Skip to content

Commit

Permalink
feat: key rotation added
Browse files Browse the repository at this point in the history
  • Loading branch information
anmolnagpal committed Sep 1, 2023
1 parent 19af91f commit 0217611
Show file tree
Hide file tree
Showing 15 changed files with 186 additions and 189 deletions.
44 changes: 43 additions & 1 deletion .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,17 @@

version: 2
updates:

- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
open-pull-requests-limit: 3
assignees:
- "clouddrove-ci"
reviewers:
- "approvers"

- package-ecosystem: "terraform" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
Expand All @@ -15,8 +26,37 @@ updates:
# Add reviewer
reviewers:
- "approvers"
# Allow up to 3 open pull requests for pip dependencies
open-pull-requests-limit: 3

- package-ecosystem: "terraform" # See documentation for possible values
directory: "/_example/complete" # Location of package manifests
schedule:
interval: "weekly"
# Add assignees
assignees:
- "clouddrove-ci"
# Add reviewer
reviewers:
- "approvers"
# Allow up to 3 open pull requests for pip dependencies
open-pull-requests-limit: 3

- package-ecosystem: "terraform" # See documentation for possible values
directory: "/_example/key-value" # Location of package manifests
schedule:
interval: "weekly"
# Add assignees
assignees:
- "clouddrove-ci"
# Add reviewer
reviewers:
- "approvers"
# Allow up to 3 open pull requests for pip dependencies
open-pull-requests-limit: 3

- package-ecosystem: "terraform" # See documentation for possible values
directory: "_example/" # Location of package manifests
directory: "/_example/binary" # Location of package manifests
schedule:
interval: "weekly"
# Add assignees
Expand All @@ -25,3 +65,5 @@ updates:
# Add reviewer
reviewers:
- "approvers"
# Allow up to 3 open pull requests for pip dependencies
open-pull-requests-limit: 3
14 changes: 14 additions & 0 deletions .github/workflows/auto_assignee.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
name: Auto Assign PRs

on:
pull_request:
types: [opened, reopened]

workflow_dispatch:
jobs:
assignee:
uses: clouddrove/github-shared-workflows/.github/workflows/auto_assignee.yml@master
secrets:
GITHUB: ${{ secrets.GITHUB }}
with:
assignees: 'clouddrove-ci'
15 changes: 7 additions & 8 deletions .github/workflows/readme.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,28 +10,27 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: 'Checkout'
uses: actions/checkout@v2.3.4
uses: actions/checkout@master

- name: "Set up Python 3.7"
uses: actions/setup-python@v2
- name: 'Set up Python 3.7'
uses: actions/setup-python@v4
with:
python-version: '3.x'

- name: 'create readme'
uses: 'clouddrove/github-actions@v9.0.2'
with:
actions_subcommand: 'readme'
github_token: '${{ secrets.GITHUB}}'
github_token: '${{ secrets.GITHUB }}'
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}


- name: 'pre-commit check errors'
uses: pre-commit/action@v2.0.0
uses: pre-commit/action@v3.0.0
continue-on-error: true

- name: 'pre-commit fix erros'
uses: pre-commit/action@v2.0.0
uses: pre-commit/action@v3.0.0
continue-on-error: true

- name: 'push readme'
Expand All @@ -51,4 +50,4 @@ jobs:
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # required
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_TERRAFORM }} # required
if: always()
if: always()
84 changes: 0 additions & 84 deletions .github/workflows/terraform.yml

This file was deleted.

62 changes: 0 additions & 62 deletions .github/workflows/terratest.yml

This file was deleted.

