf-acctest-policy")
+}
+
+resource "vault_approle_auth_backend_role" "gha-role" {
+  backend        = vault_auth_backend.approle.path
+  role_name      = "gha-role"
+  token_policies = [vault_policy.tf-acctest-policy.name]
+}
+
+resource "vault_gcp_secret_backend" "gcp" {
+  path        = "gcp"
+  credentials = base64decode(google_service_account_key.tf-acctest-key.private_key)
+}
+
+resource "vault_gcp_secret_roleset" "roleset" {
+  backend      = vault_gcp_secret_backend.gcp.path
+  roleset      = "tf-acctest"
+  secret_type  = "service_account_key"
+  project      = data.google_project.project.project_id
+  token_scopes = ["https://www.googleapis.com/auth/cloud-platform"]
+
+  binding {
+    resource = "//cloudresourcemanager.googleapis.com/projects/${data.google_project.project.project_id}"
+
+    roles = [
+      "roles/owner",
+    ]
+  }
+
+  depends_on = [google_project_iam_member.tf-acctest-sa-admin]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_domain%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_domain%data-source.tf
new file mode 100644
index 0000000..201df6d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_domain%data-source.tf
@@ -0,0 +1,7 @@
+data "googleworkspace_domain" "example" {
+  domain_name = "example.com"
+}
+
+output "domain_verified" {
+  value = data.googleworkspace_domain.example.verified
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group%data-source.tf
new file mode 100644
index 0000000..8696518
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group%data-source.tf
@@ -0,0 +1,7 @@
+data "googleworkspace_group" "sales" {
+  email = "sales@example.com"
+}
+
+output "group_name" {
+  value = data.googleworkspace_group.sales.name
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_member%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_member%data-source.tf
new file mode 100644
index 0000000..374ac38
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_member%data-source.tf
@@ -0,0 +1,12 @@
+data "googleworkspace_group" "sales" {
+  email = "sales@example.com"
+}
+
+data "googleworkspace_group_member" "my-group-member" {
+  group_id = data.googleworkspace_group.sales.id
+  email    = "michael.scott@example.com"
+}
+
+output "group_member_role" {
+  value = data.googleworkspace_group_member.my-group-member.role
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_settings%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_settings%data-source.tf
new file mode 100644
index 0000000..dc42583
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_group_settings%data-source.tf
@@ -0,0 +1,7 @@
+data "googleworkspace_group_settings" "sales-settings" {
+  email = "sales@example.com"
+}
+
+output "who_can_join_sales" {
+  value = data.googleworkspace_group_settings.sales-settings.who_can_join
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_privileges%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_privileges%data-source.tf
new file mode 100644
index 0000000..d78c40a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_privileges%data-source.tf
@@ -0,0 +1,29 @@
+data "googleworkspace_privileges" "privileges" {}
+
+# filter using native Terraform syntax
+locals {
+  org_scopable_privileges = [
+    for priv in data.googleworkspace_privileges.privileges.items : priv
+    if priv.is_org_unit_scopable
+  ]
+  read_only_privileges = [
+    for priv in data.googleworkspace_privileges.privileges.items : priv
+    if length(regexall("READ", priv.privilege_name)) > 0
+  ]
+  privileges_by_service_name = [
+    for priv in data.googleworkspace_privileges.privileges.items : priv
+    if priv.service_name == "gmail"
+  ]
+}
+
+resource "googleworkspace_role" "read-only" {
+  name = "read-only"
+
+  dynamic "privileges" {
+    for_each = local.read_only_privileges
+    content {
+      service_id     = privileges.value["service_id"]
+      privilege_name = privileges.value["privilege_name"]
+    }
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_role%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_role%data-source.tf
new file mode 100644
index 0000000..e3eac47
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_role%data-source.tf
@@ -0,0 +1,7 @@
+data "googleworkspace_role" "group-admin" {
+  name = "_GROUPS_ADMIN_ROLE"
+}
+
+output "is_system_role" {
+  value = data.googleworkspace_role.group-admin.is_system_role
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_schema%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_schema%data-source.tf
new file mode 100644
index 0000000..70ee914
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_schema%data-source.tf
@@ -0,0 +1,7 @@
+data "googleworkspace_schema" "birthday" {
+  schema_name = "birthday"
+}
+
+output "schema_display_name" {
+  value = data.googleworkspace_schema.birthday.display_name
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_user%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_user%data-source.tf
new file mode 100644
index 0000000..94bdf4b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%data-sources%googleworkspace_user%data-source.tf
@@ -0,0 +1,7 @@
+data "googleworkspace_user" "dwight" {
+  primary_email = "dwight.schrute@example.com"
+}
+
+output "is_user_admin" {
+  value = data.googleworkspace_user.dwight.is_admin
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%provider%provider.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%provider%provider.tf
new file mode 100644
index 0000000..98a8169
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%provider%provider.tf
@@ -0,0 +1,5 @@
+provider "googleworkspace" {
+  credentials             = "/Users/mscott/my-project-c633d7053aab.json"
+  customer_id             = "A01b123xz"
+  impersonated_user_email = "impersonated@example.com"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_domain%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_domain%resource.tf
new file mode 100644
index 0000000..ea70d0b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_domain%resource.tf
@@ -0,0 +1,3 @@
+resource "googleworkspace_domain" "example" {
+  domain_name = "example.com"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group%resource.tf
new file mode 100644
index 0000000..e9f3b51
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group%resource.tf
@@ -0,0 +1,12 @@
+resource "googleworkspace_group" "sales" {
+  email       = "sales@example.com"
+  name        = "Sales"
+  description = "Sales Group"
+
+  aliases = ["paper-sales@example.com", "sales-dept@example.com"]
+
+  timeouts {
+    create = "1m"
+    update = "1m"
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_member%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_member%resource.tf
new file mode 100644
index 0000000..02a7d2a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_member%resource.tf
@@ -0,0 +1,21 @@
+resource "googleworkspace_group" "sales" {
+  email = "sales@example.com"
+}
+
+resource "googleworkspace_user" "michael" {
+  primary_email = "michael.scott@example.com"
+  password      = "34819d7beeabb9260a5c854bc85b3e44"
+  hash_function = "MD5"
+
+  name {
+    family_name = "Scott"
+    given_name  = "Michael"
+  }
+}
+
+resource "googleworkspace_group_member" "manager" {
+  group_id = googleworkspace_group.sales.id
+  email    = googleworkspace_user.michael.primary_email
+
+  role = "MANAGER"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_settings%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_settings%resource.tf
new file mode 100644
index 0000000..7a4699b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_group_settings%resource.tf
@@ -0,0 +1,13 @@
+resource "googleworkspace_group" "sales" {
+  email = "sales@example.com"
+}
+
+resource "googleworkspace_group_settings" "sales-settings" {
+  email = googleworkspace_group.sales.email
+
+  allow_external_members = false
+
+  who_can_join            = "INVITED_CAN_JOIN"
+  who_can_view_membership = "ALL_MANAGERS_CAN_VIEW"
+  who_can_post_message    = "ALL_MEMBERS_CAN_POST"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role%resource.tf
new file mode 100644
index 0000000..e000be9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role%resource.tf
@@ -0,0 +1,20 @@
+data "googleworkspace_privileges" "privileges" {}
+
+locals {
+  read_only_privileges = [
+    for priv in data.googleworkspace_privileges.privileges.items : priv
+    if length(regexall("READ", priv.privilege_name)) > 0
+  ]
+}
+
+resource "googleworkspace_role" "read-only" {
+  name = "read-only"
+
+  dynamic "privileges" {
+    for_each = local.read_only_privileges
+    content {
+      service_id     = privileges.value["service_id"]
+      privilege_name = privileges.value["privilege_name"]
+    }
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role_assignment%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role_assignment%resource.tf
new file mode 100644
index 0000000..fb1cfcd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_role_assignment%resource.tf
@@ -0,0 +1,54 @@
+resource "googleworkspace_user" "dwight" {
+  primary_email = "dwight.schrute@example.com"
+  password      = "34819d7beeabb9260a5c854bc85b3e44"
+  hash_function = "MD5"
+
+  name {
+    family_name = "Schrute"
+    given_name  = "Dwight"
+  }
+}
+
+data "googleworkspace_role" "groups-admin" {
+  name = "_GROUPS_ADMIN_ROLE"
+}
+
+resource "googleworkspace_role_assignment" "dwight-ra" {
+  role_id     = data.googleworkspace_role.groups-admin.id
+  assigned_to = googleworkspace_user.dwight.id
+}
+
+# role assignments can be scoped to org units, however all privileges must be org_unit compatible
+
+data "googleworkspace_privileges" "privileges" {}
+
+locals {
+  org_scopable_privileges = [
+    for priv in data.googleworkspace_privileges.privileges.items : priv
+    if priv.is_org_unit_scopable
+  ]
+}
+
+resource "googleworkspace_role" "org-unit-privs" {
+  name = "org-unit-privs"
+
+  dynamic "privileges" {
+    for_each = local.org_scopable_privileges
+    content {
+      service_id     = privileges.value["service_id"]
+      privilege_name = privileges.value["privilege_name"]
+    }
+  }
+}
+
+resource "googleworkspace_org_unit" "org-unit" {
+  name                 = "org-unit"
+  parent_org_unit_path = "/"
+}
+
+resource "googleworkspace_role_assignment" "org-unit-scope" {
+  role_id     = googleworkspace_role.org-unit-privs.id
+  assigned_to = googleworkspace_user.dwight.id
+  scope_type  = "ORG_UNIT"
+  org_unit_id = googleworkspace_user.org-unit.id
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_schema%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_schema%resource.tf
new file mode 100644
index 0000000..d437368
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_schema%resource.tf
@@ -0,0 +1,8 @@
+resource "googleworkspace_schema" "birthday" {
+  schema_name = "birthday"
+
+  fields {
+    field_name = "birthday"
+    field_type = "DATE"
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_user%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_user%resource.tf
new file mode 100644
index 0000000..4e3ec44
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-googleworkspaceexamples%resources%googleworkspace_user%resource.tf
@@ -0,0 +1,90 @@
+resource "googleworkspace_schema" "birthday" {
+  schema_name = "birthday"
+
+  fields {
+    field_name = "birthday"
+    field_type = "DATE"
+  }
+
+  fields {
+    field_name   = "favorite-numbers"
+    field_type   = "INT64"
+    multi_valued = true
+
+    numeric_indexing_spec {
+      min_value = 1
+      max_value = 100
+    }
+  }
+}
+
+resource "googleworkspace_user" "dwight" {
+  primary_email = "dwight.schrute@example.com"
+  password      = "34819d7beeabb9260a5c854bc85b3e44"
+  hash_function = "MD5"
+
+  name {
+    family_name = "Schrute"
+    given_name  = "Dwight"
+  }
+
+  aliases = ["assistant_to_regional_manager@example.com"]
+
+  emails {
+    address = "dwight.schrute.dunder.mifflin@example.com"
+    type    = "work"
+  }
+
+  relations {
+    type  = "assistant"
+    value = "Michael Scott"
+  }
+
+  addresses {
+    country        = "USA"
+    country_code   = "US"
+    locality       = "Scranton"
+    po_box         = "123"
+    postal_code    = "18508"
+    region         = "PA"
+    street_address = "123 Dunder Mifflin Pkwy"
+    type           = "work"
+  }
+
+  organizations {
+    department = "sales"
+    location   = "Scranton"
+    name       = "Dunder Mifflin"
+    primary    = true
+    symbol     = "DUMI"
+    title      = "member"
+    type       = "work"
+  }
+
+  phones {
+    type  = "home"
+    value = "555-123-7890"
+  }
+
+  phones {
+    type    = "work"
+    primary = true
+    value   = "555-123-0987"
+  }
+
+  keywords {
+    type  = "occupation"
+    value = "salesperson"
+  }
+
+  custom_schemas {
+    schema_name = googleworkspace_schema.birthday.schema_name
+
+    schema_values = {
+      "birthday"         = jsonencode("1970-01-20")
+      "favorite-numbers" = jsonencode([1, 2, 3])
+    }
+  }
+
+  recovery_email = "dwightkschrute@example.com"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%data-source.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%data-source.tf
new file mode 100644
index 0000000..35c2595
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%data-source.tf
@@ -0,0 +1,4 @@
+data "hcp_hvn_route" "example" {
+  hvn_link         = var.hvn_link
+  destination_cidr = var.hvn_route_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%variables.tf
new file mode 100644
index 0000000..b605f76
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%data-sources%hcp_hvn_route%variables.tf
@@ -0,0 +1,9 @@
+variable "hvn_link" {
+  description = "The `self_link` of the HashiCorp Virtual Network (HVN)."
+  type        = string
+}
+
+variable "hvn_route_id" {
+  description = "The ID of the HVN route ID."
+  type        = string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-peering.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-peering.tf
new file mode 100644
index 0000000..26ff2b0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-peering.tf
@@ -0,0 +1,25 @@
+resource "hcp_hvn" "hvn" {
+  hvn_id         = "prod-hvn"
+  region         = "us-west-2"
+  cloud_provider = "aws"
+}
+
+resource "hcp_aws_network_peering" "peering" {
+  hvn_id = hcp_hvn.hvn.hvn_id
+  // add `peering_id` that you can find in the HCP Portal
+  peering_id      = "f03324a9-4377-4a54-9c15-958fd07ad77b"
+  peer_vpc_id     = "vpc-845f29fc"
+  peer_account_id = "572816266891"
+  peer_vpc_region = "us-west-2"
+  // remove `peer_vpc_cidr_block`
+  // peer_vpc_cidr_block = "172.31.0.0/16"
+}
+
+// Add a `hcp_hvn_route` resource for the peering's CIDR
+resource "hcp_hvn_route" "peering-route" {
+  hvn_link = hcp_hvn.hvn.self_link
+  // you can find this ID in the HCP Portal in the peering details page in the list of routes
+  hvn_route_id     = "a8dda9a8-0f69-4fa0-b38c-55be302fdddb"
+  destination_cidr = "172.31.0.0/16"
+  target_link      = hcp_aws_network_peering.peering.self_link
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-tgw.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-tgw.tf
new file mode 100644
index 0000000..85e6371
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%after-tgw.tf
@@ -0,0 +1,31 @@
+resource "hcp_hvn" "hvn" {
+  hvn_id         = "prod-hvn"
+  region         = "us-west-2"
+  cloud_provider = "aws"
+}
+
+resource "hcp_aws_transit_gateway_attachment" "prod" {
+  hvn_id                        = hcp_hvn.hvn.hvn_id
+  transit_gateway_attachment_id = "prod-tgw-attachment"
+  transit_gateway_id            = "tgw-0ee94b1a1167cf89d"
+  resource_share_arn            = "arn:aws:ram:us-west-2:..."
+  // remove `destination_cidrs`
+  // destination_cidrs             = ["10.1.0.0/24", "10.2.0.0/24"]
+}
+
+// add a new `hcp_hvn_route` for each CIDR associated with the transit gateway attachment
+resource "hcp_hvn_route" "tgw-route-1" {
+  hvn_link = hcp_hvn.hvn.self_link
+  // you can find this ID in the HCP Portal in the TGW attachment details page in the list of Routes
+  hvn_route_id     = "35392425-215a-44ec-bbd0-051bb777ce5f"
+  destination_cidr = "10.1.0.0/24"
+  target_link      = hcp_aws_transit_gateway_attachment.prod.self_link
+}
+
+resource "hcp_hvn_route" "tgw-route-2" {
+  hvn_link = hcp_hvn.hvn.self_link
+  // you can find this ID in the HCP Portal in the transit gateway attachment details page in the list of routes
+  hvn_route_id     = "9867959a-d81b-4e52-ae8e-ca56f9dd06fc"
+  destination_cidr = "10.2.0.0/24"
+  target_link      = hcp_aws_transit_gateway_attachment.prod.self_link
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-peering.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-peering.tf
new file mode 100644
index 0000000..3533658
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-peering.tf
@@ -0,0 +1,13 @@
+resource "hcp_hvn" "hvn" {
+  hvn_id         = "prod-hvn"
+  region         = "us-west-2"
+  cloud_provider = "aws"
+}
+
+resource "hcp_aws_network_peering" "peering" {
+  hvn_id              = hcp_hvn.hvn.hvn_id
+  peer_vpc_id         = "vpc-845f29fc"
+  peer_account_id     = "572816266891"
+  peer_vpc_region     = "us-west-2"
+  peer_vpc_cidr_block = "172.31.0.0/16"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-tgw.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-tgw.tf
new file mode 100644
index 0000000..ce78bfe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%hvn_route_migration_guide%before-tgw.tf
@@ -0,0 +1,13 @@
+resource "hcp_hvn" "hvn" {
+  hvn_id         = "prod-hvn"
+  region         = "us-west-2"
+  cloud_provider = "aws"
+}
+
+resource "hcp_aws_transit_gateway_attachment" "prod" {
+  hvn_id                        = hcp_hvn.hvn.hvn_id
+  transit_gateway_attachment_id = "prod-tgw-attachment"
+  transit_gateway_id            = "tgw-0ee94b1a1167cf89d"
+  resource_share_arn            = "arn:aws:ram:us-west-2:..."
+  destination_cidrs             = ["10.1.0.0/24", "10.2.0.0/24"]
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%peering%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%peering%main.tf
new file mode 100644
index 0000000..4fffd4b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%peering%main.tf
@@ -0,0 +1,45 @@
+// Create a HashiCorp Virtual Network (HVN).
+resource "hcp_hvn" "example" {
+  hvn_id         = var.hvn_id
+  cloud_provider = "aws"
+  region         = var.region
+  cidr_block     = "172.25.16.0/20"
+}
+
+// Create an HCP Consul cluster within the HVN.
+resource "hcp_consul_cluster" "example" {
+  hvn_id     = hcp_hvn.example.hvn_id
+  cluster_id = var.cluster_id
+  tier       = "development"
+}
+
+// If you have not already, create a VPC within your AWS account that will
+// contain the workloads you want to connect to your HCP Consul cluster.
+// Make sure the CIDR block of the peer VPC does not overlap with the CIDR
+// of the HVN.
+resource "aws_vpc" "peer" {
+  cidr_block = "10.220.0.0/16"
+}
+
+// Create an HCP network peering to peer your HVN with your AWS VPC.
+resource "hcp_aws_network_peering" "example" {
+  peering_id      = var.peer_id
+  hvn_id          = hcp_hvn.example.hvn_id
+  peer_vpc_id     = aws_vpc.peer.id
+  peer_account_id = aws_vpc.peer.owner_id
+  peer_vpc_region = var.region
+}
+
+// Create an HVN route that targets your HCP network peering and matches your AWS VPC's CIDR block
+resource "hcp_hvn_route" "example" {
+  hvn_link         = hcp_hvn.hvn.self_link
+  hvn_route_id     = var.route_id
+  destination_cidr = aws_vpc.peer.cidr_block
+  target_link      = hcp_aws_network_peering.example.self_link
+}
+
+// Accept the VPC peering within your AWS account.
+resource "aws_vpc_peering_connection_accepter" "peer" {
+  vpc_peering_connection_id = hcp_aws_network_peering.example.provider_peering_id
+  auto_accept               = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%peering%variables.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%peering%variables.tf
new file mode 100644
index 0000000..0a7decf
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%guides%peering%variables.tf
@@ -0,0 +1,24 @@
+variable "hvn_id" {
+  description = "The ID of the HCP HVN."
+  type        = string
+}
+
+variable "cluster_id" {
+  description = "The ID of the HCP Consul cluster."
+  type        = string
+}
+
+variable "region" {
+  description = "The region of the HCP HVN and peer VPC."
+  type        = string
+}
+
+variable "peer_id" {
+  description = "The ID to use for the HCP network peering."
+  type        = string
+}
+
+variable "route_id" {
+  description = "The ID to use for the HCP HVN route."
+  type        = string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%provider%provider.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%provider%provider.tf
new file mode 100644
index 0000000..4da2acb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%provider%provider.tf
@@ -0,0 +1,69 @@
+// Pin the version
+terraform {
+  required_providers {
+    hcp = {
+      source  = "hashicorp/hcp"
+      version = "~> 0.8.0"
+    }
+  }
+}
+
+// Configure the provider
+provider "hcp" {}
+
+// Use the cloud provider AWS to provision resources that will be connected to HCP
+provider "aws" {
+  region = var.region
+}
+
+// Create an HVN
+resource "hcp_hvn" "example_hvn" {
+  hvn_id         = "hcp-tf-example-hvn"
+  cloud_provider = "aws"
+  region         = var.region
+  cidr_block     = "172.25.16.0/20"
+}
+
+// Create a VPC for the HVN to peer into
+resource "aws_vpc" "main" {
+  cidr_block = "172.25.0.0/20"
+}
+
+data "aws_arn" "main" {
+  arn = aws_vpc.main.arn
+}
+
+resource "aws_vpc_peering_connection_accepter" "main" {
+  vpc_peering_connection_id = hcp_aws_network_peering.example_peering.provider_peering_id
+  auto_accept               = true
+}
+
+// Create a network peering between the HVN and the AWS VPC
+resource "hcp_aws_network_peering" "example" {
+  hvn_id          = hcp_hvn.example_hvn.hvn_id
+  peering_id      = "hcp-tf-example-peering"
+  peer_vpc_id     = aws_vpc.main.id
+  peer_account_id = aws_vpc.main.owner_id
+  peer_vpc_region = data.aws_arn.main.region
+}
+
+// Create an HVN route that targets your HCP network peering and matches your AWS VPC's CIDR block
+resource "hcp_hvn_route" "example" {
+  hvn_link         = hcp_hvn.hvn.self_link
+  hvn_route_id     = "hcp-tf-example-hvn-route"
+  destination_cidr = aws_vpc.main.cidr_block
+  target_link      = hcp_aws_network_peering.example.self_link
+}
+
+// Create a Consul cluster in the same region and cloud provider as the HVN
+resource "hcp_consul_cluster" "example" {
+  hvn_id     = hcp_hvn.example_hvn.hvn_id
+  cluster_id = "hcp-tf-example-consul-cluster"
+  tier       = "development"
+}
+
+// Create a Vault cluster in the same region and cloud provider as the HVN
+resource "hcp_vault_cluster" "example" {
+  cluster_id = "hcp-tf-example-vault-cluster"
+  hvn_id     = hcp_hvn.example_hvn.hvn_id
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_network_peering%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_network_peering%resource.tf
new file mode 100644
index 0000000..6ff5230
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_network_peering%resource.tf
@@ -0,0 +1,38 @@
+provider "aws" {
+  region = "us-west-2"
+}
+
+resource "hcp_hvn" "main" {
+  hvn_id         = "main-hvn"
+  cloud_provider = "aws"
+  region         = "us-west-2"
+  cidr_block     = "172.25.16.0/20"
+}
+
+resource "aws_vpc" "peer" {
+  cidr_block = "172.31.0.0/16"
+}
+
+data "aws_arn" "peer" {
+  arn = aws_vpc.peer.arn
+}
+
+resource "hcp_aws_network_peering" "dev" {
+  hvn_id          = hcp_hvn.main.hvn_id
+  peering_id      = "dev"
+  peer_vpc_id     = aws_vpc.peer.id
+  peer_account_id = aws_vpc.peer.owner_id
+  peer_vpc_region = data.aws_arn.peer.region
+}
+
+resource "hcp_hvn_route" "main-to-dev" {
+  hvn_link         = hcp_hvn.main.self_link
+  hvn_route_id     = "main-to-dev"
+  destination_cidr = "172.31.0.0/16"
+  target_link      = hcp_aws_network_peering.dev.self_link
+}
+
+resource "aws_vpc_peering_connection_accepter" "peer" {
+  vpc_peering_connection_id = hcp_aws_network_peering.dev.provider_peering_id
+  auto_accept               = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_transit_gateway_attachment%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_transit_gateway_attachment%resource.tf
new file mode 100644
index 0000000..64e1528
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_aws_transit_gateway_attachment%resource.tf
@@ -0,0 +1,58 @@
+provider "aws" {
+  region = "us-west-2"
+}
+
+resource "hcp_hvn" "main" {
+  hvn_id         = "main-hvn"
+  cloud_provider = "aws"
+  region         = "us-west-2"
+  cidr_block     = "172.25.16.0/20"
+}
+
+resource "aws_vpc" "example" {
+  cidr_block = "172.31.0.0/16"
+}
+
+resource "aws_ec2_transit_gateway" "example" {
+  tags = {
+    Name = "example-tgw"
+  }
+}
+
+resource "aws_ram_resource_share" "example" {
+  name                      = "example-resource-share"
+  allow_external_principals = true
+}
+
+resource "aws_ram_principal_association" "example" {
+  resource_share_arn = aws_ram_resource_share.example.arn
+  principal          = hcp_hvn.main.provider_account_id
+}
+
+resource "aws_ram_resource_association" "example" {
+  resource_share_arn = aws_ram_resource_share.example.arn
+  resource_arn       = aws_ec2_transit_gateway.example.arn
+}
+
+resource "hcp_aws_transit_gateway_attachment" "example" {
+  depends_on = [
+    aws_ram_principal_association.example,
+    aws_ram_resource_association.example,
+  ]
+
+  hvn_id                        = hcp_hvn.main.hvn_id
+  transit_gateway_attachment_id = "example-tgw-attachment"
+  transit_gateway_id            = aws_ec2_transit_gateway.example.id
+  resource_share_arn            = aws_ram_resource_share.example.arn
+}
+
+resource "hcp_hvn_route" "route" {
+  hvn_link         = hcp_hvn.main.self_link
+  hvn_route_id     = "hvn-to-tgw-attachment"
+  destination_cidr = aws_vpc.example.cidr_block
+  target_link      = hcp_aws_transit_gateway_attachment.example.self_link
+}
+
+resource "aws_ec2_transit_gateway_vpc_attachment_accepter" "example" {
+  transit_gateway_attachment_id = hcp_aws_transit_gateway_attachment.example.provider_transit_gateway_attachment_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_hvn_route%resource.tf b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_hvn_route%resource.tf
new file mode 100644
index 0000000..ac20b65
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraform-provider-hcpexamples%resources%hcp_hvn_route%resource.tf
@@ -0,0 +1,35 @@
+provider "aws" {
+  region = "us-west-2"
+}
+
+resource "hcp_hvn" "main" {
+  hvn_id         = "main-hvn"
+  cloud_provider = "aws"
+  region         = "us-west-2"
+  cidr_block     = "172.25.16.0/20"
+}
+
+// Creating a peering and a route for it.
+resource "aws_vpc" "peer" {
+  cidr_block = "192.168.0.0/20"
+}
+
+resource "hcp_aws_network_peering" "example" {
+  peering_id      = "peer-example"
+  hvn_id          = hcp_hvn.main.hvn_id
+  peer_vpc_id     = aws_vpc.peer.id
+  peer_account_id = aws_vpc.peer.owner_id
+  peer_vpc_region = "us-west-2"
+}
+
+resource "aws_vpc_peering_connection_accepter" "peer" {
+  vpc_peering_connection_id = hcp_aws_network_peering.example.provider_peering_id
+  auto_accept               = true
+}
+
+resource "hcp_hvn_route" "example-peering-route" {
+  hvn_link         = hcp_hvn.main.self_link
+  hvn_route_id     = "peering-route"
+  destination_cidr = aws_vpc.peer.cidr_block
+  target_link      = hcp_aws_network_peering.example.self_link
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%basic%main.tf
new file mode 100644
index 0000000..ec661db
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%basic%main.tf
@@ -0,0 +1,14 @@
+terraform {
+    required_providers  {
+        test = {
+            source = "hashicorp/test"
+        }
+        othertest = {
+            source = "happycorp/test"
+        }
+    }
+}
+
+resource "test_instance" "exists" {
+    // I exist!
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%module%main.tf
new file mode 100644
index 0000000..11fca99
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%module%main.tf
@@ -0,0 +1,17 @@
+terraform {
+    required_providers  {
+        // This is deliberately odd, so we can test that the correct happycorp
+        // provider is selected for any test_ resource added for this module
+        test = {
+            source = "happycorp/test"
+        }
+    }
+}
+
+resource "test_instance" "exists" {
+    // I exist!
+}
+
+module "child" {
+    source = "./module"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%module%module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%module%module%main.tf
new file mode 100644
index 0000000..55210f2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%add%module%module%main.tf
@@ -0,0 +1,9 @@
+terraform {
+    required_providers {
+        test = {
+            source = "hashicorp/test"
+        }
+    }
+}
+
+resource "test_instance" "exists" {}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%providers-lock%basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%providers-lock%basic%main.tf
new file mode 100644
index 0000000..41b211f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%providers-lock%basic%main.tf
@@ -0,0 +1,7 @@
+terraform {
+    required_providers {
+        test = {
+            source = "hashicorp/test"
+        }
+    }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%show-json%drift%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%show-json%drift%main.tf
new file mode 100644
index 0000000..18995de
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%command%testdata%show-json%drift%main.tf
@@ -0,0 +1,13 @@
+# In state with `ami = "foo"`, so this should be a regular update. The provider
+# should not detect changes on refresh.
+resource "test_instance" "no_refresh" {
+  ami = "bar"
+}
+
+# In state with `ami = "refresh-me"`, but the provider will return
+# `"refreshed"` after the refresh phase. The plan should show the drift
+# (`"refresh-me"` to `"refreshed"`) and plan the update (`"refreshed"` to
+# `"baz"`).
+resource "test_instance" "should_refresh" {
+  ami = "baz"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%child_a%child_a.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%child_a%child_a.tf
new file mode 100644
index 0000000..d3eff0b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%child_a%child_a.tf
@@ -0,0 +1,7 @@
+
+module "child_c" {
+  # In the unit test where this fixture is used, we treat the source strings
+  # as relative paths from the fixture directory rather than as source
+  # addresses as we would in a real module walker.
+  source = "./child_c"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%child_b%child_b.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%child_b%child_b.tf
new file mode 100644
index 0000000..d3eff0b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%child_b%child_b.tf
@@ -0,0 +1,7 @@
+
+module "child_c" {
+  # In the unit test where this fixture is used, we treat the source strings
+  # as relative paths from the fixture directory rather than as source
+  # addresses as we would in a real module walker.
+  source = "./child_c"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%root.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%root.tf
new file mode 100644
index 0000000..5e23e40
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%config-build%root.tf
@@ -0,0 +1,9 @@
+
+module "child_a" {
+  source = "./child_a"
+}
+
+module "child_b" {
+  source = "./child_b"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%nested-errors%child_a%child_a.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%nested-errors%child_a%child_a.tf
new file mode 100644
index 0000000..d2fb89f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%nested-errors%child_a%child_a.tf
@@ -0,0 +1,7 @@
+
+module "child_c" {
+  # Note: this test case has an unrealistic module loader that resolves all
+  # sources as relative to the fixture directory, rather than to the
+  # current module directory as Terraform normally would.
+  source = "./child_c"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%nested-errors%root.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%nested-errors%root.tf
new file mode 100644
index 0000000..d596eb0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%configs%testdata%nested-errors%root.tf
@@ -0,0 +1,3 @@
+module "child_a" {
+  source = "./child_a"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%child%package-escape-child.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%child%package-escape-child.tf
new file mode 100644
index 0000000..935a02d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%child%package-escape-child.tf
@@ -0,0 +1,8 @@
+module "grandchild" {
+  # NOTE: This seems like it ought to work because there is indeed a
+  # ../grandchild directory, but our caller loaded us as an external
+  # module using an absolute path and so we're actually isolated from
+  # the parent directory in a separate "module package", and so we
+  # can't traverse out to find the grandchild module.
+  source = "../grandchild"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%package-escape.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%package-escape.tf
new file mode 100644
index 0000000..7a665a4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-escape%package-escape.tf
@@ -0,0 +1,9 @@
+module "child" {
+  # NOTE: For this test we need a working absolute path so that Terraform
+  # will see this a an "external" module and thus establish a separate
+  # package for it, but we won't know which temporary directory this
+  # will be in at runtime, so we'll rewrite this file inside the test
+  # code to replace %%BASE%% with the actual path. %%BASE%% is not normal
+  # Terraform syntax and won't work outside of this test.
+  source = "%%BASE%%/child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package%child%package-prefix-child.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package%child%package-prefix-child.tf
new file mode 100644
index 0000000..84b67ac
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package%child%package-prefix-child.tf
@@ -0,0 +1,9 @@
+module "grandchild" {
+  # NOTE: This only works because our caller told Terraform to treat
+  # the parent directory as a whole as a module package, and so
+  # the "./terraform/modules/child" directory should contain both
+  # "child" and "grandchild" sub directories that we can traverse between.
+  # This is the same as local paths between different directories inside
+  # a single git repository or distribution archive.
+  source = "../grandchild"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package-prefix.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package-prefix.tf
new file mode 100644
index 0000000..08d5ced
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%initwd%testdata%load-module-package-prefix%package-prefix.tf
@@ -0,0 +1,15 @@
+module "child" {
+  # NOTE: For this test we need a working absolute path so that Terraform
+  # will see this a an "external" module and thus establish a separate
+  # package for it, but we won't know which temporary directory this
+  # will be in at runtime, so we'll rewrite this file inside the test
+  # code to replace %%BASE%% with the actual path. %%BASE%% is not normal
+  # Terraform syntax and won't work outside of this test.
+  #
+  # Note that we're intentionally using the special // delimiter to
+  # tell Terraform that it should treat the "package" directory as a
+  # whole as a module package, with all of its descendents "downloaded"
+  # (copied) together into ./.terraform/modules/child so that child
+  # can refer to ../grandchild successfully.
+  source = "%%BASE%%/package//child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-module%child%main.tf
new file mode 100644
index 0000000..85b58ff
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-module%child%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "bar" {
+    provisioner "shell" {
+        foo = "bar"
+    }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref%main.tf
new file mode 100644
index 0000000..72a1e79
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    count = 3
+    foo = "number ${count.index}"
+
+    provisioner "shell" {
+        command = "${self.foo}"
+    }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref-single%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref-single%main.tf
new file mode 100644
index 0000000..d6c9951
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-multi-self-ref-single%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "foo" {
+  count = 3
+  foo   = "number ${count.index}"
+
+  provisioner "shell" {
+    command = aws_instance.foo[0].foo
+    order   = count.index
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-self-ref%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-self-ref%main.tf
new file mode 100644
index 0000000..5f401f7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-self-ref%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+    foo = "bar"
+
+    provisioner "shell" {
+        command = "${self.foo}"
+    }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-sensitive%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-sensitive%main.tf
new file mode 100644
index 0000000..99ec4a2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-provisioner-sensitive%main.tf
@@ -0,0 +1,18 @@
+variable "password" {
+  type      = string
+  sensitive = true
+}
+
+resource "aws_instance" "foo" {
+  connection {
+    host     = "localhost"
+    type     = "telnet"
+    user     = "superuser"
+    port     = 2222
+    password = var.password
+  }
+
+  provisioner "shell" {
+    command = "echo ${var.password} > secrets"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-count%main.tf
new file mode 100644
index 0000000..1ce2ffe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-count%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  count = 3
+}
+
+resource "aws_instance" "bar" {
+  foo = length(aws_instance.foo)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%child%main.tf
new file mode 100644
index 0000000..cd1e56e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%child%main.tf
@@ -0,0 +1,5 @@
+variable "var" {}
+
+resource "aws_instance" "foo" {
+    value = "${var.var}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%main.tf
new file mode 100644
index 0000000..a05056c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-ref-existing%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "foo" {
+  foo = "bar"
+}
+
+module "child" {
+  source = "./child"
+
+  var = "${aws_instance.foo.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-count-zero-list%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-count-zero-list%main.tf
new file mode 100644
index 0000000..6d9b4d5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-count-zero-list%main.tf
@@ -0,0 +1,7 @@
+resource "null_resource" "foo" {
+  count = 0
+}
+
+output "test" {
+  value = "${sort(null_resource.foo.*.id)}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%child%main.tf
new file mode 100644
index 0000000..949d8e1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%child%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "child" {
+  ami = "child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%main.tf
new file mode 100644
index 0000000..1a7862b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module%main.tf
@@ -0,0 +1,9 @@
+module "child" {
+  source = "./child"
+}
+
+resource "aws_instance" "a" {
+  ami = "parent"
+
+  depends_on = ["module.child"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%child%main.tf
new file mode 100644
index 0000000..7720326
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%child%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "c" {
+  ami = "grandchild"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%main.tf
new file mode 100644
index 0000000..6cbe350
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%child%main.tf
@@ -0,0 +1,3 @@
+module "grandchild" {
+    source = "./child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%main.tf
new file mode 100644
index 0000000..1a7862b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-deep%main.tf
@@ -0,0 +1,9 @@
+module "child" {
+  source = "./child"
+}
+
+resource "aws_instance" "a" {
+  ami = "parent"
+
+  depends_on = ["module.child"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-empty%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-empty%main.tf
new file mode 100644
index 0000000..f2316bd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-empty%main.tf
@@ -0,0 +1 @@
+# Empty!
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%child%main.tf
new file mode 100644
index 0000000..7720326
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%child%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "c" {
+  ami = "grandchild"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%main.tf
new file mode 100644
index 0000000..a816cae
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-depends-on-module-in-module%child%main.tf
@@ -0,0 +1,8 @@
+module "grandchild" {
+  source = "./child"
+}
+
+resource "aws_instance" "b" {
+  ami        = "child"
+  depends_on = ["module.grandchild"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-scale-in%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-scale-in%main.tf
new file mode 100644
index 0000000..8cb3847
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-resource-scale-in%main.tf
@@ -0,0 +1,13 @@
+variable "instance_count" {}
+
+resource "aws_instance" "one" {
+  count = var.instance_count
+}
+
+locals {
+  one_id = element(concat(aws_instance.one.*.id, [""]), 0)
+}
+
+resource "aws_instance" "two" {
+  value = local.one_id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint%main.tf
new file mode 100644
index 0000000..801ddba
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "bar" {
+    num = "2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep%main.tf
new file mode 100644
index 0000000..164db2d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    num = "2"
+    foo = "${aws_instance.foo.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep-requires-new%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep-requires-new%main.tf
new file mode 100644
index 0000000..f964fe4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-taint-dep-requires-new%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${aws_instance.foo.id}"
+    require_new = "yes"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-tainted-targets%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-tainted-targets%main.tf
new file mode 100644
index 0000000..8f6b317
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-tainted-targets%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "ifailedprovisioners" { }
+
+resource "aws_instance" "iambeingadded" { }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted%main.tf
new file mode 100644
index 0000000..b07fc97
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    foo = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-count%main.tf
new file mode 100644
index 0000000..cd86189
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-count%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  count = 3
+}
+
+resource "aws_instance" "bar" {
+  count = 3
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%child%main.tf
new file mode 100644
index 0000000..7872c90
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%child%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    num = "2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%main.tf
new file mode 100644
index 0000000..938ce3a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module%main.tf
@@ -0,0 +1,11 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "foo" {
+    foo = "bar"
+}
+
+resource "aws_instance" "bar" {
+    foo = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%child%main.tf
new file mode 100644
index 0000000..90a7c40
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%child%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "mod" { }
+
+output "output" {
+  value = "${aws_instance.mod.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%main.tf
new file mode 100644
index 0000000..754219c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-dep%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "foo" {
+    foo = "${module.child.output}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%child%main.tf
new file mode 100644
index 0000000..7872c90
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%child%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    num = "2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%main.tf
new file mode 100644
index 0000000..88bf07f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-resource%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    foo = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child1%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child1%main.tf
new file mode 100644
index 0000000..cffe382
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child1%main.tf
@@ -0,0 +1,17 @@
+variable "instance_id" {
+}
+
+output "instance_id" {
+  # The instance here isn't targeted, so this output shouldn't get updated.
+  # But it already has an existing value in state (specified within the
+  # test code) so we expect this to remain unchanged afterwards.
+  value = "${aws_instance.foo.id}"
+}
+
+output "given_instance_id" {
+  value = "${var.instance_id}"
+}
+
+resource "aws_instance" "foo" {
+  foo = "${var.instance_id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child2%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child2%main.tf
new file mode 100644
index 0000000..d8aa6cf
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%child2%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "foo" {
+}
+
+output "instance_id" {
+  # Even though we're targeting just the resource above, this should still
+  # be populated because outputs are implicitly targeted when their
+  # dependencies are
+  value = "${aws_instance.foo.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%main.tf
new file mode 100644
index 0000000..1170072
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-targeted-module-unrelated-outputs%main.tf
@@ -0,0 +1,37 @@
+resource "aws_instance" "foo" {}
+
+module "child1" {
+  source = "./child1"
+  instance_id = "${aws_instance.foo.id}"
+}
+
+module "child2" {
+  source = "./child2"
+}
+
+output "child1_id" {
+  value = "${module.child1.instance_id}"
+}
+
+output "child1_given_id" {
+  value = "${module.child1.given_instance_id}"
+}
+
+output "child2_id" {
+  # This should get updated even though we're targeting specifically
+  # module.child2, because outputs are implicitly targeted when their
+  # dependencies are.
+  value = "${module.child2.instance_id}"
+}
+
+output "all_ids" {
+  # Here we are intentionally referencing values covering three different scenarios:
+  # - not targeted and not already in state
+  # - not targeted and already in state
+  # - targeted
+  # This is important because this output must appear in the graph after
+  # target filtering in case the targeted node changes its value, but we must
+  # therefore silently ignore the failure that results from trying to
+  # interpolate the un-targeted, not-in-state node.
+  value = "${aws_instance.foo.id} ${module.child1.instance_id} ${module.child2.instance_id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-terraform-workspace%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-terraform-workspace%main.tf
new file mode 100644
index 0000000..cc50f57
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-terraform-workspace%main.tf
@@ -0,0 +1,3 @@
+output "output" {
+    value = "${terraform.workspace}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%child%main.tf
new file mode 100644
index 0000000..1caedab
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%child%main.tf
@@ -0,0 +1,5 @@
+variable "value" {}
+
+resource "aws_instance" "bar" {
+    foo = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%main.tf
new file mode 100644
index 0000000..1ee7dd6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unknown-interpolate%main.tf
@@ -0,0 +1,6 @@
+resource "aws_instance" "foo" {}
+
+module "child" {
+    source = "./child"
+    value = "${aws_instance.foo.nope}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unstable%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unstable%main.tf
new file mode 100644
index 0000000..32754bb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-unstable%main.tf
@@ -0,0 +1,3 @@
+resource "test_resource" "foo" {
+  random = "${uuid()}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-vars%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-vars%main.tf
new file mode 100644
index 0000000..dc413c0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-vars%main.tf
@@ -0,0 +1,33 @@
+variable "amis" {
+    default = {
+        us-east-1 = "foo"
+        us-west-2 = "foo"
+    }
+}
+
+variable "test_list" {
+    type = list(string)
+}
+
+variable "test_map" {
+    type = map(string)
+}
+
+variable "bar" {
+    default = "baz"
+}
+
+variable "foo" {}
+
+resource "aws_instance" "foo" {
+    num  = "2"
+    bar  = var.bar
+    list = var.test_list
+    map  = var.test_map
+}
+
+resource "aws_instance" "bar" {
+    foo = var.foo
+    bar = var.amis[var.foo]
+    baz = var.amis["us-east-1"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-vars-env%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-vars-env%main.tf
new file mode 100644
index 0000000..1b62ad6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%apply-vars-env%main.tf
@@ -0,0 +1,20 @@
+variable "string" {
+  default = "foo"
+  type    = string
+}
+
+variable "list" {
+  default = []
+  type    = list(string)
+}
+
+variable "map" {
+  default = {}
+  type    = map(string)
+}
+
+resource "aws_instance" "bar" {
+  string  = var.string
+  list    = var.list
+  map     = var.map
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%context-required-version%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%context-required-version%main.tf
new file mode 100644
index 0000000..75db792
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%context-required-version%main.tf
@@ -0,0 +1 @@
+terraform {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%context-required-version-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%context-required-version-module%child%main.tf
new file mode 100644
index 0000000..3b52ffa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%context-required-version-module%child%main.tf
@@ -0,0 +1,3 @@
+terraform {
+  required_version = ">= 0.5.0"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%main.tf
new file mode 100644
index 0000000..3b183ec
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%main.tf
@@ -0,0 +1,11 @@
+// this is the provider that should actually be used by orphaned resources
+provider "aws" {
+  alias = "bar"
+}
+
+module "mod" {
+  source = "./mod"
+  providers = {
+    aws.foo = "aws.bar"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%mod%main.tf
new file mode 100644
index 0000000..3e360ee
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-module-with-provider%mod%main.tf
@@ -0,0 +1,6 @@
+provider "aws" {
+  alias = "foo"
+}
+
+// removed module configuration referencing aws.foo, which was passed in by the
+// root module
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%child%main.tf
new file mode 100644
index 0000000..47ef076
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%child%main.tf
@@ -0,0 +1,10 @@
+variable "in" {
+}
+
+resource "aws_instance" "b" {
+  foo = var.in
+}
+
+output "out" {
+  value = var.in
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%main.tf
new file mode 100644
index 0000000..70048b5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%destroy-targeted%main.tf
@@ -0,0 +1,12 @@
+resource "aws_instance" "a" {
+    foo = "bar"
+}
+
+module "child" {
+  source = "./child"
+  in = aws_instance.a.id
+}
+
+output "out" {
+  value = aws_instance.a.id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%empty%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%empty%main.tf
new file mode 100644
index 0000000..8974d9e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%empty%main.tf
@@ -0,0 +1 @@
+# Empty, use this for any test that requires a module but no config.
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%child%main.tf
new file mode 100644
index 0000000..e24069d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%child%main.tf
@@ -0,0 +1,7 @@
+variable "list" {
+}
+
+
+output "result" {
+  value = length(var.list)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%main.tf
new file mode 100644
index 0000000..2dc96ad
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%eval-context-basic%main.tf
@@ -0,0 +1,39 @@
+variable "number" {
+  default = 3
+}
+
+variable "string" {
+  default = "Hello, World"
+}
+
+variable "map" {
+  type = map(string)
+  default = {
+    "foo" = "bar",
+    "baz" = "bat",
+  }
+}
+
+locals {
+  result = length(var.list)
+}
+
+variable "list" {
+  type    = list(string)
+  default = ["red", "orange", "yellow", "green", "blue", "purple"]
+}
+
+resource "test_resource" "example" {
+  for_each = var.map
+  name     = each.key
+  tag      = each.value
+}
+
+module "child" {
+  source = "./child"
+  list   = var.list
+}
+
+output "result" {
+  value = module.child.result
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-basic%main.tf
new file mode 100644
index 0000000..a40802c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-basic%main.tf
@@ -0,0 +1,24 @@
+variable "foo" {
+    default = "bar"
+    description = "bar"
+}
+
+provider "aws" {
+    foo = "${openstack_floating_ip.random.value}"
+}
+
+resource "openstack_floating_ip" "random" {}
+
+resource "aws_security_group" "firewall" {}
+
+resource "aws_instance" "web" {
+    ami = "${var.foo}"
+    security_groups = [
+        "foo",
+        "${aws_security_group.firewall.foo}"
+    ]
+}
+
+resource "aws_load_balancer" "weblb" {
+    members = "${aws_instance.web.id_list}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%child%main.tf
new file mode 100644
index 0000000..79be97b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%child%main.tf
@@ -0,0 +1,7 @@
+resource "test_object" "create" {
+  provisioner "test" {}
+}
+
+resource "test_object" "other" {
+  test_string = "${test_object.create.test_string}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%main.tf
new file mode 100644
index 0000000..b42bd43
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-basic%main.tf
@@ -0,0 +1,9 @@
+module "child" {
+  source = "./child"
+}
+
+resource "test_object" "create" {}
+
+resource "test_object" "other" {
+  test_string = "${test_object.create.test_string}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-count%main.tf
new file mode 100644
index 0000000..dee4eb4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-count%main.tf
@@ -0,0 +1,7 @@
+resource "test_object" "A" {
+  count = 1
+}
+
+resource "test_object" "B" {
+  test_list = test_object.A.*.test_string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-dep-cbd%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-dep-cbd%main.tf
new file mode 100644
index 0000000..df6f290
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-dep-cbd%main.tf
@@ -0,0 +1,9 @@
+resource "test_object" "A" {
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "test_object" "B" {
+  test_list = test_object.A.*.test_string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-double-cbd%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-double-cbd%main.tf
new file mode 100644
index 0000000..cb1f734
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-double-cbd%main.tf
@@ -0,0 +1,13 @@
+resource "test_object" "A" {
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "test_object" "B" {
+  test_list = test_object.A.*.test_string
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%A%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%A%main.tf
new file mode 100644
index 0000000..2c427f5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%A%main.tf
@@ -0,0 +1,9 @@
+variable "input" {}
+
+resource "test_object" "foo" {
+  test_string = var.input
+}
+
+output "output" {
+  value = test_object.foo.id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%main.tf
new file mode 100644
index 0000000..3c56664
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-module-destroy%main.tf
@@ -0,0 +1,13 @@
+variable "input" {
+  default = "value"
+}
+
+module "A" {
+  source = "./A"
+  input  = var.input
+}
+
+module "B" {
+  source = "./A"
+  input  = module.A.output
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-provisioner%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-provisioner%main.tf
new file mode 100644
index 0000000..1ea5d21
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-provisioner%main.tf
@@ -0,0 +1,3 @@
+resource "test_object" "foo" {
+  provisioner "test" {}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%child1%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%child1%main.tf
new file mode 100644
index 0000000..7ac75f5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%child1%main.tf
@@ -0,0 +1,11 @@
+variable "instance_id" {}
+
+output "instance_id" {
+  value = "${var.instance_id}"
+}
+
+resource "test_object" "foo" {
+  triggers = {
+    instance_id = "${var.instance_id}"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%main.tf
new file mode 100644
index 0000000..994d8fc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-apply-target-module%main.tf
@@ -0,0 +1,10 @@
+resource "test_object" "foo" {}
+
+module "child1" {
+  source      = "./child1"
+  instance_id = "${test_object.foo.id}"
+}
+
+module "child2" {
+  source = "./child2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-attr-as-blocks%attr-as-blocks.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-attr-as-blocks%attr-as-blocks.tf
new file mode 100644
index 0000000..d154cc2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-attr-as-blocks%attr-as-blocks.tf
@@ -0,0 +1,8 @@
+resource "test_thing" "a" {
+}
+
+resource "test_thing" "b" {
+  nested {
+    foo = test_thing.a.id
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-basic%main.tf
new file mode 100644
index 0000000..df74468
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-basic%main.tf
@@ -0,0 +1,33 @@
+variable "foo" {
+  default     = "bar"
+  description = "bar"
+}
+
+provider "aws" {
+  test_string = "${openstack_floating_ip.random.test_string}"
+}
+
+resource "openstack_floating_ip" "random" {}
+
+resource "aws_security_group" "firewall" {}
+
+resource "aws_instance" "web" {
+  test_string = var.foo
+
+  test_list = [
+    "foo",
+    aws_security_group.firewall.test_string,
+  ]
+}
+
+resource "aws_load_balancer" "weblb" {
+  test_list = aws_instance.web.test_list
+}
+
+locals {
+  instance_id = "${aws_instance.web.test_string}"
+}
+
+output "instance_id" {
+  value = "${local.instance_id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-dynblock%dynblock.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-dynblock%dynblock.tf
new file mode 100644
index 0000000..8946969
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-dynblock%dynblock.tf
@@ -0,0 +1,14 @@
+resource "test_thing" "a" {
+}
+
+resource "test_thing" "b" {
+}
+
+resource "test_thing" "c" {
+  dynamic "nested" {
+    for_each = test_thing.a.list
+    content {
+      foo = test_thing.b.id
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child1%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child1%main.tf
new file mode 100644
index 0000000..f95800f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child1%main.tf
@@ -0,0 +1,7 @@
+variable "key" {}
+
+provider "test" {
+  test_string = "${var.key}"
+}
+
+resource "test_object" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child2%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child2%main.tf
new file mode 100644
index 0000000..f95800f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%child2%main.tf
@@ -0,0 +1,7 @@
+variable "key" {}
+
+provider "test" {
+  test_string = "${var.key}"
+}
+
+resource "test_object" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%main.tf
new file mode 100644
index 0000000..d5a01db
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%graph-builder-plan-target-module-provider%main.tf
@@ -0,0 +1,9 @@
+module "child1" {
+  source = "./child1"
+  key    = "!"
