issue/8695

[mikereiddigital]

A reference to the issue / Description of it

#8695

How does this PR fix the problem?

This adds a check on the number of resources identified to be destroyed in the plan output. If greater or equal to the set threshold then a warning will be displayed along with a review request. This is achieved by the following:

1. A new environment variable in the reusable-plan-and-apply workflow - that sets this threshold. Initially set to 10.
2. A new bash script that greps the output of the "show" step in the above workflow, obtains from it the number of resources to be destroyed from the plan and outputs depending on the result.
3. Two new steps for the reusable-plan-and-apply workflow - the exec of the above bash script and a step that generates a review request should the destroy threshold be met or exceeded.

Example of the output:

How has this been tested?

Please describe the tests that you ran and provide instructions to reproduce.

Tested extensively - for example #9084.

Deployment Plan / Instructions

Will this deployment impact the platform and / or services on it?

{Please write here}

Checklist (check x in [ ] of list items)

• I have performed a self-review of my own code
• All checks have passed
• I have made corresponding changes to the documentation
• Plan and discussed how it should be deployed to PROD (If needed)

Additional comments (if any)

There is the potential to encapsulate this in a standalone reusable workflow.

[github-actions]

Terraform Plan Summary

single-sign-on
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

modernisation-platform-account
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

pagerduty
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-vpc-production
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-vpc-development
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-vpc-preproduction
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-vpc-test
No changes. Your infrastructure matches the configuration.

[github-actions]

Trivy Scan Success

Show Output

```hcl

---

Trivy will check the following folders:

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:

CTFLint Scan Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:

Trivy Scan Success

Show Output

*****************************

Trivy will check the following folders:

[github-actions]

Terraform Plan Summary

single-sign-on
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

modernisation-platform-account
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-security-production
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

pagerduty
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-logging-production
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

single-sign-on
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-network-services-production
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

modernisation-platform-account
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

pagerduty
No changes. Your infrastructure matches the configuration.

[github-actions]

Terraform Plan Summary

core-shared-services-production
Plan: 0 to add, 1 to change, 0 to destroy.