15 changes: 15 additions & 0 deletions .github/workflows/tf-checks.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
name: tf-checks
on:
push:
branches: [ master ]
pull_request:
workflow_dispatch:
jobs:
basic:
uses: clouddrove/github-shared-workflows/.github/workflows/tf-checks.yml@master
with:
working_directory: './_example/basic/'
complete:
uses: clouddrove/github-shared-workflows/.github/workflows/tf-checks.yml@master
with:
working_directory: './_example/complete/'
11 changes: 11 additions & 0 deletions .github/workflows/tflint.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
name: tf-lint
on:
push:
branches: [ master ]
pull_request:
workflow_dispatch:
jobs:
tflint:
uses: clouddrove/test-tfsec/.github/workflows/tflint.yaml@master
secrets:
GITHUB: ${{ secrets.GITHUB }}
25 changes: 13 additions & 12 deletions README.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,18 +15,19 @@ github_repo: clouddrove/terraform-aws-secrets-manager

# Badges to display
badges:
- name: "Terraform"
image: "https://img.shields.io/badge/terraform-v1.1.7-green"
url: "https://www.terraform.io"
- name: "Licence"
image: "https://img.shields.io/badge/License-APACHE-blue.svg"
url: "LICENSE.md"
- name: "Latest Release"
image: "https://img.shields.io/github/release/clouddrove/terraform-aws-secrets-manager.svg"
url: "https://github.com/clouddrove/terraform-aws-secrets-manager/releases/latest"
- name: "tfsec"
image: "https://github.com/clouddrove/terraform-aws-secrets-manager/actions/workflows/tfsec.yml/badge.svg"
url: "https://github.com/clouddrove/terraform-aws-secrets-manager/actions/workflows/tfsec.yml"
- name: "static-checks"
image: "https://github.com/clouddrove/terraform-aws-secrets-manager/actions/workflows/terraform.yml/badge.svg"
url: "https://github.com/clouddrove/terraform-aws-secrets-manager/actions/workflows/terraform.yml"
- name: "Licence"
image: "https://img.shields.io/badge/License-APACHE-blue.svg"
url: "LICENSE.md"

prerequesties:
- name: Terraform 1.4.6
url: https://learn.hashicorp.com/terraform/getting-started/install.html

# description of this project
# yamllint disable rule:line-length
Expand All @@ -46,7 +47,7 @@ usage: |-
module "secrets_manager" {
source = "clouddrove/secrets_manager/aws"
version = "1.3.0"
version = "2.0.0"
name = "secrets-manager"
environment = "test"
label_order = ["name", "environment"]
Expand All @@ -72,7 +73,7 @@ usage: |-
module "secrets_manager" {
source = "clouddrove/secrets_manager/aws"
version = "1.3.0"
version = "2.0.0"
name = "secrets-manager"
environment = "test"
label_order = ["name", "environment"]
Expand Down Expand Up @@ -118,7 +119,7 @@ usage: |-
module "secrets_manager" {
source = "clouddrove/secrets_manager/aws"
version = "1.3.0"
version = "2.0.0"
name = "secrets-manager"
environment = "test"
label_order = ["name", "environment"]
Expand Down
4 changes: 2 additions & 2 deletions _examples/binary/versions.tf
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
# Terraform version
terraform {
required_version = ">= 1.3.6"
required_version = ">= 1.4.6"

required_providers {
aws = {
source = "hashicorp/aws"
version = ">= 4.48.0"
version = ">= 5.1.0"
}
}
}
9 changes: 5 additions & 4 deletions _examples/plaintext/main.tf → _examples/complete/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -3,21 +3,22 @@ provider "aws" {
}

module "secrets_manager" {
# source = "clouddrove/secrets_manager/aws"
# version = "2.0.0"
source = "../../"

source = "../../"
name = "secrets-manager"
environment = "test"
label_order = ["name", "environment"]

secrets = [
{
name = "secret-1"
name = "secret-11"
description = "My secret 1"
recovery_window_in_days = 7
secret_string = "This is an example"
},
{
name = "secret-2"
name = "secret-12"
description = "My secret 2"
recovery_window_in_days = 7
secret_string = "This is another example"
Expand Down
File renamed without changes.
Loading

0 comments on commit 0217611

Please sign in to comment.