+}
+
+module "child2" {
+  source = "./child2"
+  key    = "!"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%child%main.tf
new file mode 100644
index 0000000..8a8164b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%child%main.tf
@@ -0,0 +1,10 @@
+# Empty
+provider "aws" {}
+
+resource "aws_instance" "foo" {
+  id = "bar"
+}
+
+module "nested" {
+  source = "./submodule"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%child%submodule%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%child%submodule%main.tf
new file mode 100644
index 0000000..93c9015
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%child%submodule%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "foo" {
+  id = "baz"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%main.tf
new file mode 100644
index 0000000..c899a2c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-module%main.tf
@@ -0,0 +1,11 @@
+provider "aws" {
+  foo = "bar"
+}
+
+module "child" {
+  count = 1
+  source = "./child"
+  providers = {
+    aws = aws
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider%main.tf
new file mode 100644
index 0000000..ed8e3fe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider%main.tf
@@ -0,0 +1,7 @@
+provider "aws" {
+  foo = "bar"
+}
+
+resource "aws_instance" "foo" {
+  id = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-locals%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-locals%main.tf
new file mode 100644
index 0000000..a83512c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-locals%main.tf
@@ -0,0 +1,13 @@
+variable "foo" {}
+
+locals {
+  baz = "baz-${var.foo}"
+}
+
+provider "aws" {
+  foo = "${local.baz}"
+}
+
+resource "aws_instance" "foo" {
+  id = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-resources%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-resources%main.tf
new file mode 100644
index 0000000..cb92470
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-resources%main.tf
@@ -0,0 +1,11 @@
+provider "aws" {
+    value = "${test_instance.bar.value}"
+}
+
+resource "aws_instance" "foo" {
+    bar = "value"
+}
+
+resource "test_instance" "bar" {
+    value = "yes"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-vars%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-vars%main.tf
new file mode 100644
index 0000000..6a88bc9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%import-provider-vars%main.tf
@@ -0,0 +1,9 @@
+variable "foo" {}
+
+provider "aws" {
+  foo = "${var.foo}"
+}
+
+resource "aws_instance" "foo" {
+  id = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%child%main.tf
new file mode 100644
index 0000000..beb8c09
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%child%main.tf
@@ -0,0 +1,6 @@
+variable "length" { }
+
+resource "template_file" "temp" {
+  count     = var.length
+  template  = "foo"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%main.tf
new file mode 100644
index 0000000..4e68495
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%main.tf
@@ -0,0 +1,7 @@
+module "source" {
+  source = "./source"
+}
+module "child" {
+  source = "./child"
+  length = module.source.length
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%source%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%source%main.tf
new file mode 100644
index 0000000..1405fe2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-interpolate-var%source%main.tf
@@ -0,0 +1,3 @@
+output "length" {
+  value = 3
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-module-data-vars%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-module-data-vars%child%main.tf
new file mode 100644
index 0000000..aa5d69b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-module-data-vars%child%main.tf
@@ -0,0 +1,5 @@
+variable "in" {}
+
+output "out" {
+	value = "${var.in}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-multi%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-multi%main.tf
new file mode 100644
index 0000000..db49fd3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-multi%main.tf
@@ -0,0 +1,9 @@
+provider "aws" {
+  alias = "east"
+}
+
+resource "aws_instance" "foo" {
+  provider = aws.east
+}
+
+resource "aws_instance" "bar" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-once%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-once%child%main.tf
new file mode 100644
index 0000000..ca39ff5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-once%child%main.tf
@@ -0,0 +1,2 @@
+provider "aws" {}
+resource "aws_instance" "bar" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-vars%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-vars%main.tf
new file mode 100644
index 0000000..692bfb3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-vars%main.tf
@@ -0,0 +1,5 @@
+variable "foo" {}
+
+resource "aws_instance" "foo" {
+    foo = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars%main.tf
new file mode 100644
index 0000000..d8f9311
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars%main.tf
@@ -0,0 +1,7 @@
+variable "foo" {}
+
+provider "aws" {
+    foo = "${var.foo}"
+}
+
+resource "aws_instance" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%child%main.tf
new file mode 100644
index 0000000..7ec25bd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%child%main.tf
@@ -0,0 +1 @@
+resource "aws_instance" "foo" { }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%main.tf
new file mode 100644
index 0000000..c5112dc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-provider-with-vars-and-module%main.tf
@@ -0,0 +1,7 @@
+provider "aws" {
+  access_key = "abc123"
+}
+
+module "child" {
+  source = "./child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%main.tf
new file mode 100644
index 0000000..723a15c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%main.tf
@@ -0,0 +1,4 @@
+module "mod" {
+  source         = "./mod"
+  instance_count = 2
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%main.tf
new file mode 100644
index 0000000..dd7cf3d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%main.tf
@@ -0,0 +1,11 @@
+variable "instance_count" {
+}
+
+resource "aws_instance" "foo" {
+  count = "${var.instance_count}"
+}
+
+module "submod" {
+  source = "./submod"
+  list   = ["${aws_instance.foo.*.id}"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%submod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%submod%main.tf
new file mode 100644
index 0000000..732ce43
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-submodule-count%mod%submod%main.tf
@@ -0,0 +1,7 @@
+variable "list" {
+  type = list(string)
+}
+
+resource "aws_instance" "bar" {
+  count = var.list[0]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-variables%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-variables%main.tf
new file mode 100644
index 0000000..9d6d49a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%input-variables%main.tf
@@ -0,0 +1,30 @@
+# Required
+variable "foo" {
+}
+
+# Optional
+variable "bar" {
+  default = "baz"
+}
+
+# Mapping
+variable "map" {
+  default = {
+    foo = "bar"
+  }
+}
+
+# Complex Object Types
+variable "object_map" {
+  type = map(object({
+    foo = string,
+    bar = any
+  }))
+}
+
+variable "object_list" {
+  type = list(object({
+    foo = string,
+    bar = any
+  }))
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-0%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-0%main.tf
new file mode 100644
index 0000000..dd666eb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-0%main.tf
@@ -0,0 +1,12 @@
+variable "c" {
+  default = 1
+}
+
+resource "template_file" "parent" {
+  count    = var.c
+  template = "Hi"
+}
+
+resource "template_file" "child" {
+  template = "${join(",", template_file.parent.*.template)} ok"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-1%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-1%main.tf
new file mode 100644
index 0000000..3510fe1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-5254%step-1%main.tf
@@ -0,0 +1,13 @@
+variable "c" {
+  default = 1
+}
+
+resource "template_file" "parent" {
+  count    = var.c
+  template = "Hi"
+}
+
+resource "template_file" "child" {
+  template                = join(",", template_file.parent.*.template)
+  __template_requires_new = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-7824%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-7824%main.tf
new file mode 100644
index 0000000..ec76bc3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-7824%main.tf
@@ -0,0 +1,6 @@
+variable "test" {
+  type = map(string)
+  default = {
+    "test" = "1"
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-9549%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-9549%main.tf
new file mode 100644
index 0000000..5bf28c6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-9549%main.tf
@@ -0,0 +1,11 @@
+module "mod" {
+  source = "./mod"
+}
+
+output "out" {
+  value = module.mod.base_config["base_template"]
+}
+
+resource "template_instance" "root_template" {
+  foo = module.mod.base_config["base_template"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-9549%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-9549%mod%main.tf
new file mode 100644
index 0000000..aedf9f0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%issue-9549%mod%main.tf
@@ -0,0 +1,10 @@
+resource "template_instance" "example" {
+  compute_value = "template text"
+  compute = "value"
+}
+
+output "base_config" {
+  value = {
+    base_template = template_instance.example.value
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%nested-resource-count-plan%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%nested-resource-count-plan%main.tf
new file mode 100644
index 0000000..f803fd1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%nested-resource-count-plan%main.tf
@@ -0,0 +1,11 @@
+resource "aws_instance" "foo" {
+  count = 2
+}
+
+resource "aws_instance" "bar" {
+  count = "${length(aws_instance.foo.*.id)}"
+}
+
+resource "aws_instance" "baz" {
+  count = "${length(aws_instance.bar.*.id)}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd%main.tf
new file mode 100644
index 0000000..83d173a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "foo" {
+  lifecycle {
+    create_before_destroy = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd-depends-datasource%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd-depends-datasource%main.tf
new file mode 100644
index 0000000..b523204
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd-depends-datasource%main.tf
@@ -0,0 +1,14 @@
+resource "aws_instance" "foo" {
+  count    = 2
+  num      = "2"
+  computed = data.aws_vpc.bar[count.index].id
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+data "aws_vpc" "bar" {
+  count = 2
+  foo   = count.index
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd-maintain-root%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd-maintain-root%main.tf
new file mode 100644
index 0000000..99c96b9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-cbd-maintain-root%main.tf
@@ -0,0 +1,19 @@
+resource "aws_instance" "foo" {
+  count = "2"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "aws_instance" "bar" {
+  count = "2"
+
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+output "out" {
+  value = "${aws_instance.foo.0.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-close-module-provider%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-close-module-provider%mod%main.tf
new file mode 100644
index 0000000..3ce1991
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-close-module-provider%mod%main.tf
@@ -0,0 +1,7 @@
+provider "aws" {
+  alias = "mod"
+}
+
+resource "aws_instance" "bar" {
+  provider = "aws.mod"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed%main.tf
new file mode 100644
index 0000000..7180913
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    num = "2"
+    compute = "foo"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${aws_instance.foo.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-attr-ref-type-mismatch%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-attr-ref-type-mismatch%main.tf
new file mode 100644
index 0000000..41761b2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-attr-ref-type-mismatch%main.tf
@@ -0,0 +1,10 @@
+resource "aws_ami_list" "foo" {
+  # assume this has a computed attr called "ids"
+}
+
+resource "aws_instance" "foo" {
+  # this is erroneously referencing the list of all ids. The value of this
+  # is unknown during plan, but we should still know that the unknown value
+  # is a list of strings and so catch this during plan.
+  ami = "${aws_ami_list.foo.ids}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-count%main.tf
new file mode 100644
index 0000000..2d01404
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-count%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "foo" {
+  num     = "2"
+  compute = "foo"
+}
+
+data "aws_vpc" "bar" {
+  count = 3
+  foo = "${aws_instance.foo.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-resource%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-resource%main.tf
new file mode 100644
index 0000000..aff26eb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-data-resource%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+  num     = "2"
+  compute = "foo"
+}
+
+data "aws_vpc" "bar" {
+  foo = "${aws_instance.foo.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-in-function%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-in-function%main.tf
new file mode 100644
index 0000000..554394d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-in-function%main.tf
@@ -0,0 +1,7 @@
+data "aws_data_source" "foo" {
+
+}
+
+resource "aws_instance" "bar" {
+    attr = "${length(data.aws_data_source.foo.computed)}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-list%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-list%main.tf
new file mode 100644
index 0000000..aeec6ba
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-list%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+  num     = "2"
+  compute = "list.#"
+}
+
+resource "aws_instance" "bar" {
+  foo = aws_instance.foo.list.0
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-multi-index%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-multi-index%main.tf
new file mode 100644
index 0000000..2d8a799
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-multi-index%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "foo" {
+    count = 2
+    compute = "ip.#"
+}
+
+resource "aws_instance" "bar" {
+    count = 1
+    foo = "${aws_instance.foo.*.ip[count.index]}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%main.tf
new file mode 100644
index 0000000..ef2cf08
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%main.tf
@@ -0,0 +1,16 @@
+resource "aws_computed_source" "intermediates" {}
+
+module "test_mod" {
+  source = "./mod"
+
+  services = [
+    {
+      "exists" = "true"
+      "elb"    = "${aws_computed_source.intermediates.computed_read_only}"
+    },
+    {
+      "otherexists" = " true"
+      "elb"         = "${aws_computed_source.intermediates.computed_read_only}"
+    },
+  ]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%mod%main.tf
new file mode 100644
index 0000000..f6adccf
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-computed-value-in-map%mod%main.tf
@@ -0,0 +1,8 @@
+variable "services" {
+  type = list(map(string))
+}
+
+resource "aws_instance" "inner2" {
+  looked_up = var.services[0]["elb"]
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed%main.tf
new file mode 100644
index 0000000..8a02923
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    num = "2"
+    compute = "foo"
+}
+
+resource "aws_instance" "bar" {
+    count = "${aws_instance.foo.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%child%main.tf
new file mode 100644
index 0000000..f80d699
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%child%main.tf
@@ -0,0 +1,5 @@
+variable "value" {}
+
+resource "aws_instance" "bar" {
+    count = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%main.tf
new file mode 100644
index 0000000..c87beb5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-computed-module%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    compute = "foo"
+}
+
+module "child" {
+    source = "./child"
+    value = "${aws_instance.foo.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-dec%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-dec%main.tf
new file mode 100644
index 0000000..7837f58
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-dec%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+    foo = "foo"
+}
+
+resource "aws_instance" "bar" {
+    foo = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-inc%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-inc%main.tf
new file mode 100644
index 0000000..3c7fdb9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-inc%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    foo = "foo"
+    count = 3
+}
+
+resource "aws_instance" "bar" {
+    foo = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-index%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-index%main.tf
new file mode 100644
index 0000000..9a0d1eb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-index%main.tf
@@ -0,0 +1,4 @@
+resource "aws_instance" "foo" {
+    count = 2
+    foo = "${count.index}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%child%main.tf
new file mode 100644
index 0000000..5b75831
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%child%main.tf
@@ -0,0 +1,5 @@
+variable "value" {}
+
+resource "aws_instance" "foo" {
+    count = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%main.tf
new file mode 100644
index 0000000..b2c7ca6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static%main.tf
@@ -0,0 +1,8 @@
+variable "foo" {
+  default = "3"
+}
+
+module "child" {
+  source = "./child"
+  value  = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%child%main.tf
new file mode 100644
index 0000000..5b75831
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%child%main.tf
@@ -0,0 +1,5 @@
+variable "value" {}
+
+resource "aws_instance" "foo" {
+    count = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%main.tf
new file mode 100644
index 0000000..4dff927
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%child%main.tf
@@ -0,0 +1,6 @@
+variable "value" {}
+
+module "child" {
+    source = "./child"
+    value = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%main.tf
new file mode 100644
index 0000000..b2c7ca6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-module-static-grandchild%main.tf
@@ -0,0 +1,8 @@
+variable "foo" {
+  default = "3"
+}
+
+module "child" {
+  source = "./child"
+  value  = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-one-index%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-one-index%main.tf
new file mode 100644
index 0000000..58d4acf
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-one-index%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    count = 1
+    foo = "foo"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${aws_instance.foo.0.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-splat-reference%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-splat-reference%main.tf
new file mode 100644
index 0000000..76834e2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-splat-reference%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "foo" {
+    name = "foo ${count.index}"
+    count = 3
+}
+
+resource "aws_instance" "bar" {
+    foo_name = "${aws_instance.foo.*.name[count.index]}"
+    count = 3
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-var%main.tf
new file mode 100644
index 0000000..8b8a043
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-var%main.tf
@@ -0,0 +1,10 @@
+variable "instance_count" {}
+
+resource "aws_instance" "foo" {
+  count = var.instance_count
+  foo   = "foo"
+}
+
+resource "aws_instance" "bar" {
+  foo = join(",", aws_instance.foo.*.foo)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-zero%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-zero%main.tf
new file mode 100644
index 0000000..4845cbb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-count-zero%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    count = 0
+    foo = "foo"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${aws_instance.foo.*.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-data-depends-on%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-data-depends-on%main.tf
new file mode 100644
index 0000000..c7332ad
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-data-depends-on%main.tf
@@ -0,0 +1,14 @@
+resource "test_resource" "a" {
+}
+
+data "test_data" "d" {
+  count = 1
+  depends_on = [
+    test_resource.a
+  ]
+}
+
+resource "test_resource" "b" {
+  count = 1
+  foo = data.test_data.d[count.index].compute
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-data-resource-becomes-computed%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-data-resource-becomes-computed%main.tf
new file mode 100644
index 0000000..3f07be3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-data-resource-becomes-computed%main.tf
@@ -0,0 +1,6 @@
+resource "aws_instance" "foo" {
+}
+
+data "aws_data_source" "foo" {
+  foo = "${aws_instance.foo.computed}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%main.tf
new file mode 100644
index 0000000..ac0dadb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%main.tf
@@ -0,0 +1,20 @@
+variable "list" {
+  default = ["1", "2"]
+}
+
+resource "aws_instance" "a" {
+  count = length(var.list)
+}
+
+locals {
+  ids = aws_instance.a[*].id
+}
+
+module "empty" {
+  source = "./mod"
+  input = zipmap(var.list, local.ids)
+}
+
+output "out" {
+  value = aws_instance.a[*].id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%mod%main.tf
new file mode 100644
index 0000000..682e0f0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-destroy-interpolated-count%mod%main.tf
@@ -0,0 +1,2 @@
+variable "input" {
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-diffvar%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-diffvar%main.tf
new file mode 100644
index 0000000..eccc16f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-diffvar%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  num = "3"
+}
+
+resource "aws_instance" "bar" {
+  num = aws_instance.foo.num
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-escaped-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-escaped-var%main.tf
new file mode 100644
index 0000000..5a01720
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-escaped-var%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "foo" {
+  foo = "bar-$${baz}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-for-each%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-for-each%main.tf
new file mode 100644
index 0000000..94572e2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-for-each%main.tf
@@ -0,0 +1,35 @@
+# maps
+resource "aws_instance" "foo" {
+    for_each = {
+        a = "thing"
+        b = "another thing"
+        c = "yet another thing"
+    }
+    num = "3"
+}
+
+# sets
+resource "aws_instance" "bar" {
+    for_each = toset([])
+}
+resource "aws_instance" "bar2" {
+    for_each = toset(["z", "y", "x"])
+}
+
+# an empty map should generate no resource
+resource "aws_instance" "baz" {
+    for_each = {}
+}
+
+# references
+resource "aws_instance" "boo" {
+    foo = aws_instance.foo["a"].num
+}
+
+resource "aws_instance" "bat" {
+    for_each = {
+        my_key = aws_instance.boo.foo
+    }
+    foo = each.value
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-for-each-unknown-value%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-for-each-unknown-value%main.tf
new file mode 100644
index 0000000..933ed5f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-for-each-unknown-value%main.tf
@@ -0,0 +1,20 @@
+# expressions with variable reference
+variable "foo" {
+  type = string
+}
+
+resource "aws_instance" "foo" {
+  for_each = toset(
+       [for i in range(0,3) : sha1("${i}${var.foo}")]
+    )
+  foo = "foo"
+}
+
+# referencing another resource, which means it has some unknown values in it
+resource "aws_instance" "one" {
+  for_each = toset(["a", "b"])
+}
+
+resource "aws_instance" "two" {
+  for_each = aws_instance.one
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes%main.tf
new file mode 100644
index 0000000..ed17c63
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes%main.tf
@@ -0,0 +1,9 @@
+variable "foo" {}
+
+resource "aws_instance" "foo" {
+  ami = var.foo
+
+  lifecycle {
+    ignore_changes = [ami]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-in-map%ignore-changes-in-map.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-in-map%ignore-changes-in-map.tf
new file mode 100644
index 0000000..75adcac
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-in-map%ignore-changes-in-map.tf
@@ -0,0 +1,13 @@
+
+resource "test_ignore_changes_map" "foo" {
+  tags = {
+    ignored = "from config"
+    other   = "from config"
+  }
+
+  lifecycle {
+    ignore_changes = [
+      tags["ignored"],
+    ]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-sensitive%ignore-changes-sensitive.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-sensitive%ignore-changes-sensitive.tf
new file mode 100644
index 0000000..1f6cc98
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-sensitive%ignore-changes-sensitive.tf
@@ -0,0 +1,11 @@
+variable "foo" {
+  sensitive = true
+}
+
+resource "aws_instance" "foo" {
+  ami = var.foo
+
+  lifecycle {
+    ignore_changes = [ami]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-wildcard%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-wildcard%main.tf
new file mode 100644
index 0000000..d4e55a8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-wildcard%main.tf
@@ -0,0 +1,12 @@
+variable "foo" {}
+
+variable "bar" {}
+
+resource "aws_instance" "foo" {
+  ami      = "${var.foo}"
+  instance = "${var.bar}"
+
+  lifecycle {
+    ignore_changes = all
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-with-flatmaps%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-with-flatmaps%main.tf
new file mode 100644
index 0000000..f61a3d4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-ignore-changes-with-flatmaps%main.tf
@@ -0,0 +1,15 @@
+resource "aws_instance" "foo" {
+  user_data   = "x"
+  require_new = "yes"
+
+  set = [{
+    a = "1"
+    b = "2"
+  }]
+
+  lst = ["j", "k"]
+
+  lifecycle {
+    ignore_changes = ["require_new"]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-list-order%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-list-order%main.tf
new file mode 100644
index 0000000..77db3d0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-list-order%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "a" {
+	foo = [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 20]
+}
+
+resource "aws_instance" "b" {
+	foo = "${aws_instance.a.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-local-value-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-local-value-count%main.tf
new file mode 100644
index 0000000..34aad96
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-local-value-count%main.tf
@@ -0,0 +1,8 @@
+
+locals {
+  count = 3
+}
+
+resource "test_resource" "foo" {
+  count = "${local.count}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%child%main.tf
new file mode 100644
index 0000000..e2e60c1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%child%main.tf
@@ -0,0 +1,5 @@
+variable "in" {}
+
+output "out" {
+    value = "${var.in}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%main.tf
new file mode 100644
index 0000000..e9c4597
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-cycle%main.tf
@@ -0,0 +1,12 @@
+module "a" {
+    source = "./child"
+    in = "${aws_instance.b.id}"
+}
+
+resource "aws_instance" "b" {}
+
+resource "aws_instance" "c" {
+    some_input = "${module.a.out}"
+
+    depends_on = ["aws_instance.b"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy%main.tf
new file mode 100644
index 0000000..428f898
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "foo" {
+    num = "2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%a%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%a%main.tf
new file mode 100644
index 0000000..ca44c75
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%a%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "a" {}
+
+output "a_output" {
+  value = "${aws_instance.a.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%b%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%b%main.tf
new file mode 100644
index 0000000..3b0cc66
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%b%main.tf
@@ -0,0 +1,5 @@
+variable "a_id" {}
+
+resource "aws_instance" "b" {
+  foo = "echo ${var.a_id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%main.tf
new file mode 100644
index 0000000..c2f72c4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-gh-1835%main.tf
@@ -0,0 +1,8 @@
+module "a_module" {
+  source = "./a"
+}
+
+module "b_module" {
+  source = "./b"
+  a_id = "${module.a_module.a_output}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%child%main.tf
new file mode 100644
index 0000000..6a496f0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%child%main.tf
@@ -0,0 +1,8 @@
+variable "instance_count" {
+  default = "1"
+}
+
+resource "aws_instance" "foo" {
+  count = "${var.instance_count}"
+  bar = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%main.tf
new file mode 100644
index 0000000..2f965b6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-destroy-multivar%main.tf
@@ -0,0 +1,4 @@
+module "child" {
+  source = "./child"
+  instance_count = "2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input%child%main.tf
new file mode 100644
index 0000000..c1a00c5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input%child%main.tf
@@ -0,0 +1,5 @@
+variable "input" {}
+
+resource "aws_instance" "foo" {
+    foo = "${var.input}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input%main.tf
new file mode 100644
index 0000000..2ad8ec0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input%main.tf
@@ -0,0 +1,8 @@
+module "child" {
+    input = "42"
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    foo = "2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%child%main.tf
new file mode 100644
index 0000000..c1a00c5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%child%main.tf
@@ -0,0 +1,5 @@
+variable "input" {}
+
+resource "aws_instance" "foo" {
+    foo = "${var.input}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%main.tf
new file mode 100644
index 0000000..3a05764
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-computed%main.tf
@@ -0,0 +1,8 @@
+module "child" {
+    input = "${aws_instance.bar.foo}"
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    compute = "foo"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%child%main.tf
new file mode 100644
index 0000000..c1a00c5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%child%main.tf
@@ -0,0 +1,5 @@
+variable "input" {}
+
+resource "aws_instance" "foo" {
+    foo = "${var.input}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%main.tf
new file mode 100644
index 0000000..3fba315
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-input-var%main.tf
@@ -0,0 +1,10 @@
+variable "foo" {}
+
+module "child" {
+    input = "${var.foo}"
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    foo = "2"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%child%main.tf
new file mode 100644
index 0000000..9124319
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%child%main.tf
@@ -0,0 +1,12 @@
+variable "amap" {
+  type = map(string)
+}
+
+variable "othermap" {
+  type = map(string)
+}
+
+resource "aws_instance" "foo" {
+  tags = "${var.amap}"
+  meta = "${var.othermap}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%main.tf
new file mode 100644
index 0000000..90235ed
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-map-literal%main.tf
@@ -0,0 +1,9 @@
+module "child" {
+  source = "./child"
+
+  amap = {
+    foo = "bar"
+  }
+
+  othermap = {}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%child%main.tf
new file mode 100644
index 0000000..ad8dd60
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%child%main.tf
@@ -0,0 +1,10 @@
+variable "things" {}
+
+resource "aws_instance" "bar" {
+  baz = "baz"
+  count = 2
+}
+
+resource "aws_instance" "foo" {
+  foo = "${join(",",aws_instance.bar.*.baz)}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%main.tf
new file mode 100644
index 0000000..40c7618
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-multi-var%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "parent" {
+  count = 2
+}
+
+module "child" {
+  source = "./child"
+  things = "${join(",", aws_instance.parent.*.id)}"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%child%main.tf
new file mode 100644
index 0000000..5ce4f55
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%child%main.tf
@@ -0,0 +1,8 @@
+provider "aws" {
+    from = "child"
+    to = "child"
+}
+
+resource "aws_instance" "foo" {
+    from = "child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%main.tf
new file mode 100644
index 0000000..5b08577
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults%main.tf
@@ -0,0 +1,11 @@
+module "child" {
+    source = "./child"
+}
+
+provider "aws" {
+    from = "root"
+}
+
+resource "aws_instance" "foo" {
+    from = "root"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%child%main.tf
new file mode 100644
index 0000000..5ce4f55
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%child%main.tf
@@ -0,0 +1,8 @@
+provider "aws" {
+    from = "child"
+    to = "child"
+}
+
+resource "aws_instance" "foo" {
+    from = "child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%main.tf
new file mode 100644
index 0000000..d3c3490
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-defaults-var%main.tf
@@ -0,0 +1,11 @@
+module "child" {
+    source = "./child"
+}
+
+provider "aws" {
+    from = "${var.foo}"
+}
+
+resource "aws_instance" "foo" {}
+
+variable "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%child%main.tf
new file mode 100644
index 0000000..2e890bb
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%child%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "foo" {
+    from = "child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%main.tf
new file mode 100644
index 0000000..5b08577
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit%main.tf
@@ -0,0 +1,11 @@
+module "child" {
+    source = "./child"
+}
+
+provider "aws" {
+    from = "root"
+}
+
+resource "aws_instance" "foo" {
+    from = "root"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%A%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%A%main.tf
new file mode 100644
index 0000000..efe683c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%A%main.tf
@@ -0,0 +1,3 @@
+module "B" {
+  source = "../B"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%B%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%B%main.tf
new file mode 100644
index 0000000..29cba7f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%B%main.tf
@@ -0,0 +1,3 @@
+module "C" {
+  source = "../C"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%main.tf
new file mode 100644
index 0000000..12677b6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-inherit-deep%main.tf
@@ -0,0 +1,7 @@
+module "A" {
+    source = "./A"
+}
+
+provider "aws" {
+    from = "root"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%child%main.tf
new file mode 100644
index 0000000..599cb99
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%child%main.tf
@@ -0,0 +1,9 @@
+variable "foo" {}
+
+provider "aws" {
+    value = "${var.foo}"
+}
+
+resource "aws_instance" "test" {
+    value = "hello"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%main.tf
new file mode 100644
index 0000000..43675f9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-provider-var%main.tf
@@ -0,0 +1,8 @@
+variable "foo" {
+  default = "bar"
+}
+
+module "child" {
+  source = "./child"
+  foo    = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var%child%main.tf
new file mode 100644
index 0000000..c7b1d28
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var%child%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  num = "2"
+}
+
+output "num" {
+  value = "${aws_instance.foo.num}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var%main.tf
new file mode 100644
index 0000000..942bdba
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+  source = "./child"
+}
+
+resource "aws_instance" "bar" {
+  foo = "${module.child.num}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-computed%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-computed%main.tf
new file mode 100644
index 0000000..b38f538
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-computed%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${module.child.num}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%inner%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%inner%main.tf
new file mode 100644
index 0000000..5b5cf6c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%inner%main.tf
@@ -0,0 +1,12 @@
+variable "im_a_string" {
+  type = string
+}
+
+variable "service_region_ami" {
+  type = map(string)
+  default = {
+    us-east-1 = "ami-e4c9db8e"
+  }
+}
+
+resource "null_resource" "noop" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%main.tf
new file mode 100644
index 0000000..96b2741
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-var-with-default-value%main.tf
@@ -0,0 +1,7 @@
+resource "null_resource" "noop" {}
+
+module "test" {
+    source = "./inner"
+
+    im_a_string = "hello"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%main.tf
new file mode 100644
index 0000000..be900a3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%main.tf
@@ -0,0 +1,9 @@
+module "mod1" {
+  source = "./mod"
+  param  = ["this", "one", "works"]
+}
+
+module "mod2" {
+  source = "./mod"
+  param  = [module.mod1.out_from_splat[0]]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%mod%main.tf
new file mode 100644
index 0000000..66127d3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-variable-from-splat%mod%main.tf
@@ -0,0 +1,12 @@
+variable "param" {
+  type = list(string)
+}
+
+resource "aws_instance" "test" {
+  count = "2"
+  thing = "doesnt"
+}
+
+output "out_from_splat" {
+  value = aws_instance.test.*.thing
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%inner%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%inner%main.tf
new file mode 100644
index 0000000..7782d1b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%inner%main.tf
@@ -0,0 +1,13 @@
+variable "map_in" {
+  type = map(string)
+
+  default = {
+    us-west-1 = "ami-12345"
+    us-west-2 = "ami-67890"
+  }
+}
+
+// We have to reference it so it isn't pruned
+output "output" {
+  value = var.map_in
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%main.tf
new file mode 100644
index 0000000..5a39cd5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type%main.tf
@@ -0,0 +1,10 @@
+variable "input" {
+  type    = string
+  default = "hello world"
+}
+
+module "test" {
+  source = "./inner"
+
+  map_in = var.input
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%inner%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%inner%main.tf
new file mode 100644
index 0000000..dabe507
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%inner%main.tf
@@ -0,0 +1,13 @@
+variable "inner_in" {
+  type = map(string)
+  default = {
+    us-west-1 = "ami-12345"
+    us-west-2 = "ami-67890"
+  }
+}
+
+resource "null_resource" "inner_noop" {}
+
+output "inner_out" {
+  value = lookup(var.inner_in, "us-west-1")
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%main.tf
new file mode 100644
index 0000000..8f9fdcc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%main.tf
@@ -0,0 +1,3 @@
+module "middle" {
+  source = "./middle"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%middle%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%middle%main.tf
new file mode 100644
index 0000000..eb989fe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-module-wrong-var-type-nested%middle%main.tf
@@ -0,0 +1,19 @@
+variable "middle_in" {
+  type = map(string)
+  default = {
+    eu-west-1 = "ami-12345"
+    eu-west-2 = "ami-67890"
+  }
+}
+
+module "inner" {
+  source = "../inner"
+
+  inner_in = "hello"
+}
+
+resource "null_resource" "middle_noop" {}
+
+output "middle_out" {
+  value = lookup(var.middle_in, "us-west-1")
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules%main.tf
new file mode 100644
index 0000000..dcdb236
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules%main.tf
@@ -0,0 +1,11 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${aws_instance.foo.num}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-expand%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-expand%child%main.tf
new file mode 100644
index 0000000..612478f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-expand%child%main.tf
@@ -0,0 +1,12 @@
+variable "foo" {}
+variable "bar" {}
+
+resource "aws_instance" "foo" {
+  count = 2
+  num = var.foo
+  bar = "baz" #var.bar
+}
+
+output "out" {
+  value = aws_instance.foo[0].id
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%main.tf
new file mode 100644
index 0000000..ce9a388
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "top" {}
+
+# module "test" {
+#   source = "./parent"
+# }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%child%main.tf
new file mode 100644
index 0000000..b626e60
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%child%main.tf
@@ -0,0 +1,2 @@
+resource "aws_instance" "foo" {
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%main.tf
new file mode 100644
index 0000000..fbc1aa0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-modules-remove-provisioners%parent%main.tf
@@ -0,0 +1,7 @@
+module "childone" {
+  source = "./child"
+}
+
+module "childtwo" {
+  source = "./child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-path-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-path-var%main.tf
new file mode 100644
index 0000000..1301256
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-path-var%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "foo" {
+    cwd = "${path.cwd}/barpath"
+    module = "${path.module}/foopath"
+    root = "${path.root}/barpath"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-bad%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-bad%main.tf
new file mode 100644
index 0000000..19077c1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-bad%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  require_new = "yes"
+
+  lifecycle {
+    prevent_destroy = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-bad%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-bad%main.tf
new file mode 100644
index 0000000..818f93e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-bad%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+  count = "1"
+  current = "${count.index}"
+
+  lifecycle {
+    prevent_destroy = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-good%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-good%main.tf
new file mode 100644
index 0000000..b6b4790
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-count-good%main.tf
@@ -0,0 +1,4 @@
+resource "aws_instance" "foo" {
+  count = "1"
+  current = "${count.index}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-good%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-good%main.tf
new file mode 100644
index 0000000..a88b9e3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-prevent-destroy-good%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "foo" {
+  lifecycle {
+    prevent_destroy = true
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-provider%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-provider%main.tf
new file mode 100644
index 0000000..8010f70
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-provider%main.tf
@@ -0,0 +1,7 @@
+variable "foo" {}
+
+provider "aws" {
+    foo = "${var.foo}"
+}
+
+resource "aws_instance" "bar" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-provisioner-cycle%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-provisioner-cycle%main.tf
new file mode 100644
index 0000000..ed65c09
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-provisioner-cycle%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+    count = 3
+
+    provisioner "local-exec" {
+        command = "echo ${aws_instance.foo.0.id} ${aws_instance.foo.1.id} ${aws_instance.foo.2.id}"
+    }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-output%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-output%mod%main.tf
new file mode 100644
index 0000000..772f164
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-output%mod%main.tf
@@ -0,0 +1,7 @@
+resource "test_resource" "for_output" {
+  required = "val"
+}
+
+output "object" {
+  value = test_resource.for_output
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%main.tf
new file mode 100644
index 0000000..9deb3c5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%main.tf
@@ -0,0 +1,17 @@
+resource "test_resource" "root" {
+  required = local.object.id
+}
+
+locals {
+  # This indirection is here to force the evaluator to produce the whole
+  # module object here rather than just fetching the single "object" output.
+  # This makes this fixture different than plan-required-output, which just
+  # accesses module.mod.object.id directly and thus visits a different
+  # codepath in the evaluator.
+  mod    = module.mod
+  object = local.mod.object
+}
+
+module "mod" {
+  source = "./mod"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%mod%main.tf
new file mode 100644
index 0000000..772f164
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-required-whole-mod%mod%main.tf
@@ -0,0 +1,7 @@
+resource "test_resource" "for_output" {
+  required = "val"
+}
+
+output "object" {
+  value = test_resource.for_output
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref%main.tf
new file mode 100644
index 0000000..f2bf91d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "web" {
+    foo = "${aws_instance.web.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi%main.tf
new file mode 100644
index 0000000..5b27cac
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi%main.tf
@@ -0,0 +1,4 @@
+resource "aws_instance" "web" {
+    foo = "${aws_instance.web.0.foo}"
+    count = 4
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi-all%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi-all%main.tf
new file mode 100644
index 0000000..d3a9857
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-self-ref-multi-all%main.tf
@@ -0,0 +1,4 @@
+resource "aws_instance" "web" {
+    foo = "${aws_instance.web.*.foo}"
+    count = 4
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-shadow-uuid%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-shadow-uuid%main.tf
new file mode 100644
index 0000000..2b6ec72
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-shadow-uuid%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "test" {
+    value = "${uuid()}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-taint-ignore-changes%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-taint-ignore-changes%main.tf
new file mode 100644
index 0000000..ff95d65
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-taint-ignore-changes%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  vars = "foo"
+
+  lifecycle {
+    ignore_changes = ["vars"]
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-taint-interpolated-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-taint-interpolated-count%main.tf
new file mode 100644
index 0000000..91d8b65
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-taint-interpolated-count%main.tf
@@ -0,0 +1,7 @@
+variable "instance_count" {
+  default = 3
+}
+
+resource "aws_instance" "foo" {
+  count = "${var.instance_count}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted%main.tf
new file mode 100644
index 0000000..ab00a84
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted%main.tf
@@ -0,0 +1,12 @@
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    foo = aws_instance.foo.num
+}
+
+module "mod" {
+  source = "./mod"
+  count = 1
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%A%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%A%main.tf
new file mode 100644
index 0000000..4c014aa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%A%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  foo = "bar"
+}
+
+output "value" {
+  value = "${aws_instance.foo.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%B%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%B%main.tf
new file mode 100644
index 0000000..c3aeb7b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%B%main.tf
@@ -0,0 +1,5 @@
+variable "input" {}
+
+resource "aws_instance" "bar" {
+    foo = "${var.input}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%main.tf
new file mode 100644
index 0000000..e6a83b2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-cross-module%main.tf
@@ -0,0 +1,8 @@
+module "A" {
+    source = "./A"
+}
+
+module "B" {
+    source = "./B"
+    input  = "${module.A.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-orphan%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-orphan%main.tf
new file mode 100644
index 0000000..2b33fed
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-orphan%main.tf
@@ -0,0 +1,6 @@
+# Once opon a time, there was a child module here
+/*
+module "child" {
+  source = "./child"
+}
+*/
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%child%main.tf
new file mode 100644
index 0000000..f7b424b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%child%main.tf
@@ -0,0 +1,5 @@
+variable "id" {}
+
+resource "aws_instance" "mod" {
+  value = "${var.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%main.tf
new file mode 100644
index 0000000..90e44dc
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-untargeted-variable%main.tf
@@ -0,0 +1,12 @@
+resource "aws_instance" "blue" { }
+resource "aws_instance" "green" { }
+
+module "blue_mod" {
+  source = "./child"
+  id = "${aws_instance.blue.id}"
+}
+
+module "green_mod" {
+  source = "./child"
+  id = "${aws_instance.green.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child1%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child1%main.tf
new file mode 100644
index 0000000..c9aaff5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child1%main.tf
@@ -0,0 +1,7 @@
+variable "key" {}
+
+provider "null" {
+  key = "${var.key}"
+}
+
+resource "null_resource" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child2%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child2%main.tf
new file mode 100644
index 0000000..c9aaff5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-module-with-provider%child2%main.tf
@@ -0,0 +1,7 @@
+variable "key" {}
+
+provider "null" {
+  key = "${var.key}"
+}
+
+resource "null_resource" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-orphan%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-orphan%main.tf
new file mode 100644
index 0000000..f202085
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-orphan%main.tf
@@ -0,0 +1,6 @@
+# This resource was previously "created" and the fixture represents
+# it being destroyed subsequently
+
+/*resource "aws_instance" "orphan" {*/
+	/*foo = "bar"*/
+/*}*/
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-over-ten%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-over-ten%main.tf
new file mode 100644
index 0000000..1c7bc87
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-targeted-over-ten%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "foo" {
+  count    = 13
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%main.tf
new file mode 100644
index 0000000..9d4a1c8
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%main.tf
@@ -0,0 +1,8 @@
+module "mod" {
+  source = "./mod"
+}
+
+
+resource "aws_instance" "c" {
+  name = "${module.mod.output}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%mod%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%mod%main.tf
new file mode 100644
index 0000000..dd6d791
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-untargeted-resource-output%mod%main.tf
@@ -0,0 +1,15 @@
+locals {
+  one = 1
+}
+
+resource "aws_instance" "a" {
+  count = "${local.one}"
+}
+
+resource "aws_instance" "b" {
+  count = "${local.one}"
+}
+
+output "output" {
+  value = "${join("", coalescelist(aws_instance.a.*.id, aws_instance.b.*.id))}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-var-list-err%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-var-list-err%main.tf
new file mode 100644
index 0000000..6303064
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-var-list-err%main.tf
@@ -0,0 +1,16 @@
+provider "aws" {
+    access_key = "a"
+    secret_key = "b"
+    region = "us-east-1"
+}
+
+resource "aws_instance" "foo" {
+    ami = "ami-foo"
+    instance_type = "t2.micro"
+    security_groups = "${aws_security_group.foo.name}"
+}
+
+resource "aws_security_group" "foo" {
+    name = "foobar"
+    description = "foobar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%child%main.tf
new file mode 100644
index 0000000..e34751a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%child%main.tf
@@ -0,0 +1,13 @@
+variable "foo" {
+  type = string
+}
+
+// "bar" is defined as sensitive by both the parent and the child
+variable "bar" {
+  sensitive = true
+}
+
+resource "aws_instance" "foo" {
+  foo   = var.foo
+  value = var.bar
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%main.tf
new file mode 100644
index 0000000..69bdbb4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%plan-variable-sensitivity-module%main.tf
@@ -0,0 +1,14 @@
+variable "sensitive_var" {
+  default   = "foo"
+  sensitive = true
+}
+
+variable "another_var" {
+  sensitive = true
+}
+
+module "child" {
+  source = "./child"
+  foo    = var.sensitive_var
+  bar    = var.another_var
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%main.tf
new file mode 100644
index 0000000..ef7acd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%main.tf
@@ -0,0 +1,13 @@
+data "test_data_source" "foo" {
+  foo = "bar"
+}
+
+terraform {
+  provider_meta "test" {
+    baz = "quux"
+  }
+}
+
+module "my_module" {
+  source = "./my-module"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%my-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%my-module%main.tf
new file mode 100644
index 0000000..61a9770
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-set%my-module%main.tf
@@ -0,0 +1,9 @@
+data "test_file" "foo" {
+  id = "bar"
+}
+
+terraform {
+  provider_meta "test" {
+    baz = "quux-submodule"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%main.tf
new file mode 100644
index 0000000..c4091f3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%main.tf
@@ -0,0 +1,7 @@
+data "test_data_source" "foo" {
+  foo = "bar"
+}
+
+module "my_module" {
+  source = "./my-module"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%my-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%my-module%main.tf
new file mode 100644
index 0000000..7e0ea46
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-data-unset%my-module%main.tf
@@ -0,0 +1,3 @@
+data "test_file" "foo" {
+  id = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%main.tf
new file mode 100644
index 0000000..a3e9f80
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%main.tf
@@ -0,0 +1,13 @@
+resource "test_instance" "bar" {
+  foo = "bar"
+}
+
+terraform {
+  provider_meta "test" {
+    baz = "quux"
+  }
+}
+
+module "my_module" {
+  source = "./my-module"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%my-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%my-module%main.tf
new file mode 100644
index 0000000..2a89dd5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-set%my-module%main.tf
@@ -0,0 +1,9 @@
+resource "test_resource" "bar" {
+  value = "bar"
+}
+
+terraform {
+  provider_meta "test" {
+    baz = "quux-submodule"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-unset%my-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-unset%my-module%main.tf
new file mode 100644
index 0000000..ec9701f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-meta-unset%my-module%main.tf
@@ -0,0 +1,3 @@
+resource "test_resource" "bar" {
+  value = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-with-locals%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-with-locals%main.tf
new file mode 100644
index 0000000..3a7db0f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%provider-with-locals%main.tf
@@ -0,0 +1,11 @@
+provider "aws" {
+	region = "${local.foo}"
+}
+
+locals {
+	foo = "bar"
+}
+
+resource "aws_instance" "foo" {
+    value = "${local.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-basic%main.tf
new file mode 100644
index 0000000..64cbf62
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-basic%main.tf
@@ -0,0 +1 @@
+resource "aws_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-count%refresh-data-count.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-count%refresh-data-count.tf
new file mode 100644
index 0000000..ccabdb2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-count%refresh-data-count.tf
@@ -0,0 +1,6 @@
+resource "test" "foo" {
+}
+
+data "test" "foo" {
+  count = length(test.foo.things)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%child%main.tf
new file mode 100644
index 0000000..64d21be
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%child%main.tf
@@ -0,0 +1,6 @@
+variable "key" {}
+
+data "aws_data_source" "foo" {
+  id = "${var.key}"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%main.tf
new file mode 100644
index 0000000..a371831
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-module-var%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "A" {
+  foo = "bar"
+}
+
+module "child" {
+  source = "./child"
+  key    = "${aws_instance.A.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-ref-data%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-ref-data%main.tf
new file mode 100644
index 0000000..5512be2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-ref-data%main.tf
@@ -0,0 +1,7 @@
+data "null_data_source" "foo" {
+  foo = "yes"
+}
+
+data "null_data_source" "bar" {
+  bar = "${data.null_data_source.foo.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-resource-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-resource-basic%main.tf
new file mode 100644
index 0000000..cb16d9f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-data-resource-basic%main.tf
@@ -0,0 +1,5 @@
+data "null_data_source" "testing" {
+  inputs = {
+    test = "yes"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-dynamic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-dynamic%main.tf
new file mode 100644
index 0000000..5c857a2
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-dynamic%main.tf
@@ -0,0 +1,3 @@
+resource "test_instance" "foo" {
+  dynamic = {}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%child%main.tf
new file mode 100644
index 0000000..38260d6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%child%main.tf
@@ -0,0 +1,5 @@
+variable "value" {}
+
+output "value" {
+    value = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%main.tf
new file mode 100644
index 0000000..a857332
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-computed-var%main.tf
@@ -0,0 +1,8 @@
+module "child" {
+    source = "./child"
+    value = "${join(" ", aws_instance.test.*.id)}"
+}
+
+resource "aws_instance" "test" {
+    value = "yes"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%child%main.tf
new file mode 100644
index 0000000..ebc1e3f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%child%main.tf
@@ -0,0 +1,11 @@
+variable "input" {
+    type = string
+}
+
+resource "aws_instance" "foo" {
+    foo = var.input
+}
+
+output "foo" {
+    value = aws_instance.foo.foo
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%main.tf
new file mode 100644
index 0000000..5827a5d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-input-computed-output%main.tf
@@ -0,0 +1,8 @@
+module "child" {
+    input = aws_instance.bar.foo
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    compute = "foo"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%grandchild%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%grandchild%main.tf
new file mode 100644
index 0000000..942e93d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%grandchild%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "baz" {}
+
+output "id" { value = "${aws_instance.baz.id}" }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%main.tf
new file mode 100644
index 0000000..7c3fc84
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-orphan%child%main.tf
@@ -0,0 +1,10 @@
+module "grandchild" {
+  source = "./grandchild"
+}
+
+resource "aws_instance" "bar" {
+  grandchildid = "${module.grandchild.id}"
+}
+
+output "id" { value = "${aws_instance.bar.id}" }
+output "grandchild_id" { value = "${module.grandchild.id}" }
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%bar%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%bar%main.tf
new file mode 100644
index 0000000..46ea37f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%bar%main.tf
@@ -0,0 +1,3 @@
+variable "value" {}
+
+resource "aws_instance" "bar" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%foo%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%foo%main.tf
new file mode 100644
index 0000000..2ee7980
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%foo%main.tf
@@ -0,0 +1,7 @@
+output "output" {
+    value = "${aws_instance.foo.foo}"
+}
+
+resource "aws_instance" "foo" {
+    compute = "foo"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%main.tf
new file mode 100644
index 0000000..76775e3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-module-var-module%main.tf
@@ -0,0 +1,8 @@
+module "foo" {
+    source = "./foo"
+}
+
+module "bar" {
+    source = "./bar"
+    value = "${module.foo.output}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-modules%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-modules%child%main.tf
new file mode 100644
index 0000000..64cbf62
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-modules%child%main.tf
@@ -0,0 +1 @@
+resource "aws_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-modules%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-modules%main.tf
new file mode 100644
index 0000000..6b4520e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-modules%main.tf
@@ -0,0 +1,5 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-no-state%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-no-state%main.tf
new file mode 100644
index 0000000..76c0f87
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-no-state%main.tf
@@ -0,0 +1,3 @@
+output "foo" {
+  value = ""
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-output%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-output%main.tf
new file mode 100644
index 0000000..42a01bd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-output%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "web" {}
+
+output "foo" {
+    value = "${aws_instance.web.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-output-partial%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-output-partial%main.tf
new file mode 100644
index 0000000..36ce289
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-output-partial%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {}
+
+resource "aws_instance" "web" {}
+
+output "foo" {
+    value = "${aws_instance.web.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-schema-upgrade%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-schema-upgrade%main.tf
new file mode 100644
index 0000000..ee0590e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-schema-upgrade%main.tf
@@ -0,0 +1,2 @@
+resource "test_thing" "bar" {
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-targeted%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-targeted%main.tf
new file mode 100644
index 0000000..3a76184
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-targeted%main.tf
@@ -0,0 +1,8 @@
+resource "aws_vpc" "metoo" {}
+resource "aws_instance" "notme" { }
+resource "aws_instance" "me" {
+  vpc_id = "${aws_vpc.metoo.id}"
+}
+resource "aws_elb" "meneither" {
+  instances = ["${aws_instance.me.*.id}"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-targeted-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-targeted-count%main.tf
new file mode 100644
index 0000000..f564b62
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-targeted-count%main.tf
@@ -0,0 +1,9 @@
+resource "aws_vpc" "metoo" {}
+resource "aws_instance" "notme" { }
+resource "aws_instance" "me" {
+  vpc_id = "${aws_vpc.metoo.id}"
+  count = 3
+}
+resource "aws_elb" "meneither" {
+  instances = ["${aws_instance.me.*.id}"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-unknown-provider%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-unknown-provider%main.tf
new file mode 100644
index 0000000..8a29fdd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-unknown-provider%main.tf
@@ -0,0 +1,4 @@
+resource "unknown_instance" "foo" {
+    num = "2"
+    compute = "foo"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-vars%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-vars%main.tf
new file mode 100644
index 0000000..86cd6ac
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%refresh-vars%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "web" {}
+
+resource "aws_instance" "db" {
+  ami = "${aws_instance.web.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%static-validate-refs%static-validate-refs.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%static-validate-refs%static-validate-refs.tf
new file mode 100644
index 0000000..3667a4e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%static-validate-refs%static-validate-refs.tf
@@ -0,0 +1,23 @@
+terraform {
+  required_providers {
+    boop = {
+      source = "foobar/beep" # intentional mismatch between local name and type
+    }
+  }
+}
+
+resource "aws_instance" "no_count" {
+}
+
+resource "aws_instance" "count" {
+  count = 1
+}
+
+resource "boop_instance" "yep" {
+}
+
+resource "boop_whatever" "nope" {
+}
+
+data "beep" "boop" {
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-both-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-both-count%main.tf
new file mode 100644
index 0000000..c19e78e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-both-count%main.tf
@@ -0,0 +1,11 @@
+resource "test_object" "A" {
+  count = 2
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "test_object" "B" {
+  count       = 2
+  test_string = test_object.A[*].test_string[count.index]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-count%main.tf
new file mode 100644
index 0000000..775900f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-cbd-destroy-edge-count%main.tf
@@ -0,0 +1,10 @@
+resource "test_object" "A" {
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "test_object" "B" {
+  count       = 2
+  test_string = test_object.A.test_string
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-config-mode-data%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-config-mode-data%main.tf
new file mode 100644
index 0000000..3c3e7e5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-config-mode-data%main.tf
@@ -0,0 +1,3 @@
+data "aws_ami" "foo" {}
+
+resource "aws_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-basic%main.tf
new file mode 100644
index 0000000..a17d8b4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-basic%main.tf
@@ -0,0 +1,9 @@
+resource "test_object" "A" {
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "test_object" "B" {
+  test_string = "${test_object.A.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-multi%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-multi%main.tf
new file mode 100644
index 0000000..964bc44
