adjusting sensitive values #201
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# name: "Terragrunt plan DEV" | |
# env: | |
# ENVIRONMENT: dev | |
# ACCOUNT_ID: ${{ secrets.DEV_ACCOUNT_ID }} | |
# AWS_REGION: ca-central-1 | |
# OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }} | |
# WORKFLOW: true | |
# on: | |
# workflow_dispatch: | |
# pull_request: | |
# paths: | |
# - ".env" | |
# - "aws/**" | |
# - "env/$ENVIRONMENT/**" | |
# - "env/terragrunt.hcl" | |
# - ".github/workflows/terragrunt_plan_$ENVIRONMENT.yml" | |
# permissions: | |
# id-token: write # This is required for requesting the OIDC JWT | |
# contents: write # This is required for actions/checkout | |
# pull-requests: write | |
# jobs: | |
# terragrunt-filter: | |
# runs-on: ubuntu-latest | |
# outputs: | |
# common: ${{ steps.filter.outputs.common }} | |
# ecr: ${{ steps.filter.outputs.ecr }} | |
# ses_receiving_emails: ${{ steps.filter.outputs.ses_receiving_emails }} | |
# ses_to_sqs_email_callbacks: ${{ steps.filter.outputs.ses_to_sqs_email_callbacks }} | |
# sns_to_sqs_sms_callbacks: ${{ steps.filter.outputs.sns_to_sqs_sms_callbacks }} | |
# pinpoint_to_sqs_sms_callbacks: ${{ steps.filter.outputs.pinpoint_to_sqs_sms_callbacks }} | |
# dns: ${{ steps.filter.outputs.dns }} | |
# ses_validation_dns_entries: ${{ steps.filter.outputs.ses_validation_dns_entries }} | |
# eks: ${{ steps.filter.outputs.eks }} | |
# rds: ${{ steps.filter.outputs.rds }} | |
# lambda-api: ${{ steps.filter.outputs.lambda-api }} | |
# heartbeat: ${{ steps.filter.outputs.heartbeat }} | |
# database-tools: ${{ steps.filter.outputs.database-tools }} | |
# quicksight: ${{ steps.filter.outputs.quicksight }} | |
# lambda-google-cidr: ${{ steps.filter.outputs.lambda-google-cidr }} | |
# system_status: ${{ steps.filter.outputs.system_status }} | |
# system_status_static_site: ${{ steps.filter.outputs.system_status_static_site }} | |
# newrelic: ${{ steps.filter.outputs.newrelic }} | |
# steps: | |
# - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 | |
# id: filter | |
# with: | |
# filters: | | |
# common: | |
# - '.github/workflows/terragrunt-plan-${{env.ENVIRONMENT}}.yml' | |
# - 'aws/common/**' | |
# - 'env/${{env.ENVIRONMENT}}/common/**' | |
# - 'env/terragrunt.hcl' | |
# dns: | |
# - 'aws/dns/**' | |
# - 'env/${{env.ENVIRONMENT}}/dns/**' | |
# ses_validation_dns_entries: | |
# - 'aws/ses_validation_dns_entries/**' | |
# - 'env/${{env.ENVIRONMENT}}/ses_validation_dns_entries/**' | |
# ecr: | |
# - 'aws/ecr/**' | |
# - 'env/${{env.ENVIRONMENT}}/ecr/**' | |
# eks: | |
# - 'aws/eks/**' | |
# - 'env/${{env.ENVIRONMENT}}/eks/**' | |
# elasticache: | |
# - 'aws/elasticache/**' | |
# - 'env/${{env.ENVIRONMENT}}/elasticache/**' | |
# rds: | |
# - 'aws/rds/**' | |
# - 'env/${{env.ENVIRONMENT}}/rds/**' | |
# cloudfront: | |
# - 'aws/cloudfront/**' | |
# - 'env/${{env.ENVIRONMENT}}/cloudfront/**' | |
# lambda-api: | |
# - 'aws/lambda-api/**' | |
# - 'env/${{env.ENVIRONMENT}}/lambda-api/**' | |
# lambda-admin-pr: | |
# - 'aws/lambda-admin-pr/**' | |
# - 'env/${{env.ENVIRONMENT}}/lambda-admin-pr/**' | |
# performance-test: | |
# - 'aws/performance-test/**' | |
# - 'env/${{env.ENVIRONMENT}}/performance-test/**' | |
# heartbeat: | |
# - 'aws/heartbeat/**' | |
# - 'env/${{env.ENVIRONMENT}}/heartbeat/**' | |
# database-tools: | |
# - 'aws/database-tools/**' | |
# - 'env/${{env.ENVIRONMENT}}/database-tools/**' | |
# system_status: | |
# - 'aws/system_status/**' | |
# - 'env/${{env.ENVIRONMENT}}/system_status/**' | |
# system_status_static_site: | |
# - 'aws/system_status_static_site/**' | |
# - 'env/${{env.ENVIRONMENT}}/system_status_static_site/**' | |
# quicksight: | |
# - 'aws/quicksight/**' | |
# - 'env/${{env.ENVIRONMENT}}/quicksight/**' | |
# lambda-google-cidr: | |
# - 'aws/lambda-google-cidr/**' | |
# - 'env/${{env.ENVIRONMENT}}/lambda-google-cidr/**' | |
# ses_receiving_emails: | |
# - 'aws/ses_receiving_emails/**' | |
# - 'env/${{env.ENVIRONMENT}}/ses_receiving_emails/**' | |
# ses_to_sqs_email_callbacks: | |
# - 'aws/ses_to_sqs_email_callbacks/**' | |
# - 'env/${{env.ENVIRONMENT}}/ses_to_sqs_email_callbacks/**' | |
# sns_to_sqs_sms_callbacks: | |
# - 'aws/sns_to_sqs_sms_callbacks/**' | |
# - 'env/${{env.ENVIRONMENT}}/sns_to_sqs_sms_callbacks/**' | |
# pinpoint_to_sqs_sms_callbacks: | |
# - 'aws/pinpoint_to_sqs_sms_callbacks/**' | |
# - 'env/${{env.ENVIRONMENT}}/pinpoint_to_sqs_sms_callbacks/**' | |
# newrelic: | |
# - 'aws/newrelic/**' | |
# - 'env/${{env.ENVIRONMENT}}/newrelic/**' | |
# terragrunt-plan-common: | |
# runs-on: ubuntu-latest | |
# env: | |
# COMPONENT: "common" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-ecr: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# env: | |
# COMPONENT: "ecr" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws | |
# cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-ses_receiving_emails: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# env: | |
# COMPONENT: "ses_receiving_emails" | |
# needs: [terragrunt-plan-common,terragrunt-plan-ecr] | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-dns: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# env: | |
# COMPONENT: "dns" | |
# needs: [terragrunt-plan-common,terragrunt-plan-ses_receiving_emails] | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-ses_validation_dns_entries: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# env: | |
# COMPONENT: "ses_validation_dns_entries" | |
# needs: [terragrunt-plan-common,terragrunt-plan-dns] | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-cloudfront: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common] | |
# env: | |
# COMPONENT: "cloudfront" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-eks: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-dns,terragrunt-plan-cloudfront] | |
# env: | |
# COMPONENT: "eks" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-elasticache: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-eks] | |
# env: | |
# COMPONENT: "elasticache" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-rds: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-eks] | |
# env: | |
# COMPONENT: "rds" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-lambda-api: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-eks,terragrunt-plan-ecr,terragrunt-plan-rds] | |
# env: | |
# COMPONENT: "lambda-api" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-lambda-admin-pr: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-elasticache,terragrunt-plan-ecr] | |
# env: | |
# COMPONENT: "lambda-admin-pr" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-performance-test: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-eks,terragrunt-plan-ecr] | |
# env: | |
# COMPONENT: "performance-test" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-heartbeat: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-ecr] | |
# env: | |
# COMPONENT: "heartbeat" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-database-tools: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-eks,terragrunt-plan-rds] | |
# env: | |
# COMPONENT: "database-tools" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-quicksight: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-eks,terragrunt-plan-rds] | |
# env: | |
# COMPONENT: "quicksight" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-lambda-google-cidr: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-eks,terragrunt-plan-ecr] | |
# env: | |
# COMPONENT: "lambda-google-cidr" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-ses_to_sqs_email_callbacks: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-ecr] | |
# env: | |
# COMPONENT: "ses_to_sqs_email_callbacks" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-sns_to_sqs_sms_callbacks: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-ecr] | |
# env: | |
# COMPONENT: "sns_to_sqs_sms_callbacks" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-pinpoint_to_sqs_sms_callbacks: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-ecr] | |
# env: | |
# COMPONENT: "pinpoint_to_sqs_sms_callbacks" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-system_status: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# runs-on: ubuntu-latest | |
# needs: [terragrunt-plan-common,terragrunt-plan-ecr,terragrunt-plan-rds,terragrunt-plan-eks] | |
# env: | |
# COMPONENT: "system_status" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-system_status_static_site: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# needs: [terragrunt-plan-common,terragrunt-plan-system_status] | |
# runs-on: ubuntu-latest | |
# env: | |
# COMPONENT: "system_status_static_site" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade | |
# terragrunt-plan-newrelic: | |
# if: | | |
# always() && | |
# !contains(needs.*.result, 'failure') && | |
# !contains(needs.*.result, 'cancelled') | |
# needs: [terragrunt-plan-common] | |
# runs-on: ubuntu-latest | |
# env: | |
# COMPONENT: "newrelic" | |
# steps: | |
# - name: Checkout | |
# uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 | |
# - uses: ./.github/actions/setup-terraform | |
# with: | |
# role_to_assume: arn:aws:iam::${{env.ACCOUNT_ID}}:role/notification-terraform-apply | |
# role_session_name: NotifyTerraformApply | |
# - name: Install 1Pass CLI and Download TFVars | |
# run: | | |
# curl -o 1pass.deb https://downloads.1password.com/linux/debian/amd64/stable/1password-cli-amd64-latest.deb | |
# sudo dpkg -i 1pass.deb | |
# sudo mkdir -p aws && cd aws | |
# op read op://4eyyuwddp6w4vxlabrr2i2duxm/"TFVars - ${{env.ENVIRONMENT}}"/notesPlain > ${{env.ENVIRONMENT}}.tfvars | |
# - name: Terragrunt plan ${{env.COMPONENT}} | |
# uses: cds-snc/terraform-plan@7f4ce4a4bdffaba639d32a45272804e37a569408 # v3.0.6 | |
# with: | |
# directory: "env/${{env.ENVIRONMENT}}/${{env.COMPONENT}}" | |
# comment-delete: "true" | |
# comment-title: "${{env.ENVIRONMENT}}: ${{env.COMPONENT}}" | |
# github-token: "${{ secrets.GITHUB_TOKEN }}" | |
# terragrunt: "true" | |
# terraform-init: | | |
# -upgrade |