changing workflow tagging module

LBHackney-IT · Oct 23, 2023 · 325e3d2 · 325e3d2
1 parent 25cac42
commit 325e3d2
Show file tree

Hide file tree

Showing 7 changed files with 13 additions and 0 deletions.
diff --git a/.github/workflows/cd-terraform-core.yml b/.github/workflows/cd-terraform-core.yml
@@ -48,6 +48,7 @@ jobs:
       GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS_STG }}
       COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }}
       PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }}
+      TERRAFORM_SECRET_TOKEN: ${{ secrets.TERRAFORM_SECRET_TOKEN }}
   pre-production:
     needs: ["test", "validate"]
     uses: ./.github/workflows/deploy_terraform.yml
@@ -110,3 +111,4 @@ jobs:
       COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }}
       PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }}
       PRODUCTION_FIREWALL_IP: ${{ secrets.PRODUCTION_FIREWALL_IP }}
+
diff --git a/.github/workflows/cd-terraform-etl.yml b/.github/workflows/cd-terraform-etl.yml
@@ -48,6 +48,7 @@ jobs:
       GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS_STG }}
       COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }}
       PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }}
+      TERRAFORM_SECRET_TOKEN: ${{ secrets.TERRAFORM_SECRET_TOKEN }}
   pre-production:
     needs: ["test", "validate"]
     uses: ./.github/workflows/deploy_terraform.yml

diff --git a/.github/workflows/cd-terraform-networking.yml b/.github/workflows/cd-terraform-networking.yml
@@ -52,6 +52,7 @@ jobs:
       GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS_STG }}
       COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }}
       PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }}
+      TERRAFORM_SECRET_TOKEN: ${{ secrets.TERRAFORM_SECRET_TOKEN }}
   pre-production:
     needs: ["validate"]
     uses: ./.github/workflows/deploy_terraform_networking.yml

diff --git a/.github/workflows/ci-terraform-backend-setup.yml b/.github/workflows/ci-terraform-backend-setup.yml
@@ -42,3 +42,4 @@ jobs:
       GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS_STG }}
       COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }}
       PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }}
+      TERRAFORM_SECRET_TOKEN: ${{ secrets.TERRAFORM_SECRET_TOKEN }}
diff --git a/.github/workflows/ci-terraform-etl.yml b/.github/workflows/ci-terraform-etl.yml
@@ -102,3 +102,4 @@ jobs:
       GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS_STG }}
       COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }}
       PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }}
+      TERRAFORM_SECRET_TOKEN: ${{ secrets.TERRAFORM_SECRET_TOKEN }}
diff --git a/.github/workflows/lint-terraform.yml b/.github/workflows/lint-terraform.yml
@@ -60,6 +60,8 @@ on:
         required: true
       PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN:
         required: true
+      TERRAFORM_SECRET_TOKEN:
+        required: true
 
 jobs:
   lint:
@@ -69,6 +71,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v3
 
+      - name: Set Github Auth
+        run: git config --global url."https://oauth2:${{ secrets.TERRAFORM_SECRET_TOKEN}}@github.com".insteadOf https://github.com
+        shell: bash
+
       - name: Install Terraform
         uses: hashicorp/[email protected]
         with:

diff --git a/.github/workflows/plan-terraform.yml b/.github/workflows/plan-terraform.yml
@@ -129,6 +129,7 @@ jobs:
           copy_liberator_to_pre_prod_lambda_execution_role: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }}
           pre_production_liberator_data_storage_kms_key_arn: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }}
           production_firewall_ip: ${{ secrets.PRODUCTION_FIREWALL_IP }}
+
       - name: Terraform Compliance
         if: ${{ (success()) && (inputs.build_path  != './terraform/etl') }}
         id: terraform-compliance