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-cbd-edge-multi%main.tf
@@ -0,0 +1,15 @@
+resource "test_object" "A" {
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "test_object" "B" {
+  lifecycle {
+    create_before_destroy = true
+  }
+}
+
+resource "test_object" "C" {
+  test_string = "${test_object.A.id}-${test_object.B.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-basic%main.tf
new file mode 100644
index 0000000..8afeda4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-basic%main.tf
@@ -0,0 +1,5 @@
+resource "test_object" "A" {}
+
+resource "test_object" "B" {
+  test_string = "${test_object.A.test_string}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%child%main.tf
new file mode 100644
index 0000000..337bbe7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%child%main.tf
@@ -0,0 +1,7 @@
+resource "test_object" "b" {
+  test_string = "foo"
+}
+
+output "output" {
+  value = "${test_object.b.test_string}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%main.tf
new file mode 100644
index 0000000..2a42635
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module%main.tf
@@ -0,0 +1,7 @@
+resource "test_object" "a" {
+  test_string = "${module.child.output}"
+}
+
+module "child" {
+  source = "./child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module-only%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module-only%main.tf
new file mode 100644
index 0000000..9193514
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-module-only%main.tf
@@ -0,0 +1,4 @@
+module "child" {
+    source = "./child"
+    count  = 2
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-multi%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-multi%main.tf
new file mode 100644
index 0000000..3474bf6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-multi%main.tf
@@ -0,0 +1,9 @@
+resource "test_object" "A" {}
+
+resource "test_object" "B" {
+  test_string = "${test_object.A.test_string}"
+}
+
+resource "test_object" "C" {
+  test_string = "${test_object.B.test_string}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-self-ref%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-self-ref%main.tf
new file mode 100644
index 0000000..d91e024
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-destroy-edge-self-ref%main.tf
@@ -0,0 +1,5 @@
+resource "test" "A" {
+    provisioner "foo" {
+        command = "${test.A.id}"
+    }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-basic%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-basic%child%main.tf
new file mode 100644
index 0000000..53f3cd7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-basic%child%main.tf
@@ -0,0 +1,5 @@
+variable "value" {}
+
+output "result" {
+  value = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%child%main.tf
new file mode 100644
index 0000000..53f3cd7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%child%main.tf
@@ -0,0 +1,5 @@
+variable "value" {}
+
+output "result" {
+  value = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%main.tf
new file mode 100644
index 0000000..b8c7f0b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%child%main.tf
@@ -0,0 +1,6 @@
+variable "value" {}
+
+module "child" {
+    source = "./child"
+    value  = "${var.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%main.tf
new file mode 100644
index 0000000..2c20f19
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-module-var-nested%main.tf
@@ -0,0 +1,4 @@
+module "child" {
+    source = "./child"
+    value  = "foo"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-basic%main.tf
new file mode 100644
index 0000000..64cbf62
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-basic%main.tf
@@ -0,0 +1 @@
+resource "aws_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count%main.tf
new file mode 100644
index 0000000..acef373
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "foo" {
+  count = 3
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count-empty%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count-empty%main.tf
new file mode 100644
index 0000000..e8045d6
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-orphan-count-empty%main.tf
@@ -0,0 +1 @@
+# Purposefully empty
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-basic%main.tf
new file mode 100644
index 0000000..8a44e1d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-basic%main.tf
@@ -0,0 +1,2 @@
+provider "aws" {}
+resource "aws_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns%main.tf
new file mode 100644
index 0000000..dd582c0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns%main.tf
@@ -0,0 +1,11 @@
+terraform {
+  required_providers {
+    my-aws = {
+      source = "hashicorp/aws"
+    }
+  }
+}
+
+resource "aws_instance" "web" {
+  provider = "my-aws"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%child%main.tf
new file mode 100644
index 0000000..5c56b76
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%child%main.tf
@@ -0,0 +1,11 @@
+terraform {
+  required_providers {
+    your-aws = {
+      source = "hashicorp/aws"
+    }
+  }
+}
+
+resource "aws_instance" "web" {
+  provider = "your-aws"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%main.tf
new file mode 100644
index 0000000..dd582c0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-fqns-module%main.tf
@@ -0,0 +1,11 @@
+terraform {
+  required_providers {
+    my-aws = {
+      source = "hashicorp/aws"
+    }
+  }
+}
+
+resource "aws_instance" "web" {
+  provider = "my-aws"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%grandchild%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%grandchild%main.tf
new file mode 100644
index 0000000..58363ef
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%grandchild%main.tf
@@ -0,0 +1,7 @@
+provider "aws" {
+  alias = "baz"
+}
+
+resource "aws_instance" "baz" {
+  provider = "aws.baz"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%main.tf
new file mode 100644
index 0000000..7ec8034
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%child%main.tf
@@ -0,0 +1,10 @@
+provider "aws" {
+  alias = "bar"
+}
+
+module "grandchild" {
+  source = "./grandchild"
+  providers = {
+    aws.baz = aws.bar
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%main.tf
new file mode 100644
index 0000000..cb9a2f9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-grandchild-inherit%main.tf
@@ -0,0 +1,11 @@
+provider "aws" {
+  alias = "foo"
+  value = "config"
+}
+
+module "child" {
+  source = "./child"
+  providers = {
+    aws.bar = aws.foo
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%child%main.tf
new file mode 100644
index 0000000..b1f0706
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%child%main.tf
@@ -0,0 +1,7 @@
+provider "aws" {
+    alias = "bar"
+}
+
+resource "aws_instance" "thing" {
+    provider = aws.bar
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%main.tf
new file mode 100644
index 0000000..cb9a2f9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-inherit%main.tf
@@ -0,0 +1,11 @@
+provider "aws" {
+  alias = "foo"
+  value = "config"
+}
+
+module "child" {
+  source = "./child"
+  providers = {
+    aws.bar = aws.foo
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing%main.tf
new file mode 100644
index 0000000..976f3e5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing%main.tf
@@ -0,0 +1,3 @@
+provider "aws" {}
+resource "aws_instance" "web" {}
+resource "foo_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%main.tf
new file mode 100644
index 0000000..385674a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%main.tf
@@ -0,0 +1,3 @@
+module "sub" {
+    source = "./sub"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%main.tf
new file mode 100644
index 0000000..65adf2d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%main.tf
@@ -0,0 +1,5 @@
+provider "foo" {}
+
+module "subsub" {
+    source = "./subsub"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%subsub%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%subsub%main.tf
new file mode 100644
index 0000000..fd865a5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-missing-grandchild%sub%subsub%main.tf
@@ -0,0 +1,2 @@
+resource "foo_instance" "one" {}
+resource "bar_instance" "two" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-prune%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-prune%main.tf
new file mode 100644
index 0000000..986f884
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provider-prune%main.tf
@@ -0,0 +1,2 @@
+provider "aws" {}
+resource "foo_instance" "web" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-basic%main.tf
new file mode 100644
index 0000000..3898ac4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-basic%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "web" {
+    provisioner "shell" {}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-module%main.tf
new file mode 100644
index 0000000..a825a44
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-provisioner-module%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+  provisioner "shell" {}
+}
+
+module "child" {
+  source = "./child"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-root-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-root-basic%main.tf
new file mode 100644
index 0000000..e4ff4b3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-root-basic%main.tf
@@ -0,0 +1,5 @@
+provider "aws" {}
+resource "aws_instance" "foo" {}
+
+provider "do" {}
+resource "do_droplet" "bar" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-basic%main.tf
new file mode 100644
index 0000000..47edc2a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-basic%main.tf
@@ -0,0 +1,22 @@
+resource "aws_vpc" "me" {}
+
+resource "aws_subnet" "me" {
+  depends_on = [
+    aws_vpc.me,
+  ]
+}
+
+resource "aws_instance" "me" {
+  depends_on = [
+    aws_subnet.me,
+  ]
+}
+
+resource "aws_vpc" "notme" {}
+resource "aws_subnet" "notme" {}
+resource "aws_instance" "notme" {}
+resource "aws_instance" "notmeeither" {
+  depends_on = [
+    aws_instance.me,
+  ]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%child.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%child.tf
new file mode 100644
index 0000000..6548b79
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%child.tf
@@ -0,0 +1,14 @@
+resource "aws_instance" "foo" {
+}
+
+module "grandchild" {
+  source = "./grandchild"
+}
+
+output "id" {
+  value = "${aws_instance.foo.id}"
+}
+
+output "grandchild_id" {
+  value = "${module.grandchild.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%grandchild%grandchild.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%grandchild%grandchild.tf
new file mode 100644
index 0000000..3ad8fd0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%child%grandchild%grandchild.tf
@@ -0,0 +1,6 @@
+resource "aws_instance" "foo" {
+}
+
+output "id" {
+  value = "${aws_instance.foo.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%main.tf
new file mode 100644
index 0000000..b732fda
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-targets-downstream%main.tf
@@ -0,0 +1,18 @@
+resource "aws_instance" "foo" {
+}
+
+module "child" {
+  source = "./child"
+}
+
+output "root_id" {
+  value = "${aws_instance.foo.id}"
+}
+
+output "child_id" {
+  value = "${module.child.id}"
+}
+
+output "grandchild_id" {
+  value = "${module.child.grandchild_id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-trans-reduce-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-trans-reduce-basic%main.tf
new file mode 100644
index 0000000..4fb97c7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%transform-trans-reduce-basic%main.tf
@@ -0,0 +1,10 @@
+resource "aws_instance" "A" {}
+
+resource "aws_instance" "B" {
+    A = "${aws_instance.A.id}"
+}
+
+resource "aws_instance" "C" {
+    A = "${aws_instance.A.id}"
+    B = "${aws_instance.B.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%update-resource-provider%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%update-resource-provider%main.tf
new file mode 100644
index 0000000..6c082d5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%update-resource-provider%main.tf
@@ -0,0 +1,7 @@
+provider "aws" {
+  alias = "foo"
+}
+
+resource "aws_instance" "bar" {
+  provider = "aws.foo"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-count%main.tf
new file mode 100644
index 0000000..a582e5e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-count%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "foo" {
+  count = "${list}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-module-output%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-module-output%main.tf
new file mode 100644
index 0000000..bda34f5
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-module-output%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${module.child.bad}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-pc%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-pc%main.tf
new file mode 100644
index 0000000..70ad701
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-pc%main.tf
@@ -0,0 +1,5 @@
+provider "aws" {
+  foo = "bar"
+}
+
+resource "aws_instance" "test" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-conf%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-conf%main.tf
new file mode 100644
index 0000000..af12124
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-conf%main.tf
@@ -0,0 +1,9 @@
+provider "aws" {
+  foo = "bar"
+}
+
+resource "aws_instance" "test" {
+  provisioner "shell" {
+    test_string = "foo"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-connection%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-connection%main.tf
new file mode 100644
index 0000000..550714f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-prov-connection%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+  provisioner "shell" {
+    test_string = "test"
+    connection {
+      user = "test"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-rc%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-rc%main.tf
new file mode 100644
index 0000000..152a23e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-rc%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "test" {
+    foo = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-connection%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-connection%main.tf
new file mode 100644
index 0000000..46a1671
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-connection%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+  connection {
+    user = "test"
+  }
+  provisioner "shell" {
+    test_string = "test"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-count%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-count%main.tf
new file mode 100644
index 0000000..f852a44
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-resource-count%main.tf
@@ -0,0 +1,22 @@
+// a resource named "aws_security_groups" does not exist in the schema
+variable "sg_ports" {
+  type        = list(number)
+  description = "List of ingress ports"
+  default     = [8200, 8201, 8300, 9200, 9500]
+}
+
+
+resource "aws_security_groups" "dynamicsg" {
+  name        = "dynamicsg"
+  description = "Ingress for Vault"
+
+  dynamic "ingress" {
+    for_each = var.sg_ports
+    content {
+      from_port   = ingress.value
+      to_port     = ingress.value
+      protocol    = "tcp"
+      cidr_blocks = ["0.0.0.0/0"]
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-var%main.tf
new file mode 100644
index 0000000..5002845
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-bad-var%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "foo" {
+    num = "2"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-in-function%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-in-function%main.tf
new file mode 100644
index 0000000..504e194
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-in-function%main.tf
@@ -0,0 +1,7 @@
+data "aws_data_source" "foo" {
+    optional_attr = "value"
+}
+
+resource "aws_instance" "bar" {
+    attr = "${length(data.aws_data_source.foo.computed)}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%dest%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%dest%main.tf
new file mode 100644
index 0000000..44095ea
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%dest%main.tf
@@ -0,0 +1,5 @@
+variable "destin" { }
+
+resource "aws_instance" "dest" {
+  attr = "${var.destin}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%main.tf
new file mode 100644
index 0000000..d7c799c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%main.tf
@@ -0,0 +1,8 @@
+module "source" {
+  source = "./source"
+}
+
+module "dest" {
+  source = "./dest"
+  destin = "${module.source.sourceout}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%source%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%source%main.tf
new file mode 100644
index 0000000..d2edc9e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-computed-module-var-ref%source%main.tf
@@ -0,0 +1,7 @@
+resource "aws_instance" "source" {
+  attr = "foo"
+}
+
+output "sourceout" {
+  value = "${aws_instance.source.attr}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-computed%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-computed%main.tf
new file mode 100644
index 0000000..e7de125
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-computed%main.tf
@@ -0,0 +1,7 @@
+data "aws_data_source" "foo" {
+    compute = "value"
+}
+
+resource "aws_instance" "bar" {
+    count = "${data.aws_data_source.foo.value}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-negative%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-negative%main.tf
new file mode 100644
index 0000000..d5bb046
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-negative%main.tf
@@ -0,0 +1,3 @@
+resource "aws_instance" "test" {
+    count = "-5"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-variable%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-variable%main.tf
new file mode 100644
index 0000000..9c892ac
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-count-variable%main.tf
@@ -0,0 +1,6 @@
+variable "foo" {}
+
+resource "aws_instance" "foo" {
+    foo = "foo"
+    count = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good%main.tf
new file mode 100644
index 0000000..fe44019
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good%main.tf
@@ -0,0 +1,8 @@
+resource "aws_instance" "foo" {
+    num = "2"
+    foo = "bar"
+}
+
+resource "aws_instance" "bar" {
+    foo = "bar"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good-module%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good-module%child%main.tf
new file mode 100644
index 0000000..17d8c60
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good-module%child%main.tf
@@ -0,0 +1,3 @@
+output "good" {
+    value = "great"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good-module%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good-module%main.tf
new file mode 100644
index 0000000..439d202
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-good-module%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+    source = "./child"
+}
+
+resource "aws_instance" "bar" {
+    foo = "${module.child.good}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%a%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%a%main.tf
new file mode 100644
index 0000000..3d3b016
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%a%main.tf
@@ -0,0 +1,5 @@
+resource "aws_instance" "a" { }
+
+output "output" {
+  value = "${aws_instance.a.id}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%main.tf
new file mode 100644
index 0000000..11ddb64
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-deps-cycle%main.tf
@@ -0,0 +1,8 @@
+module "a" {
+  source = "./a"
+}
+
+module "b" {
+  source = "./b"
+  input = "${module.a.output}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%child%main.tf
new file mode 100644
index 0000000..37189c1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%child%main.tf
@@ -0,0 +1,3 @@
+provider "aws" {}
+
+resource "aws_instance" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%main.tf
new file mode 100644
index 0000000..8976f4a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit%main.tf
@@ -0,0 +1,9 @@
+module "child" {
+    source = "./child"
+}
+
+provider "aws" {
+    set = true
+}
+
+resource "aws_instance" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit-unused%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit-unused%main.tf
new file mode 100644
index 0000000..32c8a38
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-inherit-unused%main.tf
@@ -0,0 +1,7 @@
+module "child" {
+    source = "./child"
+}
+
+provider "aws" {
+    foo = "set"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%child%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%child%main.tf
new file mode 100644
index 0000000..380cd46
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%child%main.tf
@@ -0,0 +1,7 @@
+variable "value" {}
+
+provider "aws" {
+    foo = var.value
+}
+
+resource "aws_instance" "foo" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%main.tf
new file mode 100644
index 0000000..5e239b4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-module-pc-vars%main.tf
@@ -0,0 +1,7 @@
+variable "provider_var" {}
+
+module "child" {
+    source = "./child"
+
+    value = var.provider_var
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-required-provider-config%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-required-provider-config%main.tf
new file mode 100644
index 0000000..898a23f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-required-provider-config%main.tf
@@ -0,0 +1,20 @@
+# This test verifies that the provider local name, local config and fqn map
+# together properly when the local name does not match the type.
+
+terraform {
+  required_providers {
+    arbitrary = {
+      source = "hashicorp/aws"
+    }
+  }
+}
+
+# hashicorp/test has required provider config attributes. This "arbitrary"
+# provider configuration block should map to hashicorp/test.
+provider "arbitrary" {
+  required_attribute = "bloop"
+}
+
+resource "aws_instance" "test" {
+  provider = "arbitrary"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-required-var%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-required-var%main.tf
new file mode 100644
index 0000000..bd55ea1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-required-var%main.tf
@@ -0,0 +1,5 @@
+variable "foo" {}
+
+resource "aws_instance" "web" {
+  ami = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-sensitive-provisioner-config%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-sensitive-provisioner-config%main.tf
new file mode 100644
index 0000000..88a3727
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-sensitive-provisioner-config%main.tf
@@ -0,0 +1,11 @@
+variable "secret" {
+  type      = string
+  default   = " password123"
+  sensitive = true
+}
+
+resource "aws_instance" "foo" {
+  provisioner "test" {
+    test_string = var.secret
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-skipped-pc-empty%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-skipped-pc-empty%main.tf
new file mode 100644
index 0000000..1ad9ade
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-skipped-pc-empty%main.tf
@@ -0,0 +1 @@
+resource "aws_instance" "test" {}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-targeted%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-targeted%main.tf
new file mode 100644
index 0000000..a1e847d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-targeted%main.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "foo" {
+  num         = "2"
+  provisioner "shell"     {}
+}
+
+resource "aws_instance" "bar" {
+  foo         = "bar"
+  provisioner "shell"     {}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-var-no-default-explicit-type%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-var-no-default-explicit-type%main.tf
new file mode 100644
index 0000000..5953eab
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-var-no-default-explicit-type%main.tf
@@ -0,0 +1,5 @@
+variable "maybe_a_map" {
+  type = map(string)
+
+  // No default
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child%validate-variable-custom-validations.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child%validate-variable-custom-validations.tf
new file mode 100644
index 0000000..8b8111e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child%validate-variable-custom-validations.tf
@@ -0,0 +1,5 @@
+module "child" {
+  source = "./child"
+
+  test = "nope"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child-sensitive%validate-variable-custom-validations.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child-sensitive%validate-variable-custom-validations.tf
new file mode 100644
index 0000000..4f436db
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-custom-validations-child-sensitive%validate-variable-custom-validations.tf
@@ -0,0 +1,10 @@
+variable "test" {
+  sensitive = true
+  default = "nope"
+}
+
+module "child" {
+  source = "./child"
+
+  test = var.test
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-ref%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-ref%main.tf
new file mode 100644
index 0000000..3bc9860
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%validate-variable-ref%main.tf
@@ -0,0 +1,5 @@
+variable "foo" {}
+
+resource "aws_instance" "bar" {
+    foo = "${var.foo}"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%vars-basic%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%vars-basic%main.tf
new file mode 100644
index 0000000..af3ba5c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%vars-basic%main.tf
@@ -0,0 +1,14 @@
+variable "a" {
+  default = "foo"
+  type    = string
+}
+
+variable "b" {
+  default = []
+  type    = list(string)
+}
+
+variable "c" {
+  default = {}
+  type    = map(string)
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%vars-basic-bool%main.tf b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%vars-basic-bool%main.tf
new file mode 100644
index 0000000..52d9059
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%terraforminternal%terraform%testdata%vars-basic-bool%main.tf
@@ -0,0 +1,10 @@
+// At the time of writing Terraform doesn't formally support a boolean
+// type, but historically this has magically worked. Lots of TF code
+// relies on this so we test it now.
+variable "a" {
+    default = true
+}
+
+variable "b" {
+    default = false
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%tfc-getting-startedprovider.tf b/example/real_world_stuff/hashicorp/hashicorp%tfc-getting-startedprovider.tf
new file mode 100644
index 0000000..16a7709
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%tfc-getting-startedprovider.tf
@@ -0,0 +1,13 @@
+# The following variable is used to configure the provider's authentication
+# token. You don't need to provide a token on the command line to apply changes,
+# though: using the remote backend, Terraform will execute remotely in Terraform
+# Cloud where your token is already securely stored in your workspace!
+
+variable "provider_token" {
+  type = string
+  sensitive = true
+}
+
+provider "fakewebservices" {
+  token = var.provider_token
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsmain.tf b/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsmain.tf
new file mode 100644
index 0000000..66acdd1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsmain.tf
@@ -0,0 +1,65 @@
+terraform {
+  required_providers {
+    aws      = "~> 2.53.0"
+    random   = "~> 2.2.0"
+    template = "~> 2.1.2"
+  }
+}
+
+provider "aws" {
+  region = "us-west-2"
+}
+
+resource "aws_key_pair" "sshkey" {
+  key_name   = "lab-ssh-key"
+  public_key = file("/root/.ssh/id_rsa.pub")
+}
+
+module "vpc" {
+  source = "terraform-aws-modules/vpc/aws"
+  version = "2.39.0"
+  name = "my-vpc"
+  cidr = "10.0.0.0/16"
+  
+  # If you change your region be sure to update your provider above ^^^
+  azs             = ["us-west-2a", "us-west-2b", "us-west-2c"]
+  private_subnets = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
+  public_subnets  = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"]
+
+  enable_nat_gateway = true
+  enable_vpn_gateway = true
+
+  tags = {
+    Terraform = "true"
+    Environment = "dev"
+  }
+}
+
+module "tfe" {
+  source = "../is-terraform-aws-tfe-standalone"
+
+  # These are created by the terraform code above ^^^
+  ssh_key_pair               = aws_key_pair.sshkey.key_name
+  vpc_id                     = module.vpc.vpc_id
+  alb_subnet_ids             = module.vpc.public_subnets
+  ec2_subnet_ids             = module.vpc.public_subnets
+  rds_subnet_ids             = module.vpc.public_subnets
+
+  # These can all be left at their defaults, see variables.tf
+  common_tags                = var.common_tags
+  tfe_release_sequence       = var.tfe_release_sequence
+  tfe_initial_admin_username = var.tfe_initial_admin_username
+  tfe_initial_admin_email    = var.tfe_initial_admin_email
+  tfe_initial_org_name       = var.tfe_initial_org_name
+  os_distro                  = var.os_distro
+  ingress_cidr_alb_allow     = var.ingress_cidr_alb_allow
+  ingress_cidr_console_allow = var.ingress_cidr_console_allow
+  ingress_cidr_ec2_allow     = var.ingress_cidr_ec2_allow
+  kms_key_arn                = var.kms_key_arn
+
+  # These should be customized in your terraform.tfvars file
+  friendly_name_prefix       = var.friendly_name_prefix
+  tfe_hostname               = var.tfe_hostname
+  tfe_license_filepath      = var.tfe_license_file_path
+  route53_hosted_zone_public = var.route53_hosted_zone_name
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsoutputs.tf b/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsoutputs.tf
new file mode 100644
index 0000000..97e6712
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsoutputs.tf
@@ -0,0 +1,17 @@
+output "tfe_url" {
+  value = module.tfe.tfe_url
+}
+
+output "tfe_admin_console_url" {
+  value = module.tfe.tfe_admin_console_url
+}
+
+output "tfe_admin_console_password" {
+  value = module.tfe.tfe_admin_console_password
+  description = "Password of TFE (Replicated) Admin Console."
+}
+
+output "tfe_admin_password" {
+  value       = module.tfe.tfe_initial_admin_password
+  description = "Password of TFE Initial Admin User created by tfe_bootstrap() function within user_data."
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsvariables.tf b/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsvariables.tf
new file mode 100644
index 0000000..b96f420
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%tfe-lab-module-install-awsvariables.tf
@@ -0,0 +1,187 @@
+################################################
+# Common
+################################################
+variable "friendly_name_prefix" {
+  type        = string
+  description = "String value for freindly name prefix for AWS resource names and tags"
+}
+
+variable "common_tags" {
+  type        = map(string)
+  description = "Map of common tags for taggable AWS resources"
+  default     = {}
+}
+
+################################################
+# TFE
+################################################
+variable "tfe_hostname" {
+  type        = string
+  description = "Hostname of TFE instance"
+}
+
+variable "tfe_license_file_path" {
+  type        = string
+  description = "Local file path to tfe-license.rli file including file name"
+}
+
+variable "tfe_release_sequence" {
+  type        = string
+  description = "TFE application version release sequence number within Replicated (leave blank to default to latest version)"
+  default     = ""
+}
+
+variable "tfe_initial_admin_username" {
+  type        = string
+  description = "Username for initial TFE local adminitrator account"
+  default     = ""
+}
+
+variable "tfe_initial_admin_email" {
+  type        = string
+  description = "Email address for initial TFE local adminitrator account"
+  default     = null
+}
+
+variable "tfe_initial_admin_pw" {
+  type        = string
+  description = "Login password for TFE initial admin user created by this module - must be >= 8 characters"
+  default     = null
+}
+
+variable "tfe_initial_org_name" {
+  type        = string
+  description = "Name of initial TFE Organization created by bootstrap process / cloud-init script"
+  default     = ""
+}
+
+variable "tfe_initial_org_email" {
+  type        = string
+  description = "Email address of initial TFE Organization created by bootstrap process / cloud-init script"
+  default     = null
+}
+
+################################################
+# Network
+################################################
+# Uncomment these variables if you prefer to create your VPC and subnets manually.
+# variable "vpc_id" {
+#   type        = string
+#   description = "VPC ID that TFE will be deployed into"
+# }
+
+# variable "alb_subnet_ids" {
+#   type        = list(string)
+#   description = "List of subnet IDs to use for Application Load Balancer (ALB)"
+# }
+
+# variable "ec2_subnet_ids" {
+#   type        = list(string)
+#   description = "List of subnet IDs to use for EC2 instance - preferably private subnets"
+# }
+
+variable "route53_hosted_zone_name" {
+  type        = string
+  description = "Route53 Hosted Zone where TFE Alias Record and Certificate Validation record will reside (required if tls_certificate_arn is left blank)"
+  default     = null
+}
+
+variable "load_balancer_is_internal" {
+  type        = bool
+  description = "Boolean value determining if Application Load Balancer (ALB) is internal or exteral"
+  default     = false
+}
+
+################################################
+# Security
+################################################
+variable "ingress_cidr_alb_allow" {
+  type        = list(string)
+  description = "List of CIDR ranges to allow web traffic ingress to TFE LB"
+  default     = ["0.0.0.0/0"]
+}
+
+variable "ingress_cidr_console_allow" {
+  type        = list(string)
+  description = "List of CIDR ranges to allow TFE Replicated admin console (port 8800) traffic ingress to TFE LB"
+  default     = null
+}
+
+variable "ingress_cidr_ec2_allow" {
+  type        = list(string)
+  description = "List of CIDRs to allow SSH ingress to TFE EC2 instance (i.e. Bastion host IP, workstation IP, etc.)"
+  default     = []
+}
+
+variable "tls_certificate_arn" {
+  type        = string
+  description = "ARN of ACM or IAM certificate to be used for Application Load Balancer HTTPS listeners (required if route53_hosted_zone_name is left blank)"
+  default     = null
+}
+
+variable "kms_key_arn" {
+  type        = string
+  description = "ARN of KMS key to encrypt TFE S3 and RDS resources"
+  default     = ""
+}
+
+# Uncomment if you have an existing SSH key pair that you want to specify
+# variable "ssh_key_pair" {
+#   type        = string
+#   description = "Name of SSH key pair for TFE EC2 instance"
+#   default     = null
+# }
+
+################################################
+# Compute
+################################################
+variable "os_distro" {
+  type        = string
+  description = "Linux OS distribution for TFE EC2 instance"
+  default     = "amzn2"
+}
+
+variable "ami_id" {
+  type        = string
+  description = "Optional AMI ID for TFE EC2 Launch Template"
+  default     = null
+}
+
+variable "instance_size" {
+  type        = string
+  description = "EC2 instance type for TFE server"
+  default     = "m5.large"
+}
+
+################################################
+# Storage
+################################################
+# Uncomment if you prefer to create your subnets manually
+# variable "rds_subnet_ids" {
+#   type        = list(string)
+#   description = "Subnet IDs to use for RDS Database Subnet Group - preferably private subnets"
+# }
+
+variable "rds_storage_capacity" {
+  type        = string
+  description = "Size capacity (GB) of RDS PostgreSQL database"
+  default     = 50
+}
+
+variable "rds_engine_version" {
+  type        = string
+  description = "Version of PostgreSQL for RDS engine"
+  default     = "11"
+}
+
+variable "rds_multi_az" {
+  type        = string
+  description = "Set to true to enable multiple availability zone RDS"
+  default     = "true"
+}
+
+variable "rds_instance_size" {
+  type        = string
+  description = "Instance size for RDS"
+  default     = "db.m4.large"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vault-lambda-extensionquick-start%terraform%aws.tf b/example/real_world_stuff/hashicorp/hashicorp%vault-lambda-extensionquick-start%terraform%aws.tf
new file mode 100644
index 0000000..f930f3f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vault-lambda-extensionquick-start%terraform%aws.tf
@@ -0,0 +1,27 @@
+//--------------------------------------------------------------------
+// Providers
+
+provider "aws" {
+  // Credentials set via env vars
+  region  = var.aws_region
+}
+
+//--------------------------------------------------------------------
+// Data Sources
+
+data "aws_ami" "ubuntu" {
+  most_recent = true
+
+  filter {
+    name   = "name"
+    values = ["ubuntu/images/hvm-ssd/ubuntu-bionic-18.04-amd64-server-*"]
+  }
+
+  filter {
+    name   = "virtualization-type"
+    values = ["hvm"]
+  }
+
+  owners = ["099720109477"] # Canonical
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vault-lambda-extensionquick-start%terraform%versions.tf b/example/real_world_stuff/hashicorp/hashicorp%vault-lambda-extensionquick-start%terraform%versions.tf
new file mode 100644
index 0000000..dd5efa0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vault-lambda-extensionquick-start%terraform%versions.tf
@@ -0,0 +1,9 @@
+
+terraform {
+  required_version = ">= 0.12"
+  required_providers {
+    aws = {
+      version = "~> 3.39.0"
+    } 
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultapi%test-fixtures%agent_config.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultapi%test-fixtures%agent_config.hcl
new file mode 100644
index 0000000..8339f53
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultapi%test-fixtures%agent_config.hcl
@@ -0,0 +1,2 @@
+vault_addr="http://127.0.0.1:8200"
+ssh_mount_point="ssh"
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-nosinks-nocache-notemplates.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-nosinks-nocache-notemplates.hcl
new file mode 100644
index 0000000..93e31aa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-nosinks-nocache-notemplates.hcl
@@ -0,0 +1,10 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method "aws" {
+    mount_path = "auth/aws"
+    config = {
+      role = "foobar"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-wrapped-multiple-sinks.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-wrapped-multiple-sinks.hcl
new file mode 100644
index 0000000..9a491fa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-auto_auth-wrapped-multiple-sinks.hcl
@@ -0,0 +1,23 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method "aws" {
+    mount_path = "auth/aws"
+    wrap_ttl = 300
+    config = {
+      role = "foobar"
+    }
+  }
+
+  sink "file" {
+    config = {
+      path = "/tmp/file-foo"
+    }
+  }
+
+  sink "file" {
+    config = {
+      path = "/tmp/file-bar"
+    }
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-auto_auth-method-wrapping.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-auto_auth-method-wrapping.hcl
new file mode 100644
index 0000000..5821c1b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-auto_auth-method-wrapping.hcl
@@ -0,0 +1,29 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		wrap_ttl = 300
+		config = {
+			role = "foobar"
+		}
+	}
+
+	sink {
+		type = "file"
+		config = {
+			path = "/tmp/file-foo"
+		}
+	}
+}
+
+cache {
+	use_auto_auth_token = true
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-force-token-no-auth-method.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-force-token-no-auth-method.hcl
new file mode 100644
index 0000000..e2c8b32
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-force-token-no-auth-method.hcl
@@ -0,0 +1,10 @@
+pid_file = "./pidfile"
+
+cache {
+  use_auto_auth_token = "force"
+}
+
+listener "tcp" {
+  address     = "127.0.0.1:8300"
+  tls_disable = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-inconsistent-auto_auth.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-inconsistent-auto_auth.hcl
new file mode 100644
index 0000000..5029b8d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-inconsistent-auto_auth.hcl
@@ -0,0 +1,12 @@
+pid_file = "./pidfile"
+
+cache {
+	use_auto_auth_token = true
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-no-listeners.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-no-listeners.hcl
new file mode 100644
index 0000000..9d8110e
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-cache-no-listeners.hcl
@@ -0,0 +1,5 @@
+pid_file = "./pidfile"
+
+cache {
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-method-wrapping-and-sink-wrapping.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-method-wrapping-and-sink-wrapping.hcl
new file mode 100644
index 0000000..7a37573
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%bad-config-method-wrapping-and-sink-wrapping.hcl
@@ -0,0 +1,19 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		wrap_ttl = 300
+		config = {
+			role = "foobar"
+		}
+	}
+
+	sink {
+		type = "file"
+		wrap_ttl = 300
+		config = {
+			path = "/tmp/file-foo"
+		}
+	}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-false.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-false.hcl
new file mode 100644
index 0000000..1a2fd91
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-false.hcl
@@ -0,0 +1,30 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		config = {
+			role = "foobar"
+		}
+	}
+
+	sink {
+        type = "file"
+        config = {
+            path = "/tmp/file-foo"
+        }
+        aad = "foobar"
+        dh_type = "curve25519"
+        dh_path = "/tmp/file-foo-dhpath"
+    }
+}
+
+cache {
+	use_auto_auth_token = "false"
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-force.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-force.hcl
new file mode 100644
index 0000000..9aad89c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-force.hcl
@@ -0,0 +1,20 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		config = {
+			role = "foobar"
+		}
+	}
+}
+
+cache {
+	use_auto_auth_token = "force"
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-no-sink.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-no-sink.hcl
new file mode 100644
index 0000000..b3dc138
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-no-sink.hcl
@@ -0,0 +1,20 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		config = {
+			role = "foobar"
+		}
+	}
+}
+
+cache {
+	use_auto_auth_token = true
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-true.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-true.hcl
new file mode 100644
index 0000000..ccadc50
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-auto_auth-true.hcl
@@ -0,0 +1,20 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		config = {
+			role = "foobar"
+		}
+	}
+}
+
+cache {
+	use_auto_auth_token = "true"
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-embedded-type.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-embedded-type.hcl
new file mode 100644
index 0000000..3c56153
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-embedded-type.hcl
@@ -0,0 +1,61 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		config = {
+			role = "foobar"
+		}
+	}
+
+	sink {
+		type = "file"
+		config = {
+			path = "/tmp/file-foo"
+		}
+		aad = "foobar"
+		dh_type = "curve25519"
+		dh_path = "/tmp/file-foo-dhpath"
+	}
+}
+
+cache {
+	use_auto_auth_token = true
+	persist "kubernetes" {
+		path = "/vault/agent-cache/"
+		keep_after_import = true
+		exit_on_err = true
+		service_account_token_file = "/tmp/serviceaccount/token"
+	}
+}
+
+listener {
+    type = "unix"
+    address = "/path/to/socket"
+    tls_disable = true
+    socket_mode = "configmode"
+    socket_user = "configuser"
+    socket_group = "configgroup"
+}
+
+listener {
+    type = "tcp"
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
+listener {
+    type = "tcp"
+    address = "127.0.0.1:8400"
+    tls_key_file = "/path/to/cakey.pem"
+    tls_cert_file = "/path/to/cacert.pem"
+}
+
+vault {
+	address = "http://127.0.0.1:1111"
+	ca_cert = "config_ca_cert"
+	ca_path = "config_ca_path"
+	tls_skip_verify = true
+	client_cert = "config_client_cert"
+	client_key = "config_client_key"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-no-auto_auth.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-no-auto_auth.hcl
new file mode 100644
index 0000000..7a2a57f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-no-auto_auth.hcl
@@ -0,0 +1,11 @@
+pid_file = "./pidfile"
+
+cache {
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-empty-type.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-empty-type.hcl
new file mode 100644
index 0000000..55f1d64
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-empty-type.hcl
@@ -0,0 +1,12 @@
+pid_file = "./pidfile"
+
+cache {
+    persist = {
+        path = "/vault/agent-cache/"
+    }
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-false.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-false.hcl
new file mode 100644
index 0000000..5ab7f04
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache-persist-false.hcl
@@ -0,0 +1,14 @@
+pid_file = "./pidfile"
+
+cache {
+    persist "kubernetes" {
+        exit_on_err = false
+        keep_after_import = false
+        path = "/vault/agent-cache/"
+    }
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache.hcl
new file mode 100644
index 0000000..b468e9a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-cache.hcl
@@ -0,0 +1,59 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		config = {
+			role = "foobar"
+		}
+	}
+
+	sink {
+		type = "file"
+		config = {
+			path = "/tmp/file-foo"
+		}
+		aad = "foobar"
+		dh_type = "curve25519"
+		dh_path = "/tmp/file-foo-dhpath"
+	}
+}
+
+cache {
+	use_auto_auth_token = true
+	persist = {
+		type = "kubernetes"
+		path = "/vault/agent-cache/"
+		keep_after_import = true
+		exit_on_err = true
+		service_account_token_file = "/tmp/serviceaccount/token"
+	}
+}
+
+listener "unix" {
+    address = "/path/to/socket"
+    tls_disable = true
+    socket_mode = "configmode"
+    socket_user = "configuser"
+    socket_group = "configgroup"
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8300"
+    tls_disable = true
+}
+
+listener "tcp" {
+    address = "127.0.0.1:8400"
+    tls_key_file = "/path/to/cakey.pem"
+    tls_cert_file = "/path/to/cacert.pem"
+}
+
+vault {
+	address = "http://127.0.0.1:1111"
+	ca_cert = "config_ca_cert"
+	ca_path = "config_ca_path"
+	tls_skip_verify = "true"
+	client_cert = "config_client_cert"
+	client_key = "config_client_key"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-consistency.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-consistency.hcl
new file mode 100644
index 0000000..d57e055
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-consistency.hcl
@@ -0,0 +1,9 @@
+cache {
+	enforce_consistency = "always"
+	when_inconsistent = "retry"
+}
+
+listener "tcp" {
+	address = "127.0.0.1:8300"
+	tls_disable = true
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-embedded-type.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-embedded-type.hcl
new file mode 100644
index 0000000..919bfd9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-embedded-type.hcl
@@ -0,0 +1,31 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method "aws" {
+		mount_path = "auth/aws"
+		namespace = "my-namespace"
+		config = {
+			role = "foobar"
+		}
+	}
+
+	sink "file" {
+		config = {
+			path = "/tmp/file-foo"
+		}
+		aad = "foobar"
+		dh_type = "curve25519"
+		dh_path = "/tmp/file-foo-dhpath"
+	}
+
+	sink "file" {
+		wrap_ttl = "5m" 
+		aad_env_var = "TEST_AAD_ENV"
+		dh_type = "curve25519"
+		dh_path = "/tmp/file-foo-dhpath2"
+		derive_key = true
+		config = {
+			path = "/tmp/file-bar"
+		}
+	}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-method-wrapping.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-method-wrapping.hcl
new file mode 100644
index 0000000..cbafc5a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-method-wrapping.hcl
@@ -0,0 +1,19 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		wrap_ttl = 300
+		config = {
+			role = "foobar"
+		}
+		max_backoff = "2m"
+	}
+
+	sink {
+		type = "file"
+		config = {
+			path = "/tmp/file-foo"
+		}
+	}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full-nosink.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full-nosink.hcl
new file mode 100644
index 0000000..84edf6f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full-nosink.hcl
@@ -0,0 +1,37 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "/my-namespace"
+
+    config = {
+      role = "foobar"
+    }
+  }
+}
+
+template {
+  destination = "/path/on/disk/where/template/will/render.txt"
+  create_dest_dirs = true
+  contents = "{{ keyOrDefault \"service/redis/maxconns@east-aws\" \"5\" }}"
+
+  command = "restart service foo"
+  command_timeout = "60s"
+
+  error_on_missing_key = true
+  perms = 0655
+  backup = true
+  left_delimiter  = "<<"
+  right_delimiter = ">>"
+  
+  sandbox_path = "/path/on/disk/where"
+  wait {
+    min = "5s"
+    max = "30s"
+  }
+  wait {
+    min = "10s"
+    max = "40s"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full.hcl
new file mode 100644
index 0000000..ee05c23
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-full.hcl
@@ -0,0 +1,49 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "/my-namespace"
+
+    config = {
+      role = "foobar"
+    }
+  }
+
+  sink {
+    type = "file"
+
+    config = {
+      path = "/tmp/file-foo"
+    }
+
+    aad     = "foobar"
+    dh_type = "curve25519"
+    dh_path = "/tmp/file-foo-dhpath"
+  }
+}
+
+template {
+  destination = "/path/on/disk/where/template/will/render.txt"
+  create_dest_dirs = true
+  contents = "{{ keyOrDefault \"service/redis/maxconns@east-aws\" \"5\" }}"
+
+  command = "restart service foo"
+  command_timeout = "60s"
+
+  error_on_missing_key = true
+  perms = 0655
+  backup = true
+  left_delimiter  = "<<"
+  right_delimiter = ">>"
+  
+  sandbox_path = "/path/on/disk/where"
+  wait {
+    min = "5s"
+    max = "30s"
+  }
+  wait {
+    min = "10s"
+    max = "40s"
+  }
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many-nosink.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many-nosink.hcl
new file mode 100644
index 0000000..e04f77d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many-nosink.hcl
@@ -0,0 +1,38 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "/my-namespace"
+
+    config = {
+      role = "foobar"
+    }
+  }
+}
+
+template {
+  source      = "/path/on/disk/to/template.ctmpl"
+  destination = "/path/on/disk/where/template/will/render.txt"
+
+  create_dest_dirs = true
+
+  command = "restart service foo"
+
+  error_on_missing_key = false
+  perms                = 0600
+}
+
+template {
+  source      = "/path/on/disk/to/template2.ctmpl"
+  destination = "/path/on/disk/where/template/will/render2.txt"
+
+  perms = 0755
+
+  backup = true
+
+  wait {
+    min = "2s"
+    max = "10s"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many.hcl
new file mode 100644
index 0000000..2f6fe7b
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-many.hcl
@@ -0,0 +1,50 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "/my-namespace"
+
+    config = {
+      role = "foobar"
+    }
+  }
+
+  sink {
+    type = "file"
+
+    config = {
+      path = "/tmp/file-foo"
+    }
+
+    aad     = "foobar"
+    dh_type = "curve25519"
+    dh_path = "/tmp/file-foo-dhpath"
+  }
+}
+
+template {
+  source      = "/path/on/disk/to/template.ctmpl"
+  destination = "/path/on/disk/where/template/will/render.txt"
+
+  create_dest_dirs = true
+
+  command = "restart service foo"
+
+  error_on_missing_key = false
+  perms                = 0600
+}
+
+template {
+  source      = "/path/on/disk/to/template2.ctmpl"
+  destination = "/path/on/disk/where/template/will/render2.txt"
+
+  perms = 0755
+
+  backup = true
+
+  wait {
+    min = "2s"
+    max = "10s"
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min-nosink.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min-nosink.hcl
new file mode 100644
index 0000000..12c5a82
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min-nosink.hcl
@@ -0,0 +1,17 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "/my-namespace"
+
+    config = {
+      role = "foobar"
+    }
+  }
+}
+
+template {
+  source      = "/path/on/disk/to/template.ctmpl"
+  destination = "/path/on/disk/where/template/will/render.txt"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min.hcl
new file mode 100644
index 0000000..5d37dbe
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-template-min.hcl
@@ -0,0 +1,29 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "/my-namespace"
+
+    config = {
+      role = "foobar"
+    }
+  }
+
+  sink {
+    type = "file"
+
+    config = {
+      path = "/tmp/file-foo"
+    }
+
+    aad     = "foobar"
+    dh_type = "curve25519"
+    dh_path = "/tmp/file-foo-dhpath"
+  }
+}
+
+template {
+  source      = "/path/on/disk/to/template.ctmpl"
+  destination = "/path/on/disk/where/template/will/render.txt"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry-empty.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry-empty.hcl
new file mode 100644
index 0000000..e7ab4aa
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry-empty.hcl
@@ -0,0 +1,28 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "my-namespace/"
+
+    config = {
+      role = "foobar"
+    }
+  }
+
+  sink {
+    type = "file"
+    config = {
+      path = "/tmp/file-foo"
+    }
+    aad = "foobar"
+    dh_type = "curve25519"
+    dh_path = "/tmp/file-foo-dhpath"
+  }
+}
+
+vault {
+  address = "http://127.0.0.1:1111"
+  retry {}
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry.hcl
new file mode 100644
index 0000000..0c1cfa1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config-vault-retry.hcl
@@ -0,0 +1,29 @@
+pid_file = "./pidfile"
+
+auto_auth {
+  method {
+    type      = "aws"
+    namespace = "my-namespace/"
+
+    config = {
+      role = "foobar"
+    }
+  }
+
+  sink {
+    type = "file"
+    config = {
+      path = "/tmp/file-foo"
+    }
+    aad = "foobar"
+    dh_type = "curve25519"
+    dh_path = "/tmp/file-foo-dhpath"
+  }
+}
+
+vault {
+  address = "http://127.0.0.1:1111"
+  retry {
+    num_retries = 5
+  }
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config.hcl
new file mode 100644
index 0000000..b021707
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%agent%config%test-fixtures%config.hcl
@@ -0,0 +1,33 @@
+pid_file = "./pidfile"
+
+auto_auth {
+	method {
+		type = "aws"
+		namespace = "/my-namespace"
+		config = {
+			role = "foobar"
+		}
+	}
+
+	sink {
+		type = "file"
+		config = {
+			path = "/tmp/file-foo"
+		}
+		aad = "foobar"
+		dh_type = "curve25519"
+		dh_path = "/tmp/file-foo-dhpath"
+	}
+
+	sink {
+		type = "file"
+		wrap_ttl = "5m" 
+		aad_env_var = "TEST_AAD_ENV"
+		dh_type = "curve25519"
+		dh_path = "/tmp/file-foo-dhpath2"
+		derive_key = true
+		config = {
+			path = "/tmp/file-bar"
+		}
+	}
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config-dir%baz.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config-dir%baz.hcl
new file mode 100644
index 0000000..47146c7
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config-dir%baz.hcl
@@ -0,0 +1,14 @@
+telemetry {
+    statsd_address = "baz"
+    statsite_address = "qux"
+    disable_hostname = true
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+}
+sentinel {
+    additional_enabled_modules = ["http"]
+}
+ui=true
+raw_storage_endpoint=true
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config-dir%foo.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config-dir%foo.hcl
new file mode 100644
index 0000000..f538ede
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config-dir%foo.hcl
@@ -0,0 +1,9 @@
+disable_cache = true
+disable_mlock = true
+
+backend "consul" {
+    foo = "bar"
+    disable_clustering = "true"
+}
+
+disable_clustering = false
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config.hcl
new file mode 100644
index 0000000..3b4123f
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config.hcl
@@ -0,0 +1,50 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:443"
+}
+
+backend "consul" {
+    foo = "bar"
+    advertise_addr = "foo"
+}
+
+ha_backend "consul" {
+    bar = "baz"
+    advertise_addr = "snafu"
+    disable_clustering = "true"
+}
+
+service_registration "consul" {
+    foo = "bar"
+}
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    metrics_prefix = "myprefix"
+    bad_value = "shouldn't be here"
+}
+
+sentinel {
+    additional_enabled_modules = []
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_printable_check = true
+enable_response_header_hostname = true
+enable_response_header_raft_node_id = true
+license_path = "/path/to/license"
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config2.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config2.hcl
new file mode 100644
index 0000000..7b1dbfd
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config2.hcl
@@ -0,0 +1,62 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+api_addr = "top_level_api_addr"
+cluster_addr = "top_level_cluster_addr"
+
+listener "tcp" {
+    address = "127.0.0.1:443"
+}
+
+storage "consul" {
+    foo = "bar"
+    redirect_addr = "foo"
+}
+
+ha_storage "consul" {
+    bar = "baz"
+    redirect_addr = "snafu"
+    disable_clustering = "true"
+}
+
+service_registration "consul" {
+    foo = "bar"
+}
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 125
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    prometheus_retention_time = "30s"
+}
+
+entropy "seal" {
+    mode = "augmentation"
+}
+
+sentinel {
+    additional_enabled_modules = []
+}
+kms "commastringpurpose" {
+    purpose = "foo,bar"
+}
+kms "slicepurpose" {
+    purpose = ["zip", "zap"]
+}
+seal "nopurpose" {
+}
+seal "stringpurpose" {
+    purpose = "foo"
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config3.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config3.hcl
new file mode 100644
index 0000000..3394d04
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config3.hcl
@@ -0,0 +1,53 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+api_addr = "top_level_api_addr"
+cluster_addr = "top_level_cluster_addr"
+
+listener "tcp" {
+  address = "127.0.0.1:443"
+}
+
+backend "consul" {
+  advertise_addr = "foo"
+  token = "foo"
+}
+
+ha_backend "consul" {
+  bar = "baz"
+  advertise_addr = "snafu"
+  disable_clustering = "true"
+  token = "foo"
+}
+
+service_registration "consul" {
+  token = "foo"
+}
+
+telemetry {
+  statsd_address = "bar"
+  circonus_api_token = "baz"
+  metrics_prefix = "pfx"
+  usage_gauge_period = "5m"
+  maximum_gauge_cardinality = 100
+}
+
+sentinel {
+  additional_enabled_modules = ["http"]
+}
+
+seal "awskms" {
+  region     = "us-east-1"
+  access_key = "AKIAIOSFODNN7EXAMPLE"
+  secret_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_sentinel_trace = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config4.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config4.hcl
new file mode 100644
index 0000000..b620f3c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config4.hcl
@@ -0,0 +1,17 @@
+disable_cache = true
+disable_mlock = true
+ui = true
+
+listener "tcp" {
+	address = "127.0.0.1:8200"
+}
+
+storage "raft" {
+	path = "/storage/path/raft"
+	node_id = "raft1"
+	performance_multiplier = 1
+	foo = "bar"
+	baz = true
+}
+
+cluster_addr = "127.0.0.1:8201"
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config5.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config5.hcl
new file mode 100644
index 0000000..3b3c64c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config5.hcl
@@ -0,0 +1,51 @@
+disable_cache = true
+ disable_mlock = true
+
+ ui = true
+
+ listener "tcp" {
+     address = "127.0.0.1:443"
+ 	 allow_stuff = true
+ }
+
+ backend "consul" {
+     foo = "bar"
+     advertise_addr = "foo"
+ }
+
+ ha_backend "consul" {
+     bar = "baz"
+     advertise_addr = "snafu"
+     disable_clustering = "true"
+ }
+
+ service_registration "consul" {
+     foo = "bar"
+ }
+
+ telemetry {
+     statsd_address = "bar"
+     usage_gauge_period = "5m"
+     maximum_gauge_cardinality = 100
+
+     statsite_address = "foo"
+     dogstatsd_addr = "127.0.0.1:7254"
+     dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+     metrics_prefix = "myprefix"
+
+     lease_metrics_epsilon = "1h"
+     num_lease_metrics_buckets = 2
+     add_lease_metrics_namespace_labels = true 
+ }
+
+ sentinel {
+     additional_enabled_modules = []
+ }
+
+ max_lease_ttl = "10h"
+ default_lease_ttl = "10h"
+ cluster_name = "testcluster"
+ pid_file = "./pidfile"
+ raw_storage_endpoint = true
+ disable_sealwrap = true
+ disable_printable_check = true
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_bad_https_storage.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_bad_https_storage.hcl
new file mode 100644
index 0000000..f8b5d77
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_bad_https_storage.hcl
@@ -0,0 +1,52 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1027"
+    tls_disable = true
+}
+
+backend "consul" {
+    address = "127.0.0.1:8500"
+    foo = "bar"
+    advertise_addr = "foo"
+    scheme = "https"
+    tls_cert_file = "./../vault/diagnose/test-fixtures/expiredcert.pem"
+    tls_key_file = "./../vault/diagnose/test-fixtures/expiredprivatekey.pem"
+}
+
+ha_backend "consul" {
+    address = "127.0.0.1:8500"
+    bar = "baz"
+    advertise_addr = "https://127.0.0.1:8500"
+    disable_clustering = "true"
+}
+
+service_registration "consul" {
+    foo = "bar"
+}
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    metrics_prefix = "myprefix"
+}
+
+sentinel {
+    additional_enabled_modules = []
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_printable_check = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_hastorage_bad_https.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_hastorage_bad_https.hcl
new file mode 100644
index 0000000..deded2d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_hastorage_bad_https.hcl
@@ -0,0 +1,54 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1028"
+    tls_disable = true
+}
+
+backend "consul" {
+    foo = "bar"
+    advertise_addr = "foo"
+    address = "http://remoteconsulserverIP:1028"
+}
+
+ha_backend "consul" {
+    bar = "baz"
+    address = "https://remoteconsulserverIP:1028"
+    advertise_addr = "snafu"
+    disable_clustering = "true"
+    scheme = "https"
+    tls_cert_file = "./../vault/diagnose/test-fixtures/expiredcert.pem"
+    tls_key_file = "./../vault/diagnose/test-fixtures/expiredprivatekey.pem"
+}
+
+service_registration "consul" {
+    foo = "bar"
+    address = "127.0.0.1:1028"
+
+}
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    metrics_prefix = "myprefix"
+}
+
+sentinel {
+    additional_enabled_modules = []
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_printable_check = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_ok.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_ok.hcl
new file mode 100644
index 0000000..c4044c9
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_diagnose_ok.hcl
@@ -0,0 +1,46 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1024"
+    tls_disable = true
+}
+
+backend "consul" {
+    address = "127.0.0.1:8500"
+    foo = "bar"
+    advertise_addr = "foo"
+}
+
+ha_backend "consul" {
+    address = "127.0.0.1:8500"
+    bar = "baz"
+    advertise_addr = "https://127.0.0.1:8500"
+    disable_clustering = "true"
+}
+
+service_registration "consul" {
+    address = "127.0.0.1:8500"
+    foo = "bar"
+}
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    metrics_prefix = "myprefix"
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_printable_check = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_raft.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_raft.hcl
new file mode 100644
index 0000000..657641a
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_raft.hcl
@@ -0,0 +1,38 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1024"
+    tls_disable = true
+}
+
+storage "raft" {
+  path = "./server/test-fixtures/raft_storage_file.db"
+  node_id = "raft_node_1"
+}
+cluster_addr = "http://127.0.0.1:8201"
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    metrics_prefix = "myprefix"
+}
+
+sentinel {
+    additional_enabled_modules = []
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_printable_check = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_seals.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_seals.hcl
new file mode 100644
index 0000000..7917dc1
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%config_seals.hcl
@@ -0,0 +1,34 @@
+listener "tcp" {
+  address = "127.0.0.1:443"
+}
+
+backend "consul" {
+}
+
+seal "pkcs11" {
+  purpose = "many,purposes"
+  lib = "/usr/lib/libcklog2.so"
+  slot = "0.0"
+  pin = "XXXXXXXX"
+  key_label = "HASHICORP"
+  mechanism = "0x1082"
+  hmac_mechanism = "0x0251"
+  hmac_key_label = "vault-hsm-hmac-key"
+  default_hmac_key_label = "vault-hsm-hmac-key"
+  generate_key = "true"
+}
+
+seal "pkcs11" {
+  purpose = "single"
+  disabled = "true"
+  lib = "/usr/lib/libcklog2.so"
+  slot = "0.0"
+  pin = "XXXXXXXX"
+  key_label = "HASHICORP"
+  mechanism = 0x1082
+  hmac_mechanism = 0x0251
+  hmac_key_label = "vault-hsm-hmac-key"
+  default_hmac_key_label = "vault-hsm-hmac-key"
+  generate_key = "true"
+}
+
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%diagnose_bad_https_consul_sr.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%diagnose_bad_https_consul_sr.hcl
new file mode 100644
index 0000000..49d1de0
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%diagnose_bad_https_consul_sr.hcl
@@ -0,0 +1,52 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1029"
+    tls_disable = true
+}
+
+backend "consul" {
+    foo = "bar"
+    advertise_addr = "foo"
+    address = "127.0.0.1:8500"
+}
+
+ha_backend "consul" {
+    bar = "baz"
+    advertise_addr = "snafu"
+    disable_clustering = "true"
+    address = "127.0.0.1:8500"
+}
+
+service_registration "consul" {
+    address = "https://consulserverIP:8500"
+    foo = "bar"
+    tls_cert_file = "./../vault/diagnose/test-fixtures/expiredcert.pem"
+    tls_key_file = "./../vault/diagnose/test-fixtures/expiredprivatekey.pem"
+}
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    metrics_prefix = "myprefix"
+}
+
+sentinel {
+    additional_enabled_modules = []
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_printable_check = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%diagnose_ok_storage_direct_access.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%diagnose_ok_storage_direct_access.hcl
new file mode 100644
index 0000000..3b6a9ab
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%diagnose_ok_storage_direct_access.hcl
@@ -0,0 +1,27 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1024"
+    tls_disable = true
+}
+
+backend "consul" {
+    address = "consulserver:8500"
+    foo = "bar"
+    advertise_addr = "foo"
+}
+
+ha_backend "consul" {
+    address = "127.0.0.1:1024"
+    bar = "baz"
+    advertise_addr = "https://127.0.0.1:8500"
+    disable_clustering = "true"
+}
+
+service_registration "consul" {
+    address = "127.0.0.1:8500"
+    foo = "bar"
+}
\ No newline at end of file
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%nostore_config.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%nostore_config.hcl
new file mode 100644
index 0000000..667570c
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%nostore_config.hcl
@@ -0,0 +1,17 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1024"
+    tls_disable = true
+}
+
+ha_backend "consul" {
+    bar = "baz"
+    advertise_addr = "snafu"
+    disable_clustering = "true"
+}
+
+// No backend stanza in config!
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%raft_retry_join.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%raft_retry_join.hcl
new file mode 100644
index 0000000..a4f1f3d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%raft_retry_join.hcl
@@ -0,0 +1,19 @@
+storage "raft" {
+	path = "/storage/path/raft"
+	node_id = "raft1"
+	retry_join = [
+    {
+    "leader_api_addr" = "http://127.0.0.1:8200"
+    },
+    {
+    "leader_api_addr" = "http://127.0.0.2:8200"
+    },
+    {
+    "leader_api_addr" = "http://127.0.0.3:8200"
+    }
+  ]
+}
+listener "tcp" {
+	address = "127.0.0.1:8200"
+}
+disable_mlock = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%tls_config_ok.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%tls_config_ok.hcl
new file mode 100644
index 0000000..0dee4b4
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%server%test-fixtures%tls_config_ok.hcl
@@ -0,0 +1,51 @@
+disable_cache = true
+disable_mlock = true
+
+ui = true
+
+listener "tcp" {
+    address = "127.0.0.1:1025"
+    tls_cert_file = "./../api/test-fixtures/keys/cert.pem"
+    tls_key_file = "./../api/test-fixtures/keys/key.pem"
+}
+
+backend "consul" {
+    foo = "bar"
+    advertise_addr = "foo"
+    address = "127.0.0.1:8500"
+}
+
+ha_backend "consul" {
+    bar = "baz"
+    advertise_addr = "http://blah:8500"
+    disable_clustering = "true"
+    address = "127.0.0.1:8500"
+}
+
+service_registration "consul" {
+    foo = "bar"
+    address = "127.0.0.1:8500"
+}
+
+telemetry {
+    statsd_address = "bar"
+    usage_gauge_period = "5m"
+    maximum_gauge_cardinality = 100
+
+    statsite_address = "foo"
+    dogstatsd_addr = "127.0.0.1:7254"
+    dogstatsd_tags = ["tag_1:val_1", "tag_2:val_2"]
+    metrics_prefix = "myprefix"
+}
+
+sentinel {
+    additional_enabled_modules = []
+}
+
+max_lease_ttl = "10h"
+default_lease_ttl = "10h"
+cluster_name = "testcluster"
+pid_file = "./pidfile"
+raw_storage_endpoint = true
+disable_sealwrap = true
+disable_printable_check = true
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%test-fixtures%config.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%test-fixtures%config.hcl
new file mode 100644
index 0000000..31de773
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%test-fixtures%config.hcl
@@ -0,0 +1 @@
+token_helper = "foo"
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%test-fixtures%policy.hcl b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%test-fixtures%policy.hcl
new file mode 100644
index 0000000..7d46bde
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vaultcommand%test-fixtures%policy.hcl
@@ -0,0 +1,7 @@
+path "secret/foo" {
+  policy = "write"
+}
+
+path "secret/bar/*" {
+  capabilities = ["create", "read", "update"]
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%vscode-terraformtestFixture%sample.tf b/example/real_world_stuff/hashicorp/hashicorp%vscode-terraformtestFixture%sample.tf
new file mode 100644
index 0000000..7252cf3
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%vscode-terraformtestFixture%sample.tf
@@ -0,0 +1,9 @@
+provider "vault" {
+}
+
+resource "vault_auth_backend" "b" {
+}
+
+module "local" {
+  source = "./modules"
+}
diff --git a/example/real_world_stuff/hashicorp/hashicorp%waypoint-exampleskubernetes%nodejs-apply%waypoint.hcl b/example/real_world_stuff/hashicorp/hashicorp%waypoint-exampleskubernetes%nodejs-apply%waypoint.hcl
new file mode 100644
index 0000000..dfc578d
--- /dev/null
+++ b/example/real_world_stuff/hashicorp/hashicorp%waypoint-exampleskubernetes%nodejs-apply%waypoint.hcl
@@ -0,0 +1,31 @@
+project = "example-nodejs"
+
+app "example-nodejs" {
+  labels = {
+    "service" = "example-nodejs",
+    "env"     = "dev"
+  }
+
+  build {
+    use "pack" {}
+    registry {
+      use "docker" {
+        image = "example-nodejs"
+        tag   = "1"
+        local = true
+      }
+    }
+  }
+
+  deploy {
+    use "kubernetes-apply" {
+      // Template the directory so that we process each file in the directory
+      // as a template. This lets us inject the artifact from the previous step.
+      path = templatedir("${path.app}/k8s")
+
+      // This label determines what resources we own. Any that aren't present
+      // in our folder that match this label will be deleted.
+      prune_label = "app=myapp"
+    }
+  }
+}
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%main.tf
deleted file mode 100644
index a8a92be..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%bootstrap%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%bootstrap%main.tf
deleted file mode 100644
index 2dc7078..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%bootstrap%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%api-endpoint-canary%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%api-endpoint-canary%main.tf
deleted file mode 100644
index 671eaf1..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%api-endpoint-canary%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%main.tf
deleted file mode 100644
index 2bb276d..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%url-canary%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%url-canary%main.tf
deleted file mode 100644
index 65da0ee..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%canaries%url-canary%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%document_db%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%document_db%main.tf
deleted file mode 100644
index 0465181..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%document_db%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%eks%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%eks%main.tf
deleted file mode 100644
index b8f0f28..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%eks%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%eks_scaling%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%eks_scaling%main.tf
deleted file mode 100644
index be2ee11..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%eks_scaling%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%jenkins%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%jenkins%main.tf
deleted file mode 100644
index ac04d25..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%jenkins%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%node_group%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%node_group%main.tf
deleted file mode 100644
index 984a620..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%node_group%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%postgresql%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%postgresql%main.tf
deleted file mode 100644
index 702d2f4..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%postgresql%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%vpc%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%vpc%main.tf
deleted file mode 100644
index b31a862..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform%modules%vpc%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%main.tf
deleted file mode 100644
index a2f7167..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_data_layer%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_data_layer%main.tf
deleted file mode 100644
index ccbcf35..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_data_layer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_infrastructure%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_infrastructure%main.tf
deleted file mode 100644
index bffd9bf..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_infrastructure%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%analysis-gee%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%analysis-gee%main.tf
deleted file mode 100644
index 0677fb7..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%analysis-gee%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%aqueduct-analysis%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%aqueduct-analysis%main.tf
deleted file mode 100644
index a75f9bd..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%aqueduct-analysis%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%arcgis%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%arcgis%main.tf
deleted file mode 100644
index b85213e..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%arcgis%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%arcgis-proxy%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%arcgis-proxy%main.tf
deleted file mode 100644
index 850f8f0..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%arcgis-proxy%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%area%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%area%main.tf
deleted file mode 100644
index 37460e7..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%area%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%authorization%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%authorization%main.tf
deleted file mode 100644
index 2718a43..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%authorization%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%bigquery%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%bigquery%main.tf
deleted file mode 100644
index 8b2f38a..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%bigquery%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%biomass%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%biomass%main.tf
deleted file mode 100644
index 2a6d93c..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%biomass%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%carto%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%carto%main.tf
deleted file mode 100644
index 3651081..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%carto%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%converter%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%converter%main.tf
deleted file mode 100644
index a02617e..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%converter%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%dataset%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%dataset%main.tf
deleted file mode 100644
index b7d3699..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%dataset%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%doc-orchestrator%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%doc-orchestrator%main.tf
deleted file mode 100644
index ed44c58..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%doc-orchestrator%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%doc-swagger%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%doc-swagger%main.tf
deleted file mode 100644
index d38ca3d..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%doc-swagger%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%document-adapter%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%document-adapter%main.tf
deleted file mode 100644
index 771b239..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%document-adapter%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%endpoint%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%endpoint%main.tf
deleted file mode 100644
index 7cb5c73..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%endpoint%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fires-summary-stats%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fires-summary-stats%main.tf
deleted file mode 100644
index da45a3a..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fires-summary-stats%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forest-change%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forest-change%main.tf
deleted file mode 100644
index 555c9af..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forest-change%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forest-watcher-api%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forest-watcher-api%main.tf
deleted file mode 100644
index faa9180..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forest-watcher-api%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forms%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forms%main.tf
deleted file mode 100644
index a0bfdd0..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%forms%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-alerts%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-alerts%main.tf
deleted file mode 100644
index 32abd87..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-alerts%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-contextual-layers%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-contextual-layers%main.tf
deleted file mode 100644
index a7bfc2d..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-contextual-layers%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-teams%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-teams%main.tf
deleted file mode 100644
index 3e28b8c..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%fw-teams%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gee%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gee%main.tf
deleted file mode 100644
index 04ad4be..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gee%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gee-tiles%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gee-tiles%main.tf
deleted file mode 100644
index a76edf9..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gee-tiles%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%geostore%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%geostore%main.tf
deleted file mode 100644
index 6053a58..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%geostore%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-forma%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-forma%main.tf
deleted file mode 100644
index 8c297a7..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-forma%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-guira%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-guira%main.tf
deleted file mode 100644
index 8427c6d..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-guira%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-metadata%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-metadata%main.tf
deleted file mode 100644
index 6909ad9..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-metadata%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-ogr%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-ogr%main.tf
deleted file mode 100644
index a7c111d..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-ogr%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-ogr-gfw-pro%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-ogr-gfw-pro%main.tf
deleted file mode 100644
index 4640091..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-ogr-gfw-pro%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-prodes%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-prodes%main.tf
deleted file mode 100644
index 0ff6f76..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-prodes%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-umd%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-umd%main.tf
deleted file mode 100644
index bd979af..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-umd%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-user%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-user%main.tf
deleted file mode 100644
index 297f82d..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gfw-user%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%glad-analysis-tiled%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%glad-analysis-tiled%main.tf
deleted file mode 100644
index 19019c8..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%glad-analysis-tiled%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%graph-client%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%graph-client%main.tf
deleted file mode 100644
index f847a7f..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%graph-client%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gs-pro-config%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gs-pro-config%main.tf
deleted file mode 100644
index 6883093..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%gs-pro-config%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%high-res%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%high-res%main.tf
deleted file mode 100644
index ec3591e..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%high-res%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%imazon%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%imazon%main.tf
deleted file mode 100644
index e6e1d2e..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%imazon%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%layer%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%layer%main.tf
deleted file mode 100644
index d955951..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%layer%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%main.tf
deleted file mode 100644
index 0a099b5..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%metadata%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%metadata%main.tf
deleted file mode 100644
index 52001bb..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%metadata%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%nexgddp%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%nexgddp%main.tf
deleted file mode 100644
index 2ebf554..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%nexgddp%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%proxy%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%proxy%main.tf
deleted file mode 100644
index 3b29094..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%proxy%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%query%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%query%main.tf
deleted file mode 100644
index 27b6e50..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%query%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%quicc%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%quicc%main.tf
deleted file mode 100644
index 89622d6..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%quicc%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%resource%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%resource%main.tf
deleted file mode 100644
index 5f25d69..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%resource%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%resource-watch-manager%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%resource-watch-manager%main.tf
deleted file mode 100644
index 93b7dd8..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%resource-watch-manager%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%rw-lp%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%rw-lp%main.tf
deleted file mode 100644
index 018df24..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%rw-lp%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%salesforce-connector%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%salesforce-connector%main.tf
deleted file mode 100644
index ba8594a..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%salesforce-connector%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%story%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%story%main.tf
deleted file mode 100644
index b5daed7..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%story%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%subscriptions%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%subscriptions%main.tf
deleted file mode 100644
index bd6c381..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%subscriptions%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%task-executor%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%task-executor%main.tf
deleted file mode 100644
index 8fed15f..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%task-executor%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%true-color-tiles%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%true-color-tiles%main.tf
deleted file mode 100644
index 5564049..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%true-color-tiles%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%v1-redirect%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%v1-redirect%main.tf
deleted file mode 100644
index 97ecad2..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%v1-redirect%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%viirs-fires%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%viirs-fires%main.tf
deleted file mode 100644
index 76c1468..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%viirs-fires%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%vocabulary%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%vocabulary%main.tf
deleted file mode 100644
index 8927cae..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%vocabulary%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%webshot%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%webshot%main.tf
deleted file mode 100644
index e511abc..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%webshot%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%widget%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%widget%main.tf
deleted file mode 100644
index de43cb2..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_microservice_routing%widget%main.tf and /dev/null differ
diff --git a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_namespaces%main.tf b/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_namespaces%main.tf
deleted file mode 100644
index 8bb4175..0000000
Binary files a/example/real_world_stuff/resource-watch%api-infrastructureterraform-k8s-infrastructure%modules%k8s_namespaces%main.tf and /dev/null differ
diff --git a/grammar.js b/grammar.js
index 667dd23..ebb6a50 100644
--- a/grammar.js
+++ b/grammar.js
@@ -37,6 +37,8 @@ module.exports = grammar({
       choice(
         $.attribute,
         $.block,
+        // not to spec but handles .tfvars
+        $.object,
       ),
     ),
 
@@ -168,7 +170,7 @@ module.exports = grammar({
 
     attr_splat: $ => prec.right(seq(
       '.*',
-      repeat($.get_attr),
+      repeat(choice($.get_attr, $.index)),
     )),
 
     full_splat: $ => prec.right(seq(
diff --git a/src/grammar.json b/src/grammar.json
index db7e139..bfb21cf 100644
--- a/src/grammar.json
+++ b/src/grammar.json
@@ -25,6 +25,10 @@
           {
             "type": "SYMBOL",
             "name": "block"
+          },
+          {
+            "type": "SYMBOL",
+            "name": "object"
           }
         ]
       }
@@ -587,8 +591,17 @@
           {
             "type": "REPEAT",
             "content": {
-              "type": "SYMBOL",
-              "name": "get_attr"
+              "type": "CHOICE",
+              "members": [
+                {
+                  "type": "SYMBOL",
+                  "name": "get_attr"
+                },
+                {
+                  "type": "SYMBOL",
+                  "name": "index"
+                }
+              ]
             }
           }
         ]
diff --git a/src/node-types.json b/src/node-types.json
index c750cc5..9e0e922 100644
--- a/src/node-types.json
+++ b/src/node-types.json
@@ -10,6 +10,10 @@
         {
           "type": "get_attr",
           "named": true
+        },
+        {
+          "type": "index",
+          "named": true
         }
       ]
     }
@@ -126,6 +130,10 @@
         {
           "type": "block",
           "named": true
+        },
+        {
+          "type": "object",
+          "named": true
         }
       ]
     }
diff --git a/src/parser.c b/src/parser.c
index d95edda..e897da0 100644
--- a/src/parser.c
+++ b/src/parser.c
@@ -6,9 +6,9 @@
 #endif
 
 #define LANGUAGE_VERSION 13
-#define STATE_COUNT 390
+#define STATE_COUNT 383
 #define LARGE_STATE_COUNT 2
-#define SYMBOL_COUNT 105
+#define SYMBOL_COUNT 104
 #define ALIAS_COUNT 0
 #define TOKEN_COUNT 48
 #define EXTERNAL_TOKEN_COUNT 5
@@ -118,9 +118,8 @@ enum {
   aux_sym__tuple_elems_repeat1 = 99,
   aux_sym__object_elems_repeat1 = 100,
   aux_sym_attr_splat_repeat1 = 101,
-  aux_sym_full_splat_repeat1 = 102,
-  aux_sym_quoted_template_repeat1 = 103,
-  aux_sym_template_literal_repeat1 = 104,
+  aux_sym_quoted_template_repeat1 = 102,
+  aux_sym_template_literal_repeat1 = 103,
 };
 
 static const char * const ts_symbol_names[] = {
@@ -226,7 +225,6 @@ static const char * const ts_symbol_names[] = {
   [aux_sym__tuple_elems_repeat1] = "_tuple_elems_repeat1",
   [aux_sym__object_elems_repeat1] = "_object_elems_repeat1",
   [aux_sym_attr_splat_repeat1] = "attr_splat_repeat1",
-  [aux_sym_full_splat_repeat1] = "full_splat_repeat1",
   [aux_sym_quoted_template_repeat1] = "quoted_template_repeat1",
   [aux_sym_template_literal_repeat1] = "template_literal_repeat1",
 };
@@ -334,7 +332,6 @@ static const TSSymbol ts_symbol_map[] = {
   [aux_sym__tuple_elems_repeat1] = aux_sym__tuple_elems_repeat1,
   [aux_sym__object_elems_repeat1] = aux_sym__object_elems_repeat1,
   [aux_sym_attr_splat_repeat1] = aux_sym_attr_splat_repeat1,
-  [aux_sym_full_splat_repeat1] = aux_sym_full_splat_repeat1,
   [aux_sym_quoted_template_repeat1] = aux_sym_quoted_template_repeat1,
   [aux_sym_template_literal_repeat1] = aux_sym_template_literal_repeat1,
 };
@@ -748,10 +745,6 @@ static const TSSymbolMetadata ts_symbol_metadata[] = {
     .visible = false,
     .named = false,
   },
-  [aux_sym_full_splat_repeat1] = {
-    .visible = false,
-    .named = false,
-  },
   [aux_sym_quoted_template_repeat1] = {
     .visible = false,
     .named = false,
@@ -6406,10 +6399,10 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [5] = {.lex_state = 2, .external_lex_state = 2},
   [6] = {.lex_state = 1, .external_lex_state = 2},
   [7] = {.lex_state = 1, .external_lex_state = 2},
-  [8] = {.lex_state = 1, .external_lex_state = 2},
+  [8] = {.lex_state = 2, .external_lex_state = 2},
   [9] = {.lex_state = 2, .external_lex_state = 2},
   [10] = {.lex_state = 2, .external_lex_state = 2},
-  [11] = {.lex_state = 2, .external_lex_state = 2},
+  [11] = {.lex_state = 1, .external_lex_state = 2},
   [12] = {.lex_state = 2, .external_lex_state = 2},
   [13] = {.lex_state = 1, .external_lex_state = 2},
   [14] = {.lex_state = 1, .external_lex_state = 2},
@@ -6424,19 +6417,19 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [23] = {.lex_state = 1, .external_lex_state = 2},
   [24] = {.lex_state = 1, .external_lex_state = 2},
   [25] = {.lex_state = 1, .external_lex_state = 2},
-  [26] = {.lex_state = 1, .external_lex_state = 2},
+  [26] = {.lex_state = 29},
   [27] = {.lex_state = 29},
-  [28] = {.lex_state = 1, .external_lex_state = 2},
-  [29] = {.lex_state = 1, .external_lex_state = 2},
-  [30] = {.lex_state = 1, .external_lex_state = 2},
-  [31] = {.lex_state = 29},
+  [28] = {.lex_state = 29},
+  [29] = {.lex_state = 29},
+  [30] = {.lex_state = 29},
+  [31] = {.lex_state = 1, .external_lex_state = 2},
   [32] = {.lex_state = 29},
   [33] = {.lex_state = 29},
-  [34] = {.lex_state = 29},
+  [34] = {.lex_state = 1, .external_lex_state = 2},
   [35] = {.lex_state = 29},
-  [36] = {.lex_state = 29},
+  [36] = {.lex_state = 1, .external_lex_state = 2},
   [37] = {.lex_state = 1, .external_lex_state = 2},
-  [38] = {.lex_state = 29},
+  [38] = {.lex_state = 1, .external_lex_state = 2},
   [39] = {.lex_state = 1, .external_lex_state = 2},
   [40] = {.lex_state = 1, .external_lex_state = 2},
   [41] = {.lex_state = 1, .external_lex_state = 2},
@@ -6447,8 +6440,8 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [46] = {.lex_state = 1, .external_lex_state = 2},
   [47] = {.lex_state = 1, .external_lex_state = 2},
   [48] = {.lex_state = 1, .external_lex_state = 2},
-  [49] = {.lex_state = 1, .external_lex_state = 2},
-  [50] = {.lex_state = 1, .external_lex_state = 2},
+  [49] = {.lex_state = 29},
+  [50] = {.lex_state = 29},
   [51] = {.lex_state = 1, .external_lex_state = 2},
   [52] = {.lex_state = 1, .external_lex_state = 2},
   [53] = {.lex_state = 1, .external_lex_state = 2},
@@ -6467,17 +6460,17 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [66] = {.lex_state = 1, .external_lex_state = 2},
   [67] = {.lex_state = 1, .external_lex_state = 2},
   [68] = {.lex_state = 1, .external_lex_state = 2},
-  [69] = {.lex_state = 1, .external_lex_state = 2},
+  [69] = {.lex_state = 29},
   [70] = {.lex_state = 1, .external_lex_state = 2},
   [71] = {.lex_state = 1, .external_lex_state = 2},
   [72] = {.lex_state = 1, .external_lex_state = 2},
   [73] = {.lex_state = 1, .external_lex_state = 2},
   [74] = {.lex_state = 1, .external_lex_state = 2},
-  [75] = {.lex_state = 1, .external_lex_state = 2},
-  [76] = {.lex_state = 1, .external_lex_state = 2},
-  [77] = {.lex_state = 29},
-  [78] = {.lex_state = 29},
-  [79] = {.lex_state = 29},
+  [75] = {.lex_state = 29},
+  [76] = {.lex_state = 29},
+  [77] = {.lex_state = 1, .external_lex_state = 2},
+  [78] = {.lex_state = 1, .external_lex_state = 2},
+  [79] = {.lex_state = 1, .external_lex_state = 2},
   [80] = {.lex_state = 1, .external_lex_state = 2},
   [81] = {.lex_state = 1, .external_lex_state = 2},
   [82] = {.lex_state = 1, .external_lex_state = 2},
@@ -6512,10 +6505,10 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [111] = {.lex_state = 1, .external_lex_state = 2},
   [112] = {.lex_state = 1, .external_lex_state = 2},
   [113] = {.lex_state = 1, .external_lex_state = 2},
-  [114] = {.lex_state = 1, .external_lex_state = 2},
-  [115] = {.lex_state = 29},
+  [114] = {.lex_state = 29},
+  [115] = {.lex_state = 1, .external_lex_state = 2},
   [116] = {.lex_state = 1, .external_lex_state = 2},
-  [117] = {.lex_state = 29},
+  [117] = {.lex_state = 1, .external_lex_state = 2},
   [118] = {.lex_state = 1, .external_lex_state = 2},
   [119] = {.lex_state = 1, .external_lex_state = 2},
   [120] = {.lex_state = 1, .external_lex_state = 2},
@@ -6525,7 +6518,7 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [124] = {.lex_state = 1, .external_lex_state = 2},
   [125] = {.lex_state = 1, .external_lex_state = 2},
   [126] = {.lex_state = 1, .external_lex_state = 2},
-  [127] = {.lex_state = 29},
+  [127] = {.lex_state = 1, .external_lex_state = 2},
   [128] = {.lex_state = 1, .external_lex_state = 2},
   [129] = {.lex_state = 1, .external_lex_state = 2},
   [130] = {.lex_state = 1, .external_lex_state = 2},
@@ -6536,35 +6529,35 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [135] = {.lex_state = 1, .external_lex_state = 2},
   [136] = {.lex_state = 1, .external_lex_state = 2},
   [137] = {.lex_state = 1, .external_lex_state = 2},
-  [138] = {.lex_state = 29},
+  [138] = {.lex_state = 1, .external_lex_state = 2},
   [139] = {.lex_state = 1, .external_lex_state = 2},
   [140] = {.lex_state = 1, .external_lex_state = 2},
   [141] = {.lex_state = 1, .external_lex_state = 2},
   [142] = {.lex_state = 1, .external_lex_state = 2},
-  [143] = {.lex_state = 1, .external_lex_state = 2},
-  [144] = {.lex_state = 0},
-  [145] = {.lex_state = 0},
-  [146] = {.lex_state = 0},
-  [147] = {.lex_state = 0},
+  [143] = {.lex_state = 29},
+  [144] = {.lex_state = 29},
+  [145] = {.lex_state = 29},
+  [146] = {.lex_state = 29},
+  [147] = {.lex_state = 29},
   [148] = {.lex_state = 0},
-  [149] = {.lex_state = 0},
-  [150] = {.lex_state = 0},
-  [151] = {.lex_state = 0},
-  [152] = {.lex_state = 29},
+  [149] = {.lex_state = 29},
+  [150] = {.lex_state = 29},
+  [151] = {.lex_state = 29},
+  [152] = {.lex_state = 0},
   [153] = {.lex_state = 29},
   [154] = {.lex_state = 29},
-  [155] = {.lex_state = 29},
-  [156] = {.lex_state = 29},
+  [155] = {.lex_state = 0},
+  [156] = {.lex_state = 0},
   [157] = {.lex_state = 29},
-  [158] = {.lex_state = 29},
+  [158] = {.lex_state = 0},
   [159] = {.lex_state = 29},
-  [160] = {.lex_state = 29},
+  [160] = {.lex_state = 0},
   [161] = {.lex_state = 29},
   [162] = {.lex_state = 29},
   [163] = {.lex_state = 29},
   [164] = {.lex_state = 29},
-  [165] = {.lex_state = 29},
-  [166] = {.lex_state = 29},
+  [165] = {.lex_state = 0},
+  [166] = {.lex_state = 0},
   [167] = {.lex_state = 29},
   [168] = {.lex_state = 29},
   [169] = {.lex_state = 29},
@@ -6577,12 +6570,12 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [176] = {.lex_state = 29},
   [177] = {.lex_state = 29},
   [178] = {.lex_state = 29},
-  [179] = {.lex_state = 29},
+  [179] = {.lex_state = 0},
   [180] = {.lex_state = 0},
-  [181] = {.lex_state = 0, .external_lex_state = 3},
+  [181] = {.lex_state = 0},
   [182] = {.lex_state = 0},
-  [183] = {.lex_state = 0, .external_lex_state = 3},
-  [184] = {.lex_state = 0},
+  [183] = {.lex_state = 0},
+  [184] = {.lex_state = 0, .external_lex_state = 3},
   [185] = {.lex_state = 0, .external_lex_state = 3},
   [186] = {.lex_state = 0, .external_lex_state = 3},
   [187] = {.lex_state = 0, .external_lex_state = 3},
@@ -6592,15 +6585,15 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [191] = {.lex_state = 0, .external_lex_state = 3},
   [192] = {.lex_state = 0, .external_lex_state = 3},
   [193] = {.lex_state = 0, .external_lex_state = 3},
-  [194] = {.lex_state = 0},
-  [195] = {.lex_state = 0},
-  [196] = {.lex_state = 0},
+  [194] = {.lex_state = 0, .external_lex_state = 3},
+  [195] = {.lex_state = 0, .external_lex_state = 3},
+  [196] = {.lex_state = 0, .external_lex_state = 3},
   [197] = {.lex_state = 0},
   [198] = {.lex_state = 0},
   [199] = {.lex_state = 0},
-  [200] = {.lex_state = 0, .external_lex_state = 3},
+  [200] = {.lex_state = 0},
   [201] = {.lex_state = 0},
-  [202] = {.lex_state = 0, .external_lex_state = 3},
+  [202] = {.lex_state = 0},
   [203] = {.lex_state = 0},
   [204] = {.lex_state = 0},
   [205] = {.lex_state = 0},
@@ -6626,8 +6619,8 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [225] = {.lex_state = 0},
   [226] = {.lex_state = 0},
   [227] = {.lex_state = 0, .external_lex_state = 3},
-  [228] = {.lex_state = 0},
-  [229] = {.lex_state = 0},
+  [228] = {.lex_state = 0, .external_lex_state = 3},
+  [229] = {.lex_state = 0, .external_lex_state = 3},
   [230] = {.lex_state = 0, .external_lex_state = 3},
   [231] = {.lex_state = 0, .external_lex_state = 3},
   [232] = {.lex_state = 0, .external_lex_state = 3},
@@ -6653,20 +6646,20 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [252] = {.lex_state = 0, .external_lex_state = 3},
   [253] = {.lex_state = 0, .external_lex_state = 3},
   [254] = {.lex_state = 0, .external_lex_state = 3},
-  [255] = {.lex_state = 0, .external_lex_state = 3},
-  [256] = {.lex_state = 0, .external_lex_state = 3},
-  [257] = {.lex_state = 0, .external_lex_state = 3},
+  [255] = {.lex_state = 1, .external_lex_state = 2},
+  [256] = {.lex_state = 1, .external_lex_state = 2},
+  [257] = {.lex_state = 1, .external_lex_state = 2},
   [258] = {.lex_state = 1, .external_lex_state = 2},
   [259] = {.lex_state = 1, .external_lex_state = 2},
   [260] = {.lex_state = 1, .external_lex_state = 2},
-  [261] = {.lex_state = 1, .external_lex_state = 2},
+  [261] = {.lex_state = 29},
   [262] = {.lex_state = 1, .external_lex_state = 2},
-  [263] = {.lex_state = 1, .external_lex_state = 2},
+  [263] = {.lex_state = 29},
   [264] = {.lex_state = 1, .external_lex_state = 2},
-  [265] = {.lex_state = 1, .external_lex_state = 2},
+  [265] = {.lex_state = 29},
   [266] = {.lex_state = 29},
   [267] = {.lex_state = 29},
-  [268] = {.lex_state = 0, .external_lex_state = 4},
+  [268] = {.lex_state = 29},
   [269] = {.lex_state = 0, .external_lex_state = 4},
   [270] = {.lex_state = 0, .external_lex_state = 4},
   [271] = {.lex_state = 0, .external_lex_state = 4},
@@ -6675,20 +6668,20 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [274] = {.lex_state = 0, .external_lex_state = 4},
   [275] = {.lex_state = 0, .external_lex_state = 4},
   [276] = {.lex_state = 0, .external_lex_state = 4},
-  [277] = {.lex_state = 3, .external_lex_state = 2},
-  [278] = {.lex_state = 29},
-  [279] = {.lex_state = 29},
+  [277] = {.lex_state = 0, .external_lex_state = 4},
+  [278] = {.lex_state = 3, .external_lex_state = 2},
+  [279] = {.lex_state = 0},
   [280] = {.lex_state = 0},
-  [281] = {.lex_state = 29, .external_lex_state = 2},
+  [281] = {.lex_state = 0},
   [282] = {.lex_state = 0},
-  [283] = {.lex_state = 0},
+  [283] = {.lex_state = 29, .external_lex_state = 2},
   [284] = {.lex_state = 0},
-  [285] = {.lex_state = 29},
+  [285] = {.lex_state = 0},
   [286] = {.lex_state = 0},
   [287] = {.lex_state = 0},
   [288] = {.lex_state = 29},
-  [289] = {.lex_state = 29, .external_lex_state = 2},
-  [290] = {.lex_state = 0},
+  [289] = {.lex_state = 0},
+  [290] = {.lex_state = 29, .external_lex_state = 2},
   [291] = {.lex_state = 0},
   [292] = {.lex_state = 0},
   [293] = {.lex_state = 0},
@@ -6696,98 +6689,91 @@ static const TSLexMode ts_lex_modes[STATE_COUNT] = {
   [295] = {.lex_state = 0},
   [296] = {.lex_state = 0},
   [297] = {.lex_state = 0},
-  [298] = {.lex_state = 0},
-  [299] = {.lex_state = 0},
+  [298] = {.lex_state = 29},
+  [299] = {.lex_state = 29},
   [300] = {.lex_state = 0},
-  [301] = {.lex_state = 0},
-  [302] = {.lex_state = 29},
-  [303] = {.lex_state = 0, .external_lex_state = 4},
+  [301] = {.lex_state = 0, .external_lex_state = 4},
+  [302] = {.lex_state = 0, .external_lex_state = 4},
+  [303] = {.lex_state = 0},
   [304] = {.lex_state = 0},
-  [305] = {.lex_state = 0, .external_lex_state = 4},
-  [306] = {.lex_state = 0},
+  [305] = {.lex_state = 0},
+  [306] = {.lex_state = 29},
   [307] = {.lex_state = 0, .external_lex_state = 4},
   [308] = {.lex_state = 0, .external_lex_state = 4},
-  [309] = {.lex_state = 0, .external_lex_state = 3},
+  [309] = {.lex_state = 0, .external_lex_state = 4},
   [310] = {.lex_state = 0, .external_lex_state = 5},
-  [311] = {.lex_state = 0, .external_lex_state = 4},
-  [312] = {.lex_state = 0, .external_lex_state = 6},
-  [313] = {.lex_state = 2},
-  [314] = {.lex_state = 29},
-  [315] = {.lex_state = 0, .external_lex_state = 3},
+  [311] = {.lex_state = 0},
+  [312] = {.lex_state = 2},
+  [313] = {.lex_state = 0, .external_lex_state = 6},
+  [314] = {.lex_state = 0, .external_lex_state = 3},
+  [315] = {.lex_state = 0, .external_lex_state = 4},
   [316] = {.lex_state = 0, .external_lex_state = 4},
   [317] = {.lex_state = 0, .external_lex_state = 4},
-  [318] = {.lex_state = 29},
-  [319] = {.lex_state = 29},
-  [320] = {.lex_state = 0, .external_lex_state = 3},
-  [321] = {.lex_state = 0, .external_lex_state = 4},
-  [322] = {.lex_state = 0},
-  [323] = {.lex_state = 0, .external_lex_state = 6},
-  [324] = {.lex_state = 0, .external_lex_state = 3},
-  [325] = {.lex_state = 29, .external_lex_state = 2},
-  [326] = {.lex_state = 0, .external_lex_state = 4},
+  [318] = {.lex_state = 0, .external_lex_state = 3},
+  [319] = {.lex_state = 0, .external_lex_state = 4},
+  [320] = {.lex_state = 0, .external_lex_state = 6},
+  [321] = {.lex_state = 0, .external_lex_state = 3},
+  [322] = {.lex_state = 0, .external_lex_state = 3},
+  [323] = {.lex_state = 29, .external_lex_state = 2},
+  [324] = {.lex_state = 0},
+  [325] = {.lex_state = 0},
+  [326] = {.lex_state = 1},
   [327] = {.lex_state = 0},
-  [328] = {.lex_state = 29},
+  [328] = {.lex_state = 0},
   [329] = {.lex_state = 0},
   [330] = {.lex_state = 0},
   [331] = {.lex_state = 0},
   [332] = {.lex_state = 0},
   [333] = {.lex_state = 0},
   [334] = {.lex_state = 0},
-  [335] = {.lex_state = 1},
+  [335] = {.lex_state = 0},
   [336] = {.lex_state = 0},
   [337] = {.lex_state = 0},
   [338] = {.lex_state = 0},
   [339] = {.lex_state = 0},
   [340] = {.lex_state = 0},
-  [341] = {.lex_state = 0},
-  [342] = {.lex_state = 1},
+  [341] = {.lex_state = 29},
+  [342] = {.lex_state = 29},
   [343] = {.lex_state = 0},
   [344] = {.lex_state = 0},
   [345] = {.lex_state = 0},
   [346] = {.lex_state = 0},
-  [347] = {.lex_state = 29},
+  [347] = {.lex_state = 0},
   [348] = {.lex_state = 0},
   [349] = {.lex_state = 0},
   [350] = {.lex_state = 0},
   [351] = {.lex_state = 0},
-  [352] = {.lex_state = 0},
-  [353] = {.lex_state = 0},
-  [354] = {.lex_state = 1},
+  [352] = {.lex_state = 29},
+  [353] = {.lex_state = 1},
+  [354] = {.lex_state = 0},
   [355] = {.lex_state = 0},
   [356] = {.lex_state = 0},
   [357] = {.lex_state = 0},
-  [358] = {.lex_state = 29},
+  [358] = {.lex_state = 0},
   [359] = {.lex_state = 0},
   [360] = {.lex_state = 0},
   [361] = {.lex_state = 0},
   [362] = {.lex_state = 0},
-  [363] = {.lex_state = 0},
-  [364] = {.lex_state = 0},
+  [363] = {.lex_state = 29},
+  [364] = {.lex_state = 1},
   [365] = {.lex_state = 0},
-  [366] = {.lex_state = 1},
+  [366] = {.lex_state = 0},
   [367] = {.lex_state = 0},
   [368] = {.lex_state = 0},
   [369] = {.lex_state = 0},
-  [370] = {.lex_state = 29},
-  [371] = {.lex_state = 0},
+  [370] = {.lex_state = 0},
+  [371] = {.lex_state = 1},
   [372] = {.lex_state = 0},
-  [373] = {.lex_state = 0},
-  [374] = {.lex_state = 0},
-  [375] = {.lex_state = 0},
-  [376] = {.lex_state = 29},
+  [373] = {.lex_state = 0, .external_lex_state = 7},
+  [374] = {.lex_state = 0, .external_lex_state = 3},
+  [375] = {.lex_state = 0, .external_lex_state = 3},
+  [376] = {.lex_state = 0},
   [377] = {.lex_state = 29},
-  [378] = {.lex_state = 29},
+  [378] = {.lex_state = 0},
   [379] = {.lex_state = 0},
-  [380] = {.lex_state = 0, .external_lex_state = 7},
-  [381] = {.lex_state = 29},
-  [382] = {.lex_state = 29},
-  [383] = {.lex_state = 0, .external_lex_state = 3},
-  [384] = {.lex_state = 0},
-  [385] = {.lex_state = 0, .external_lex_state = 3},
-  [386] = {.lex_state = 29},
-  [387] = {.lex_state = 0},
-  [388] = {.lex_state = 0},
-  [389] = {.lex_state = 0},
+  [380] = {.lex_state = 29},
+  [381] = {.lex_state = 0},
+  [382] = {.lex_state = 0},
 };
 
 enum {
@@ -6887,13 +6873,16 @@ static const uint16_t ts_parse_table[LARGE_STATE_COUNT][SYMBOL_COUNT] = {
     [sym__template_interpolation_end] = ACTIONS(1),
   },
   [1] = {
-    [sym_config_file] = STATE(389),
-    [sym_body] = STATE(388),
-    [sym_attribute] = STATE(288),
-    [sym_block] = STATE(288),
-    [aux_sym_body_repeat1] = STATE(288),
+    [sym_config_file] = STATE(382),
+    [sym_body] = STATE(381),
+    [sym_attribute] = STATE(268),
+    [sym_block] = STATE(268),
+    [sym_object] = STATE(268),
+    [sym__object_start] = STATE(13),
+    [aux_sym_body_repeat1] = STATE(268),
     [ts_builtin_sym_end] = ACTIONS(5),
-    [sym_identifier] = ACTIONS(7),
+    [anon_sym_LBRACE] = ACTIONS(7),
+    [sym_identifier] = ACTIONS(9),
     [sym_comment] = ACTIONS(3),
     [sym__whitespace] = ACTIONS(3),
   },
@@ -6901,5516 +6890,63 @@ static const uint16_t ts_parse_table[LARGE_STATE_COUNT][SYMBOL_COUNT] = {
 
 static const uint16_t ts_small_parse_table[] = {
   [0] = 27,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
     ACTIONS(11), 1,
-      anon_sym_RBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(7), 1,
-      sym_object_elem,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(69), 1,
-      sym_for_intro,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(226), 1,
-      sym__object_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    STATE(362), 1,
-      sym__object_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [97] = 27,
-    ACTIONS(9), 1,
       anon_sym_LBRACE,
     ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(33), 1,
       anon_sym_RBRACE,
-    STATE(3), 1,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
       sym__object_start,
-    STATE(7), 1,
+    STATE(11), 1,
       sym_object_elem,
-    STATE(10), 1,
+    STATE(12), 1,
       sym__tuple_start,
     STATE(65), 1,
       sym_for_intro,
-    STATE(163), 1,
-      sym__object_end,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    STATE(375), 1,
-      sym__object_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [194] = 27,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(35), 1,
-      anon_sym_RBRACE,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(7), 1,
-      sym_object_elem,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(64), 1,
-      sym_for_intro,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(230), 1,
-      sym__object_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    STATE(367), 1,
-      sym__object_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [291] = 27,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(37), 1,
-      anon_sym_RBRACE,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(7), 1,
-      sym_object_elem,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(45), 1,
-      sym_for_intro,
-    STATE(112), 1,
-      sym__object_end,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    STATE(365), 1,
-      sym__object_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [388] = 25,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(39), 1,
-      anon_sym_RBRACE,
-    ACTIONS(41), 1,
-      anon_sym_COMMA,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(26), 1,
-      sym__comma,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(8), 2,
-      sym_object_elem,
-      aux_sym__object_elems_repeat1,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [480] = 25,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(43), 1,
-      anon_sym_RBRACE,
-    ACTIONS(45), 1,
-      anon_sym_COMMA,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(25), 1,
-      sym__comma,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(6), 2,
-      sym_object_elem,
-      aux_sym__object_elems_repeat1,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [572] = 25,
-    ACTIONS(47), 1,
-      anon_sym_LBRACE,
-    ACTIONS(50), 1,
-      anon_sym_RBRACE,
-    ACTIONS(52), 1,
-      sym_identifier,
-    ACTIONS(55), 1,
-      anon_sym_LPAREN,
-    ACTIONS(58), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(61), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(67), 1,
-      sym_null_lit,
-    ACTIONS(70), 1,
-      anon_sym_COMMA,
-    ACTIONS(73), 1,
-      anon_sym_LBRACK,
-    ACTIONS(79), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(37), 1,
-      sym__comma,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(64), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(76), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(8), 2,
-      sym_object_elem,
-      aux_sym__object_elems_repeat1,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [664] = 26,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(82), 1,
-      anon_sym_RBRACK,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(43), 1,
-      sym_for_intro,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(223), 1,
-      sym__tuple_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(296), 1,
-      sym_expression,
-    STATE(363), 1,
-      sym__tuple_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [758] = 26,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(84), 1,
-      anon_sym_RBRACK,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(60), 1,
-      sym_for_intro,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(168), 1,
-      sym__tuple_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(296), 1,
-      sym_expression,
-    STATE(351), 1,
-      sym__tuple_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [852] = 26,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(86), 1,
-      anon_sym_RBRACK,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(61), 1,
-      sym_for_intro,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(251), 1,
-      sym__tuple_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(296), 1,
-      sym_expression,
-    STATE(341), 1,
-      sym__tuple_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [946] = 26,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(27), 1,
-      anon_sym_for,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(88), 1,
-      anon_sym_RBRACK,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(66), 1,
-      sym_for_intro,
-    STATE(141), 1,
-      sym__tuple_end,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(296), 1,
-      sym_expression,
-    STATE(345), 1,
-      sym__tuple_elems,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [1040] = 11,
-    ACTIONS(98), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(94), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(96), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(100), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(102), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 8,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-    ACTIONS(90), 13,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [1102] = 24,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(104), 1,
-      anon_sym_RPAREN,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(166), 1,
-      sym__function_call_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(280), 1,
-      sym_expression,
-    STATE(356), 1,
-      sym_function_arguments,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [1190] = 18,
-    ACTIONS(98), 1,
-      anon_sym_SLASH,
-    ACTIONS(110), 1,
-      anon_sym_LBRACK,
-    ACTIONS(112), 1,
-      anon_sym_DOT,
-    ACTIONS(114), 1,
-      anon_sym_DOT_STAR,
-    ACTIONS(116), 1,
-      anon_sym_LBRACK_STAR_RBRACK,
-    ACTIONS(120), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(122), 1,
-      anon_sym_PIPE_PIPE,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(94), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(96), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(100), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(102), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(118), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(108), 6,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_BANG,
-    ACTIONS(106), 7,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_QMARK,
-  [1266] = 6,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(126), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(124), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [1318] = 8,
-    ACTIONS(98), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(96), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 10,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 17,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [1374] = 9,
-    ACTIONS(98), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(94), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(96), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 10,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 15,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [1432] = 6,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [1484] = 24,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(128), 1,
-      anon_sym_RPAREN,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(229), 1,
-      sym__function_call_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(280), 1,
-      sym_expression,
-    STATE(359), 1,
-      sym_function_arguments,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [1572] = 13,
-    ACTIONS(98), 1,
-      anon_sym_SLASH,
-    ACTIONS(120), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(94), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(96), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(100), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(102), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(118), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 8,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-    ACTIONS(90), 10,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_PIPE_PIPE,
-  [1638] = 12,
-    ACTIONS(98), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(94), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(96), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(100), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(102), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(118), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(129), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(131), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 8,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-    ACTIONS(90), 11,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [1702] = 24,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(130), 1,
-      anon_sym_RPAREN,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(239), 1,
-      sym__function_call_end,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(280), 1,
-      sym_expression,
-    STATE(364), 1,
-      sym_function_arguments,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [1790] = 24,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(132), 1,
-      anon_sym_RPAREN,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(125), 1,
-      sym__function_call_end,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(280), 1,
-      sym_expression,
-    STATE(331), 1,
-      sym_function_arguments,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [1878] = 23,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(39), 1,
-      anon_sym_RBRACE,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(261), 1,
-      sym_object_elem,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [1963] = 23,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(134), 1,
-      anon_sym_RBRACE,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(261), 1,
-      sym_object_elem,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [2048] = 9,
-    ACTIONS(140), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(136), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(138), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 5,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 18,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2104] = 7,
-    ACTIONS(110), 1,
-      anon_sym_LBRACK,
-    ACTIONS(112), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(40), 3,
-      sym_index,
-      sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(144), 9,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(142), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2156] = 22,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(146), 1,
-      anon_sym_RBRACK,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(291), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [2238] = 22,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    ACTIONS(148), 1,
-      anon_sym_RBRACK,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(291), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [2320] = 13,
-    ACTIONS(140), 1,
-      anon_sym_SLASH,
-    ACTIONS(156), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(136), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(138), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(150), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(152), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(154), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    ACTIONS(92), 3,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(90), 13,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_PIPE_PIPE,
-  [2384] = 12,
-    ACTIONS(140), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(136), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(138), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(150), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(152), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(154), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    ACTIONS(92), 3,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(90), 14,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2446] = 11,
-    ACTIONS(140), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(136), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(138), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(150), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(152), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    ACTIONS(92), 3,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(90), 16,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2506] = 18,
-    ACTIONS(108), 1,
-      anon_sym_EQ,
-    ACTIONS(140), 1,
-      anon_sym_SLASH,
-    ACTIONS(156), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(158), 1,
-      anon_sym_LBRACK,
-    ACTIONS(160), 1,
-      anon_sym_DOT,
-    ACTIONS(162), 1,
-      anon_sym_DOT_STAR,
-    ACTIONS(164), 1,
-      anon_sym_LBRACK_STAR_RBRACK,
-    ACTIONS(166), 1,
-      anon_sym_PIPE_PIPE,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(136), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(138), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(150), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(152), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(154), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(106), 10,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-  [2580] = 6,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2630] = 8,
-    ACTIONS(140), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(138), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 5,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 20,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2684] = 22,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(261), 1,
-      sym_object_elem,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(313), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [2766] = 6,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(161), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(155), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(126), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(124), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2816] = 7,
-    ACTIONS(172), 1,
-      anon_sym_LBRACK,
-    ACTIONS(175), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(39), 3,
-      sym_index,
-      sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(170), 9,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(168), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2868] = 7,
-    ACTIONS(110), 1,
-      anon_sym_LBRACK,
-    ACTIONS(112), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(130), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(39), 3,
-      sym_index,
-      sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(180), 9,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(178), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [2920] = 22,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(200), 1,
-      sym_strip_marker,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    STATE(315), 1,
-      sym_expression,
-    STATE(324), 1,
-      sym_conditional,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(183), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3002] = 21,
-    ACTIONS(204), 1,
-      anon_sym_LBRACE,
-    ACTIONS(206), 1,
-      sym_identifier,
-    ACTIONS(208), 1,
-      anon_sym_LPAREN,
-    ACTIONS(210), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
-      sym_null_lit,
-    ACTIONS(218), 1,
-      anon_sym_LBRACK,
-    ACTIONS(222), 1,
-      sym__quoted_template_start,
-    STATE(5), 1,
-      sym__object_start,
-    STATE(12), 1,
-      sym__tuple_start,
     STATE(143), 1,
       sym_quoted_template,
-    STATE(258), 1,
+    STATE(161), 1,
+      sym__object_end,
+    STATE(263), 1,
       sym_conditional,
-    STATE(260), 1,
+    STATE(312), 1,
       sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(214), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(220), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(133), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(15), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3081] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(292), 1,
-      sym_conditional,
-    STATE(295), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3160] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(333), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3239] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(342), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3318] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(353), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3397] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(343), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3476] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(267), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3555] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(302), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3634] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(373), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3713] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(357), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3792] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(360), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3871] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(292), 1,
-      sym_conditional,
-    STATE(298), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [3950] = 21,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    STATE(309), 1,
-      sym_expression,
-    STATE(324), 1,
-      sym_conditional,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(183), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4029] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(330), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4108] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(334), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4187] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(322), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4266] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(346), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4345] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(282), 1,
-      sym_expression,
-    STATE(292), 1,
-      sym_conditional,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4424] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(292), 1,
-      sym_conditional,
-    STATE(294), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4503] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(292), 1,
-      sym_conditional,
-    STATE(297), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4582] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
     STATE(372), 1,
-      sym_expression,
+      sym__object_elems,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(21), 2,
+    ACTIONS(23), 2,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(29), 2,
+    ACTIONS(31), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(167), 2,
+    STATE(157), 2,
       sym_unary_operation,
       sym_binary_operation,
-    STATE(169), 2,
+    STATE(159), 2,
       sym_for_tuple_expr,
       sym_for_object_expr,
-    STATE(178), 2,
+    STATE(174), 2,
       sym_tuple,
       sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4661] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(283), 1,
-      sym_expression,
-    STATE(292), 1,
-      sym_conditional,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4740] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(366), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4819] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(335), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4898] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(292), 1,
-      sym_conditional,
-    STATE(293), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [4977] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(287), 1,
-      sym_expression,
-    STATE(292), 1,
-      sym_conditional,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5056] = 21,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    STATE(320), 1,
-      sym_expression,
-    STATE(324), 1,
-      sym_conditional,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(183), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5135] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(354), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5214] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(329), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5293] = 21,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    STATE(284), 1,
-      sym_expression,
-    STATE(292), 1,
-      sym_conditional,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(146), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5372] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(348), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5451] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(291), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5530] = 21,
-    ACTIONS(204), 1,
-      anon_sym_LBRACE,
-    ACTIONS(206), 1,
-      sym_identifier,
-    ACTIONS(208), 1,
-      anon_sym_LPAREN,
-    ACTIONS(210), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
-      sym_null_lit,
-    ACTIONS(218), 1,
-      anon_sym_LBRACK,
-    ACTIONS(222), 1,
-      sym__quoted_template_start,
-    STATE(5), 1,
-      sym__object_start,
-    STATE(12), 1,
-      sym__tuple_start,
-    STATE(143), 1,
-      sym_quoted_template,
-    STATE(258), 1,
-      sym_conditional,
-    STATE(259), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(214), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(220), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(133), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(15), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5609] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(361), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5688] = 21,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    STATE(266), 1,
-      sym_conditional,
-    STATE(369), 1,
-      sym_expression,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(34), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5767] = 7,
-    ACTIONS(244), 1,
-      anon_sym_LBRACK,
-    ACTIONS(247), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(77), 3,
-      sym_index,
-      sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(170), 4,
-      anon_sym_EQ,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(168), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [5817] = 7,
-    ACTIONS(158), 1,
-      anon_sym_LBRACK,
-    ACTIONS(160), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(77), 3,
-      sym_index,
-      sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(180), 4,
-      anon_sym_EQ,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(178), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [5867] = 7,
-    ACTIONS(158), 1,
-      anon_sym_LBRACK,
-    ACTIONS(160), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(162), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(78), 3,
-      sym_index,
-      sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(144), 4,
-      anon_sym_EQ,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(142), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [5917] = 19,
-    ACTIONS(204), 1,
-      anon_sym_LBRACE,
-    ACTIONS(206), 1,
-      sym_identifier,
-    ACTIONS(208), 1,
-      anon_sym_LPAREN,
-    ACTIONS(210), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
-      sym_null_lit,
-    ACTIONS(218), 1,
-      anon_sym_LBRACK,
-    ACTIONS(222), 1,
-      sym__quoted_template_start,
-    STATE(5), 1,
-      sym__object_start,
-    STATE(12), 1,
-      sym__tuple_start,
-    STATE(143), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(214), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(220), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(133), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(17), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [5990] = 19,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(188), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6063] = 19,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(147), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6136] = 19,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(148), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6209] = 19,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(144), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6282] = 19,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(149), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6355] = 19,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(150), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6428] = 19,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(151), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6501] = 19,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(38), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6574] = 19,
-    ACTIONS(224), 1,
-      anon_sym_LBRACE,
-    ACTIONS(226), 1,
-      sym_identifier,
-    ACTIONS(228), 1,
-      anon_sym_LPAREN,
-    ACTIONS(230), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(232), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(236), 1,
-      sym_null_lit,
-    ACTIONS(238), 1,
-      anon_sym_LBRACK,
-    ACTIONS(242), 1,
-      sym__quoted_template_start,
-    STATE(2), 1,
-      sym__object_start,
-    STATE(9), 1,
-      sym__tuple_start,
-    STATE(222), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(234), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(240), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(218), 2,
-      sym_tuple,
-      sym_object,
-    STATE(219), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(221), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(215), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(145), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6647] = 19,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(190), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6720] = 19,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(189), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6793] = 19,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(187), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6866] = 19,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(186), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [6939] = 19,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(185), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [7012] = 19,
-    ACTIONS(182), 1,
-      anon_sym_LBRACE,
-    ACTIONS(184), 1,
-      sym_identifier,
-    ACTIONS(186), 1,
-      anon_sym_LPAREN,
-    ACTIONS(188), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(190), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(194), 1,
-      sym_null_lit,
-    ACTIONS(196), 1,
-      anon_sym_LBRACK,
-    ACTIONS(202), 1,
-      sym__quoted_template_start,
-    STATE(4), 1,
-      sym__object_start,
-    STATE(11), 1,
-      sym__tuple_start,
-    STATE(249), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(192), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(198), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(231), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(238), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(257), 2,
-      sym_tuple,
-      sym_object,
-    STATE(256), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(181), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [7085] = 19,
-    ACTIONS(204), 1,
-      anon_sym_LBRACE,
-    ACTIONS(206), 1,
-      sym_identifier,
-    ACTIONS(208), 1,
-      anon_sym_LPAREN,
-    ACTIONS(210), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
-      sym_null_lit,
-    ACTIONS(218), 1,
-      anon_sym_LBRACK,
-    ACTIONS(222), 1,
-      sym__quoted_template_start,
-    STATE(5), 1,
-      sym__object_start,
-    STATE(12), 1,
-      sym__tuple_start,
-    STATE(143), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(214), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(220), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(133), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(16), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [7158] = 19,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(31), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [7231] = 5,
-    ACTIONS(254), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(106), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(252), 10,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(250), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [7276] = 19,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
+    STATE(176), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
@@ -12423,52 +6959,2300 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [7349] = 19,
-    ACTIONS(9), 1,
+  [97] = 27,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(35), 1,
+      anon_sym_RBRACE,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(11), 1,
+      sym_object_elem,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(83), 1,
+      sym_for_intro,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(243), 1,
+      sym__object_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    STATE(369), 1,
+      sym__object_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [194] = 27,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(37), 1,
+      anon_sym_RBRACE,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(11), 1,
+      sym_object_elem,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(84), 1,
+      sym_for_intro,
+    STATE(136), 1,
+      sym__object_end,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    STATE(332), 1,
+      sym__object_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [291] = 27,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(39), 1,
+      anon_sym_RBRACE,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(11), 1,
+      sym_object_elem,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(52), 1,
+      sym_for_intro,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(204), 1,
+      sym__object_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    STATE(349), 1,
+      sym__object_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [388] = 25,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(41), 1,
+      anon_sym_RBRACE,
+    ACTIONS(43), 1,
+      anon_sym_COMMA,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(31), 1,
+      sym__comma,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(7), 2,
+      sym_object_elem,
+      aux_sym__object_elems_repeat1,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [480] = 25,
+    ACTIONS(45), 1,
+      anon_sym_LBRACE,
+    ACTIONS(48), 1,
+      anon_sym_RBRACE,
+    ACTIONS(50), 1,
+      sym_identifier,
+    ACTIONS(53), 1,
+      anon_sym_LPAREN,
+    ACTIONS(56), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(59), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(65), 1,
+      sym_null_lit,
+    ACTIONS(68), 1,
+      anon_sym_COMMA,
+    ACTIONS(71), 1,
+      anon_sym_LBRACK,
+    ACTIONS(77), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(37), 1,
+      sym__comma,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(62), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(74), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(7), 2,
+      sym_object_elem,
+      aux_sym__object_elems_repeat1,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [572] = 26,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(80), 1,
+      anon_sym_RBRACK,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(53), 1,
+      sym_for_intro,
+    STATE(117), 1,
+      sym__tuple_end,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(286), 1,
+      sym_expression,
+    STATE(331), 1,
+      sym__tuple_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [666] = 26,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(82), 1,
+      anon_sym_RBRACK,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(57), 1,
+      sym_for_intro,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(207), 1,
+      sym__tuple_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(286), 1,
+      sym_expression,
+    STATE(344), 1,
+      sym__tuple_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [760] = 26,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(84), 1,
+      anon_sym_RBRACK,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(48), 1,
+      sym_for_intro,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(246), 1,
+      sym__tuple_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(286), 1,
+      sym_expression,
+    STATE(356), 1,
+      sym__tuple_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [854] = 25,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(86), 1,
+      anon_sym_RBRACE,
+    ACTIONS(88), 1,
+      anon_sym_COMMA,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(34), 1,
+      sym__comma,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(6), 2,
+      sym_object_elem,
+      aux_sym__object_elems_repeat1,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [946] = 26,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(29), 1,
+      anon_sym_for,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(90), 1,
+      anon_sym_RBRACK,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(64), 1,
+      sym_for_intro,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(163), 1,
+      sym__tuple_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(286), 1,
+      sym_expression,
+    STATE(327), 1,
+      sym__tuple_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [1040] = 25,
+    ACTIONS(11), 1,
       anon_sym_LBRACE,
     ACTIONS(13), 1,
-      sym_identifier,
+      anon_sym_RBRACE,
     ACTIONS(15), 1,
-      anon_sym_LPAREN,
+      sym_identifier,
     ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
+      anon_sym_LPAREN,
     ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
       aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
     ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
       anon_sym_LBRACK,
-    ACTIONS(31), 1,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(11), 1,
+      sym_object_elem,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(161), 1,
+      sym__object_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    STATE(372), 1,
+      sym__object_elems,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [1131] = 24,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(92), 1,
+      anon_sym_RPAREN,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(214), 1,
+      sym__function_call_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(280), 1,
+      sym_expression,
+    STATE(328), 1,
+      sym_function_arguments,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [1219] = 18,
+    ACTIONS(98), 1,
+      anon_sym_LBRACK,
+    ACTIONS(100), 1,
+      anon_sym_DOT,
+    ACTIONS(102), 1,
+      anon_sym_DOT_STAR,
+    ACTIONS(104), 1,
+      anon_sym_LBRACK_STAR_RBRACK,
+    ACTIONS(110), 1,
+      anon_sym_SLASH,
+    ACTIONS(118), 1,
+      anon_sym_AMP_AMP,
+    ACTIONS(120), 1,
+      anon_sym_PIPE_PIPE,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(106), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(108), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(112), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(114), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(116), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(96), 6,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_BANG,
+    ACTIONS(94), 7,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_QMARK,
+  [1295] = 11,
+    ACTIONS(110), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(106), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(108), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(112), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(114), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 8,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+    ACTIONS(122), 13,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [1357] = 24,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(126), 1,
+      anon_sym_RPAREN,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(231), 1,
+      sym__function_call_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(280), 1,
+      sym_expression,
+    STATE(347), 1,
+      sym_function_arguments,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [1445] = 24,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(128), 1,
+      anon_sym_RPAREN,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(167), 1,
+      sym__function_call_end,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(280), 1,
+      sym_expression,
+    STATE(360), 1,
+      sym_function_arguments,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [1533] = 6,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(132), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(130), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [1585] = 8,
+    ACTIONS(110), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(108), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 10,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 17,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [1641] = 24,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(134), 1,
+      anon_sym_RPAREN,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(135), 1,
+      sym__function_call_end,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(280), 1,
+      sym_expression,
+    STATE(330), 1,
+      sym_function_arguments,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [1729] = 9,
+    ACTIONS(110), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(106), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(108), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 10,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 15,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [1787] = 13,
+    ACTIONS(110), 1,
+      anon_sym_SLASH,
+    ACTIONS(118), 1,
+      anon_sym_AMP_AMP,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(106), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(108), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(112), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(114), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(116), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 8,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+    ACTIONS(122), 10,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_PIPE_PIPE,
+  [1853] = 6,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [1905] = 12,
+    ACTIONS(110), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(106), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(108), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(112), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(114), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(116), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(119), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(122), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 8,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+    ACTIONS(122), 11,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [1969] = 9,
+    ACTIONS(140), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(136), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(138), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 5,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 19,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2026] = 8,
+    ACTIONS(140), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(138), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 5,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 21,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2081] = 6,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2132] = 13,
+    ACTIONS(140), 1,
+      anon_sym_SLASH,
+    ACTIONS(148), 1,
+      anon_sym_AMP_AMP,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(136), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(138), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(142), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(144), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(146), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(124), 3,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(122), 14,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_PIPE_PIPE,
+  [2197] = 11,
+    ACTIONS(140), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(136), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(138), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(142), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(144), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(124), 3,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(122), 17,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2258] = 23,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(150), 1,
+      anon_sym_RBRACE,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(258), 1,
+      sym_object_elem,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [2343] = 18,
+    ACTIONS(96), 1,
+      anon_sym_EQ,
+    ACTIONS(140), 1,
+      anon_sym_SLASH,
+    ACTIONS(148), 1,
+      anon_sym_AMP_AMP,
+    ACTIONS(152), 1,
+      anon_sym_LBRACK,
+    ACTIONS(154), 1,
+      anon_sym_DOT,
+    ACTIONS(156), 1,
+      anon_sym_DOT_STAR,
+    ACTIONS(158), 1,
+      anon_sym_LBRACK_STAR_RBRACK,
+    ACTIONS(160), 1,
+      anon_sym_PIPE_PIPE,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(136), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(138), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(142), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(144), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(146), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(94), 11,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+  [2418] = 12,
+    ACTIONS(140), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(136), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(138), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(142), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(144), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(146), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(124), 3,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(122), 15,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2481] = 23,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(41), 1,
+      anon_sym_RBRACE,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(258), 1,
+      sym_object_elem,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [2566] = 6,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(169), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(172), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(132), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(130), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2617] = 22,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(162), 1,
+      anon_sym_RBRACK,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(294), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [2699] = 22,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(258), 1,
+      sym_object_elem,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(312), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [2781] = 7,
+    ACTIONS(168), 1,
+      anon_sym_LBRACK,
+    ACTIONS(171), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(38), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(166), 9,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(164), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2833] = 22,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    ACTIONS(174), 1,
+      anon_sym_RBRACK,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(294), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [2915] = 7,
+    ACTIONS(98), 1,
+      anon_sym_LBRACK,
+    ACTIONS(100), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(43), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(178), 9,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(176), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [2967] = 7,
+    ACTIONS(98), 1,
+      anon_sym_LBRACK,
+    ACTIONS(100), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(38), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(182), 9,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(180), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [3019] = 22,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(202), 1,
+      sym_strip_marker,
+    ACTIONS(204), 1,
       sym__quoted_template_start,
     STATE(3), 1,
       sym__object_start,
     STATE(10), 1,
       sym__tuple_start,
-    STATE(165), 1,
+    STATE(250), 1,
       sym_quoted_template,
+    STATE(314), 1,
+      sym_conditional,
+    STATE(318), 1,
+      sym_expression,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(21), 2,
+    ACTIONS(194), 2,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(29), 2,
+    ACTIONS(200), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
+    STATE(242), 2,
       sym_tuple,
       sym_object,
-    STATE(179), 3,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
-    STATE(33), 8,
+    STATE(191), 8,
       sym__expr_term,
       sym_literal_value,
       sym_collection_value,
@@ -12477,52 +9261,146 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [7422] = 19,
-    ACTIONS(204), 1,
-      anon_sym_LBRACE,
-    ACTIONS(206), 1,
-      sym_identifier,
-    ACTIONS(208), 1,
-      anon_sym_LPAREN,
-    ACTIONS(210), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
-      sym_null_lit,
-    ACTIONS(218), 1,
+  [3101] = 7,
+    ACTIONS(98), 1,
       anon_sym_LBRACK,
-    ACTIONS(222), 1,
-      sym__quoted_template_start,
-    STATE(5), 1,
-      sym__object_start,
-    STATE(12), 1,
-      sym__tuple_start,
-    STATE(143), 1,
-      sym_quoted_template,
+    ACTIONS(100), 1,
+      anon_sym_DOT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(214), 2,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(38), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(208), 9,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(220), 2,
+      sym_null_lit,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(206), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [3153] = 7,
+    ACTIONS(98), 1,
+      anon_sym_LBRACK,
+    ACTIONS(100), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(121), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(41), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(212), 9,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(210), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [3205] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(284), 1,
+      sym_expression,
+    STATE(291), 1,
+      sym_conditional,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
+    STATE(200), 2,
       sym_unary_operation,
       sym_binary_operation,
-    STATE(133), 3,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
-    STATE(19), 8,
+    STATE(155), 8,
       sym__expr_term,
       sym_literal_value,
       sym_collection_value,
@@ -12531,52 +9409,56 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [7495] = 19,
-    ACTIONS(204), 1,
+  [3284] = 21,
+    ACTIONS(11), 1,
       anon_sym_LBRACE,
-    ACTIONS(206), 1,
+    ACTIONS(15), 1,
       sym_identifier,
-    ACTIONS(208), 1,
+    ACTIONS(17), 1,
       anon_sym_LPAREN,
-    ACTIONS(210), 1,
+    ACTIONS(19), 1,
       aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
+    ACTIONS(21), 1,
       aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
+    ACTIONS(25), 1,
       sym_null_lit,
-    ACTIONS(218), 1,
+    ACTIONS(27), 1,
       anon_sym_LBRACK,
-    ACTIONS(222), 1,
+    ACTIONS(33), 1,
       sym__quoted_template_start,
-    STATE(5), 1,
+    STATE(2), 1,
       sym__object_start,
     STATE(12), 1,
       sym__tuple_start,
     STATE(143), 1,
       sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(348), 1,
+      sym_expression,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(214), 2,
+    ACTIONS(23), 2,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(220), 2,
+    ACTIONS(31), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
+    STATE(157), 2,
       sym_unary_operation,
       sym_binary_operation,
-    STATE(133), 3,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
-    STATE(18), 8,
+    STATE(32), 8,
       sym__expr_term,
       sym_literal_value,
       sym_collection_value,
@@ -12585,52 +9467,56 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [7568] = 19,
-    ACTIONS(204), 1,
+  [3363] = 21,
+    ACTIONS(11), 1,
       anon_sym_LBRACE,
-    ACTIONS(206), 1,
+    ACTIONS(15), 1,
       sym_identifier,
-    ACTIONS(208), 1,
+    ACTIONS(17), 1,
       anon_sym_LPAREN,
-    ACTIONS(210), 1,
+    ACTIONS(19), 1,
       aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
+    ACTIONS(21), 1,
       aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
+    ACTIONS(25), 1,
       sym_null_lit,
-    ACTIONS(218), 1,
+    ACTIONS(27), 1,
       anon_sym_LBRACK,
-    ACTIONS(222), 1,
+    ACTIONS(33), 1,
       sym__quoted_template_start,
-    STATE(5), 1,
+    STATE(2), 1,
       sym__object_start,
     STATE(12), 1,
       sym__tuple_start,
     STATE(143), 1,
       sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(357), 1,
+      sym_expression,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(214), 2,
+    ACTIONS(23), 2,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(220), 2,
+    ACTIONS(31), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
+    STATE(157), 2,
       sym_unary_operation,
       sym_binary_operation,
-    STATE(133), 3,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
-    STATE(13), 8,
+    STATE(32), 8,
       sym__expr_term,
       sym_literal_value,
       sym_collection_value,
@@ -12639,48 +9525,2394 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [7641] = 19,
-    ACTIONS(204), 1,
+  [3442] = 21,
+    ACTIONS(214), 1,
       anon_sym_LBRACE,
-    ACTIONS(206), 1,
-      sym_identifier,
-    ACTIONS(208), 1,
-      anon_sym_LPAREN,
-    ACTIONS(210), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
-      aux_sym_numeric_lit_token2,
     ACTIONS(216), 1,
-      sym_null_lit,
+      sym_identifier,
     ACTIONS(218), 1,
-      anon_sym_LBRACK,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
     ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
       sym__quoted_template_start,
     STATE(5), 1,
       sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(291), 1,
+      sym_conditional,
+    STATE(292), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [3521] = 7,
+    ACTIONS(152), 1,
+      anon_sym_LBRACK,
+    ACTIONS(154), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(75), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(212), 4,
+      anon_sym_EQ,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(210), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [3572] = 7,
+    ACTIONS(152), 1,
+      anon_sym_LBRACK,
+    ACTIONS(154), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(76), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(178), 4,
+      anon_sym_EQ,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(176), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [3623] = 21,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    STATE(255), 1,
+      sym_conditional,
+    STATE(257), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(15), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [3702] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
     STATE(12), 1,
       sym__tuple_start,
     STATE(143), 1,
       sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(326), 1,
+      sym_expression,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(214), 2,
+    ACTIONS(23), 2,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(220), 2,
+    ACTIONS(31), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
+    STATE(157), 2,
       sym_unary_operation,
       sym_binary_operation,
-    STATE(133), 3,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [3781] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(291), 1,
+      sym_conditional,
+    STATE(296), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [3860] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(354), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [3939] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(279), 1,
+      sym_expression,
+    STATE(291), 1,
+      sym_conditional,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4018] = 21,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    STATE(255), 1,
+      sym_conditional,
+    STATE(256), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(15), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4097] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(287), 1,
+      sym_expression,
+    STATE(291), 1,
+      sym_conditional,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4176] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(282), 1,
+      sym_expression,
+    STATE(291), 1,
+      sym_conditional,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4255] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(285), 1,
+      sym_expression,
+    STATE(291), 1,
+      sym_conditional,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4334] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(340), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4413] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(311), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4492] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(343), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4571] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(291), 1,
+      sym_conditional,
+    STATE(295), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4650] = 21,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    STATE(289), 1,
+      sym_expression,
+    STATE(291), 1,
+      sym_conditional,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(155), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4729] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(364), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4808] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(337), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4887] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(324), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [4966] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(351), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5045] = 7,
+    ACTIONS(254), 1,
+      anon_sym_LBRACK,
+    ACTIONS(257), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(69), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(166), 4,
+      anon_sym_EQ,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(164), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [5096] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(261), 1,
+      sym_expression,
+    STATE(263), 1,
+      sym_conditional,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5175] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(294), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5254] = 21,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    STATE(314), 1,
+      sym_conditional,
+    STATE(322), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(191), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5333] = 21,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    STATE(314), 1,
+      sym_conditional,
+    STATE(321), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(191), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5412] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(345), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5491] = 7,
+    ACTIONS(152), 1,
+      anon_sym_LBRACK,
+    ACTIONS(154), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(69), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(182), 4,
+      anon_sym_EQ,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(180), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [5542] = 7,
+    ACTIONS(152), 1,
+      anon_sym_LBRACK,
+    ACTIONS(154), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(173), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(69), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(208), 4,
+      anon_sym_EQ,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(206), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [5593] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(325), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5672] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(355), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5751] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(362), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5830] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(288), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5909] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(365), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [5988] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(366), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6067] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(371), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6146] = 21,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    STATE(263), 1,
+      sym_conditional,
+    STATE(353), 1,
+      sym_expression,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(32), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6225] = 19,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(160), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6298] = 19,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(165), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6371] = 19,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(23), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6444] = 19,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(25), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6517] = 19,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(16), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6590] = 19,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
@@ -12693,25 +11925,241 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [7714] = 19,
-    ACTIONS(204), 1,
+  [6663] = 19,
+    ACTIONS(234), 1,
       anon_sym_LBRACE,
-    ACTIONS(206), 1,
+    ACTIONS(236), 1,
       sym_identifier,
-    ACTIONS(208), 1,
+    ACTIONS(238), 1,
       anon_sym_LPAREN,
-    ACTIONS(210), 1,
+    ACTIONS(240), 1,
       aux_sym_numeric_lit_token1,
-    ACTIONS(212), 1,
+    ACTIONS(242), 1,
       aux_sym_numeric_lit_token2,
-    ACTIONS(216), 1,
+    ACTIONS(246), 1,
       sym_null_lit,
-    ACTIONS(218), 1,
+    ACTIONS(248), 1,
       anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(24), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6736] = 19,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(20), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6809] = 19,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
     ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
       sym__quoted_template_start,
     STATE(5), 1,
       sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(156), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6882] = 19,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(158), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [6955] = 19,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
     STATE(12), 1,
       sym__tuple_start,
     STATE(143), 1,
@@ -12719,210 +12167,22 @@ static const uint16_t ts_small_parse_table[] = {
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(214), 2,
+    ACTIONS(23), 2,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(220), 2,
+    ACTIONS(31), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(135), 2,
-      sym_tuple,
-      sym_object,
-    STATE(140), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(142), 2,
+    STATE(157), 2,
       sym_unary_operation,
       sym_binary_operation,
-    STATE(133), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(21), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [7787] = 5,
-    ACTIONS(254), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(108), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(258), 10,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(256), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [7832] = 19,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
+    STATE(159), 2,
       sym_for_tuple_expr,
       sym_for_object_expr,
-    STATE(178), 2,
+    STATE(174), 2,
       sym_tuple,
       sym_object,
-    STATE(179), 3,
-      sym_numeric_lit,
-      sym_bool_lit,
-      sym_string_lit,
-    STATE(27), 8,
-      sym__expr_term,
-      sym_literal_value,
-      sym_collection_value,
-      sym_for_expr,
-      sym_variable_expr,
-      sym_function_call,
-      sym_operation,
-      sym_template_expr,
-  [7905] = 5,
-    ACTIONS(264), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(108), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(262), 10,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(260), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [7950] = 19,
-    ACTIONS(9), 1,
-      anon_sym_LBRACE,
-    ACTIONS(13), 1,
-      sym_identifier,
-    ACTIONS(15), 1,
-      anon_sym_LPAREN,
-    ACTIONS(17), 1,
-      aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
-      aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
-      sym_null_lit,
-    ACTIONS(25), 1,
-      anon_sym_LBRACK,
-    ACTIONS(31), 1,
-      sym__quoted_template_start,
-    STATE(3), 1,
-      sym__object_start,
-    STATE(10), 1,
-      sym__tuple_start,
-    STATE(165), 1,
-      sym_quoted_template,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(21), 2,
-      anon_sym_true,
-      anon_sym_false,
-    ACTIONS(29), 2,
-      anon_sym_DASH,
-      anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
-      sym_tuple,
-      sym_object,
-    STATE(179), 3,
+    STATE(176), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
@@ -12935,52 +12195,52 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [8023] = 19,
-    ACTIONS(9), 1,
+  [7028] = 19,
+    ACTIONS(184), 1,
       anon_sym_LBRACE,
-    ACTIONS(13), 1,
+    ACTIONS(186), 1,
       sym_identifier,
-    ACTIONS(15), 1,
+    ACTIONS(188), 1,
       anon_sym_LPAREN,
-    ACTIONS(17), 1,
+    ACTIONS(190), 1,
       aux_sym_numeric_lit_token1,
-    ACTIONS(19), 1,
+    ACTIONS(192), 1,
       aux_sym_numeric_lit_token2,
-    ACTIONS(23), 1,
+    ACTIONS(196), 1,
       sym_null_lit,
-    ACTIONS(25), 1,
+    ACTIONS(198), 1,
       anon_sym_LBRACK,
-    ACTIONS(31), 1,
+    ACTIONS(204), 1,
       sym__quoted_template_start,
     STATE(3), 1,
       sym__object_start,
     STATE(10), 1,
       sym__tuple_start,
-    STATE(165), 1,
+    STATE(250), 1,
       sym_quoted_template,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(21), 2,
+    ACTIONS(194), 2,
       anon_sym_true,
       anon_sym_false,
-    ACTIONS(29), 2,
+    ACTIONS(200), 2,
       anon_sym_DASH,
       anon_sym_BANG,
-    STATE(167), 2,
-      sym_unary_operation,
-      sym_binary_operation,
-    STATE(169), 2,
-      sym_for_tuple_expr,
-      sym_for_object_expr,
-    STATE(178), 2,
+    STATE(242), 2,
       sym_tuple,
       sym_object,
-    STATE(179), 3,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
       sym_numeric_lit,
       sym_bool_lit,
       sym_string_lit,
-    STATE(36), 8,
+    STATE(189), 8,
       sym__expr_term,
       sym_literal_value,
       sym_collection_value,
@@ -12989,15 +12249,879 @@ static const uint16_t ts_small_parse_table[] = {
       sym_function_call,
       sym_operation,
       sym_template_expr,
-  [8096] = 5,
-    ACTIONS(271), 1,
+  [7101] = 19,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
       anon_sym_LPAREN,
-    STATE(24), 1,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(148), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7174] = 19,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(152), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7247] = 19,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(188), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7320] = 19,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(29), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7393] = 19,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(187), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7466] = 19,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(186), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7539] = 19,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(185), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7612] = 19,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(184), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7685] = 19,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(33), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7758] = 19,
+    ACTIONS(234), 1,
+      anon_sym_LBRACE,
+    ACTIONS(236), 1,
+      sym_identifier,
+    ACTIONS(238), 1,
+      anon_sym_LPAREN,
+    ACTIONS(240), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(242), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(246), 1,
+      sym_null_lit,
+    ACTIONS(248), 1,
+      anon_sym_LBRACK,
+    ACTIONS(252), 1,
+      sym__quoted_template_start,
+    STATE(4), 1,
+      sym__object_start,
+    STATE(8), 1,
+      sym__tuple_start,
+    STATE(127), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(244), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(250), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(129), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(133), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(137), 2,
+      sym_tuple,
+      sym_object,
+    STATE(142), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(19), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7831] = 19,
+    ACTIONS(184), 1,
+      anon_sym_LBRACE,
+    ACTIONS(186), 1,
+      sym_identifier,
+    ACTIONS(188), 1,
+      anon_sym_LPAREN,
+    ACTIONS(190), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(192), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(196), 1,
+      sym_null_lit,
+    ACTIONS(198), 1,
+      anon_sym_LBRACK,
+    ACTIONS(204), 1,
+      sym__quoted_template_start,
+    STATE(3), 1,
+      sym__object_start,
+    STATE(10), 1,
+      sym__tuple_start,
+    STATE(250), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(194), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(200), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(242), 2,
+      sym_tuple,
+      sym_object,
+    STATE(244), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(248), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(237), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(190), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7904] = 19,
+    ACTIONS(214), 1,
+      anon_sym_LBRACE,
+    ACTIONS(216), 1,
+      sym_identifier,
+    ACTIONS(218), 1,
+      anon_sym_LPAREN,
+    ACTIONS(220), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(222), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(226), 1,
+      sym_null_lit,
+    ACTIONS(228), 1,
+      anon_sym_LBRACK,
+    ACTIONS(232), 1,
+      sym__quoted_template_start,
+    STATE(5), 1,
+      sym__object_start,
+    STATE(9), 1,
+      sym__tuple_start,
+    STATE(198), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(224), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(230), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(200), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(202), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(205), 2,
+      sym_tuple,
+      sym_object,
+    STATE(208), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(166), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [7977] = 19,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(30), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [8050] = 19,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(27), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [8123] = 19,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(28), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [8196] = 19,
+    ACTIONS(11), 1,
+      anon_sym_LBRACE,
+    ACTIONS(15), 1,
+      sym_identifier,
+    ACTIONS(17), 1,
+      anon_sym_LPAREN,
+    ACTIONS(19), 1,
+      aux_sym_numeric_lit_token1,
+    ACTIONS(21), 1,
+      aux_sym_numeric_lit_token2,
+    ACTIONS(25), 1,
+      sym_null_lit,
+    ACTIONS(27), 1,
+      anon_sym_LBRACK,
+    ACTIONS(33), 1,
+      sym__quoted_template_start,
+    STATE(2), 1,
+      sym__object_start,
+    STATE(12), 1,
+      sym__tuple_start,
+    STATE(143), 1,
+      sym_quoted_template,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(23), 2,
+      anon_sym_true,
+      anon_sym_false,
+    ACTIONS(31), 2,
+      anon_sym_DASH,
+      anon_sym_BANG,
+    STATE(157), 2,
+      sym_unary_operation,
+      sym_binary_operation,
+    STATE(159), 2,
+      sym_for_tuple_expr,
+      sym_for_object_expr,
+    STATE(174), 2,
+      sym_tuple,
+      sym_object,
+    STATE(176), 3,
+      sym_numeric_lit,
+      sym_bool_lit,
+      sym_string_lit,
+    STATE(26), 8,
+      sym__expr_term,
+      sym_literal_value,
+      sym_collection_value,
+      sym_for_expr,
+      sym_variable_expr,
+      sym_function_call,
+      sym_operation,
+      sym_template_expr,
+  [8269] = 5,
+    ACTIONS(264), 1,
+      anon_sym_LPAREN,
+    STATE(21), 1,
       sym__function_call_start,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(269), 11,
+    ACTIONS(262), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13009,7 +13133,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(267), 18,
+    ACTIONS(260), 18,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13028,131 +13152,24 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8140] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(275), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(273), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
+  [8313] = 5,
+    ACTIONS(266), 1,
       anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [8179] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(279), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(277), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [8218] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(283), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(281), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [8257] = 5,
-    ACTIONS(285), 1,
-      anon_sym_LPAREN,
-    STATE(14), 1,
+    STATE(18), 1,
       sym__function_call_start,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(269), 6,
+    ACTIONS(262), 6,
       anon_sym_EQ,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(267), 22,
+    ACTIONS(260), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -13174,11 +13191,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8300] = 3,
+  [8357] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(289), 11,
+    ACTIONS(270), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13190,7 +13207,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(287), 19,
+    ACTIONS(268), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13210,49 +13227,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8339] = 5,
-    ACTIONS(291), 1,
-      anon_sym_DOT,
+  [8396] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(117), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(262), 5,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(260), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [8382] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(296), 11,
+    ACTIONS(274), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13264,7 +13243,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(294), 19,
+    ACTIONS(272), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13284,11 +13263,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8421] = 3,
+  [8435] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(300), 11,
+    ACTIONS(278), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13300,7 +13279,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(298), 19,
+    ACTIONS(276), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13320,11 +13299,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8460] = 3,
+  [8474] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(304), 11,
+    ACTIONS(282), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13336,7 +13315,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(302), 19,
+    ACTIONS(280), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13356,11 +13335,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8499] = 3,
+  [8513] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(308), 11,
+    ACTIONS(286), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13372,7 +13351,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(306), 19,
+    ACTIONS(284), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13392,11 +13371,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8538] = 3,
+  [8552] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(312), 11,
+    ACTIONS(290), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13408,7 +13387,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(310), 19,
+    ACTIONS(288), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13428,11 +13407,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8577] = 3,
+  [8591] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(316), 11,
+    ACTIONS(294), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13444,7 +13423,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(314), 19,
+    ACTIONS(292), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13464,11 +13443,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8616] = 3,
+  [8630] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(320), 11,
+    ACTIONS(298), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13480,7 +13459,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(318), 19,
+    ACTIONS(296), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13500,11 +13479,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8655] = 3,
+  [8669] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(324), 11,
+    ACTIONS(302), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13516,7 +13495,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(322), 19,
+    ACTIONS(300), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13536,11 +13515,11 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8694] = 3,
+  [8708] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(328), 11,
+    ACTIONS(306), 11,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
@@ -13552,7 +13531,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(326), 19,
+    ACTIONS(304), 19,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -13572,33 +13551,31 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8733] = 5,
-    ACTIONS(330), 1,
-      anon_sym_DOT,
+  [8747] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(138), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(252), 5,
-      anon_sym_EQ,
+    ACTIONS(310), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
       anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(250), 22,
-      ts_builtin_sym_end,
+    ACTIONS(308), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
       anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
       anon_sym_QMARK,
       anon_sym_DASH,
       anon_sym_STAR,
@@ -13610,7 +13587,187 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8776] = 3,
+  [8786] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(314), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(312), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [8825] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(318), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(316), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [8864] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(322), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(320), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [8903] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(326), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(324), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [8942] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(330), 11,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_BANG,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(328), 19,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [8981] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13646,7 +13803,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8815] = 3,
+  [9020] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13682,7 +13839,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8854] = 3,
+  [9059] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13718,7 +13875,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8893] = 3,
+  [9098] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13754,7 +13911,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8932] = 3,
+  [9137] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13790,7 +13947,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [8971] = 3,
+  [9176] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13826,7 +13983,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9010] = 3,
+  [9215] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13862,7 +14019,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9049] = 3,
+  [9254] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13898,7 +14055,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9088] = 3,
+  [9293] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13934,7 +14091,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9127] = 3,
+  [9332] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -13970,45 +14127,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9166] = 5,
-    ACTIONS(330), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(117), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(258), 5,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(256), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9209] = 3,
+  [9371] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -14044,7 +14163,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9248] = 3,
+  [9410] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -14080,465 +14199,20 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9287] = 3,
+  [9449] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(382), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(380), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9326] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(386), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(384), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9365] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(390), 11,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_BANG,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(388), 19,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9404] = 6,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9448] = 13,
-    ACTIONS(396), 1,
-      anon_sym_SLASH,
-    ACTIONS(404), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(92), 2,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-    ACTIONS(392), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(394), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(398), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(400), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(402), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(90), 8,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_PIPE_PIPE,
-  [9506] = 17,
-    ACTIONS(396), 1,
-      anon_sym_SLASH,
-    ACTIONS(404), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(406), 1,
-      anon_sym_LBRACK,
-    ACTIONS(408), 1,
-      anon_sym_DOT,
-    ACTIONS(410), 1,
-      anon_sym_DOT_STAR,
-    ACTIONS(412), 1,
-      anon_sym_LBRACK_STAR_RBRACK,
-    ACTIONS(414), 1,
-      anon_sym_PIPE_PIPE,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(392), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(394), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(398), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(400), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(402), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(106), 5,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-  [9572] = 6,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(126), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(124), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9616] = 8,
-    ACTIONS(396), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(394), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 4,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 15,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9664] = 9,
-    ACTIONS(396), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(392), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(394), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(92), 4,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(90), 13,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9714] = 11,
-    ACTIONS(396), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(92), 2,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-    ACTIONS(392), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(394), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(398), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(400), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(90), 11,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9768] = 12,
-    ACTIONS(396), 1,
-      anon_sym_SLASH,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(92), 2,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-    ACTIONS(392), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(394), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(398), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(400), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(402), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(199), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(228), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(90), 9,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9824] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(358), 6,
+    ACTIONS(318), 6,
       anon_sym_EQ,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(356), 22,
+    ACTIONS(316), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -14560,19 +14234,20 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9861] = 3,
+  [9487] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(316), 6,
+    ACTIONS(302), 6,
       anon_sym_EQ,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(314), 22,
+    ACTIONS(300), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -14594,41 +14269,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9898] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(279), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(277), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [9935] = 3,
+  [9525] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -14639,8 +14280,9 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(344), 22,
+    ACTIONS(344), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -14662,7 +14304,190 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [9972] = 3,
+  [9563] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(282), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(280), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [9601] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(322), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(320), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [9639] = 11,
+    ACTIONS(384), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(124), 2,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+    ACTIONS(380), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(382), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(386), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(388), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(122), 11,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [9693] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(274), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(272), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [9731] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(330), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(328), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [9769] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -14673,8 +14498,9 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(364), 22,
+    ACTIONS(364), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -14696,687 +14522,48 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [10009] = 3,
+  [9807] = 9,
+    ACTIONS(384), 1,
+      anon_sym_SLASH,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(350), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(348), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
+    ACTIONS(380), 2,
       anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(382), 2,
       anon_sym_STAR,
       anon_sym_PERCENT,
-      anon_sym_PLUS,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 4,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 13,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
       anon_sym_GT_EQ,
       anon_sym_LT_EQ,
       anon_sym_EQ_EQ,
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [10046] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(289), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(287), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10083] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(304), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(302), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10120] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(312), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(310), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10157] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(338), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(336), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10194] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(342), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(340), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10231] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(275), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(273), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10268] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(320), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(318), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10305] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(390), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(388), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10342] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(324), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(322), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10379] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(386), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(384), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10416] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(382), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(380), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10453] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(378), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(376), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10490] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(334), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(332), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10527] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(296), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(294), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10564] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(300), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(298), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10601] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(370), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(368), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10638] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(328), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(326), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10675] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(283), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(281), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10712] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(308), 6,
-      anon_sym_EQ,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(306), 22,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [10749] = 3,
+  [9857] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -15387,8 +14574,9 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(372), 22,
+    ACTIONS(372), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -15410,19 +14598,20 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [10786] = 3,
+  [9895] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(362), 6,
+    ACTIONS(310), 6,
       anon_sym_EQ,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(360), 22,
+    ACTIONS(308), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -15444,7 +14633,255 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [10823] = 3,
+  [9933] = 17,
+    ACTIONS(384), 1,
+      anon_sym_SLASH,
+    ACTIONS(390), 1,
+      anon_sym_LBRACK,
+    ACTIONS(392), 1,
+      anon_sym_DOT,
+    ACTIONS(394), 1,
+      anon_sym_DOT_STAR,
+    ACTIONS(396), 1,
+      anon_sym_LBRACK_STAR_RBRACK,
+    ACTIONS(400), 1,
+      anon_sym_AMP_AMP,
+    ACTIONS(402), 1,
+      anon_sym_PIPE_PIPE,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(380), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(382), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(386), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(388), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(398), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(94), 5,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+  [9999] = 13,
+    ACTIONS(384), 1,
+      anon_sym_SLASH,
+    ACTIONS(400), 1,
+      anon_sym_AMP_AMP,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(124), 2,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+    ACTIONS(380), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(382), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(386), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(388), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(398), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(122), 8,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_PIPE_PIPE,
+  [10057] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(326), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(324), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10095] = 12,
+    ACTIONS(384), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(124), 2,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+    ACTIONS(380), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(382), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(386), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(388), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(398), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(122), 9,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10151] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(342), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(340), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10189] = 8,
+    ACTIONS(384), 1,
+      anon_sym_SLASH,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(382), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(124), 4,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 15,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10237] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -15455,8 +14892,9 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(352), 22,
+    ACTIONS(352), 23,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -15478,26 +14916,132 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [10860] = 7,
-    ACTIONS(406), 1,
-      anon_sym_LBRACK,
-    ACTIONS(408), 1,
-      anon_sym_DOT,
+  [10275] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    ACTIONS(180), 3,
+    ACTIONS(338), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    STATE(182), 3,
+    ACTIONS(336), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10313] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(278), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(276), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10351] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(314), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(312), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10389] = 6,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
       sym_index,
       sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(178), 17,
+      sym_splat,
+    ACTIONS(124), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(122), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -15515,62 +15059,27 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [10904] = 6,
+  [10433] = 6,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(252), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(253), 2,
+    STATE(203), 2,
       sym_new_index,
       sym_legacy_index,
-    STATE(254), 3,
+    STATE(206), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(201), 3,
       sym_index,
       sym_get_attr,
       sym_splat,
-    ACTIONS(126), 5,
+    ACTIONS(132), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(124), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [10946] = 7,
-    ACTIONS(416), 1,
-      anon_sym_LBRACK,
-    ACTIONS(419), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(198), 2,
-      sym_new_index,
-      sym_legacy_index,
-    ACTIONS(170), 3,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    STATE(182), 3,
-      sym_index,
-      sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(168), 17,
+    ACTIONS(130), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -15588,73 +15097,520 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [10990] = 17,
-    ACTIONS(422), 1,
-      anon_sym_LBRACK,
-    ACTIONS(424), 1,
-      anon_sym_DOT,
-    ACTIONS(426), 1,
-      anon_sym_DOT_STAR,
-    ACTIONS(428), 1,
-      anon_sym_LBRACK_STAR_RBRACK,
-    ACTIONS(434), 1,
-      anon_sym_SLASH,
-    ACTIONS(442), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(444), 1,
-      anon_sym_PIPE_PIPE,
+  [10477] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(430), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(432), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(436), 2,
+    ACTIONS(350), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(438), 2,
+    ACTIONS(348), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
       anon_sym_GT_EQ,
       anon_sym_LT_EQ,
-    ACTIONS(440), 2,
       anon_sym_EQ_EQ,
       anon_sym_BANG_EQ,
-    STATE(252), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(253), 2,
-      sym_new_index,
-      sym_legacy_index,
-    ACTIONS(106), 3,
-      sym__template_interpolation_end,
-      anon_sym_QMARK,
-      sym_strip_marker,
-    STATE(254), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-  [11054] = 7,
-    ACTIONS(406), 1,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10515] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(362), 6,
+      anon_sym_EQ,
       anon_sym_LBRACK,
-    ACTIONS(408), 1,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(360), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10553] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(286), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(284), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10591] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(334), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(332), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10629] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(290), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(288), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10667] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(298), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(296), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10705] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(294), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(292), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10743] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(358), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(356), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10781] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(270), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(268), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10819] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(378), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(376), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10857] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(306), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(304), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10895] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(370), 6,
+      anon_sym_EQ,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(368), 23,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10933] = 7,
+    ACTIONS(390), 1,
+      anon_sym_LBRACK,
+    ACTIONS(392), 1,
       anon_sym_DOT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(198), 2,
+    STATE(203), 2,
       sym_new_index,
       sym_legacy_index,
-    ACTIONS(144), 3,
+    ACTIONS(178), 3,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    STATE(182), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(176), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [10977] = 7,
+    ACTIONS(390), 1,
+      anon_sym_LBRACK,
+    ACTIONS(392), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(182), 3,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    STATE(183), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(180), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [11021] = 7,
+    ACTIONS(390), 1,
+      anon_sym_LBRACK,
+    ACTIONS(392), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(212), 3,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
     STATE(180), 3,
       sym_index,
       sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(142), 17,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(210), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -15672,31 +15628,105 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [11098] = 8,
-    ACTIONS(434), 1,
+  [11065] = 7,
+    ACTIONS(390), 1,
+      anon_sym_LBRACK,
+    ACTIONS(392), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(208), 3,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    STATE(183), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(206), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [11109] = 7,
+    ACTIONS(404), 1,
+      anon_sym_LBRACK,
+    ACTIONS(407), 1,
+      anon_sym_DOT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(203), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(166), 3,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    STATE(183), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(164), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [11153] = 8,
+    ACTIONS(412), 1,
       anon_sym_SLASH,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(432), 2,
+    ACTIONS(410), 2,
       anon_sym_STAR,
       anon_sym_PERCENT,
-    STATE(252), 2,
+    STATE(228), 2,
       sym_attr_splat,
       sym_full_splat,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
     STATE(254), 3,
       sym_index,
       sym_get_attr,
       sym_splat,
-    ACTIONS(92), 4,
+    ACTIONS(124), 4,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(90), 13,
+    ACTIONS(122), 13,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -15710,27 +15740,27 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11144] = 6,
+  [11199] = 6,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(252), 2,
+    STATE(228), 2,
       sym_attr_splat,
       sym_full_splat,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
     STATE(254), 3,
       sym_index,
       sym_get_attr,
       sym_splat,
-    ACTIONS(92), 5,
+    ACTIONS(124), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(90), 15,
+    ACTIONS(122), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -15746,34 +15776,34 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11186] = 9,
-    ACTIONS(434), 1,
+  [11241] = 9,
+    ACTIONS(412), 1,
       anon_sym_SLASH,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(430), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(432), 2,
+    ACTIONS(410), 2,
       anon_sym_STAR,
       anon_sym_PERCENT,
-    STATE(252), 2,
+    ACTIONS(414), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    STATE(228), 2,
       sym_attr_splat,
       sym_full_splat,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
     STATE(254), 3,
       sym_index,
       sym_get_attr,
       sym_splat,
-    ACTIONS(92), 4,
+    ACTIONS(124), 4,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(90), 11,
+    ACTIONS(122), 11,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -15785,38 +15815,38 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11234] = 11,
-    ACTIONS(434), 1,
+  [11289] = 11,
+    ACTIONS(412), 1,
       anon_sym_SLASH,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(92), 2,
+    ACTIONS(124), 2,
       anon_sym_LBRACK,
       anon_sym_DOT,
-    ACTIONS(430), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(432), 2,
+    ACTIONS(410), 2,
       anon_sym_STAR,
       anon_sym_PERCENT,
-    ACTIONS(436), 2,
+    ACTIONS(414), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(416), 2,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(438), 2,
+    ACTIONS(418), 2,
       anon_sym_GT_EQ,
       anon_sym_LT_EQ,
-    STATE(252), 2,
+    STATE(228), 2,
       sym_attr_splat,
       sym_full_splat,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
     STATE(254), 3,
       sym_index,
       sym_get_attr,
       sym_splat,
-    ACTIONS(90), 9,
+    ACTIONS(122), 9,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -15826,41 +15856,41 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11286] = 12,
-    ACTIONS(434), 1,
+  [11341] = 12,
+    ACTIONS(412), 1,
       anon_sym_SLASH,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(92), 2,
+    ACTIONS(124), 2,
       anon_sym_LBRACK,
       anon_sym_DOT,
-    ACTIONS(430), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(432), 2,
+    ACTIONS(410), 2,
       anon_sym_STAR,
       anon_sym_PERCENT,
-    ACTIONS(436), 2,
+    ACTIONS(414), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(416), 2,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(438), 2,
+    ACTIONS(418), 2,
       anon_sym_GT_EQ,
       anon_sym_LT_EQ,
-    ACTIONS(440), 2,
+    ACTIONS(420), 2,
       anon_sym_EQ_EQ,
       anon_sym_BANG_EQ,
-    STATE(252), 2,
+    STATE(228), 2,
       sym_attr_splat,
       sym_full_splat,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
     STATE(254), 3,
       sym_index,
       sym_get_attr,
       sym_splat,
-    ACTIONS(90), 7,
+    ACTIONS(122), 7,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -15868,69 +15898,152 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11340] = 13,
-    ACTIONS(434), 1,
+  [11395] = 13,
+    ACTIONS(412), 1,
       anon_sym_SLASH,
-    ACTIONS(442), 1,
-      anon_sym_AMP_AMP,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(92), 2,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-    ACTIONS(430), 2,
-      anon_sym_DASH,
-      anon_sym_PLUS,
-    ACTIONS(432), 2,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-    ACTIONS(436), 2,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(438), 2,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-    ACTIONS(440), 2,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-    STATE(252), 2,
-      sym_attr_splat,
-      sym_full_splat,
-    STATE(253), 2,
-      sym_new_index,
-      sym_legacy_index,
-    STATE(254), 3,
-      sym_index,
-      sym_get_attr,
-      sym_splat,
-    ACTIONS(90), 6,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [11396] = 7,
     ACTIONS(422), 1,
+      anon_sym_AMP_AMP,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(124), 2,
       anon_sym_LBRACK,
+      anon_sym_DOT,
+    ACTIONS(410), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(414), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(416), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(418), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(420), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(228), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(252), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(254), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(122), 6,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [11451] = 6,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(228), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(252), 2,
+      sym_new_index,
+      sym_legacy_index,
+    STATE(254), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+    ACTIONS(132), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(130), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [11493] = 17,
+    ACTIONS(412), 1,
+      anon_sym_SLASH,
+    ACTIONS(422), 1,
+      anon_sym_AMP_AMP,
     ACTIONS(424), 1,
+      anon_sym_LBRACK,
+    ACTIONS(426), 1,
+      anon_sym_DOT,
+    ACTIONS(428), 1,
+      anon_sym_DOT_STAR,
+    ACTIONS(430), 1,
+      anon_sym_LBRACK_STAR_RBRACK,
+    ACTIONS(432), 1,
+      anon_sym_PIPE_PIPE,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(410), 2,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+    ACTIONS(414), 2,
+      anon_sym_DASH,
+      anon_sym_PLUS,
+    ACTIONS(416), 2,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(418), 2,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+    ACTIONS(420), 2,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+    STATE(228), 2,
+      sym_attr_splat,
+      sym_full_splat,
+    STATE(252), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(94), 3,
+      sym__template_interpolation_end,
+      anon_sym_QMARK,
+      sym_strip_marker,
+    STATE(254), 3,
+      sym_index,
+      sym_get_attr,
+      sym_splat,
+  [11557] = 7,
+    ACTIONS(434), 1,
+      anon_sym_LBRACK,
+    ACTIONS(437), 1,
       anon_sym_DOT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
-    ACTIONS(144), 3,
+    ACTIONS(166), 3,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
     STATE(192), 3,
       sym_index,
       sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(142), 15,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(164), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -15946,26 +16059,26 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11438] = 7,
-    ACTIONS(422), 1,
-      anon_sym_LBRACK,
+  [11599] = 7,
     ACTIONS(424), 1,
+      anon_sym_LBRACK,
+    ACTIONS(426), 1,
       anon_sym_DOT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
-    ACTIONS(180), 3,
+    ACTIONS(182), 3,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    STATE(193), 3,
+    STATE(192), 3,
       sym_index,
       sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(178), 15,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(180), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -15981,26 +16094,26 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11480] = 7,
-    ACTIONS(446), 1,
+  [11641] = 7,
+    ACTIONS(424), 1,
       anon_sym_LBRACK,
-    ACTIONS(449), 1,
+    ACTIONS(426), 1,
       anon_sym_DOT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(253), 2,
+    STATE(252), 2,
       sym_new_index,
       sym_legacy_index,
-    ACTIONS(170), 3,
+    ACTIONS(208), 3,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    STATE(193), 3,
+    STATE(192), 3,
       sym_index,
       sym_get_attr,
-      aux_sym_full_splat_repeat1,
-    ACTIONS(168), 15,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(206), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -16016,27 +16129,29 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [11522] = 5,
-    ACTIONS(452), 1,
+  [11683] = 7,
+    ACTIONS(424), 1,
+      anon_sym_LBRACK,
+    ACTIONS(426), 1,
       anon_sym_DOT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(196), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(252), 4,
-      anon_sym_LBRACK,
+    STATE(252), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(178), 3,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(250), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
+    STATE(194), 3,
+      sym_index,
+      sym_get_attr,
+      aux_sym_attr_splat_repeat1,
+    ACTIONS(176), 15,
+      sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
       anon_sym_QMARK,
       anon_sym_DASH,
       anon_sym_STAR,
@@ -16048,17 +16163,53 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [11559] = 5,
-    ACTIONS(454), 1,
+      sym_strip_marker,
+  [11725] = 7,
+    ACTIONS(424), 1,
+      anon_sym_LBRACK,
+    ACTIONS(426), 1,
       anon_sym_DOT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(195), 2,
+    STATE(252), 2,
+      sym_new_index,
+      sym_legacy_index,
+    ACTIONS(212), 3,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    STATE(193), 3,
+      sym_index,
       sym_get_attr,
       aux_sym_attr_splat_repeat1,
-    ACTIONS(262), 4,
+    ACTIONS(210), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [11767] = 5,
+    ACTIONS(440), 1,
+      anon_sym_LPAREN,
+    STATE(14), 1,
+      sym__function_call_start,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(262), 5,
       anon_sym_LBRACK,
+      anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
@@ -16080,21 +16231,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [11596] = 5,
-    ACTIONS(452), 1,
-      anon_sym_DOT,
+  [11804] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(195), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(258), 4,
+    ACTIONS(318), 5,
       anon_sym_LBRACK,
+      anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(256), 17,
+    ACTIONS(316), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -16112,21 +16259,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [11633] = 5,
-    ACTIONS(457), 1,
-      anon_sym_LPAREN,
-    STATE(20), 1,
-      sym__function_call_start,
+  [11835] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(269), 5,
+    ACTIONS(306), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(267), 17,
+    ACTIONS(304), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -16144,7 +16287,63 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [11670] = 3,
+  [11866] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(326), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(324), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [11897] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(298), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(296), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [11928] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -16172,17 +16371,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [11701] = 3,
+  [11959] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(338), 5,
+    ACTIONS(294), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(336), 17,
+    ACTIONS(292), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -16200,433 +16399,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [11732] = 5,
-    ACTIONS(459), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(200), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(262), 4,
-      anon_sym_LBRACK,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(260), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [11767] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(358), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(356), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [11798] = 5,
-    ACTIONS(462), 1,
-      anon_sym_LPAREN,
-    STATE(23), 1,
-      sym__function_call_start,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(269), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(267), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [11833] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(296), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(294), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [11864] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(374), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(372), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [11895] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(370), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(368), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [11926] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(366), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(364), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [11957] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(350), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(348), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [11988] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(279), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(277), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12019] = 5,
-    ACTIONS(464), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(227), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(252), 4,
-      anon_sym_LBRACK,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(250), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12054] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(283), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(281), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12085] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(289), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(287), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12116] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(300), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(298), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12147] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(304), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(302), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12178] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(308), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(306), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12209] = 3,
+  [11990] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -16654,17 +16427,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [12240] = 3,
+  [12021] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(312), 5,
+    ACTIONS(358), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(310), 17,
+    ACTIONS(356), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -16682,17 +16455,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [12271] = 3,
+  [12052] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(316), 5,
+    ACTIONS(286), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(314), 17,
+    ACTIONS(284), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -16710,17 +16483,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [12302] = 3,
+  [12083] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(362), 5,
+    ACTIONS(278), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(360), 17,
+    ACTIONS(276), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -16738,7 +16511,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [12333] = 3,
+  [12114] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -16766,217 +16539,21 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [12364] = 3,
+  [12145] = 5,
+    ACTIONS(442), 1,
+      anon_sym_LPAREN,
+    STATE(17), 1,
+      sym__function_call_start,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(320), 5,
+    ACTIONS(262), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(318), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12395] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(386), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(384), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12426] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(390), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(388), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12457] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(382), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(380), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12488] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(328), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(326), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12519] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(334), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(332), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12550] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(275), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(273), 17,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-  [12581] = 5,
-    ACTIONS(464), 1,
-      anon_sym_DOT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(200), 2,
-      sym_get_attr,
-      aux_sym_attr_splat_repeat1,
-    ACTIONS(258), 4,
-      anon_sym_LBRACK,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(256), 15,
+    ACTIONS(260), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -16992,7 +16569,91 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [12616] = 3,
+  [12180] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(374), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(372), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12211] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(366), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(364), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12242] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(338), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(336), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12273] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -17020,17 +16681,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [12647] = 3,
+  [12304] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(324), 5,
+    ACTIONS(350), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(322), 17,
+    ACTIONS(348), 17,
       anon_sym_RBRACE,
       anon_sym_RBRACK,
       anon_sym_DOT_STAR,
@@ -17048,20 +16709,23 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-  [12678] = 3,
+  [12335] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(275), 5,
+    ACTIONS(362), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(273), 15,
-      sym__template_interpolation_end,
+    ACTIONS(360), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
       anon_sym_QMARK,
       anon_sym_DASH,
       anon_sym_STAR,
@@ -17073,18 +16737,325 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_BANG_EQ,
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12707] = 3,
+  [12366] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(378), 5,
+    ACTIONS(370), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(376), 15,
+    ACTIONS(368), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12397] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(270), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(268), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12428] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(334), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(332), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12459] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(330), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(328), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12490] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(322), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(320), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12521] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(314), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(312), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12552] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(302), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(300), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12583] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(290), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(288), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12614] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(282), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(280), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12645] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(274), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(272), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12676] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(310), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(308), 17,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+  [12707] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(302), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(300), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -17101,6 +17072,32 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
   [12736] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(286), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(284), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [12765] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -17126,553 +17123,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [12765] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(300), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(298), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
   [12794] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(370), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(368), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12823] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(312), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(310), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12852] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(316), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(314), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12881] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(320), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(318), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12910] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(386), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(384), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12939] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(324), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(322), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12968] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(328), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(326), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [12997] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(279), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(277), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13026] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(374), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(372), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13055] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(296), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(294), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13084] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(350), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(348), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13113] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(304), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(302), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13142] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(289), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(287), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13171] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(358), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(356), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13200] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(334), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(332), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13229] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(390), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(388), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13258] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(308), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(306), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13287] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(382), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(380), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13316] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(338), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(336), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13345] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(342), 5,
-      anon_sym_LBRACK,
-      anon_sym_DOT,
-      anon_sym_SLASH,
-      anon_sym_GT,
-      anon_sym_LT,
-    ACTIONS(340), 15,
-      sym__template_interpolation_end,
-      anon_sym_DOT_STAR,
-      anon_sym_LBRACK_STAR_RBRACK,
-      anon_sym_QMARK,
-      anon_sym_DASH,
-      anon_sym_STAR,
-      anon_sym_PERCENT,
-      anon_sym_PLUS,
-      anon_sym_GT_EQ,
-      anon_sym_LT_EQ,
-      anon_sym_EQ_EQ,
-      anon_sym_BANG_EQ,
-      anon_sym_AMP_AMP,
-      anon_sym_PIPE_PIPE,
-      sym_strip_marker,
-  [13374] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -17698,17 +17149,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [13403] = 3,
+  [12823] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(283), 5,
+    ACTIONS(350), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(281), 15,
+    ACTIONS(348), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -17724,17 +17175,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [13432] = 3,
+  [12852] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(354), 5,
+    ACTIONS(374), 5,
       anon_sym_LBRACK,
       anon_sym_DOT,
       anon_sym_SLASH,
       anon_sym_GT,
       anon_sym_LT,
-    ACTIONS(352), 15,
+    ACTIONS(372), 15,
       sym__template_interpolation_end,
       anon_sym_DOT_STAR,
       anon_sym_LBRACK_STAR_RBRACK,
@@ -17750,7 +17201,7 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
-  [13461] = 3,
+  [12881] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -17776,17 +17227,563 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_AMP_AMP,
       anon_sym_PIPE_PIPE,
       sym_strip_marker,
+  [12910] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(370), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(368), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [12939] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(270), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(268), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [12968] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(334), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(332), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [12997] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(378), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(376), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13026] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(330), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(328), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13055] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(322), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(320), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13084] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(314), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(312), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13113] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(338), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(336), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13142] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(358), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(356), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13171] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(354), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(352), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13200] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(342), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(340), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13229] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(290), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(288), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13258] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(278), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(276), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13287] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(282), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(280), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13316] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(326), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(324), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13345] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(274), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(272), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13374] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(318), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(316), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13403] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(310), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(308), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13432] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(294), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(292), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13461] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(306), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(304), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
   [13490] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(108), 5,
+    ACTIONS(298), 5,
+      anon_sym_LBRACK,
+      anon_sym_DOT,
+      anon_sym_SLASH,
+      anon_sym_GT,
+      anon_sym_LT,
+    ACTIONS(296), 15,
+      sym__template_interpolation_end,
+      anon_sym_DOT_STAR,
+      anon_sym_LBRACK_STAR_RBRACK,
+      anon_sym_QMARK,
+      anon_sym_DASH,
+      anon_sym_STAR,
+      anon_sym_PERCENT,
+      anon_sym_PLUS,
+      anon_sym_GT_EQ,
+      anon_sym_LT_EQ,
+      anon_sym_EQ_EQ,
+      anon_sym_BANG_EQ,
+      anon_sym_AMP_AMP,
+      anon_sym_PIPE_PIPE,
+      sym_strip_marker,
+  [13519] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(96), 5,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
       anon_sym_false,
       sym_null_lit,
-    ACTIONS(106), 10,
+    ACTIONS(94), 10,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -17797,39 +17794,17 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_QMARK,
       anon_sym_DASH,
       anon_sym_BANG,
-  [13514] = 4,
-    ACTIONS(470), 1,
-      anon_sym_QMARK,
+  [13543] = 3,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(468), 5,
+    ACTIONS(446), 5,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
       anon_sym_false,
       sym_null_lit,
-    ACTIONS(466), 9,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_RBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_COMMA,
-      anon_sym_LBRACK,
-      anon_sym_DASH,
-      anon_sym_BANG,
-  [13540] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(474), 5,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-    ACTIONS(472), 10,
+    ACTIONS(444), 10,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -17840,17 +17815,19 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_QMARK,
       anon_sym_DASH,
       anon_sym_BANG,
-  [13564] = 3,
+  [13567] = 4,
+    ACTIONS(452), 1,
+      anon_sym_QMARK,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(476), 5,
+    ACTIONS(450), 5,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
       anon_sym_false,
       sym_null_lit,
-    ACTIONS(50), 9,
+    ACTIONS(448), 9,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_RBRACE,
@@ -17860,19 +17837,39 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_LBRACK,
       anon_sym_DASH,
       anon_sym_BANG,
-  [13587] = 4,
-    ACTIONS(482), 1,
+  [13593] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(454), 5,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+    ACTIONS(48), 9,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_COMMA,
+      anon_sym_LBRACK,
+      anon_sym_DASH,
+      anon_sym_BANG,
+  [13616] = 4,
+    ACTIONS(460), 1,
       anon_sym_RPAREN,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(480), 5,
+    ACTIONS(458), 5,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
       anon_sym_false,
       sym_null_lit,
-    ACTIONS(478), 7,
+    ACTIONS(456), 7,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_LPAREN,
@@ -17880,19 +17877,19 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_LBRACK,
       anon_sym_DASH,
       anon_sym_BANG,
-  [13611] = 4,
-    ACTIONS(484), 1,
+  [13640] = 4,
+    ACTIONS(462), 1,
       anon_sym_RPAREN,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(480), 5,
+    ACTIONS(458), 5,
       sym_identifier,
       aux_sym_numeric_lit_token1,
       anon_sym_true,
       anon_sym_false,
       sym_null_lit,
-    ACTIONS(478), 7,
+    ACTIONS(456), 7,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       anon_sym_LPAREN,
@@ -17900,50 +17897,15 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_LBRACK,
       anon_sym_DASH,
       anon_sym_BANG,
-  [13635] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(488), 5,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-    ACTIONS(486), 7,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_LBRACK,
-      anon_sym_DASH,
-      anon_sym_BANG,
-  [13656] = 3,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(492), 5,
-      sym_identifier,
-      aux_sym_numeric_lit_token1,
-      anon_sym_true,
-      anon_sym_false,
-      sym_null_lit,
-    ACTIONS(490), 7,
-      sym__quoted_template_start,
-      anon_sym_LBRACE,
-      anon_sym_LPAREN,
-      aux_sym_numeric_lit_token2,
-      anon_sym_LBRACK,
-      anon_sym_DASH,
-      anon_sym_BANG,
-  [13677] = 3,
-    ACTIONS(108), 1,
+  [13664] = 3,
+    ACTIONS(446), 1,
       anon_sym_EQ,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(106), 10,
+    ACTIONS(444), 11,
       ts_builtin_sym_end,
+      anon_sym_LBRACE,
       anon_sym_RBRACE,
       sym_identifier,
       anon_sym_RPAREN,
@@ -17953,33 +17915,148 @@ static const uint16_t ts_small_parse_table[] = {
       anon_sym_EQ_GT,
       sym_ellipsis,
       anon_sym_QMARK,
-  [13697] = 3,
+  [13685] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(466), 5,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+    ACTIONS(464), 7,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_LBRACK,
+      anon_sym_DASH,
+      anon_sym_BANG,
+  [13706] = 3,
+    ACTIONS(96), 1,
+      anon_sym_EQ,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(94), 11,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+      anon_sym_RPAREN,
+      anon_sym_COMMA,
+      anon_sym_RBRACK,
+      anon_sym_COLON,
+      anon_sym_EQ_GT,
+      sym_ellipsis,
+      anon_sym_QMARK,
+  [13727] = 3,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(470), 5,
+      sym_identifier,
+      aux_sym_numeric_lit_token1,
+      anon_sym_true,
+      anon_sym_false,
+      sym_null_lit,
+    ACTIONS(468), 7,
+      sym__quoted_template_start,
+      anon_sym_LBRACE,
+      anon_sym_LPAREN,
+      aux_sym_numeric_lit_token2,
+      anon_sym_LBRACK,
+      anon_sym_DASH,
+      anon_sym_BANG,
+  [13748] = 8,
+    ACTIONS(7), 1,
+      anon_sym_LBRACE,
+    ACTIONS(9), 1,
+      sym_identifier,
+    ACTIONS(472), 1,
+      anon_sym_RBRACE,
+    STATE(13), 1,
+      sym__object_start,
+    STATE(306), 1,
+      sym__block_end,
+    STATE(350), 1,
+      sym_body,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(268), 4,
+      sym_attribute,
+      sym_block,
+      sym_object,
+      aux_sym_body_repeat1,
+  [13777] = 8,
+    ACTIONS(7), 1,
+      anon_sym_LBRACE,
+    ACTIONS(9), 1,
+      sym_identifier,
     ACTIONS(474), 1,
-      anon_sym_EQ,
+      anon_sym_RBRACE,
+    STATE(13), 1,
+      sym__object_start,
+    STATE(299), 1,
+      sym__block_end,
+    STATE(361), 1,
+      sym_body,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(472), 10,
+    STATE(268), 4,
+      sym_attribute,
+      sym_block,
+      sym_object,
+      aux_sym_body_repeat1,
+  [13806] = 6,
+    ACTIONS(478), 1,
+      anon_sym_LBRACE,
+    ACTIONS(481), 1,
+      sym_identifier,
+    STATE(13), 1,
+      sym__object_start,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(476), 2,
       ts_builtin_sym_end,
       anon_sym_RBRACE,
+    STATE(267), 4,
+      sym_attribute,
+      sym_block,
+      sym_object,
+      aux_sym_body_repeat1,
+  [13830] = 6,
+    ACTIONS(7), 1,
+      anon_sym_LBRACE,
+    ACTIONS(9), 1,
       sym_identifier,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      anon_sym_COLON,
-      anon_sym_EQ_GT,
-      sym_ellipsis,
-      anon_sym_QMARK,
-  [13717] = 7,
-    ACTIONS(494), 1,
+    STATE(13), 1,
+      sym__object_start,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(484), 2,
+      ts_builtin_sym_end,
+      anon_sym_RBRACE,
+    STATE(267), 4,
+      sym_attribute,
+      sym_block,
+      sym_object,
+      aux_sym_body_repeat1,
+  [13854] = 7,
+    ACTIONS(486), 1,
       sym__quoted_template_end,
-    ACTIONS(496), 1,
+    ACTIONS(488), 1,
       sym__template_literal_chunk,
-    ACTIONS(498), 1,
+    ACTIONS(490), 1,
       sym__template_interpolation_start,
-    STATE(305), 1,
+    STATE(301), 1,
       aux_sym_template_literal_repeat1,
-    STATE(317), 1,
+    STATE(308), 1,
       sym_template_literal,
     ACTIONS(3), 2,
       sym_comment,
@@ -17988,33 +18065,137 @@ static const uint16_t ts_small_parse_table[] = {
       sym_template_interpolation,
       sym_template_directive,
       aux_sym_quoted_template_repeat1,
-  [13742] = 6,
-    ACTIONS(500), 1,
-      sym__quoted_template_end,
-    ACTIONS(502), 1,
+  [13879] = 6,
+    ACTIONS(488), 1,
       sym__template_literal_chunk,
-    ACTIONS(505), 1,
+    ACTIONS(490), 1,
       sym__template_interpolation_start,
-    STATE(305), 1,
+    ACTIONS(492), 1,
+      sym__quoted_template_end,
+    STATE(301), 1,
       aux_sym_template_literal_repeat1,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    STATE(269), 4,
+    STATE(271), 4,
       sym_template_literal,
       sym_template_interpolation,
       sym_template_directive,
       aux_sym_quoted_template_repeat1,
-  [13765] = 7,
+  [13902] = 6,
+    ACTIONS(494), 1,
+      sym__quoted_template_end,
     ACTIONS(496), 1,
       sym__template_literal_chunk,
-    ACTIONS(498), 1,
+    ACTIONS(499), 1,
+      sym__template_interpolation_start,
+    STATE(301), 1,
+      aux_sym_template_literal_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(271), 4,
+      sym_template_literal,
+      sym_template_interpolation,
+      sym_template_directive,
+      aux_sym_quoted_template_repeat1,
+  [13925] = 7,
+    ACTIONS(488), 1,
+      sym__template_literal_chunk,
+    ACTIONS(490), 1,
+      sym__template_interpolation_start,
+    ACTIONS(502), 1,
+      sym__quoted_template_end,
+    STATE(301), 1,
+      aux_sym_template_literal_repeat1,
+    STATE(307), 1,
+      sym_template_literal,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(270), 3,
+      sym_template_interpolation,
+      sym_template_directive,
+      aux_sym_quoted_template_repeat1,
+  [13950] = 6,
+    ACTIONS(488), 1,
+      sym__template_literal_chunk,
+    ACTIONS(490), 1,
+      sym__template_interpolation_start,
+    ACTIONS(504), 1,
+      sym__quoted_template_end,
+    STATE(301), 1,
+      aux_sym_template_literal_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(271), 4,
+      sym_template_literal,
+      sym_template_interpolation,
+      sym_template_directive,
+      aux_sym_quoted_template_repeat1,
+  [13973] = 6,
+    ACTIONS(488), 1,
+      sym__template_literal_chunk,
+    ACTIONS(490), 1,
+      sym__template_interpolation_start,
+    ACTIONS(506), 1,
+      sym__quoted_template_end,
+    STATE(301), 1,
+      aux_sym_template_literal_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(271), 4,
+      sym_template_literal,
+      sym_template_interpolation,
+      sym_template_directive,
+      aux_sym_quoted_template_repeat1,
+  [13996] = 7,
+    ACTIONS(488), 1,
+      sym__template_literal_chunk,
+    ACTIONS(490), 1,
       sym__template_interpolation_start,
     ACTIONS(508), 1,
       sym__quoted_template_end,
-    STATE(305), 1,
+    STATE(301), 1,
       aux_sym_template_literal_repeat1,
-    STATE(307), 1,
+    STATE(317), 1,
+      sym_template_literal,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(273), 3,
+      sym_template_interpolation,
+      sym_template_directive,
+      aux_sym_quoted_template_repeat1,
+  [14021] = 6,
+    ACTIONS(488), 1,
+      sym__template_literal_chunk,
+    ACTIONS(490), 1,
+      sym__template_interpolation_start,
+    ACTIONS(510), 1,
+      sym__quoted_template_end,
+    STATE(301), 1,
+      aux_sym_template_literal_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(271), 4,
+      sym_template_literal,
+      sym_template_interpolation,
+      sym_template_directive,
+      aux_sym_quoted_template_repeat1,
+  [14044] = 7,
+    ACTIONS(488), 1,
+      sym__template_literal_chunk,
+    ACTIONS(490), 1,
+      sym__template_interpolation_start,
+    ACTIONS(512), 1,
+      sym__quoted_template_end,
+    STATE(301), 1,
+      aux_sym_template_literal_repeat1,
+    STATE(319), 1,
       sym_template_literal,
     ACTIONS(3), 2,
       sym_comment,
@@ -18023,524 +18204,453 @@ static const uint16_t ts_small_parse_table[] = {
       sym_template_interpolation,
       sym_template_directive,
       aux_sym_quoted_template_repeat1,
-  [13790] = 7,
-    ACTIONS(496), 1,
-      sym__template_literal_chunk,
-    ACTIONS(498), 1,
-      sym__template_interpolation_start,
-    ACTIONS(510), 1,
-      sym__quoted_template_end,
-    STATE(305), 1,
-      aux_sym_template_literal_repeat1,
-    STATE(321), 1,
-      sym_template_literal,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(272), 3,
-      sym_template_interpolation,
-      sym_template_directive,
-      aux_sym_quoted_template_repeat1,
-  [13815] = 6,
-    ACTIONS(496), 1,
-      sym__template_literal_chunk,
-    ACTIONS(498), 1,
-      sym__template_interpolation_start,
-    ACTIONS(512), 1,
-      sym__quoted_template_end,
-    STATE(305), 1,
-      aux_sym_template_literal_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(269), 4,
-      sym_template_literal,
-      sym_template_interpolation,
-      sym_template_directive,
-      aux_sym_quoted_template_repeat1,
-  [13838] = 7,
-    ACTIONS(496), 1,
-      sym__template_literal_chunk,
-    ACTIONS(498), 1,
-      sym__template_interpolation_start,
+  [14069] = 7,
     ACTIONS(514), 1,
-      sym__quoted_template_end,
-    STATE(305), 1,
-      aux_sym_template_literal_repeat1,
-    STATE(326), 1,
-      sym_template_literal,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(275), 3,
-      sym_template_interpolation,
-      sym_template_directive,
-      aux_sym_quoted_template_repeat1,
-  [13863] = 6,
-    ACTIONS(496), 1,
-      sym__template_literal_chunk,
-    ACTIONS(498), 1,
-      sym__template_interpolation_start,
-    ACTIONS(516), 1,
-      sym__quoted_template_end,
-    STATE(305), 1,
-      aux_sym_template_literal_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(269), 4,
-      sym_template_literal,
-      sym_template_interpolation,
-      sym_template_directive,
-      aux_sym_quoted_template_repeat1,
-  [13886] = 6,
-    ACTIONS(496), 1,
-      sym__template_literal_chunk,
-    ACTIONS(498), 1,
-      sym__template_interpolation_start,
-    ACTIONS(518), 1,
-      sym__quoted_template_end,
-    STATE(305), 1,
-      aux_sym_template_literal_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(269), 4,
-      sym_template_literal,
-      sym_template_interpolation,
-      sym_template_directive,
-      aux_sym_quoted_template_repeat1,
-  [13909] = 6,
-    ACTIONS(496), 1,
-      sym__template_literal_chunk,
-    ACTIONS(498), 1,
-      sym__template_interpolation_start,
-    ACTIONS(520), 1,
-      sym__quoted_template_end,
-    STATE(305), 1,
-      aux_sym_template_literal_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(269), 4,
-      sym_template_literal,
-      sym_template_interpolation,
-      sym_template_directive,
-      aux_sym_quoted_template_repeat1,
-  [13932] = 7,
-    ACTIONS(522), 1,
       anon_sym_EQ,
+    ACTIONS(516), 1,
+      anon_sym_LBRACE,
+    ACTIONS(518), 1,
+      sym_identifier,
+    ACTIONS(520), 1,
+      sym__quoted_template_start,
+    STATE(266), 1,
+      sym__block_start,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(283), 2,
+      sym_string_lit,
+      aux_sym_block_repeat1,
+  [14093] = 7,
+    ACTIONS(522), 1,
+      anon_sym_RBRACE,
     ACTIONS(524), 1,
-      anon_sym_LBRACE,
-    ACTIONS(526), 1,
-      sym_identifier,
-    ACTIONS(528), 1,
-      sym__quoted_template_start,
-    STATE(279), 1,
-      sym__block_start,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(281), 2,
-      sym_string_lit,
-      aux_sym_block_repeat1,
-  [13956] = 6,
-    ACTIONS(7), 1,
-      sym_identifier,
-    ACTIONS(530), 1,
-      anon_sym_RBRACE,
-    STATE(314), 1,
-      sym__block_end,
-    STATE(371), 1,
-      sym_body,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(288), 3,
-      sym_attribute,
-      sym_block,
-      aux_sym_body_repeat1,
-  [13978] = 6,
-    ACTIONS(7), 1,
-      sym_identifier,
-    ACTIONS(532), 1,
-      anon_sym_RBRACE,
-    STATE(318), 1,
-      sym__block_end,
-    STATE(352), 1,
-      sym_body,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(288), 3,
-      sym_attribute,
-      sym_block,
-      aux_sym_body_repeat1,
-  [14000] = 7,
-    ACTIONS(534), 1,
-      anon_sym_RPAREN,
-    ACTIONS(536), 1,
-      anon_sym_COMMA,
-    ACTIONS(538), 1,
-      sym_ellipsis,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    STATE(73), 1,
-      sym__comma,
-    STATE(290), 1,
-      aux_sym__tuple_elems_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14023] = 6,
-    ACTIONS(528), 1,
-      sym__quoted_template_start,
-    ACTIONS(542), 1,
-      anon_sym_LBRACE,
-    ACTIONS(544), 1,
-      sym_identifier,
-    STATE(278), 1,
-      sym__block_start,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(289), 2,
-      sym_string_lit,
-      aux_sym_block_repeat1,
-  [14044] = 7,
-    ACTIONS(546), 1,
-      anon_sym_RBRACE,
-    ACTIONS(548), 1,
       anon_sym_if,
-    ACTIONS(550), 1,
+    ACTIONS(526), 1,
       sym_ellipsis,
-    ACTIONS(552), 1,
+    ACTIONS(528), 1,
       anon_sym_QMARK,
-    STATE(234), 1,
+    STATE(120), 1,
       sym__object_end,
-    STATE(349), 1,
+    STATE(368), 1,
       sym_for_cond,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14067] = 7,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(552), 1,
-      anon_sym_QMARK,
-    ACTIONS(554), 1,
-      anon_sym_RBRACE,
-    ACTIONS(556), 1,
+  [14116] = 7,
+    ACTIONS(530), 1,
+      anon_sym_RPAREN,
+    ACTIONS(532), 1,
+      anon_sym_COMMA,
+    ACTIONS(534), 1,
       sym_ellipsis,
-    STATE(205), 1,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    STATE(71), 1,
+      sym__comma,
+    STATE(293), 1,
+      aux_sym__tuple_elems_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14139] = 5,
+    ACTIONS(540), 1,
+      anon_sym_COMMA,
+    STATE(71), 1,
+      sym__comma,
+    STATE(281), 1,
+      aux_sym__tuple_elems_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(538), 3,
+      anon_sym_RPAREN,
+      anon_sym_RBRACK,
+      sym_ellipsis,
+  [14158] = 7,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(528), 1,
+      anon_sym_QMARK,
+    ACTIONS(543), 1,
+      anon_sym_RBRACE,
+    ACTIONS(545), 1,
+      sym_ellipsis,
+    STATE(223), 1,
       sym__object_end,
+    STATE(333), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14181] = 6,
+    ACTIONS(520), 1,
+      sym__quoted_template_start,
+    ACTIONS(547), 1,
+      anon_sym_LBRACE,
+    ACTIONS(549), 1,
+      sym_identifier,
+    STATE(265), 1,
+      sym__block_start,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(290), 2,
+      sym_string_lit,
+      aux_sym_block_repeat1,
+  [14202] = 7,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(528), 1,
+      anon_sym_QMARK,
+    ACTIONS(551), 1,
+      anon_sym_RBRACE,
+    ACTIONS(553), 1,
+      sym_ellipsis,
+    STATE(245), 1,
+      sym__object_end,
+    STATE(336), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14225] = 7,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(528), 1,
+      anon_sym_QMARK,
+    ACTIONS(555), 1,
+      anon_sym_RBRACE,
+    ACTIONS(557), 1,
+      sym_ellipsis,
+    STATE(171), 1,
+      sym__object_end,
+    STATE(346), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14248] = 6,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(559), 1,
+      anon_sym_COMMA,
+    ACTIONS(561), 1,
+      anon_sym_RBRACK,
+    STATE(36), 1,
+      sym__comma,
+    STATE(300), 1,
+      aux_sym__tuple_elems_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14268] = 6,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(528), 1,
+      anon_sym_QMARK,
+    ACTIONS(563), 1,
+      anon_sym_RBRACK,
+    STATE(221), 1,
+      sym__tuple_end,
+    STATE(329), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14288] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(565), 4,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+  [14302] = 6,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(528), 1,
+      anon_sym_QMARK,
+    ACTIONS(567), 1,
+      anon_sym_RBRACK,
+    STATE(164), 1,
+      sym__tuple_end,
+    STATE(367), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14322] = 5,
+    ACTIONS(569), 1,
+      anon_sym_LBRACE,
+    ACTIONS(571), 1,
+      sym_identifier,
+    ACTIONS(574), 1,
+      sym__quoted_template_start,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    STATE(290), 2,
+      sym_string_lit,
+      aux_sym_block_repeat1,
+  [14340] = 2,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(94), 5,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+      anon_sym_if,
+      sym_ellipsis,
+      anon_sym_QMARK,
+  [14352] = 6,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(528), 1,
+      anon_sym_QMARK,
+    ACTIONS(577), 1,
+      anon_sym_RBRACK,
+    STATE(240), 1,
+      sym__tuple_end,
     STATE(338), 1,
       sym_for_cond,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14090] = 7,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(552), 1,
-      anon_sym_QMARK,
-    ACTIONS(558), 1,
-      anon_sym_RBRACE,
-    ACTIONS(560), 1,
-      sym_ellipsis,
-    STATE(173), 1,
-      sym__object_end,
-    STATE(350), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14113] = 4,
-    ACTIONS(564), 1,
-      sym_identifier,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(562), 2,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-    STATE(285), 3,
-      sym_attribute,
-      sym_block,
-      aux_sym_body_repeat1,
-  [14130] = 5,
-    ACTIONS(569), 1,
+  [14372] = 6,
+    ACTIONS(462), 1,
+      anon_sym_RPAREN,
+    ACTIONS(579), 1,
       anon_sym_COMMA,
-    STATE(73), 1,
+    ACTIONS(581), 1,
+      sym_ellipsis,
+    STATE(71), 1,
       sym__comma,
-    STATE(286), 1,
+    STATE(281), 1,
       aux_sym__tuple_elems_repeat1,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(567), 3,
+  [14392] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(538), 4,
       anon_sym_RPAREN,
+      anon_sym_COMMA,
       anon_sym_RBRACK,
       sym_ellipsis,
-  [14149] = 7,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(552), 1,
-      anon_sym_QMARK,
-    ACTIONS(572), 1,
+  [14406] = 2,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(444), 5,
       anon_sym_RBRACE,
-    ACTIONS(574), 1,
+      anon_sym_RBRACK,
+      anon_sym_if,
       sym_ellipsis,
-    STATE(137), 1,
+      anon_sym_QMARK,
+  [14418] = 6,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(528), 1,
+      anon_sym_QMARK,
+    ACTIONS(583), 1,
+      anon_sym_RBRACK,
+    STATE(126), 1,
+      sym__tuple_end,
+    STATE(359), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14438] = 5,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(585), 1,
+      anon_sym_RBRACE,
+    STATE(146), 1,
+      sym__object_end,
+    STATE(370), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14455] = 2,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(587), 4,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+  [14466] = 2,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(589), 4,
+      ts_builtin_sym_end,
+      anon_sym_LBRACE,
+      anon_sym_RBRACE,
+      sym_identifier,
+  [14477] = 5,
+    ACTIONS(162), 1,
+      anon_sym_RBRACK,
+    ACTIONS(591), 1,
+      anon_sym_COMMA,
+    STATE(39), 1,
+      sym__comma,
+    STATE(281), 1,
+      aux_sym__tuple_elems_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14494] = 4,
+    ACTIONS(595), 1,
+      sym__template_literal_chunk,
+    STATE(302), 1,
+      aux_sym_template_literal_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(593), 2,
+      sym__quoted_template_end,
+      sym__template_interpolation_start,
+  [14509] = 4,
+    ACTIONS(599), 1,
+      sym__template_literal_chunk,
+    STATE(302), 1,
+      aux_sym_template_literal_repeat1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(597), 2,
+      sym__quoted_template_end,
+      sym__template_interpolation_start,
+  [14524] = 5,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(602), 1,
+      anon_sym_RBRACE,
+    STATE(247), 1,
+      sym__object_end,
+    STATE(334), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14541] = 5,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(604), 1,
+      anon_sym_RBRACE,
+    STATE(224), 1,
+      sym__object_end,
+    STATE(335), 1,
+      sym_for_cond,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14558] = 5,
+    ACTIONS(524), 1,
+      anon_sym_if,
+    ACTIONS(606), 1,
+      anon_sym_RBRACE,
+    STATE(118), 1,
       sym__object_end,
     STATE(339), 1,
       sym_for_cond,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14172] = 4,
-    ACTIONS(7), 1,
-      sym_identifier,
+  [14575] = 2,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(576), 2,
+    ACTIONS(608), 4,
       ts_builtin_sym_end,
-      anon_sym_RBRACE,
-    STATE(285), 3,
-      sym_attribute,
-      sym_block,
-      aux_sym_body_repeat1,
-  [14189] = 5,
-    ACTIONS(578), 1,
       anon_sym_LBRACE,
-    ACTIONS(580), 1,
-      sym_identifier,
-    ACTIONS(583), 1,
-      sym__quoted_template_start,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    STATE(289), 2,
-      sym_string_lit,
-      aux_sym_block_repeat1,
-  [14207] = 6,
-    ACTIONS(482), 1,
-      anon_sym_RPAREN,
-    ACTIONS(586), 1,
-      anon_sym_COMMA,
-    ACTIONS(588), 1,
-      sym_ellipsis,
-    STATE(73), 1,
-      sym__comma,
-    STATE(286), 1,
-      aux_sym__tuple_elems_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14227] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(567), 4,
-      anon_sym_RPAREN,
-      anon_sym_COMMA,
-      anon_sym_RBRACK,
-      sym_ellipsis,
-  [14241] = 2,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(106), 5,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-  [14253] = 6,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(552), 1,
-      anon_sym_QMARK,
-    ACTIONS(590), 1,
-      anon_sym_RBRACK,
-    STATE(132), 1,
-      sym__tuple_end,
-    STATE(336), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14273] = 6,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(552), 1,
-      anon_sym_QMARK,
-    ACTIONS(592), 1,
-      anon_sym_RBRACK,
-    STATE(157), 1,
-      sym__tuple_end,
-    STATE(374), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14293] = 6,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(552), 1,
-      anon_sym_QMARK,
-    ACTIONS(594), 1,
-      anon_sym_RBRACK,
-    STATE(207), 1,
-      sym__tuple_end,
-    STATE(344), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14313] = 6,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(596), 1,
-      anon_sym_COMMA,
-    ACTIONS(598), 1,
-      anon_sym_RBRACK,
-    STATE(30), 1,
-      sym__comma,
-    STATE(304), 1,
-      aux_sym__tuple_elems_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14333] = 6,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(552), 1,
-      anon_sym_QMARK,
-    ACTIONS(600), 1,
-      anon_sym_RBRACK,
-    STATE(244), 1,
-      sym__tuple_end,
-    STATE(368), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14353] = 2,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(472), 5,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-      anon_sym_if,
-      sym_ellipsis,
-      anon_sym_QMARK,
-  [14365] = 5,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(602), 1,
-      anon_sym_RBRACE,
-    STATE(177), 1,
-      sym__object_end,
-    STATE(332), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14382] = 5,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(604), 1,
-      anon_sym_RBRACE,
-    STATE(139), 1,
-      sym__object_end,
-    STATE(327), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14399] = 5,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(606), 1,
-      anon_sym_RBRACE,
-    STATE(242), 1,
-      sym__object_end,
-    STATE(355), 1,
-      sym_for_cond,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14416] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(608), 3,
-      ts_builtin_sym_end,
       anon_sym_RBRACE,
       sym_identifier,
-  [14429] = 4,
-    ACTIONS(612), 1,
-      sym__template_literal_chunk,
-    STATE(303), 1,
-      aux_sym_template_literal_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(610), 2,
+  [14586] = 3,
+    ACTIONS(610), 1,
       sym__quoted_template_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(613), 2,
+      sym__template_literal_chunk,
       sym__template_interpolation_start,
-  [14444] = 5,
-    ACTIONS(148), 1,
-      anon_sym_RBRACK,
+  [14598] = 3,
     ACTIONS(615), 1,
-      anon_sym_COMMA,
-    STATE(29), 1,
-      sym__comma,
-    STATE(286), 1,
-      aux_sym__tuple_elems_repeat1,
+      sym__quoted_template_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14461] = 4,
-    ACTIONS(619), 1,
+    ACTIONS(613), 2,
       sym__template_literal_chunk,
-    STATE(303), 1,
+      sym__template_interpolation_start,
+  [14610] = 2,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(618), 3,
+      sym__quoted_template_end,
+      sym__template_literal_chunk,
+      sym__template_interpolation_start,
+  [14620] = 4,
+    ACTIONS(620), 1,
+      sym__template_literal_chunk,
+    STATE(313), 1,
+      aux_sym_template_literal_repeat1,
+    STATE(373), 1,
+      sym_template_literal,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14634] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(622), 2,
+      anon_sym_RBRACE,
+      anon_sym_RBRACK,
+  [14646] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(624), 2,
+      anon_sym_EQ,
+      anon_sym_COLON,
+  [14658] = 4,
+    ACTIONS(593), 1,
+      sym__quoted_template_end,
+    ACTIONS(626), 1,
+      sym__template_literal_chunk,
+    STATE(320), 1,
       aux_sym_template_literal_repeat1,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(617), 2,
-      sym__quoted_template_end,
-      sym__template_interpolation_start,
-  [14476] = 5,
-    ACTIONS(548), 1,
-      anon_sym_if,
-    ACTIONS(621), 1,
-      anon_sym_RBRACE,
-    STATE(204), 1,
-      sym__object_end,
-    STATE(337), 1,
-      sym_for_cond,
+  [14672] = 2,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14493] = 3,
-    ACTIONS(623), 1,
-      sym__quoted_template_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(626), 2,
-      sym__template_literal_chunk,
-      sym__template_interpolation_start,
-  [14505] = 2,
+    ACTIONS(94), 3,
+      sym__template_interpolation_end,
+      anon_sym_QMARK,
+      sym_strip_marker,
+  [14682] = 2,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
@@ -18548,637 +18658,526 @@ static const uint16_t ts_small_parse_table[] = {
       sym__quoted_template_end,
       sym__template_literal_chunk,
       sym__template_interpolation_start,
-  [14515] = 2,
+  [14692] = 2,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(472), 3,
-      sym__template_interpolation_end,
-      anon_sym_QMARK,
-      sym_strip_marker,
-  [14525] = 4,
-    ACTIONS(630), 1,
-      sym__template_literal_chunk,
-    STATE(312), 1,
-      aux_sym_template_literal_repeat1,
-    STATE(380), 1,
-      sym_template_literal,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14539] = 2,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(632), 3,
+    ACTIONS(630), 3,
       sym__quoted_template_end,
       sym__template_literal_chunk,
       sym__template_interpolation_start,
-  [14549] = 4,
-    ACTIONS(617), 1,
+  [14702] = 3,
+    ACTIONS(632), 1,
       sym__quoted_template_end,
-    ACTIONS(634), 1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(613), 2,
       sym__template_literal_chunk,
-    STATE(323), 1,
-      aux_sym_template_literal_repeat1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14563] = 3,
-    ACTIONS(540), 1,
+      sym__template_interpolation_start,
+  [14714] = 4,
+    ACTIONS(635), 1,
       anon_sym_QMARK,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(636), 2,
-      anon_sym_EQ,
-      anon_sym_COLON,
-  [14575] = 2,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(638), 3,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-  [14585] = 4,
-    ACTIONS(640), 1,
-      anon_sym_QMARK,
-    ACTIONS(642), 1,
+    ACTIONS(637), 1,
       sym_strip_marker,
+    ACTIONS(639), 1,
+      sym__template_interpolation_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14728] = 3,
+    ACTIONS(641), 1,
+      sym__quoted_template_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(613), 2,
+      sym__template_literal_chunk,
+      sym__template_interpolation_start,
+  [14740] = 4,
+    ACTIONS(597), 1,
+      sym__quoted_template_end,
     ACTIONS(644), 1,
-      sym__template_interpolation_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14599] = 2,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(646), 3,
-      sym__quoted_template_end,
       sym__template_literal_chunk,
-      sym__template_interpolation_start,
-  [14609] = 3,
-    ACTIONS(648), 1,
-      sym__quoted_template_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(626), 2,
-      sym__template_literal_chunk,
-      sym__template_interpolation_start,
-  [14621] = 2,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(651), 3,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-  [14631] = 2,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(653), 3,
-      ts_builtin_sym_end,
-      anon_sym_RBRACE,
-      sym_identifier,
-  [14641] = 4,
-    ACTIONS(640), 1,
-      anon_sym_QMARK,
-    ACTIONS(655), 1,
-      sym_strip_marker,
-    ACTIONS(657), 1,
-      sym__template_interpolation_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14655] = 3,
-    ACTIONS(659), 1,
-      sym__quoted_template_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(626), 2,
-      sym__template_literal_chunk,
-      sym__template_interpolation_start,
-  [14667] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(662), 2,
-      anon_sym_RBRACE,
-      anon_sym_RBRACK,
-  [14679] = 4,
-    ACTIONS(610), 1,
-      sym__quoted_template_end,
-    ACTIONS(664), 1,
-      sym__template_literal_chunk,
-    STATE(323), 1,
+    STATE(320), 1,
       aux_sym_template_literal_repeat1,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14693] = 2,
+  [14754] = 4,
+    ACTIONS(635), 1,
+      anon_sym_QMARK,
+    ACTIONS(647), 1,
+      sym_strip_marker,
+    ACTIONS(649), 1,
+      sym__template_interpolation_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(106), 3,
+  [14768] = 2,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+    ACTIONS(444), 3,
       sym__template_interpolation_end,
       anon_sym_QMARK,
       sym_strip_marker,
-  [14703] = 2,
+  [14778] = 2,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-    ACTIONS(356), 3,
+    ACTIONS(304), 3,
       sym__quoted_template_start,
       anon_sym_LBRACE,
       sym_identifier,
-  [14713] = 3,
-    ACTIONS(667), 1,
-      sym__quoted_template_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-    ACTIONS(626), 2,
-      sym__template_literal_chunk,
-      sym__template_interpolation_start,
-  [14725] = 3,
-    ACTIONS(670), 1,
-      anon_sym_RBRACE,
-    STATE(118), 1,
-      sym__object_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14736] = 3,
-    ACTIONS(672), 1,
-      sym_identifier,
-    ACTIONS(674), 1,
-      aux_sym_legacy_index_token1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14747] = 3,
-    ACTIONS(540), 1,
+  [14788] = 3,
+    ACTIONS(536), 1,
       anon_sym_QMARK,
-    ACTIONS(676), 1,
-      anon_sym_RPAREN,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14758] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(678), 1,
-      anon_sym_COLON,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14769] = 3,
-    ACTIONS(680), 1,
-      anon_sym_RPAREN,
-    STATE(114), 1,
-      sym__function_call_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14780] = 3,
-    ACTIONS(682), 1,
-      anon_sym_RBRACE,
-    STATE(171), 1,
-      sym__object_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14791] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(684), 1,
+    ACTIONS(651), 1,
       anon_sym_RBRACK,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14802] = 3,
-    ACTIONS(540), 1,
+  [14799] = 3,
+    ACTIONS(536), 1,
       anon_sym_QMARK,
-    ACTIONS(686), 1,
+    ACTIONS(653), 1,
       anon_sym_COLON,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14813] = 3,
-    ACTIONS(540), 1,
+  [14810] = 3,
+    ACTIONS(536), 1,
       anon_sym_QMARK,
-    ACTIONS(688), 1,
+    ACTIONS(655), 1,
       anon_sym_EQ_GT,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14824] = 3,
-    ACTIONS(690), 1,
+  [14821] = 3,
+    ACTIONS(657), 1,
       anon_sym_RBRACK,
-    STATE(136), 1,
+    STATE(170), 1,
       sym__tuple_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14835] = 3,
-    ACTIONS(692), 1,
+  [14832] = 3,
+    ACTIONS(659), 1,
+      anon_sym_RPAREN,
+    STATE(219), 1,
+      sym__function_call_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14843] = 3,
+    ACTIONS(661), 1,
+      anon_sym_RBRACK,
+    STATE(222), 1,
+      sym__tuple_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14854] = 3,
+    ACTIONS(663), 1,
+      anon_sym_RPAREN,
+    STATE(130), 1,
+      sym__function_call_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14865] = 3,
+    ACTIONS(665), 1,
+      anon_sym_RBRACK,
+    STATE(131), 1,
+      sym__tuple_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14876] = 3,
+    ACTIONS(667), 1,
       anon_sym_RBRACE,
-    STATE(203), 1,
+    STATE(132), 1,
       sym__object_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14846] = 3,
-    ACTIONS(621), 1,
-      anon_sym_RBRACE,
-    STATE(204), 1,
-      sym__object_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14857] = 3,
+  [14887] = 3,
     ACTIONS(604), 1,
       anon_sym_RBRACE,
-    STATE(139), 1,
+    STATE(224), 1,
       sym__object_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14868] = 3,
-    ACTIONS(694), 1,
-      anon_sym_COMMA,
-    ACTIONS(696), 1,
-      anon_sym_in,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14879] = 3,
-    ACTIONS(698), 1,
-      anon_sym_RBRACK,
-    STATE(233), 1,
-      sym__tuple_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14890] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(700), 1,
-      anon_sym_EQ_GT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14901] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(702), 1,
-      anon_sym_RBRACK,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14912] = 3,
-    ACTIONS(704), 1,
-      anon_sym_RBRACK,
-    STATE(206), 1,
-      sym__tuple_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14923] = 3,
-    ACTIONS(706), 1,
-      anon_sym_RBRACK,
-    STATE(119), 1,
-      sym__tuple_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14934] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(708), 1,
-      anon_sym_RPAREN,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14945] = 3,
-    ACTIONS(710), 1,
-      sym_identifier,
-    ACTIONS(712), 1,
-      aux_sym_legacy_index_token1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14956] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(714), 1,
-      anon_sym_COLON,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [14967] = 3,
-    ACTIONS(606), 1,
+  [14898] = 3,
+    ACTIONS(669), 1,
       anon_sym_RBRACE,
-    STATE(242), 1,
+    STATE(249), 1,
       sym__object_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14978] = 3,
+  [14909] = 3,
+    ACTIONS(671), 1,
+      anon_sym_RBRACE,
+    STATE(225), 1,
+      sym__object_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [14920] = 3,
     ACTIONS(602), 1,
       anon_sym_RBRACE,
-    STATE(177), 1,
+    STATE(247), 1,
       sym__object_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [14989] = 3,
-    ACTIONS(716), 1,
-      anon_sym_RBRACK,
-    STATE(172), 1,
-      sym__tuple_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15000] = 3,
-    ACTIONS(530), 1,
-      anon_sym_RBRACE,
-    STATE(314), 1,
-      sym__block_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15011] = 3,
-    ACTIONS(540), 1,
+  [14931] = 3,
+    ACTIONS(536), 1,
       anon_sym_QMARK,
-    ACTIONS(718), 1,
+    ACTIONS(673), 1,
       anon_sym_COLON,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15022] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(720), 1,
-      anon_sym_EQ_GT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15033] = 3,
-    ACTIONS(722), 1,
-      anon_sym_RBRACE,
-    STATE(243), 1,
-      sym__object_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15044] = 3,
-    ACTIONS(724), 1,
-      anon_sym_RPAREN,
-    STATE(175), 1,
-      sym__function_call_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15055] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(726), 1,
-      anon_sym_RPAREN,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15066] = 3,
-    ACTIONS(728), 1,
-      sym_identifier,
-    ACTIONS(730), 1,
-      aux_sym_legacy_index_token1,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15077] = 3,
-    ACTIONS(732), 1,
-      anon_sym_RPAREN,
-    STATE(210), 1,
-      sym__function_call_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15088] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(734), 1,
-      anon_sym_COLON,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15099] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(736), 1,
+  [14942] = 3,
+    ACTIONS(675), 1,
       anon_sym_RBRACK,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15110] = 3,
-    ACTIONS(738), 1,
-      anon_sym_RBRACE,
-    STATE(211), 1,
-      sym__object_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15121] = 3,
-    ACTIONS(740), 1,
-      anon_sym_RBRACK,
-    STATE(212), 1,
+    STATE(227), 1,
       sym__tuple_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15132] = 3,
-    ACTIONS(742), 1,
-      anon_sym_RPAREN,
-    STATE(255), 1,
-      sym__function_call_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15143] = 3,
-    ACTIONS(744), 1,
+  [14953] = 3,
+    ACTIONS(677), 1,
       anon_sym_RBRACE,
     STATE(116), 1,
       sym__object_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15154] = 3,
-    ACTIONS(540), 1,
+  [14964] = 3,
+    ACTIONS(536), 1,
       anon_sym_QMARK,
-    ACTIONS(746), 1,
-      anon_sym_EQ_GT,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15165] = 3,
-    ACTIONS(748), 1,
-      anon_sym_RBRACE,
-    STATE(246), 1,
-      sym__object_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15176] = 3,
-    ACTIONS(750), 1,
-      anon_sym_RBRACK,
-    STATE(232), 1,
-      sym__tuple_end,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15187] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(752), 1,
+    ACTIONS(679), 1,
       anon_sym_RPAREN,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15198] = 3,
-    ACTIONS(754), 1,
+  [14975] = 3,
+    ACTIONS(681), 1,
       sym_identifier,
-    ACTIONS(756), 1,
+    ACTIONS(683), 1,
       aux_sym_legacy_index_token1,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15209] = 3,
-    ACTIONS(758), 1,
-      anon_sym_RBRACE,
-    STATE(319), 1,
-      sym__block_end,
+  [14986] = 3,
+    ACTIONS(685), 1,
+      sym_identifier,
+    ACTIONS(687), 1,
+      aux_sym_legacy_index_token1,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15220] = 3,
-    ACTIONS(540), 1,
+  [14997] = 3,
+    ACTIONS(536), 1,
       anon_sym_QMARK,
-    ACTIONS(760), 1,
+    ACTIONS(689), 1,
       anon_sym_COLON,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15231] = 3,
-    ACTIONS(540), 1,
-      anon_sym_QMARK,
-    ACTIONS(762), 1,
+  [15008] = 3,
+    ACTIONS(691), 1,
       anon_sym_RBRACK,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15242] = 3,
-    ACTIONS(764), 1,
-      anon_sym_RBRACK,
-    STATE(156), 1,
+    STATE(218), 1,
       sym__tuple_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15253] = 3,
-    ACTIONS(766), 1,
+  [15019] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(693), 1,
+      anon_sym_RPAREN,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15030] = 3,
+    ACTIONS(585), 1,
       anon_sym_RBRACE,
-    STATE(158), 1,
+    STATE(146), 1,
       sym__object_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15264] = 2,
-    ACTIONS(754), 1,
-      sym_identifier,
+  [15041] = 3,
+    ACTIONS(695), 1,
+      anon_sym_RPAREN,
+    STATE(238), 1,
+      sym__function_call_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15272] = 2,
-    ACTIONS(710), 1,
-      sym_identifier,
+  [15052] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(697), 1,
+      anon_sym_COLON,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15280] = 2,
-    ACTIONS(768), 1,
-      sym_identifier,
+  [15063] = 3,
+    ACTIONS(699), 1,
+      anon_sym_RBRACE,
+    STATE(212), 1,
+      sym__object_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15288] = 2,
-    ACTIONS(770), 1,
+  [15074] = 3,
+    ACTIONS(701), 1,
+      anon_sym_RBRACE,
+    STATE(298), 1,
+      sym__block_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15085] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(703), 1,
+      anon_sym_RPAREN,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15096] = 3,
+    ACTIONS(705), 1,
+      sym_identifier,
+    ACTIONS(707), 1,
+      aux_sym_legacy_index_token1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15107] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(709), 1,
+      anon_sym_EQ_GT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15118] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(711), 1,
+      anon_sym_COLON,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15129] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(713), 1,
+      anon_sym_RBRACK,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15140] = 3,
+    ACTIONS(715), 1,
+      anon_sym_RBRACK,
+    STATE(236), 1,
+      sym__tuple_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15151] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(717), 1,
+      anon_sym_RBRACK,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15162] = 3,
+    ACTIONS(719), 1,
+      anon_sym_COMMA,
+    ACTIONS(721), 1,
       anon_sym_in,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15296] = 2,
-    ACTIONS(772), 1,
+  [15173] = 3,
+    ACTIONS(723), 1,
+      anon_sym_RBRACK,
+    STATE(123), 1,
+      sym__tuple_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15184] = 3,
+    ACTIONS(725), 1,
+      anon_sym_RPAREN,
+    STATE(150), 1,
+      sym__function_call_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15195] = 3,
+    ACTIONS(472), 1,
+      anon_sym_RBRACE,
+    STATE(306), 1,
+      sym__block_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15206] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(727), 1,
+      anon_sym_RPAREN,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15217] = 3,
+    ACTIONS(729), 1,
+      sym_identifier,
+    ACTIONS(731), 1,
+      aux_sym_legacy_index_token1,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15228] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(733), 1,
+      anon_sym_EQ_GT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15239] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(735), 1,
+      anon_sym_COLON,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15250] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(737), 1,
+      anon_sym_RBRACK,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15261] = 3,
+    ACTIONS(739), 1,
+      anon_sym_RBRACK,
+    STATE(144), 1,
+      sym__tuple_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15272] = 3,
+    ACTIONS(606), 1,
+      anon_sym_RBRACE,
+    STATE(118), 1,
+      sym__object_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15283] = 3,
+    ACTIONS(741), 1,
+      anon_sym_RBRACE,
+    STATE(241), 1,
+      sym__object_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15294] = 3,
+    ACTIONS(743), 1,
+      anon_sym_RBRACE,
+    STATE(149), 1,
+      sym__object_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15305] = 3,
+    ACTIONS(536), 1,
+      anon_sym_QMARK,
+    ACTIONS(745), 1,
+      anon_sym_EQ_GT,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15316] = 3,
+    ACTIONS(747), 1,
+      anon_sym_RBRACE,
+    STATE(162), 1,
+      sym__object_end,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15327] = 2,
+    ACTIONS(749), 1,
       sym__quoted_template_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15304] = 2,
-    ACTIONS(672), 1,
-      sym_identifier,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15312] = 2,
-    ACTIONS(774), 1,
-      sym_identifier,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15320] = 2,
-    ACTIONS(657), 1,
+  [15335] = 2,
+    ACTIONS(751), 1,
       sym__template_interpolation_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15328] = 2,
-    ACTIONS(484), 1,
-      anon_sym_RPAREN,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15336] = 2,
-    ACTIONS(776), 1,
+  [15343] = 2,
+    ACTIONS(649), 1,
       sym__template_interpolation_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15344] = 2,
-    ACTIONS(728), 1,
-      sym_identifier,
-    ACTIONS(3), 2,
-      sym_comment,
-      sym__whitespace,
-  [15352] = 2,
-    ACTIONS(482), 1,
+  [15351] = 2,
+    ACTIONS(462), 1,
       anon_sym_RPAREN,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15360] = 2,
-    ACTIONS(778), 1,
+  [15359] = 2,
+    ACTIONS(753), 1,
+      sym_identifier,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15367] = 2,
+    ACTIONS(755), 1,
+      anon_sym_in,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15375] = 2,
+    ACTIONS(460), 1,
+      anon_sym_RPAREN,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15383] = 2,
+    ACTIONS(757), 1,
+      sym_identifier,
+    ACTIONS(3), 2,
+      sym_comment,
+      sym__whitespace,
+  [15391] = 2,
+    ACTIONS(759), 1,
       ts_builtin_sym_end,
     ACTIONS(3), 2,
       sym_comment,
       sym__whitespace,
-  [15368] = 2,
-    ACTIONS(780), 1,
+  [15399] = 2,
+    ACTIONS(761), 1,
       ts_builtin_sym_end,
     ACTIONS(3), 2,
       sym_comment,
@@ -19193,387 +19192,380 @@ static const uint32_t ts_small_parse_table_map[] = {
   [SMALL_STATE(6)] = 388,
   [SMALL_STATE(7)] = 480,
   [SMALL_STATE(8)] = 572,
-  [SMALL_STATE(9)] = 664,
-  [SMALL_STATE(10)] = 758,
-  [SMALL_STATE(11)] = 852,
+  [SMALL_STATE(9)] = 666,
+  [SMALL_STATE(10)] = 760,
+  [SMALL_STATE(11)] = 854,
   [SMALL_STATE(12)] = 946,
   [SMALL_STATE(13)] = 1040,
-  [SMALL_STATE(14)] = 1102,
-  [SMALL_STATE(15)] = 1190,
-  [SMALL_STATE(16)] = 1266,
-  [SMALL_STATE(17)] = 1318,
-  [SMALL_STATE(18)] = 1374,
-  [SMALL_STATE(19)] = 1432,
-  [SMALL_STATE(20)] = 1484,
-  [SMALL_STATE(21)] = 1572,
-  [SMALL_STATE(22)] = 1638,
-  [SMALL_STATE(23)] = 1702,
-  [SMALL_STATE(24)] = 1790,
-  [SMALL_STATE(25)] = 1878,
-  [SMALL_STATE(26)] = 1963,
-  [SMALL_STATE(27)] = 2048,
-  [SMALL_STATE(28)] = 2104,
-  [SMALL_STATE(29)] = 2156,
-  [SMALL_STATE(30)] = 2238,
-  [SMALL_STATE(31)] = 2320,
-  [SMALL_STATE(32)] = 2384,
-  [SMALL_STATE(33)] = 2446,
-  [SMALL_STATE(34)] = 2506,
-  [SMALL_STATE(35)] = 2580,
-  [SMALL_STATE(36)] = 2630,
-  [SMALL_STATE(37)] = 2684,
-  [SMALL_STATE(38)] = 2766,
-  [SMALL_STATE(39)] = 2816,
-  [SMALL_STATE(40)] = 2868,
-  [SMALL_STATE(41)] = 2920,
-  [SMALL_STATE(42)] = 3002,
-  [SMALL_STATE(43)] = 3081,
-  [SMALL_STATE(44)] = 3160,
-  [SMALL_STATE(45)] = 3239,
-  [SMALL_STATE(46)] = 3318,
-  [SMALL_STATE(47)] = 3397,
-  [SMALL_STATE(48)] = 3476,
-  [SMALL_STATE(49)] = 3555,
-  [SMALL_STATE(50)] = 3634,
-  [SMALL_STATE(51)] = 3713,
-  [SMALL_STATE(52)] = 3792,
-  [SMALL_STATE(53)] = 3871,
-  [SMALL_STATE(54)] = 3950,
-  [SMALL_STATE(55)] = 4029,
-  [SMALL_STATE(56)] = 4108,
-  [SMALL_STATE(57)] = 4187,
-  [SMALL_STATE(58)] = 4266,
-  [SMALL_STATE(59)] = 4345,
-  [SMALL_STATE(60)] = 4424,
-  [SMALL_STATE(61)] = 4503,
-  [SMALL_STATE(62)] = 4582,
-  [SMALL_STATE(63)] = 4661,
-  [SMALL_STATE(64)] = 4740,
-  [SMALL_STATE(65)] = 4819,
-  [SMALL_STATE(66)] = 4898,
-  [SMALL_STATE(67)] = 4977,
-  [SMALL_STATE(68)] = 5056,
-  [SMALL_STATE(69)] = 5135,
-  [SMALL_STATE(70)] = 5214,
-  [SMALL_STATE(71)] = 5293,
-  [SMALL_STATE(72)] = 5372,
-  [SMALL_STATE(73)] = 5451,
-  [SMALL_STATE(74)] = 5530,
-  [SMALL_STATE(75)] = 5609,
-  [SMALL_STATE(76)] = 5688,
-  [SMALL_STATE(77)] = 5767,
-  [SMALL_STATE(78)] = 5817,
-  [SMALL_STATE(79)] = 5867,
-  [SMALL_STATE(80)] = 5917,
-  [SMALL_STATE(81)] = 5990,
-  [SMALL_STATE(82)] = 6063,
-  [SMALL_STATE(83)] = 6136,
-  [SMALL_STATE(84)] = 6209,
-  [SMALL_STATE(85)] = 6282,
-  [SMALL_STATE(86)] = 6355,
-  [SMALL_STATE(87)] = 6428,
-  [SMALL_STATE(88)] = 6501,
-  [SMALL_STATE(89)] = 6574,
-  [SMALL_STATE(90)] = 6647,
-  [SMALL_STATE(91)] = 6720,
-  [SMALL_STATE(92)] = 6793,
-  [SMALL_STATE(93)] = 6866,
-  [SMALL_STATE(94)] = 6939,
-  [SMALL_STATE(95)] = 7012,
-  [SMALL_STATE(96)] = 7085,
-  [SMALL_STATE(97)] = 7158,
-  [SMALL_STATE(98)] = 7231,
-  [SMALL_STATE(99)] = 7276,
-  [SMALL_STATE(100)] = 7349,
-  [SMALL_STATE(101)] = 7422,
-  [SMALL_STATE(102)] = 7495,
-  [SMALL_STATE(103)] = 7568,
-  [SMALL_STATE(104)] = 7641,
-  [SMALL_STATE(105)] = 7714,
-  [SMALL_STATE(106)] = 7787,
-  [SMALL_STATE(107)] = 7832,
-  [SMALL_STATE(108)] = 7905,
-  [SMALL_STATE(109)] = 7950,
-  [SMALL_STATE(110)] = 8023,
-  [SMALL_STATE(111)] = 8096,
-  [SMALL_STATE(112)] = 8140,
-  [SMALL_STATE(113)] = 8179,
-  [SMALL_STATE(114)] = 8218,
-  [SMALL_STATE(115)] = 8257,
-  [SMALL_STATE(116)] = 8300,
-  [SMALL_STATE(117)] = 8339,
-  [SMALL_STATE(118)] = 8382,
-  [SMALL_STATE(119)] = 8421,
-  [SMALL_STATE(120)] = 8460,
-  [SMALL_STATE(121)] = 8499,
-  [SMALL_STATE(122)] = 8538,
-  [SMALL_STATE(123)] = 8577,
-  [SMALL_STATE(124)] = 8616,
-  [SMALL_STATE(125)] = 8655,
-  [SMALL_STATE(126)] = 8694,
-  [SMALL_STATE(127)] = 8733,
-  [SMALL_STATE(128)] = 8776,
-  [SMALL_STATE(129)] = 8815,
-  [SMALL_STATE(130)] = 8854,
-  [SMALL_STATE(131)] = 8893,
-  [SMALL_STATE(132)] = 8932,
-  [SMALL_STATE(133)] = 8971,
-  [SMALL_STATE(134)] = 9010,
-  [SMALL_STATE(135)] = 9049,
-  [SMALL_STATE(136)] = 9088,
-  [SMALL_STATE(137)] = 9127,
-  [SMALL_STATE(138)] = 9166,
-  [SMALL_STATE(139)] = 9209,
-  [SMALL_STATE(140)] = 9248,
-  [SMALL_STATE(141)] = 9287,
-  [SMALL_STATE(142)] = 9326,
-  [SMALL_STATE(143)] = 9365,
-  [SMALL_STATE(144)] = 9404,
-  [SMALL_STATE(145)] = 9448,
-  [SMALL_STATE(146)] = 9506,
-  [SMALL_STATE(147)] = 9572,
-  [SMALL_STATE(148)] = 9616,
-  [SMALL_STATE(149)] = 9664,
-  [SMALL_STATE(150)] = 9714,
-  [SMALL_STATE(151)] = 9768,
-  [SMALL_STATE(152)] = 9824,
-  [SMALL_STATE(153)] = 9861,
-  [SMALL_STATE(154)] = 9898,
-  [SMALL_STATE(155)] = 9935,
-  [SMALL_STATE(156)] = 9972,
-  [SMALL_STATE(157)] = 10009,
-  [SMALL_STATE(158)] = 10046,
-  [SMALL_STATE(159)] = 10083,
-  [SMALL_STATE(160)] = 10120,
-  [SMALL_STATE(161)] = 10157,
-  [SMALL_STATE(162)] = 10194,
-  [SMALL_STATE(163)] = 10231,
-  [SMALL_STATE(164)] = 10268,
-  [SMALL_STATE(165)] = 10305,
-  [SMALL_STATE(166)] = 10342,
-  [SMALL_STATE(167)] = 10379,
-  [SMALL_STATE(168)] = 10416,
-  [SMALL_STATE(169)] = 10453,
-  [SMALL_STATE(170)] = 10490,
-  [SMALL_STATE(171)] = 10527,
-  [SMALL_STATE(172)] = 10564,
-  [SMALL_STATE(173)] = 10601,
-  [SMALL_STATE(174)] = 10638,
-  [SMALL_STATE(175)] = 10675,
-  [SMALL_STATE(176)] = 10712,
-  [SMALL_STATE(177)] = 10749,
-  [SMALL_STATE(178)] = 10786,
-  [SMALL_STATE(179)] = 10823,
-  [SMALL_STATE(180)] = 10860,
-  [SMALL_STATE(181)] = 10904,
-  [SMALL_STATE(182)] = 10946,
-  [SMALL_STATE(183)] = 10990,
-  [SMALL_STATE(184)] = 11054,
-  [SMALL_STATE(185)] = 11098,
-  [SMALL_STATE(186)] = 11144,
-  [SMALL_STATE(187)] = 11186,
-  [SMALL_STATE(188)] = 11234,
-  [SMALL_STATE(189)] = 11286,
-  [SMALL_STATE(190)] = 11340,
-  [SMALL_STATE(191)] = 11396,
-  [SMALL_STATE(192)] = 11438,
-  [SMALL_STATE(193)] = 11480,
-  [SMALL_STATE(194)] = 11522,
-  [SMALL_STATE(195)] = 11559,
-  [SMALL_STATE(196)] = 11596,
-  [SMALL_STATE(197)] = 11633,
-  [SMALL_STATE(198)] = 11670,
-  [SMALL_STATE(199)] = 11701,
-  [SMALL_STATE(200)] = 11732,
-  [SMALL_STATE(201)] = 11767,
-  [SMALL_STATE(202)] = 11798,
-  [SMALL_STATE(203)] = 11833,
-  [SMALL_STATE(204)] = 11864,
-  [SMALL_STATE(205)] = 11895,
-  [SMALL_STATE(206)] = 11926,
-  [SMALL_STATE(207)] = 11957,
-  [SMALL_STATE(208)] = 11988,
-  [SMALL_STATE(209)] = 12019,
-  [SMALL_STATE(210)] = 12054,
-  [SMALL_STATE(211)] = 12085,
-  [SMALL_STATE(212)] = 12116,
-  [SMALL_STATE(213)] = 12147,
-  [SMALL_STATE(214)] = 12178,
-  [SMALL_STATE(215)] = 12209,
-  [SMALL_STATE(216)] = 12240,
-  [SMALL_STATE(217)] = 12271,
-  [SMALL_STATE(218)] = 12302,
-  [SMALL_STATE(219)] = 12333,
-  [SMALL_STATE(220)] = 12364,
-  [SMALL_STATE(221)] = 12395,
-  [SMALL_STATE(222)] = 12426,
-  [SMALL_STATE(223)] = 12457,
-  [SMALL_STATE(224)] = 12488,
-  [SMALL_STATE(225)] = 12519,
-  [SMALL_STATE(226)] = 12550,
-  [SMALL_STATE(227)] = 12581,
-  [SMALL_STATE(228)] = 12616,
-  [SMALL_STATE(229)] = 12647,
-  [SMALL_STATE(230)] = 12678,
-  [SMALL_STATE(231)] = 12707,
-  [SMALL_STATE(232)] = 12736,
-  [SMALL_STATE(233)] = 12765,
-  [SMALL_STATE(234)] = 12794,
-  [SMALL_STATE(235)] = 12823,
-  [SMALL_STATE(236)] = 12852,
-  [SMALL_STATE(237)] = 12881,
-  [SMALL_STATE(238)] = 12910,
-  [SMALL_STATE(239)] = 12939,
-  [SMALL_STATE(240)] = 12968,
-  [SMALL_STATE(241)] = 12997,
-  [SMALL_STATE(242)] = 13026,
-  [SMALL_STATE(243)] = 13055,
-  [SMALL_STATE(244)] = 13084,
-  [SMALL_STATE(245)] = 13113,
-  [SMALL_STATE(246)] = 13142,
-  [SMALL_STATE(247)] = 13171,
-  [SMALL_STATE(248)] = 13200,
-  [SMALL_STATE(249)] = 13229,
-  [SMALL_STATE(250)] = 13258,
-  [SMALL_STATE(251)] = 13287,
-  [SMALL_STATE(252)] = 13316,
-  [SMALL_STATE(253)] = 13345,
-  [SMALL_STATE(254)] = 13374,
-  [SMALL_STATE(255)] = 13403,
-  [SMALL_STATE(256)] = 13432,
-  [SMALL_STATE(257)] = 13461,
-  [SMALL_STATE(258)] = 13490,
-  [SMALL_STATE(259)] = 13514,
-  [SMALL_STATE(260)] = 13540,
-  [SMALL_STATE(261)] = 13564,
-  [SMALL_STATE(262)] = 13587,
-  [SMALL_STATE(263)] = 13611,
-  [SMALL_STATE(264)] = 13635,
-  [SMALL_STATE(265)] = 13656,
-  [SMALL_STATE(266)] = 13677,
-  [SMALL_STATE(267)] = 13697,
-  [SMALL_STATE(268)] = 13717,
-  [SMALL_STATE(269)] = 13742,
-  [SMALL_STATE(270)] = 13765,
-  [SMALL_STATE(271)] = 13790,
-  [SMALL_STATE(272)] = 13815,
-  [SMALL_STATE(273)] = 13838,
-  [SMALL_STATE(274)] = 13863,
-  [SMALL_STATE(275)] = 13886,
-  [SMALL_STATE(276)] = 13909,
-  [SMALL_STATE(277)] = 13932,
-  [SMALL_STATE(278)] = 13956,
-  [SMALL_STATE(279)] = 13978,
-  [SMALL_STATE(280)] = 14000,
-  [SMALL_STATE(281)] = 14023,
-  [SMALL_STATE(282)] = 14044,
-  [SMALL_STATE(283)] = 14067,
-  [SMALL_STATE(284)] = 14090,
-  [SMALL_STATE(285)] = 14113,
-  [SMALL_STATE(286)] = 14130,
-  [SMALL_STATE(287)] = 14149,
-  [SMALL_STATE(288)] = 14172,
-  [SMALL_STATE(289)] = 14189,
-  [SMALL_STATE(290)] = 14207,
-  [SMALL_STATE(291)] = 14227,
-  [SMALL_STATE(292)] = 14241,
-  [SMALL_STATE(293)] = 14253,
-  [SMALL_STATE(294)] = 14273,
-  [SMALL_STATE(295)] = 14293,
-  [SMALL_STATE(296)] = 14313,
-  [SMALL_STATE(297)] = 14333,
-  [SMALL_STATE(298)] = 14353,
-  [SMALL_STATE(299)] = 14365,
-  [SMALL_STATE(300)] = 14382,
-  [SMALL_STATE(301)] = 14399,
-  [SMALL_STATE(302)] = 14416,
-  [SMALL_STATE(303)] = 14429,
-  [SMALL_STATE(304)] = 14444,
-  [SMALL_STATE(305)] = 14461,
-  [SMALL_STATE(306)] = 14476,
-  [SMALL_STATE(307)] = 14493,
-  [SMALL_STATE(308)] = 14505,
-  [SMALL_STATE(309)] = 14515,
-  [SMALL_STATE(310)] = 14525,
-  [SMALL_STATE(311)] = 14539,
-  [SMALL_STATE(312)] = 14549,
-  [SMALL_STATE(313)] = 14563,
-  [SMALL_STATE(314)] = 14575,
-  [SMALL_STATE(315)] = 14585,
-  [SMALL_STATE(316)] = 14599,
-  [SMALL_STATE(317)] = 14609,
-  [SMALL_STATE(318)] = 14621,
-  [SMALL_STATE(319)] = 14631,
-  [SMALL_STATE(320)] = 14641,
-  [SMALL_STATE(321)] = 14655,
-  [SMALL_STATE(322)] = 14667,
-  [SMALL_STATE(323)] = 14679,
-  [SMALL_STATE(324)] = 14693,
-  [SMALL_STATE(325)] = 14703,
-  [SMALL_STATE(326)] = 14713,
-  [SMALL_STATE(327)] = 14725,
-  [SMALL_STATE(328)] = 14736,
-  [SMALL_STATE(329)] = 14747,
-  [SMALL_STATE(330)] = 14758,
-  [SMALL_STATE(331)] = 14769,
-  [SMALL_STATE(332)] = 14780,
-  [SMALL_STATE(333)] = 14791,
-  [SMALL_STATE(334)] = 14802,
-  [SMALL_STATE(335)] = 14813,
-  [SMALL_STATE(336)] = 14824,
-  [SMALL_STATE(337)] = 14835,
-  [SMALL_STATE(338)] = 14846,
-  [SMALL_STATE(339)] = 14857,
-  [SMALL_STATE(340)] = 14868,
-  [SMALL_STATE(341)] = 14879,
-  [SMALL_STATE(342)] = 14890,
-  [SMALL_STATE(343)] = 14901,
-  [SMALL_STATE(344)] = 14912,
-  [SMALL_STATE(345)] = 14923,
-  [SMALL_STATE(346)] = 14934,
-  [SMALL_STATE(347)] = 14945,
-  [SMALL_STATE(348)] = 14956,
-  [SMALL_STATE(349)] = 14967,
-  [SMALL_STATE(350)] = 14978,
-  [SMALL_STATE(351)] = 14989,
-  [SMALL_STATE(352)] = 15000,
-  [SMALL_STATE(353)] = 15011,
-  [SMALL_STATE(354)] = 15022,
-  [SMALL_STATE(355)] = 15033,
-  [SMALL_STATE(356)] = 15044,
-  [SMALL_STATE(357)] = 15055,
-  [SMALL_STATE(358)] = 15066,
-  [SMALL_STATE(359)] = 15077,
-  [SMALL_STATE(360)] = 15088,
-  [SMALL_STATE(361)] = 15099,
-  [SMALL_STATE(362)] = 15110,
-  [SMALL_STATE(363)] = 15121,
-  [SMALL_STATE(364)] = 15132,
-  [SMALL_STATE(365)] = 15143,
-  [SMALL_STATE(366)] = 15154,
-  [SMALL_STATE(367)] = 15165,
-  [SMALL_STATE(368)] = 15176,
-  [SMALL_STATE(369)] = 15187,
-  [SMALL_STATE(370)] = 15198,
-  [SMALL_STATE(371)] = 15209,
-  [SMALL_STATE(372)] = 15220,
-  [SMALL_STATE(373)] = 15231,
-  [SMALL_STATE(374)] = 15242,
-  [SMALL_STATE(375)] = 15253,
-  [SMALL_STATE(376)] = 15264,
-  [SMALL_STATE(377)] = 15272,
-  [SMALL_STATE(378)] = 15280,
-  [SMALL_STATE(379)] = 15288,
-  [SMALL_STATE(380)] = 15296,
-  [SMALL_STATE(381)] = 15304,
-  [SMALL_STATE(382)] = 15312,
-  [SMALL_STATE(383)] = 15320,
-  [SMALL_STATE(384)] = 15328,
-  [SMALL_STATE(385)] = 15336,
-  [SMALL_STATE(386)] = 15344,
-  [SMALL_STATE(387)] = 15352,
-  [SMALL_STATE(388)] = 15360,
-  [SMALL_STATE(389)] = 15368,
+  [SMALL_STATE(14)] = 1131,
+  [SMALL_STATE(15)] = 1219,
+  [SMALL_STATE(16)] = 1295,
+  [SMALL_STATE(17)] = 1357,
+  [SMALL_STATE(18)] = 1445,
+  [SMALL_STATE(19)] = 1533,
+  [SMALL_STATE(20)] = 1585,
+  [SMALL_STATE(21)] = 1641,
+  [SMALL_STATE(22)] = 1729,
+  [SMALL_STATE(23)] = 1787,
+  [SMALL_STATE(24)] = 1853,
+  [SMALL_STATE(25)] = 1905,
+  [SMALL_STATE(26)] = 1969,
+  [SMALL_STATE(27)] = 2026,
+  [SMALL_STATE(28)] = 2081,
+  [SMALL_STATE(29)] = 2132,
+  [SMALL_STATE(30)] = 2197,
+  [SMALL_STATE(31)] = 2258,
+  [SMALL_STATE(32)] = 2343,
+  [SMALL_STATE(33)] = 2418,
+  [SMALL_STATE(34)] = 2481,
+  [SMALL_STATE(35)] = 2566,
+  [SMALL_STATE(36)] = 2617,
+  [SMALL_STATE(37)] = 2699,
+  [SMALL_STATE(38)] = 2781,
+  [SMALL_STATE(39)] = 2833,
+  [SMALL_STATE(40)] = 2915,
+  [SMALL_STATE(41)] = 2967,
+  [SMALL_STATE(42)] = 3019,
+  [SMALL_STATE(43)] = 3101,
+  [SMALL_STATE(44)] = 3153,
+  [SMALL_STATE(45)] = 3205,
+  [SMALL_STATE(46)] = 3284,
+  [SMALL_STATE(47)] = 3363,
+  [SMALL_STATE(48)] = 3442,
+  [SMALL_STATE(49)] = 3521,
+  [SMALL_STATE(50)] = 3572,
+  [SMALL_STATE(51)] = 3623,
+  [SMALL_STATE(52)] = 3702,
+  [SMALL_STATE(53)] = 3781,
+  [SMALL_STATE(54)] = 3860,
+  [SMALL_STATE(55)] = 3939,
+  [SMALL_STATE(56)] = 4018,
+  [SMALL_STATE(57)] = 4097,
+  [SMALL_STATE(58)] = 4176,
+  [SMALL_STATE(59)] = 4255,
+  [SMALL_STATE(60)] = 4334,
+  [SMALL_STATE(61)] = 4413,
+  [SMALL_STATE(62)] = 4492,
+  [SMALL_STATE(63)] = 4571,
+  [SMALL_STATE(64)] = 4650,
+  [SMALL_STATE(65)] = 4729,
+  [SMALL_STATE(66)] = 4808,
+  [SMALL_STATE(67)] = 4887,
+  [SMALL_STATE(68)] = 4966,
+  [SMALL_STATE(69)] = 5045,
+  [SMALL_STATE(70)] = 5096,
+  [SMALL_STATE(71)] = 5175,
+  [SMALL_STATE(72)] = 5254,
+  [SMALL_STATE(73)] = 5333,
+  [SMALL_STATE(74)] = 5412,
+  [SMALL_STATE(75)] = 5491,
+  [SMALL_STATE(76)] = 5542,
+  [SMALL_STATE(77)] = 5593,
+  [SMALL_STATE(78)] = 5672,
+  [SMALL_STATE(79)] = 5751,
+  [SMALL_STATE(80)] = 5830,
+  [SMALL_STATE(81)] = 5909,
+  [SMALL_STATE(82)] = 5988,
+  [SMALL_STATE(83)] = 6067,
+  [SMALL_STATE(84)] = 6146,
+  [SMALL_STATE(85)] = 6225,
+  [SMALL_STATE(86)] = 6298,
+  [SMALL_STATE(87)] = 6371,
+  [SMALL_STATE(88)] = 6444,
+  [SMALL_STATE(89)] = 6517,
+  [SMALL_STATE(90)] = 6590,
+  [SMALL_STATE(91)] = 6663,
+  [SMALL_STATE(92)] = 6736,
+  [SMALL_STATE(93)] = 6809,
+  [SMALL_STATE(94)] = 6882,
+  [SMALL_STATE(95)] = 6955,
+  [SMALL_STATE(96)] = 7028,
+  [SMALL_STATE(97)] = 7101,
+  [SMALL_STATE(98)] = 7174,
+  [SMALL_STATE(99)] = 7247,
+  [SMALL_STATE(100)] = 7320,
+  [SMALL_STATE(101)] = 7393,
+  [SMALL_STATE(102)] = 7466,
+  [SMALL_STATE(103)] = 7539,
+  [SMALL_STATE(104)] = 7612,
+  [SMALL_STATE(105)] = 7685,
+  [SMALL_STATE(106)] = 7758,
+  [SMALL_STATE(107)] = 7831,
+  [SMALL_STATE(108)] = 7904,
+  [SMALL_STATE(109)] = 7977,
+  [SMALL_STATE(110)] = 8050,
+  [SMALL_STATE(111)] = 8123,
+  [SMALL_STATE(112)] = 8196,
+  [SMALL_STATE(113)] = 8269,
+  [SMALL_STATE(114)] = 8313,
+  [SMALL_STATE(115)] = 8357,
+  [SMALL_STATE(116)] = 8396,
+  [SMALL_STATE(117)] = 8435,
+  [SMALL_STATE(118)] = 8474,
+  [SMALL_STATE(119)] = 8513,
+  [SMALL_STATE(120)] = 8552,
+  [SMALL_STATE(121)] = 8591,
+  [SMALL_STATE(122)] = 8630,
+  [SMALL_STATE(123)] = 8669,
+  [SMALL_STATE(124)] = 8708,
+  [SMALL_STATE(125)] = 8747,
+  [SMALL_STATE(126)] = 8786,
+  [SMALL_STATE(127)] = 8825,
+  [SMALL_STATE(128)] = 8864,
+  [SMALL_STATE(129)] = 8903,
+  [SMALL_STATE(130)] = 8942,
+  [SMALL_STATE(131)] = 8981,
+  [SMALL_STATE(132)] = 9020,
+  [SMALL_STATE(133)] = 9059,
+  [SMALL_STATE(134)] = 9098,
+  [SMALL_STATE(135)] = 9137,
+  [SMALL_STATE(136)] = 9176,
+  [SMALL_STATE(137)] = 9215,
+  [SMALL_STATE(138)] = 9254,
+  [SMALL_STATE(139)] = 9293,
+  [SMALL_STATE(140)] = 9332,
+  [SMALL_STATE(141)] = 9371,
+  [SMALL_STATE(142)] = 9410,
+  [SMALL_STATE(143)] = 9449,
+  [SMALL_STATE(144)] = 9487,
+  [SMALL_STATE(145)] = 9525,
+  [SMALL_STATE(146)] = 9563,
+  [SMALL_STATE(147)] = 9601,
+  [SMALL_STATE(148)] = 9639,
+  [SMALL_STATE(149)] = 9693,
+  [SMALL_STATE(150)] = 9731,
+  [SMALL_STATE(151)] = 9769,
+  [SMALL_STATE(152)] = 9807,
+  [SMALL_STATE(153)] = 9857,
+  [SMALL_STATE(154)] = 9895,
+  [SMALL_STATE(155)] = 9933,
+  [SMALL_STATE(156)] = 9999,
+  [SMALL_STATE(157)] = 10057,
+  [SMALL_STATE(158)] = 10095,
+  [SMALL_STATE(159)] = 10151,
+  [SMALL_STATE(160)] = 10189,
+  [SMALL_STATE(161)] = 10237,
+  [SMALL_STATE(162)] = 10275,
+  [SMALL_STATE(163)] = 10313,
+  [SMALL_STATE(164)] = 10351,
+  [SMALL_STATE(165)] = 10389,
+  [SMALL_STATE(166)] = 10433,
+  [SMALL_STATE(167)] = 10477,
+  [SMALL_STATE(168)] = 10515,
+  [SMALL_STATE(169)] = 10553,
+  [SMALL_STATE(170)] = 10591,
+  [SMALL_STATE(171)] = 10629,
+  [SMALL_STATE(172)] = 10667,
+  [SMALL_STATE(173)] = 10705,
+  [SMALL_STATE(174)] = 10743,
+  [SMALL_STATE(175)] = 10781,
+  [SMALL_STATE(176)] = 10819,
+  [SMALL_STATE(177)] = 10857,
+  [SMALL_STATE(178)] = 10895,
+  [SMALL_STATE(179)] = 10933,
+  [SMALL_STATE(180)] = 10977,
+  [SMALL_STATE(181)] = 11021,
+  [SMALL_STATE(182)] = 11065,
+  [SMALL_STATE(183)] = 11109,
+  [SMALL_STATE(184)] = 11153,
+  [SMALL_STATE(185)] = 11199,
+  [SMALL_STATE(186)] = 11241,
+  [SMALL_STATE(187)] = 11289,
+  [SMALL_STATE(188)] = 11341,
+  [SMALL_STATE(189)] = 11395,
+  [SMALL_STATE(190)] = 11451,
+  [SMALL_STATE(191)] = 11493,
+  [SMALL_STATE(192)] = 11557,
+  [SMALL_STATE(193)] = 11599,
+  [SMALL_STATE(194)] = 11641,
+  [SMALL_STATE(195)] = 11683,
+  [SMALL_STATE(196)] = 11725,
+  [SMALL_STATE(197)] = 11767,
+  [SMALL_STATE(198)] = 11804,
+  [SMALL_STATE(199)] = 11835,
+  [SMALL_STATE(200)] = 11866,
+  [SMALL_STATE(201)] = 11897,
+  [SMALL_STATE(202)] = 11928,
+  [SMALL_STATE(203)] = 11959,
+  [SMALL_STATE(204)] = 11990,
+  [SMALL_STATE(205)] = 12021,
+  [SMALL_STATE(206)] = 12052,
+  [SMALL_STATE(207)] = 12083,
+  [SMALL_STATE(208)] = 12114,
+  [SMALL_STATE(209)] = 12145,
+  [SMALL_STATE(210)] = 12180,
+  [SMALL_STATE(211)] = 12211,
+  [SMALL_STATE(212)] = 12242,
+  [SMALL_STATE(213)] = 12273,
+  [SMALL_STATE(214)] = 12304,
+  [SMALL_STATE(215)] = 12335,
+  [SMALL_STATE(216)] = 12366,
+  [SMALL_STATE(217)] = 12397,
+  [SMALL_STATE(218)] = 12428,
+  [SMALL_STATE(219)] = 12459,
+  [SMALL_STATE(220)] = 12490,
+  [SMALL_STATE(221)] = 12521,
+  [SMALL_STATE(222)] = 12552,
+  [SMALL_STATE(223)] = 12583,
+  [SMALL_STATE(224)] = 12614,
+  [SMALL_STATE(225)] = 12645,
+  [SMALL_STATE(226)] = 12676,
+  [SMALL_STATE(227)] = 12707,
+  [SMALL_STATE(228)] = 12736,
+  [SMALL_STATE(229)] = 12765,
+  [SMALL_STATE(230)] = 12794,
+  [SMALL_STATE(231)] = 12823,
+  [SMALL_STATE(232)] = 12852,
+  [SMALL_STATE(233)] = 12881,
+  [SMALL_STATE(234)] = 12910,
+  [SMALL_STATE(235)] = 12939,
+  [SMALL_STATE(236)] = 12968,
+  [SMALL_STATE(237)] = 12997,
+  [SMALL_STATE(238)] = 13026,
+  [SMALL_STATE(239)] = 13055,
+  [SMALL_STATE(240)] = 13084,
+  [SMALL_STATE(241)] = 13113,
+  [SMALL_STATE(242)] = 13142,
+  [SMALL_STATE(243)] = 13171,
+  [SMALL_STATE(244)] = 13200,
+  [SMALL_STATE(245)] = 13229,
+  [SMALL_STATE(246)] = 13258,
+  [SMALL_STATE(247)] = 13287,
+  [SMALL_STATE(248)] = 13316,
+  [SMALL_STATE(249)] = 13345,
+  [SMALL_STATE(250)] = 13374,
+  [SMALL_STATE(251)] = 13403,
+  [SMALL_STATE(252)] = 13432,
+  [SMALL_STATE(253)] = 13461,
+  [SMALL_STATE(254)] = 13490,
+  [SMALL_STATE(255)] = 13519,
+  [SMALL_STATE(256)] = 13543,
+  [SMALL_STATE(257)] = 13567,
+  [SMALL_STATE(258)] = 13593,
+  [SMALL_STATE(259)] = 13616,
+  [SMALL_STATE(260)] = 13640,
+  [SMALL_STATE(261)] = 13664,
+  [SMALL_STATE(262)] = 13685,
+  [SMALL_STATE(263)] = 13706,
+  [SMALL_STATE(264)] = 13727,
+  [SMALL_STATE(265)] = 13748,
+  [SMALL_STATE(266)] = 13777,
+  [SMALL_STATE(267)] = 13806,
+  [SMALL_STATE(268)] = 13830,
+  [SMALL_STATE(269)] = 13854,
+  [SMALL_STATE(270)] = 13879,
+  [SMALL_STATE(271)] = 13902,
+  [SMALL_STATE(272)] = 13925,
+  [SMALL_STATE(273)] = 13950,
+  [SMALL_STATE(274)] = 13973,
+  [SMALL_STATE(275)] = 13996,
+  [SMALL_STATE(276)] = 14021,
+  [SMALL_STATE(277)] = 14044,
+  [SMALL_STATE(278)] = 14069,
+  [SMALL_STATE(279)] = 14093,
+  [SMALL_STATE(280)] = 14116,
+  [SMALL_STATE(281)] = 14139,
+  [SMALL_STATE(282)] = 14158,
+  [SMALL_STATE(283)] = 14181,
+  [SMALL_STATE(284)] = 14202,
+  [SMALL_STATE(285)] = 14225,
+  [SMALL_STATE(286)] = 14248,
+  [SMALL_STATE(287)] = 14268,
+  [SMALL_STATE(288)] = 14288,
+  [SMALL_STATE(289)] = 14302,
+  [SMALL_STATE(290)] = 14322,
+  [SMALL_STATE(291)] = 14340,
+  [SMALL_STATE(292)] = 14352,
+  [SMALL_STATE(293)] = 14372,
+  [SMALL_STATE(294)] = 14392,
+  [SMALL_STATE(295)] = 14406,
+  [SMALL_STATE(296)] = 14418,
+  [SMALL_STATE(297)] = 14438,
+  [SMALL_STATE(298)] = 14455,
+  [SMALL_STATE(299)] = 14466,
+  [SMALL_STATE(300)] = 14477,
+  [SMALL_STATE(301)] = 14494,
+  [SMALL_STATE(302)] = 14509,
+  [SMALL_STATE(303)] = 14524,
+  [SMALL_STATE(304)] = 14541,
+  [SMALL_STATE(305)] = 14558,
+  [SMALL_STATE(306)] = 14575,
+  [SMALL_STATE(307)] = 14586,
+  [SMALL_STATE(308)] = 14598,
+  [SMALL_STATE(309)] = 14610,
+  [SMALL_STATE(310)] = 14620,
+  [SMALL_STATE(311)] = 14634,
+  [SMALL_STATE(312)] = 14646,
+  [SMALL_STATE(313)] = 14658,
+  [SMALL_STATE(314)] = 14672,
+  [SMALL_STATE(315)] = 14682,
+  [SMALL_STATE(316)] = 14692,
+  [SMALL_STATE(317)] = 14702,
+  [SMALL_STATE(318)] = 14714,
+  [SMALL_STATE(319)] = 14728,
+  [SMALL_STATE(320)] = 14740,
+  [SMALL_STATE(321)] = 14754,
+  [SMALL_STATE(322)] = 14768,
+  [SMALL_STATE(323)] = 14778,
+  [SMALL_STATE(324)] = 14788,
+  [SMALL_STATE(325)] = 14799,
+  [SMALL_STATE(326)] = 14810,
+  [SMALL_STATE(327)] = 14821,
+  [SMALL_STATE(328)] = 14832,
+  [SMALL_STATE(329)] = 14843,
+  [SMALL_STATE(330)] = 14854,
+  [SMALL_STATE(331)] = 14865,
+  [SMALL_STATE(332)] = 14876,
+  [SMALL_STATE(333)] = 14887,
+  [SMALL_STATE(334)] = 14898,
+  [SMALL_STATE(335)] = 14909,
+  [SMALL_STATE(336)] = 14920,
+  [SMALL_STATE(337)] = 14931,
+  [SMALL_STATE(338)] = 14942,
+  [SMALL_STATE(339)] = 14953,
+  [SMALL_STATE(340)] = 14964,
+  [SMALL_STATE(341)] = 14975,
+  [SMALL_STATE(342)] = 14986,
+  [SMALL_STATE(343)] = 14997,
+  [SMALL_STATE(344)] = 15008,
+  [SMALL_STATE(345)] = 15019,
+  [SMALL_STATE(346)] = 15030,
+  [SMALL_STATE(347)] = 15041,
+  [SMALL_STATE(348)] = 15052,
+  [SMALL_STATE(349)] = 15063,
+  [SMALL_STATE(350)] = 15074,
+  [SMALL_STATE(351)] = 15085,
+  [SMALL_STATE(352)] = 15096,
+  [SMALL_STATE(353)] = 15107,
+  [SMALL_STATE(354)] = 15118,
+  [SMALL_STATE(355)] = 15129,
+  [SMALL_STATE(356)] = 15140,
+  [SMALL_STATE(357)] = 15151,
+  [SMALL_STATE(358)] = 15162,
+  [SMALL_STATE(359)] = 15173,
+  [SMALL_STATE(360)] = 15184,
+  [SMALL_STATE(361)] = 15195,
+  [SMALL_STATE(362)] = 15206,
+  [SMALL_STATE(363)] = 15217,
+  [SMALL_STATE(364)] = 15228,
+  [SMALL_STATE(365)] = 15239,
+  [SMALL_STATE(366)] = 15250,
+  [SMALL_STATE(367)] = 15261,
+  [SMALL_STATE(368)] = 15272,
+  [SMALL_STATE(369)] = 15283,
+  [SMALL_STATE(370)] = 15294,
+  [SMALL_STATE(371)] = 15305,
+  [SMALL_STATE(372)] = 15316,
+  [SMALL_STATE(373)] = 15327,
+  [SMALL_STATE(374)] = 15335,
+  [SMALL_STATE(375)] = 15343,
+  [SMALL_STATE(376)] = 15351,
+  [SMALL_STATE(377)] = 15359,
+  [SMALL_STATE(378)] = 15367,
+  [SMALL_STATE(379)] = 15375,
+  [SMALL_STATE(380)] = 15383,
+  [SMALL_STATE(381)] = 15391,
+  [SMALL_STATE(382)] = 15399,
 };
 
 static const TSParseActionEntry ts_parse_actions[] = {
@@ -19581,376 +19573,368 @@ static const TSParseActionEntry ts_parse_actions[] = {
   [1] = {.entry = {.count = 1, .reusable = false}}, RECOVER(),
   [3] = {.entry = {.count = 1, .reusable = true}}, SHIFT_EXTRA(),
   [5] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_config_file, 0),
-  [7] = {.entry = {.count = 1, .reusable = true}}, SHIFT(277),
-  [9] = {.entry = {.count = 1, .reusable = true}}, SHIFT(3),
-  [11] = {.entry = {.count = 1, .reusable = true}}, SHIFT(226),
-  [13] = {.entry = {.count = 1, .reusable = false}}, SHIFT(115),
-  [15] = {.entry = {.count = 1, .reusable = true}}, SHIFT(70),
-  [17] = {.entry = {.count = 1, .reusable = false}}, SHIFT(159),
-  [19] = {.entry = {.count = 1, .reusable = true}}, SHIFT(159),
-  [21] = {.entry = {.count = 1, .reusable = false}}, SHIFT(176),
-  [23] = {.entry = {.count = 1, .reusable = false}}, SHIFT(179),
-  [25] = {.entry = {.count = 1, .reusable = true}}, SHIFT(10),
-  [27] = {.entry = {.count = 1, .reusable = false}}, SHIFT(378),
-  [29] = {.entry = {.count = 1, .reusable = true}}, SHIFT(88),
-  [31] = {.entry = {.count = 1, .reusable = true}}, SHIFT(273),
-  [33] = {.entry = {.count = 1, .reusable = true}}, SHIFT(163),
-  [35] = {.entry = {.count = 1, .reusable = true}}, SHIFT(230),
-  [37] = {.entry = {.count = 1, .reusable = true}}, SHIFT(112),
-  [39] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__object_elems, 2),
-  [41] = {.entry = {.count = 1, .reusable = true}}, SHIFT(26),
-  [43] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__object_elems, 1),
-  [45] = {.entry = {.count = 1, .reusable = true}}, SHIFT(25),
-  [47] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(3),
-  [50] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2),
-  [52] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(115),
-  [55] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(70),
-  [58] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(159),
-  [61] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(159),
-  [64] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(176),
-  [67] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(179),
-  [70] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(37),
-  [73] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(10),
-  [76] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(88),
-  [79] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(273),
-  [82] = {.entry = {.count = 1, .reusable = true}}, SHIFT(223),
-  [84] = {.entry = {.count = 1, .reusable = true}}, SHIFT(168),
-  [86] = {.entry = {.count = 1, .reusable = true}}, SHIFT(251),
-  [88] = {.entry = {.count = 1, .reusable = true}}, SHIFT(141),
-  [90] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_binary_operation, 3),
-  [92] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_binary_operation, 3),
-  [94] = {.entry = {.count = 1, .reusable = true}}, SHIFT(80),
-  [96] = {.entry = {.count = 1, .reusable = true}}, SHIFT(101),
-  [98] = {.entry = {.count = 1, .reusable = false}}, SHIFT(101),
-  [100] = {.entry = {.count = 1, .reusable = false}}, SHIFT(102),
-  [102] = {.entry = {.count = 1, .reusable = true}}, SHIFT(102),
-  [104] = {.entry = {.count = 1, .reusable = true}}, SHIFT(166),
-  [106] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_expression, 1),
-  [108] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_expression, 1),
-  [110] = {.entry = {.count = 1, .reusable = false}}, SHIFT(50),
-  [112] = {.entry = {.count = 1, .reusable = false}}, SHIFT(370),
-  [114] = {.entry = {.count = 1, .reusable = true}}, SHIFT(98),
-  [116] = {.entry = {.count = 1, .reusable = true}}, SHIFT(28),
-  [118] = {.entry = {.count = 1, .reusable = true}}, SHIFT(103),
-  [120] = {.entry = {.count = 1, .reusable = true}}, SHIFT(104),
-  [122] = {.entry = {.count = 1, .reusable = true}}, SHIFT(105),
-  [124] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_unary_operation, 2),
-  [126] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_unary_operation, 2),
-  [128] = {.entry = {.count = 1, .reusable = true}}, SHIFT(229),
-  [130] = {.entry = {.count = 1, .reusable = true}}, SHIFT(239),
-  [132] = {.entry = {.count = 1, .reusable = true}}, SHIFT(125),
-  [134] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__object_elems, 3),
+  [7] = {.entry = {.count = 1, .reusable = true}}, SHIFT(13),
+  [9] = {.entry = {.count = 1, .reusable = true}}, SHIFT(278),
+  [11] = {.entry = {.count = 1, .reusable = true}}, SHIFT(2),
+  [13] = {.entry = {.count = 1, .reusable = true}}, SHIFT(161),
+  [15] = {.entry = {.count = 1, .reusable = false}}, SHIFT(114),
+  [17] = {.entry = {.count = 1, .reusable = true}}, SHIFT(74),
+  [19] = {.entry = {.count = 1, .reusable = false}}, SHIFT(151),
+  [21] = {.entry = {.count = 1, .reusable = true}}, SHIFT(151),
+  [23] = {.entry = {.count = 1, .reusable = false}}, SHIFT(153),
+  [25] = {.entry = {.count = 1, .reusable = false}}, SHIFT(176),
+  [27] = {.entry = {.count = 1, .reusable = true}}, SHIFT(12),
+  [29] = {.entry = {.count = 1, .reusable = false}}, SHIFT(377),
+  [31] = {.entry = {.count = 1, .reusable = true}}, SHIFT(95),
+  [33] = {.entry = {.count = 1, .reusable = true}}, SHIFT(275),
+  [35] = {.entry = {.count = 1, .reusable = true}}, SHIFT(243),
+  [37] = {.entry = {.count = 1, .reusable = true}}, SHIFT(136),
+  [39] = {.entry = {.count = 1, .reusable = true}}, SHIFT(204),
+  [41] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__object_elems, 2),
+  [43] = {.entry = {.count = 1, .reusable = true}}, SHIFT(31),
+  [45] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(2),
+  [48] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2),
+  [50] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(114),
+  [53] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(74),
+  [56] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(151),
+  [59] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(151),
+  [62] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(153),
+  [65] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(176),
+  [68] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(37),
+  [71] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(12),
+  [74] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(95),
+  [77] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__object_elems_repeat1, 2), SHIFT_REPEAT(275),
+  [80] = {.entry = {.count = 1, .reusable = true}}, SHIFT(117),
+  [82] = {.entry = {.count = 1, .reusable = true}}, SHIFT(207),
+  [84] = {.entry = {.count = 1, .reusable = true}}, SHIFT(246),
+  [86] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__object_elems, 1),
+  [88] = {.entry = {.count = 1, .reusable = true}}, SHIFT(34),
+  [90] = {.entry = {.count = 1, .reusable = true}}, SHIFT(163),
+  [92] = {.entry = {.count = 1, .reusable = true}}, SHIFT(214),
+  [94] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_expression, 1),
+  [96] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_expression, 1),
+  [98] = {.entry = {.count = 1, .reusable = false}}, SHIFT(78),
+  [100] = {.entry = {.count = 1, .reusable = false}}, SHIFT(352),
+  [102] = {.entry = {.count = 1, .reusable = true}}, SHIFT(44),
+  [104] = {.entry = {.count = 1, .reusable = true}}, SHIFT(40),
+  [106] = {.entry = {.count = 1, .reusable = true}}, SHIFT(92),
+  [108] = {.entry = {.count = 1, .reusable = true}}, SHIFT(91),
+  [110] = {.entry = {.count = 1, .reusable = false}}, SHIFT(91),
+  [112] = {.entry = {.count = 1, .reusable = false}}, SHIFT(90),
+  [114] = {.entry = {.count = 1, .reusable = true}}, SHIFT(90),
+  [116] = {.entry = {.count = 1, .reusable = true}}, SHIFT(89),
+  [118] = {.entry = {.count = 1, .reusable = true}}, SHIFT(88),
+  [120] = {.entry = {.count = 1, .reusable = true}}, SHIFT(87),
+  [122] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_binary_operation, 3),
+  [124] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_binary_operation, 3),
+  [126] = {.entry = {.count = 1, .reusable = true}}, SHIFT(231),
+  [128] = {.entry = {.count = 1, .reusable = true}}, SHIFT(167),
+  [130] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_unary_operation, 2),
+  [132] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_unary_operation, 2),
+  [134] = {.entry = {.count = 1, .reusable = true}}, SHIFT(135),
   [136] = {.entry = {.count = 1, .reusable = true}}, SHIFT(110),
-  [138] = {.entry = {.count = 1, .reusable = true}}, SHIFT(109),
-  [140] = {.entry = {.count = 1, .reusable = false}}, SHIFT(109),
-  [142] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_full_splat, 1),
-  [144] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_full_splat, 1),
-  [146] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__tuple_elems, 3),
-  [148] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__tuple_elems, 2),
-  [150] = {.entry = {.count = 1, .reusable = false}}, SHIFT(107),
-  [152] = {.entry = {.count = 1, .reusable = true}}, SHIFT(107),
-  [154] = {.entry = {.count = 1, .reusable = true}}, SHIFT(100),
-  [156] = {.entry = {.count = 1, .reusable = true}}, SHIFT(99),
-  [158] = {.entry = {.count = 1, .reusable = false}}, SHIFT(47),
-  [160] = {.entry = {.count = 1, .reusable = false}}, SHIFT(358),
-  [162] = {.entry = {.count = 1, .reusable = true}}, SHIFT(127),
-  [164] = {.entry = {.count = 1, .reusable = true}}, SHIFT(79),
-  [166] = {.entry = {.count = 1, .reusable = true}}, SHIFT(97),
-  [168] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_full_splat_repeat1, 2),
-  [170] = {.entry = {.count = 1, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2),
-  [172] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(50),
-  [175] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(370),
-  [178] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_full_splat, 2),
-  [180] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_full_splat, 2),
-  [182] = {.entry = {.count = 1, .reusable = true}}, SHIFT(4),
-  [184] = {.entry = {.count = 1, .reusable = false}}, SHIFT(202),
-  [186] = {.entry = {.count = 1, .reusable = true}}, SHIFT(58),
-  [188] = {.entry = {.count = 1, .reusable = false}}, SHIFT(245),
-  [190] = {.entry = {.count = 1, .reusable = true}}, SHIFT(245),
-  [192] = {.entry = {.count = 1, .reusable = false}}, SHIFT(250),
-  [194] = {.entry = {.count = 1, .reusable = false}}, SHIFT(256),
-  [196] = {.entry = {.count = 1, .reusable = true}}, SHIFT(11),
-  [198] = {.entry = {.count = 1, .reusable = true}}, SHIFT(95),
-  [200] = {.entry = {.count = 1, .reusable = true}}, SHIFT(68),
-  [202] = {.entry = {.count = 1, .reusable = true}}, SHIFT(271),
-  [204] = {.entry = {.count = 1, .reusable = true}}, SHIFT(5),
-  [206] = {.entry = {.count = 1, .reusable = false}}, SHIFT(111),
-  [208] = {.entry = {.count = 1, .reusable = true}}, SHIFT(76),
-  [210] = {.entry = {.count = 1, .reusable = false}}, SHIFT(120),
-  [212] = {.entry = {.count = 1, .reusable = true}}, SHIFT(120),
-  [214] = {.entry = {.count = 1, .reusable = false}}, SHIFT(121),
-  [216] = {.entry = {.count = 1, .reusable = false}}, SHIFT(133),
-  [218] = {.entry = {.count = 1, .reusable = true}}, SHIFT(12),
-  [220] = {.entry = {.count = 1, .reusable = true}}, SHIFT(96),
-  [222] = {.entry = {.count = 1, .reusable = true}}, SHIFT(270),
-  [224] = {.entry = {.count = 1, .reusable = true}}, SHIFT(2),
-  [226] = {.entry = {.count = 1, .reusable = false}}, SHIFT(197),
-  [228] = {.entry = {.count = 1, .reusable = true}}, SHIFT(51),
-  [230] = {.entry = {.count = 1, .reusable = false}}, SHIFT(213),
-  [232] = {.entry = {.count = 1, .reusable = true}}, SHIFT(213),
-  [234] = {.entry = {.count = 1, .reusable = false}}, SHIFT(214),
-  [236] = {.entry = {.count = 1, .reusable = false}}, SHIFT(215),
-  [238] = {.entry = {.count = 1, .reusable = true}}, SHIFT(9),
-  [240] = {.entry = {.count = 1, .reusable = true}}, SHIFT(82),
-  [242] = {.entry = {.count = 1, .reusable = true}}, SHIFT(268),
-  [244] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(47),
-  [247] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(358),
-  [250] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_attr_splat, 1),
-  [252] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_attr_splat, 1),
-  [254] = {.entry = {.count = 1, .reusable = false}}, SHIFT(376),
-  [256] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_attr_splat, 2),
-  [258] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_attr_splat, 2),
-  [260] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_attr_splat_repeat1, 2),
-  [262] = {.entry = {.count = 1, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2),
-  [264] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(376),
-  [267] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_variable_expr, 1),
-  [269] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_variable_expr, 1),
-  [271] = {.entry = {.count = 1, .reusable = true}}, SHIFT(24),
-  [273] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_object, 2),
-  [275] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_object, 2),
-  [277] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_new_index, 3),
-  [279] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_new_index, 3),
-  [281] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_call, 4),
-  [283] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_function_call, 4),
-  [285] = {.entry = {.count = 1, .reusable = true}}, SHIFT(14),
-  [287] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_object, 3),
-  [289] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_object, 3),
-  [291] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(386),
-  [294] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_object_expr, 8),
-  [296] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_object_expr, 8),
-  [298] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_tuple, 3),
-  [300] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_tuple, 3),
-  [302] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_numeric_lit, 1),
-  [304] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_numeric_lit, 1),
-  [306] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_bool_lit, 1),
-  [308] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_bool_lit, 1),
-  [310] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_legacy_index, 2),
-  [312] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_legacy_index, 2),
-  [314] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_get_attr, 2),
-  [316] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_get_attr, 2),
-  [318] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__expr_term, 3),
-  [320] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym__expr_term, 3),
-  [322] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_call, 3),
-  [324] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_function_call, 3),
-  [326] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_quoted_template, 2),
-  [328] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_quoted_template, 2),
-  [330] = {.entry = {.count = 1, .reusable = false}}, SHIFT(386),
-  [332] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_quoted_template, 3),
-  [334] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_quoted_template, 3),
-  [336] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_splat, 1),
-  [338] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_splat, 1),
-  [340] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_index, 1),
-  [342] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_index, 1),
-  [344] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__expr_term, 2),
-  [346] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym__expr_term, 2),
-  [348] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_tuple_expr, 4),
-  [350] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_tuple_expr, 4),
-  [352] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_literal_value, 1),
-  [354] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_literal_value, 1),
-  [356] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_string_lit, 3),
-  [358] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_string_lit, 3),
-  [360] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_collection_value, 1),
-  [362] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_collection_value, 1),
-  [364] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_tuple_expr, 5),
-  [366] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_tuple_expr, 5),
-  [368] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_object_expr, 6),
-  [370] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_object_expr, 6),
-  [372] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_object_expr, 7),
-  [374] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_object_expr, 7),
-  [376] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_expr, 1),
-  [378] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_expr, 1),
-  [380] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_tuple, 2),
-  [382] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_tuple, 2),
-  [384] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_operation, 1),
-  [386] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_operation, 1),
-  [388] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_expr, 1),
-  [390] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_template_expr, 1),
-  [392] = {.entry = {.count = 1, .reusable = true}}, SHIFT(83),
-  [394] = {.entry = {.count = 1, .reusable = true}}, SHIFT(84),
-  [396] = {.entry = {.count = 1, .reusable = false}}, SHIFT(84),
-  [398] = {.entry = {.count = 1, .reusable = false}}, SHIFT(85),
-  [400] = {.entry = {.count = 1, .reusable = true}}, SHIFT(85),
-  [402] = {.entry = {.count = 1, .reusable = true}}, SHIFT(86),
-  [404] = {.entry = {.count = 1, .reusable = true}}, SHIFT(87),
-  [406] = {.entry = {.count = 1, .reusable = false}}, SHIFT(75),
-  [408] = {.entry = {.count = 1, .reusable = false}}, SHIFT(328),
-  [410] = {.entry = {.count = 1, .reusable = true}}, SHIFT(194),
-  [412] = {.entry = {.count = 1, .reusable = true}}, SHIFT(184),
-  [414] = {.entry = {.count = 1, .reusable = true}}, SHIFT(89),
-  [416] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(75),
-  [419] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(328),
-  [422] = {.entry = {.count = 1, .reusable = false}}, SHIFT(44),
-  [424] = {.entry = {.count = 1, .reusable = false}}, SHIFT(347),
-  [426] = {.entry = {.count = 1, .reusable = true}}, SHIFT(209),
-  [428] = {.entry = {.count = 1, .reusable = true}}, SHIFT(191),
-  [430] = {.entry = {.count = 1, .reusable = true}}, SHIFT(94),
-  [432] = {.entry = {.count = 1, .reusable = true}}, SHIFT(93),
-  [434] = {.entry = {.count = 1, .reusable = false}}, SHIFT(93),
-  [436] = {.entry = {.count = 1, .reusable = false}}, SHIFT(92),
-  [438] = {.entry = {.count = 1, .reusable = true}}, SHIFT(92),
-  [440] = {.entry = {.count = 1, .reusable = true}}, SHIFT(81),
-  [442] = {.entry = {.count = 1, .reusable = true}}, SHIFT(91),
-  [444] = {.entry = {.count = 1, .reusable = true}}, SHIFT(90),
-  [446] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(44),
-  [449] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_full_splat_repeat1, 2), SHIFT_REPEAT(347),
-  [452] = {.entry = {.count = 1, .reusable = false}}, SHIFT(381),
-  [454] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(381),
-  [457] = {.entry = {.count = 1, .reusable = true}}, SHIFT(20),
-  [459] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(377),
-  [462] = {.entry = {.count = 1, .reusable = true}}, SHIFT(23),
-  [464] = {.entry = {.count = 1, .reusable = false}}, SHIFT(377),
-  [466] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_object_elem, 3),
-  [468] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_object_elem, 3),
-  [470] = {.entry = {.count = 1, .reusable = true}}, SHIFT(62),
-  [472] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_conditional, 5),
-  [474] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_conditional, 5),
-  [476] = {.entry = {.count = 1, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2),
-  [478] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__comma, 1),
-  [480] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym__comma, 1),
-  [482] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_arguments, 2),
-  [484] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_arguments, 3),
-  [486] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_intro, 7),
-  [488] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_intro, 7),
-  [490] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_intro, 5),
-  [492] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_intro, 5),
-  [494] = {.entry = {.count = 1, .reusable = true}}, SHIFT(224),
-  [496] = {.entry = {.count = 1, .reusable = true}}, SHIFT(305),
-  [498] = {.entry = {.count = 1, .reusable = true}}, SHIFT(41),
-  [500] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 2),
-  [502] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 2), SHIFT_REPEAT(305),
-  [505] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 2), SHIFT_REPEAT(41),
-  [508] = {.entry = {.count = 1, .reusable = true}}, SHIFT(126),
-  [510] = {.entry = {.count = 1, .reusable = true}}, SHIFT(240),
-  [512] = {.entry = {.count = 1, .reusable = true}}, SHIFT(248),
-  [514] = {.entry = {.count = 1, .reusable = true}}, SHIFT(174),
-  [516] = {.entry = {.count = 1, .reusable = true}}, SHIFT(128),
-  [518] = {.entry = {.count = 1, .reusable = true}}, SHIFT(170),
-  [520] = {.entry = {.count = 1, .reusable = true}}, SHIFT(225),
-  [522] = {.entry = {.count = 1, .reusable = true}}, SHIFT(49),
-  [524] = {.entry = {.count = 1, .reusable = true}}, SHIFT(279),
-  [526] = {.entry = {.count = 1, .reusable = true}}, SHIFT(281),
-  [528] = {.entry = {.count = 1, .reusable = true}}, SHIFT(310),
-  [530] = {.entry = {.count = 1, .reusable = true}}, SHIFT(314),
-  [532] = {.entry = {.count = 1, .reusable = true}}, SHIFT(318),
-  [534] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_arguments, 1),
-  [536] = {.entry = {.count = 1, .reusable = true}}, SHIFT(262),
-  [538] = {.entry = {.count = 1, .reusable = true}}, SHIFT(387),
-  [540] = {.entry = {.count = 1, .reusable = true}}, SHIFT(46),
-  [542] = {.entry = {.count = 1, .reusable = true}}, SHIFT(278),
-  [544] = {.entry = {.count = 1, .reusable = true}}, SHIFT(289),
-  [546] = {.entry = {.count = 1, .reusable = true}}, SHIFT(234),
-  [548] = {.entry = {.count = 1, .reusable = true}}, SHIFT(57),
-  [550] = {.entry = {.count = 1, .reusable = true}}, SHIFT(301),
-  [552] = {.entry = {.count = 1, .reusable = true}}, SHIFT(52),
-  [554] = {.entry = {.count = 1, .reusable = true}}, SHIFT(205),
-  [556] = {.entry = {.count = 1, .reusable = true}}, SHIFT(306),
-  [558] = {.entry = {.count = 1, .reusable = true}}, SHIFT(173),
-  [560] = {.entry = {.count = 1, .reusable = true}}, SHIFT(299),
-  [562] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_body_repeat1, 2),
-  [564] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_body_repeat1, 2), SHIFT_REPEAT(277),
-  [567] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym__tuple_elems_repeat1, 2),
-  [569] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__tuple_elems_repeat1, 2), SHIFT_REPEAT(73),
-  [572] = {.entry = {.count = 1, .reusable = true}}, SHIFT(137),
-  [574] = {.entry = {.count = 1, .reusable = true}}, SHIFT(300),
-  [576] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_body, 1),
-  [578] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_block_repeat1, 2),
-  [580] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_block_repeat1, 2), SHIFT_REPEAT(289),
-  [583] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_block_repeat1, 2), SHIFT_REPEAT(310),
-  [586] = {.entry = {.count = 1, .reusable = true}}, SHIFT(263),
-  [588] = {.entry = {.count = 1, .reusable = true}}, SHIFT(384),
-  [590] = {.entry = {.count = 1, .reusable = true}}, SHIFT(132),
-  [592] = {.entry = {.count = 1, .reusable = true}}, SHIFT(157),
-  [594] = {.entry = {.count = 1, .reusable = true}}, SHIFT(207),
-  [596] = {.entry = {.count = 1, .reusable = true}}, SHIFT(30),
-  [598] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__tuple_elems, 1),
-  [600] = {.entry = {.count = 1, .reusable = true}}, SHIFT(244),
-  [602] = {.entry = {.count = 1, .reusable = true}}, SHIFT(177),
-  [604] = {.entry = {.count = 1, .reusable = true}}, SHIFT(139),
-  [606] = {.entry = {.count = 1, .reusable = true}}, SHIFT(242),
-  [608] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_attribute, 3),
-  [610] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_template_literal_repeat1, 2),
-  [612] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_template_literal_repeat1, 2), SHIFT_REPEAT(303),
-  [615] = {.entry = {.count = 1, .reusable = true}}, SHIFT(29),
-  [617] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_literal, 1),
-  [619] = {.entry = {.count = 1, .reusable = true}}, SHIFT(303),
-  [621] = {.entry = {.count = 1, .reusable = true}}, SHIFT(204),
-  [623] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(134),
-  [626] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1),
+  [138] = {.entry = {.count = 1, .reusable = true}}, SHIFT(111),
+  [140] = {.entry = {.count = 1, .reusable = false}}, SHIFT(111),
+  [142] = {.entry = {.count = 1, .reusable = false}}, SHIFT(112),
+  [144] = {.entry = {.count = 1, .reusable = true}}, SHIFT(112),
+  [146] = {.entry = {.count = 1, .reusable = true}}, SHIFT(109),
+  [148] = {.entry = {.count = 1, .reusable = true}}, SHIFT(105),
+  [150] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__object_elems, 3),
+  [152] = {.entry = {.count = 1, .reusable = false}}, SHIFT(47),
+  [154] = {.entry = {.count = 1, .reusable = false}}, SHIFT(342),
+  [156] = {.entry = {.count = 1, .reusable = true}}, SHIFT(49),
+  [158] = {.entry = {.count = 1, .reusable = true}}, SHIFT(50),
+  [160] = {.entry = {.count = 1, .reusable = true}}, SHIFT(100),
+  [162] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__tuple_elems, 2),
+  [164] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_attr_splat_repeat1, 2),
+  [166] = {.entry = {.count = 1, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2),
+  [168] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(78),
+  [171] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(352),
+  [174] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__tuple_elems, 3),
+  [176] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_full_splat, 1),
+  [178] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_full_splat, 1),
+  [180] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_attr_splat, 2),
+  [182] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_attr_splat, 2),
+  [184] = {.entry = {.count = 1, .reusable = true}}, SHIFT(3),
+  [186] = {.entry = {.count = 1, .reusable = false}}, SHIFT(209),
+  [188] = {.entry = {.count = 1, .reusable = true}}, SHIFT(60),
+  [190] = {.entry = {.count = 1, .reusable = false}}, SHIFT(229),
+  [192] = {.entry = {.count = 1, .reusable = true}}, SHIFT(229),
+  [194] = {.entry = {.count = 1, .reusable = false}}, SHIFT(232),
+  [196] = {.entry = {.count = 1, .reusable = false}}, SHIFT(237),
+  [198] = {.entry = {.count = 1, .reusable = true}}, SHIFT(10),
+  [200] = {.entry = {.count = 1, .reusable = true}}, SHIFT(107),
+  [202] = {.entry = {.count = 1, .reusable = true}}, SHIFT(73),
+  [204] = {.entry = {.count = 1, .reusable = true}}, SHIFT(269),
+  [206] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_full_splat, 2),
+  [208] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_full_splat, 2),
+  [210] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_attr_splat, 1),
+  [212] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_attr_splat, 1),
+  [214] = {.entry = {.count = 1, .reusable = true}}, SHIFT(5),
+  [216] = {.entry = {.count = 1, .reusable = false}}, SHIFT(197),
+  [218] = {.entry = {.count = 1, .reusable = true}}, SHIFT(79),
+  [220] = {.entry = {.count = 1, .reusable = false}}, SHIFT(211),
+  [222] = {.entry = {.count = 1, .reusable = true}}, SHIFT(211),
+  [224] = {.entry = {.count = 1, .reusable = false}}, SHIFT(210),
+  [226] = {.entry = {.count = 1, .reusable = false}}, SHIFT(208),
+  [228] = {.entry = {.count = 1, .reusable = true}}, SHIFT(9),
+  [230] = {.entry = {.count = 1, .reusable = true}}, SHIFT(108),
+  [232] = {.entry = {.count = 1, .reusable = true}}, SHIFT(272),
+  [234] = {.entry = {.count = 1, .reusable = true}}, SHIFT(4),
+  [236] = {.entry = {.count = 1, .reusable = false}}, SHIFT(113),
+  [238] = {.entry = {.count = 1, .reusable = true}}, SHIFT(68),
+  [240] = {.entry = {.count = 1, .reusable = false}}, SHIFT(139),
+  [242] = {.entry = {.count = 1, .reusable = true}}, SHIFT(139),
+  [244] = {.entry = {.count = 1, .reusable = false}}, SHIFT(141),
+  [246] = {.entry = {.count = 1, .reusable = false}}, SHIFT(142),
+  [248] = {.entry = {.count = 1, .reusable = true}}, SHIFT(8),
+  [250] = {.entry = {.count = 1, .reusable = true}}, SHIFT(106),
+  [252] = {.entry = {.count = 1, .reusable = true}}, SHIFT(277),
+  [254] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(47),
+  [257] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(342),
+  [260] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_variable_expr, 1),
+  [262] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_variable_expr, 1),
+  [264] = {.entry = {.count = 1, .reusable = true}}, SHIFT(21),
+  [266] = {.entry = {.count = 1, .reusable = true}}, SHIFT(18),
+  [268] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_legacy_index, 2),
+  [270] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_legacy_index, 2),
+  [272] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_object_expr, 8),
+  [274] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_object_expr, 8),
+  [276] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_tuple, 2),
+  [278] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_tuple, 2),
+  [280] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_object_expr, 7),
+  [282] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_object_expr, 7),
+  [284] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_splat, 1),
+  [286] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_splat, 1),
+  [288] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_object_expr, 6),
+  [290] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_object_expr, 6),
+  [292] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_index, 1),
+  [294] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_index, 1),
+  [296] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__expr_term, 2),
+  [298] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym__expr_term, 2),
+  [300] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_tuple_expr, 5),
+  [302] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_tuple_expr, 5),
+  [304] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_string_lit, 3),
+  [306] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_string_lit, 3),
+  [308] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_quoted_template, 2),
+  [310] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_quoted_template, 2),
+  [312] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_tuple_expr, 4),
+  [314] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_tuple_expr, 4),
+  [316] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_expr, 1),
+  [318] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_template_expr, 1),
+  [320] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_new_index, 3),
+  [322] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_new_index, 3),
+  [324] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_operation, 1),
+  [326] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_operation, 1),
+  [328] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_call, 4),
+  [330] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_function_call, 4),
+  [332] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_tuple, 3),
+  [334] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_tuple, 3),
+  [336] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_object, 3),
+  [338] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_object, 3),
+  [340] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_expr, 1),
+  [342] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_expr, 1),
+  [344] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_quoted_template, 3),
+  [346] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_quoted_template, 3),
+  [348] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_call, 3),
+  [350] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_function_call, 3),
+  [352] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_object, 2),
+  [354] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_object, 2),
+  [356] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_collection_value, 1),
+  [358] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_collection_value, 1),
+  [360] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__expr_term, 3),
+  [362] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym__expr_term, 3),
+  [364] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_numeric_lit, 1),
+  [366] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_numeric_lit, 1),
+  [368] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_get_attr, 2),
+  [370] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_get_attr, 2),
+  [372] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_bool_lit, 1),
+  [374] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_bool_lit, 1),
+  [376] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_literal_value, 1),
+  [378] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_literal_value, 1),
+  [380] = {.entry = {.count = 1, .reusable = true}}, SHIFT(85),
+  [382] = {.entry = {.count = 1, .reusable = true}}, SHIFT(86),
+  [384] = {.entry = {.count = 1, .reusable = false}}, SHIFT(86),
+  [386] = {.entry = {.count = 1, .reusable = false}}, SHIFT(98),
+  [388] = {.entry = {.count = 1, .reusable = true}}, SHIFT(98),
+  [390] = {.entry = {.count = 1, .reusable = false}}, SHIFT(82),
+  [392] = {.entry = {.count = 1, .reusable = false}}, SHIFT(363),
+  [394] = {.entry = {.count = 1, .reusable = true}}, SHIFT(181),
+  [396] = {.entry = {.count = 1, .reusable = true}}, SHIFT(179),
+  [398] = {.entry = {.count = 1, .reusable = true}}, SHIFT(97),
+  [400] = {.entry = {.count = 1, .reusable = true}}, SHIFT(94),
+  [402] = {.entry = {.count = 1, .reusable = true}}, SHIFT(93),
+  [404] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(82),
+  [407] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(363),
+  [410] = {.entry = {.count = 1, .reusable = true}}, SHIFT(103),
+  [412] = {.entry = {.count = 1, .reusable = false}}, SHIFT(103),
+  [414] = {.entry = {.count = 1, .reusable = true}}, SHIFT(104),
+  [416] = {.entry = {.count = 1, .reusable = false}}, SHIFT(102),
+  [418] = {.entry = {.count = 1, .reusable = true}}, SHIFT(102),
+  [420] = {.entry = {.count = 1, .reusable = true}}, SHIFT(101),
+  [422] = {.entry = {.count = 1, .reusable = true}}, SHIFT(99),
+  [424] = {.entry = {.count = 1, .reusable = false}}, SHIFT(67),
+  [426] = {.entry = {.count = 1, .reusable = false}}, SHIFT(341),
+  [428] = {.entry = {.count = 1, .reusable = true}}, SHIFT(196),
+  [430] = {.entry = {.count = 1, .reusable = true}}, SHIFT(195),
+  [432] = {.entry = {.count = 1, .reusable = true}}, SHIFT(96),
+  [434] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(67),
+  [437] = {.entry = {.count = 2, .reusable = false}}, REDUCE(aux_sym_attr_splat_repeat1, 2), SHIFT_REPEAT(341),
+  [440] = {.entry = {.count = 1, .reusable = true}}, SHIFT(14),
+  [442] = {.entry = {.count = 1, .reusable = true}}, SHIFT(17),
+  [444] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_conditional, 5),
+  [446] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_conditional, 5),
+  [448] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_object_elem, 3),
+  [450] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_object_elem, 3),
+  [452] = {.entry = {.count = 1, .reusable = true}}, SHIFT(77),
+  [454] = {.entry = {.count = 1, .reusable = false}}, REDUCE(aux_sym__object_elems_repeat1, 2),
+  [456] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__comma, 1),
+  [458] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym__comma, 1),
+  [460] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_arguments, 3),
+  [462] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_arguments, 2),
+  [464] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_intro, 7),
+  [466] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_intro, 7),
+  [468] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_intro, 5),
+  [470] = {.entry = {.count = 1, .reusable = false}}, REDUCE(sym_for_intro, 5),
+  [472] = {.entry = {.count = 1, .reusable = true}}, SHIFT(306),
+  [474] = {.entry = {.count = 1, .reusable = true}}, SHIFT(299),
+  [476] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_body_repeat1, 2),
+  [478] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_body_repeat1, 2), SHIFT_REPEAT(13),
+  [481] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_body_repeat1, 2), SHIFT_REPEAT(278),
+  [484] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_body, 1),
+  [486] = {.entry = {.count = 1, .reusable = true}}, SHIFT(251),
+  [488] = {.entry = {.count = 1, .reusable = true}}, SHIFT(301),
+  [490] = {.entry = {.count = 1, .reusable = true}}, SHIFT(42),
+  [492] = {.entry = {.count = 1, .reusable = true}}, SHIFT(213),
+  [494] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 2),
+  [496] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 2), SHIFT_REPEAT(301),
+  [499] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 2), SHIFT_REPEAT(42),
+  [502] = {.entry = {.count = 1, .reusable = true}}, SHIFT(226),
+  [504] = {.entry = {.count = 1, .reusable = true}}, SHIFT(145),
+  [506] = {.entry = {.count = 1, .reusable = true}}, SHIFT(134),
+  [508] = {.entry = {.count = 1, .reusable = true}}, SHIFT(154),
+  [510] = {.entry = {.count = 1, .reusable = true}}, SHIFT(230),
+  [512] = {.entry = {.count = 1, .reusable = true}}, SHIFT(125),
+  [514] = {.entry = {.count = 1, .reusable = true}}, SHIFT(80),
+  [516] = {.entry = {.count = 1, .reusable = true}}, SHIFT(266),
+  [518] = {.entry = {.count = 1, .reusable = true}}, SHIFT(283),
+  [520] = {.entry = {.count = 1, .reusable = true}}, SHIFT(310),
+  [522] = {.entry = {.count = 1, .reusable = true}}, SHIFT(120),
+  [524] = {.entry = {.count = 1, .reusable = true}}, SHIFT(61),
+  [526] = {.entry = {.count = 1, .reusable = true}}, SHIFT(305),
+  [528] = {.entry = {.count = 1, .reusable = true}}, SHIFT(81),
+  [530] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_function_arguments, 1),
+  [532] = {.entry = {.count = 1, .reusable = true}}, SHIFT(260),
+  [534] = {.entry = {.count = 1, .reusable = true}}, SHIFT(376),
+  [536] = {.entry = {.count = 1, .reusable = true}}, SHIFT(46),
+  [538] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym__tuple_elems_repeat1, 2),
+  [540] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym__tuple_elems_repeat1, 2), SHIFT_REPEAT(71),
+  [543] = {.entry = {.count = 1, .reusable = true}}, SHIFT(223),
+  [545] = {.entry = {.count = 1, .reusable = true}}, SHIFT(304),
+  [547] = {.entry = {.count = 1, .reusable = true}}, SHIFT(265),
+  [549] = {.entry = {.count = 1, .reusable = true}}, SHIFT(290),
+  [551] = {.entry = {.count = 1, .reusable = true}}, SHIFT(245),
+  [553] = {.entry = {.count = 1, .reusable = true}}, SHIFT(303),
+  [555] = {.entry = {.count = 1, .reusable = true}}, SHIFT(171),
+  [557] = {.entry = {.count = 1, .reusable = true}}, SHIFT(297),
+  [559] = {.entry = {.count = 1, .reusable = true}}, SHIFT(36),
+  [561] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym__tuple_elems, 1),
+  [563] = {.entry = {.count = 1, .reusable = true}}, SHIFT(221),
+  [565] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_attribute, 3),
+  [567] = {.entry = {.count = 1, .reusable = true}}, SHIFT(164),
+  [569] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_block_repeat1, 2),
+  [571] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_block_repeat1, 2), SHIFT_REPEAT(290),
+  [574] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_block_repeat1, 2), SHIFT_REPEAT(310),
+  [577] = {.entry = {.count = 1, .reusable = true}}, SHIFT(240),
+  [579] = {.entry = {.count = 1, .reusable = true}}, SHIFT(259),
+  [581] = {.entry = {.count = 1, .reusable = true}}, SHIFT(379),
+  [583] = {.entry = {.count = 1, .reusable = true}}, SHIFT(126),
+  [585] = {.entry = {.count = 1, .reusable = true}}, SHIFT(146),
+  [587] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_block, 5),
+  [589] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_block, 3),
+  [591] = {.entry = {.count = 1, .reusable = true}}, SHIFT(39),
+  [593] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_literal, 1),
+  [595] = {.entry = {.count = 1, .reusable = true}}, SHIFT(302),
+  [597] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_template_literal_repeat1, 2),
+  [599] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_template_literal_repeat1, 2), SHIFT_REPEAT(302),
+  [602] = {.entry = {.count = 1, .reusable = true}}, SHIFT(247),
+  [604] = {.entry = {.count = 1, .reusable = true}}, SHIFT(224),
+  [606] = {.entry = {.count = 1, .reusable = true}}, SHIFT(118),
+  [608] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_block, 4),
+  [610] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(199),
+  [613] = {.entry = {.count = 1, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1),
+  [615] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(253),
+  [618] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_interpolation, 5),
+  [620] = {.entry = {.count = 1, .reusable = true}}, SHIFT(313),
+  [622] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_cond, 2),
+  [624] = {.entry = {.count = 1, .reusable = true}}, SHIFT(51),
+  [626] = {.entry = {.count = 1, .reusable = true}}, SHIFT(320),
   [628] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_interpolation, 3),
-  [630] = {.entry = {.count = 1, .reusable = true}}, SHIFT(312),
-  [632] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_interpolation, 4),
-  [634] = {.entry = {.count = 1, .reusable = true}}, SHIFT(323),
-  [636] = {.entry = {.count = 1, .reusable = true}}, SHIFT(74),
-  [638] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_block, 4),
-  [640] = {.entry = {.count = 1, .reusable = true}}, SHIFT(56),
-  [642] = {.entry = {.count = 1, .reusable = true}}, SHIFT(383),
-  [644] = {.entry = {.count = 1, .reusable = true}}, SHIFT(308),
-  [646] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_interpolation, 5),
-  [648] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(201),
-  [651] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_block, 3),
-  [653] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_block, 5),
-  [655] = {.entry = {.count = 1, .reusable = true}}, SHIFT(385),
-  [657] = {.entry = {.count = 1, .reusable = true}}, SHIFT(311),
-  [659] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(247),
-  [662] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_for_cond, 2),
-  [664] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_template_literal_repeat1, 2), SHIFT_REPEAT(323),
-  [667] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(152),
-  [670] = {.entry = {.count = 1, .reusable = true}}, SHIFT(118),
-  [672] = {.entry = {.count = 1, .reusable = true}}, SHIFT(217),
-  [674] = {.entry = {.count = 1, .reusable = true}}, SHIFT(216),
-  [676] = {.entry = {.count = 1, .reusable = true}}, SHIFT(164),
-  [678] = {.entry = {.count = 1, .reusable = true}}, SHIFT(264),
-  [680] = {.entry = {.count = 1, .reusable = true}}, SHIFT(114),
-  [682] = {.entry = {.count = 1, .reusable = true}}, SHIFT(171),
-  [684] = {.entry = {.count = 1, .reusable = true}}, SHIFT(241),
-  [686] = {.entry = {.count = 1, .reusable = true}}, SHIFT(54),
-  [688] = {.entry = {.count = 1, .reusable = true}}, SHIFT(71),
-  [690] = {.entry = {.count = 1, .reusable = true}}, SHIFT(136),
-  [692] = {.entry = {.count = 1, .reusable = true}}, SHIFT(203),
-  [694] = {.entry = {.count = 1, .reusable = true}}, SHIFT(382),
-  [696] = {.entry = {.count = 1, .reusable = true}}, SHIFT(72),
-  [698] = {.entry = {.count = 1, .reusable = true}}, SHIFT(233),
-  [700] = {.entry = {.count = 1, .reusable = true}}, SHIFT(67),
-  [702] = {.entry = {.count = 1, .reusable = true}}, SHIFT(154),
-  [704] = {.entry = {.count = 1, .reusable = true}}, SHIFT(206),
-  [706] = {.entry = {.count = 1, .reusable = true}}, SHIFT(119),
-  [708] = {.entry = {.count = 1, .reusable = true}}, SHIFT(237),
-  [710] = {.entry = {.count = 1, .reusable = true}}, SHIFT(236),
-  [712] = {.entry = {.count = 1, .reusable = true}}, SHIFT(235),
-  [714] = {.entry = {.count = 1, .reusable = true}}, SHIFT(265),
-  [716] = {.entry = {.count = 1, .reusable = true}}, SHIFT(172),
-  [718] = {.entry = {.count = 1, .reusable = true}}, SHIFT(48),
-  [720] = {.entry = {.count = 1, .reusable = true}}, SHIFT(63),
-  [722] = {.entry = {.count = 1, .reusable = true}}, SHIFT(243),
-  [724] = {.entry = {.count = 1, .reusable = true}}, SHIFT(175),
-  [726] = {.entry = {.count = 1, .reusable = true}}, SHIFT(220),
-  [728] = {.entry = {.count = 1, .reusable = true}}, SHIFT(153),
-  [730] = {.entry = {.count = 1, .reusable = true}}, SHIFT(160),
-  [732] = {.entry = {.count = 1, .reusable = true}}, SHIFT(210),
-  [734] = {.entry = {.count = 1, .reusable = true}}, SHIFT(53),
-  [736] = {.entry = {.count = 1, .reusable = true}}, SHIFT(208),
-  [738] = {.entry = {.count = 1, .reusable = true}}, SHIFT(211),
-  [740] = {.entry = {.count = 1, .reusable = true}}, SHIFT(212),
-  [742] = {.entry = {.count = 1, .reusable = true}}, SHIFT(255),
-  [744] = {.entry = {.count = 1, .reusable = true}}, SHIFT(116),
-  [746] = {.entry = {.count = 1, .reusable = true}}, SHIFT(59),
-  [748] = {.entry = {.count = 1, .reusable = true}}, SHIFT(246),
-  [750] = {.entry = {.count = 1, .reusable = true}}, SHIFT(232),
-  [752] = {.entry = {.count = 1, .reusable = true}}, SHIFT(124),
-  [754] = {.entry = {.count = 1, .reusable = true}}, SHIFT(123),
-  [756] = {.entry = {.count = 1, .reusable = true}}, SHIFT(122),
-  [758] = {.entry = {.count = 1, .reusable = true}}, SHIFT(319),
-  [760] = {.entry = {.count = 1, .reusable = true}}, SHIFT(42),
-  [762] = {.entry = {.count = 1, .reusable = true}}, SHIFT(113),
-  [764] = {.entry = {.count = 1, .reusable = true}}, SHIFT(156),
-  [766] = {.entry = {.count = 1, .reusable = true}}, SHIFT(158),
-  [768] = {.entry = {.count = 1, .reusable = true}}, SHIFT(340),
-  [770] = {.entry = {.count = 1, .reusable = true}}, SHIFT(55),
-  [772] = {.entry = {.count = 1, .reusable = true}}, SHIFT(325),
-  [774] = {.entry = {.count = 1, .reusable = true}}, SHIFT(379),
-  [776] = {.entry = {.count = 1, .reusable = true}}, SHIFT(316),
-  [778] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_config_file, 1),
-  [780] = {.entry = {.count = 1, .reusable = true}},  ACCEPT_INPUT(),
+  [630] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_template_interpolation, 4),
+  [632] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(177),
+  [635] = {.entry = {.count = 1, .reusable = true}}, SHIFT(62),
+  [637] = {.entry = {.count = 1, .reusable = true}}, SHIFT(375),
+  [639] = {.entry = {.count = 1, .reusable = true}}, SHIFT(315),
+  [641] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_quoted_template_repeat1, 1), SHIFT(124),
+  [644] = {.entry = {.count = 2, .reusable = true}}, REDUCE(aux_sym_template_literal_repeat1, 2), SHIFT_REPEAT(320),
+  [647] = {.entry = {.count = 1, .reusable = true}}, SHIFT(374),
+  [649] = {.entry = {.count = 1, .reusable = true}}, SHIFT(316),
+  [651] = {.entry = {.count = 1, .reusable = true}}, SHIFT(239),
+  [653] = {.entry = {.count = 1, .reusable = true}}, SHIFT(56),
+  [655] = {.entry = {.count = 1, .reusable = true}}, SHIFT(58),
+  [657] = {.entry = {.count = 1, .reusable = true}}, SHIFT(170),
+  [659] = {.entry = {.count = 1, .reusable = true}}, SHIFT(219),
+  [661] = {.entry = {.count = 1, .reusable = true}}, SHIFT(222),
+  [663] = {.entry = {.count = 1, .reusable = true}}, SHIFT(130),
+  [665] = {.entry = {.count = 1, .reusable = true}}, SHIFT(131),
+  [667] = {.entry = {.count = 1, .reusable = true}}, SHIFT(132),
+  [669] = {.entry = {.count = 1, .reusable = true}}, SHIFT(249),
+  [671] = {.entry = {.count = 1, .reusable = true}}, SHIFT(225),
+  [673] = {.entry = {.count = 1, .reusable = true}}, SHIFT(264),
+  [675] = {.entry = {.count = 1, .reusable = true}}, SHIFT(227),
+  [677] = {.entry = {.count = 1, .reusable = true}}, SHIFT(116),
+  [679] = {.entry = {.count = 1, .reusable = true}}, SHIFT(233),
+  [681] = {.entry = {.count = 1, .reusable = true}}, SHIFT(234),
+  [683] = {.entry = {.count = 1, .reusable = true}}, SHIFT(235),
+  [685] = {.entry = {.count = 1, .reusable = true}}, SHIFT(178),
+  [687] = {.entry = {.count = 1, .reusable = true}}, SHIFT(175),
+  [689] = {.entry = {.count = 1, .reusable = true}}, SHIFT(72),
+  [691] = {.entry = {.count = 1, .reusable = true}}, SHIFT(218),
+  [693] = {.entry = {.count = 1, .reusable = true}}, SHIFT(168),
+  [695] = {.entry = {.count = 1, .reusable = true}}, SHIFT(238),
+  [697] = {.entry = {.count = 1, .reusable = true}}, SHIFT(70),
+  [699] = {.entry = {.count = 1, .reusable = true}}, SHIFT(212),
+  [701] = {.entry = {.count = 1, .reusable = true}}, SHIFT(298),
+  [703] = {.entry = {.count = 1, .reusable = true}}, SHIFT(138),
+  [705] = {.entry = {.count = 1, .reusable = true}}, SHIFT(140),
+  [707] = {.entry = {.count = 1, .reusable = true}}, SHIFT(115),
+  [709] = {.entry = {.count = 1, .reusable = true}}, SHIFT(55),
+  [711] = {.entry = {.count = 1, .reusable = true}}, SHIFT(262),
+  [713] = {.entry = {.count = 1, .reusable = true}}, SHIFT(128),
+  [715] = {.entry = {.count = 1, .reusable = true}}, SHIFT(236),
+  [717] = {.entry = {.count = 1, .reusable = true}}, SHIFT(147),
+  [719] = {.entry = {.count = 1, .reusable = true}}, SHIFT(380),
+  [721] = {.entry = {.count = 1, .reusable = true}}, SHIFT(66),
+  [723] = {.entry = {.count = 1, .reusable = true}}, SHIFT(123),
+  [725] = {.entry = {.count = 1, .reusable = true}}, SHIFT(150),
+  [727] = {.entry = {.count = 1, .reusable = true}}, SHIFT(215),
+  [729] = {.entry = {.count = 1, .reusable = true}}, SHIFT(216),
+  [731] = {.entry = {.count = 1, .reusable = true}}, SHIFT(217),
+  [733] = {.entry = {.count = 1, .reusable = true}}, SHIFT(59),
+  [735] = {.entry = {.count = 1, .reusable = true}}, SHIFT(63),
+  [737] = {.entry = {.count = 1, .reusable = true}}, SHIFT(220),
+  [739] = {.entry = {.count = 1, .reusable = true}}, SHIFT(144),
+  [741] = {.entry = {.count = 1, .reusable = true}}, SHIFT(241),
+  [743] = {.entry = {.count = 1, .reusable = true}}, SHIFT(149),
+  [745] = {.entry = {.count = 1, .reusable = true}}, SHIFT(45),
+  [747] = {.entry = {.count = 1, .reusable = true}}, SHIFT(162),
+  [749] = {.entry = {.count = 1, .reusable = true}}, SHIFT(323),
+  [751] = {.entry = {.count = 1, .reusable = true}}, SHIFT(309),
+  [753] = {.entry = {.count = 1, .reusable = true}}, SHIFT(358),
+  [755] = {.entry = {.count = 1, .reusable = true}}, SHIFT(54),
+  [757] = {.entry = {.count = 1, .reusable = true}}, SHIFT(378),
+  [759] = {.entry = {.count = 1, .reusable = true}}, REDUCE(sym_config_file, 1),
+  [761] = {.entry = {.count = 1, .reusable = true}},  ACCEPT_INPUT(),
 };
 
 #ifdef __cplusplus
diff --git a/src/scanner.c b/src/scanner.c
index 5247c57..9c4e4be 100644
--- a/src/scanner.c
+++ b/src/scanner.c
@@ -90,9 +90,10 @@ void scanner_exit_quoted_context(Scanner *scanner) {
 bool scanner_scan(Scanner *scanner, TSLexer *lexer, const bool *valid_symbols) {
   // print_debug_info(scanner, lexer, valid_symbols);
 
-  while (iswspace(lexer->lookahead) && !scanner->in_quoted_context) {
+  while (iswspace(lexer->lookahead)) {
     skip(lexer);
   }
+  if (lexer->lookahead == '\0') return false;
 
   // manage quoted context
   if (
@@ -134,7 +135,11 @@ bool scanner_scan(Scanner *scanner, TSLexer *lexer, const bool *valid_symbols) {
       return accept_inplace(lexer, TEMPLATE_LITERAL_CHUNK);
     }
   }
-  if (valid_symbols[TEMPLATE_INTERPOLATION_END] && lexer->lookahead == '}') {
+  if (
+    valid_symbols[TEMPLATE_INTERPOLATION_END] &&
+    lexer->lookahead == '}' &&
+    scanner->in_template_interpolation
+  ) {
     scanner_exit_interpolation_context(scanner);
     return accept_and_advance(lexer, TEMPLATE_INTERPOLATION_END);
   }
@@ -144,6 +149,7 @@ bool scanner_scan(Scanner *scanner, TSLexer *lexer, const bool *valid_symbols) {
   // handle template literal chunks in quoted contexts
   //
   // they may not contain newlines and may contain escape sequences
+
   if (valid_symbols[TEMPLATE_LITERAL_CHUNK] && scanner->in_quoted_context) {
     switch (lexer->lookahead) {
       case '\\':
@@ -183,7 +189,6 @@ bool scanner_scan(Scanner *scanner, TSLexer *lexer, const bool *valid_symbols) {
         advance(lexer);
         if (lexer->lookahead == '{') {
           // unescaped template interpolation
-          skip(lexer);
           return false;
         }
         if (lexer->lookahead == '$') {
@@ -203,7 +208,6 @@ bool scanner_scan(Scanner *scanner, TSLexer *lexer, const bool *valid_symbols) {
   }
 
   // probably not handled by the external scanner
-
   return false;
 }
 
diff --git a/test/corpus/real_world.txt b/test/corpus/real_world.txt
index 663fd6a..4ec7a2a 100644
--- a/test/corpus/real_world.txt
+++ b/test/corpus/real_world.txt
@@ -437,3 +437,53 @@ private_key_pem = element(tls_private_key.server.*.private_key_pem, count.index)
                 (identifier))
               (get_attr
                 (identifier)))))))))
+
+================================================================================
+example 4
+================================================================================
+
+locals {
+  bootstrapping_host = "${var.tectonic_azure_private_cluster ?
+    module.vnet.master_private_ip_addresses[0] :
+    module.vnet.api_fqdn}"
+}
+
+--------------------------------------------------------------------------------
+
+(config_file
+  (body
+    (block
+      (identifier)
+      (body
+        (attribute
+          (identifier)
+          (expression
+            (template_expr
+              (quoted_template
+                (template_interpolation
+                  (expression
+                    (conditional
+                      (expression
+                        (variable_expr
+                          (identifier))
+                        (get_attr
+                          (identifier)))
+                      (expression
+                        (variable_expr
+                          (identifier))
+                        (get_attr
+                          (identifier))
+                        (get_attr
+                          (identifier))
+                        (index
+                          (new_index
+                            (expression
+                              (literal_value
+                                (numeric_lit))))))
+                      (expression
+                        (variable_expr
+                          (identifier))
+                        (get_attr
+                          (identifier))
+                        (get_attr
+                          (identifier))))))))))))))