-
-
Notifications
You must be signed in to change notification settings - Fork 229
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[GH Issue 85] Support Audit Logging (#86)
Co-authored-by: Evan Volgas <evolgas@activecampaign.com>
- Loading branch information
1 parent
f43c13c
commit 0709447
Showing
20 changed files
with
421 additions
and
53 deletions.
There are no files selected for viewing
Validating CODEOWNERS rules …
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,52 @@ | ||
| pull_request_rules: | ||
| - name: "approve automated PRs that have passed checks" | ||
| conditions: | ||
| - "check-success~=test/bats" | ||
| - "check-success~=test/readme" | ||
| - "check-success~=test/terratest" | ||
| - "base=master" | ||
| - "author=cloudpossebot" | ||
| - "head~=auto-update/.*" | ||
| actions: | ||
| review: | ||
| type: "APPROVE" | ||
| bot_account: "cloudposse-mergebot" | ||
| message: "We've automatically approved this PR because the checks from the automated Pull Request have passed." | ||
|
|
||
| - name: "merge automated PRs when approved and tests pass" | ||
| conditions: | ||
| - "check-success~=test/bats" | ||
| - "check-success~=test/readme" | ||
| - "check-success~=test/terratest" | ||
| - "base=master" | ||
| - "head~=auto-update/.*" | ||
| - "#approved-reviews-by>=1" | ||
| - "#changes-requested-reviews-by=0" | ||
| - "#commented-reviews-by=0" | ||
| - "base=master" | ||
| - "author=cloudpossebot" | ||
| actions: | ||
| merge: | ||
| method: "squash" | ||
|
|
||
| - name: "delete the head branch after merge" | ||
| conditions: | ||
| - "merged" | ||
| actions: | ||
| delete_head_branch: {} | ||
|
|
||
| - name: "ask to resolve conflict" | ||
| conditions: | ||
| - "conflict" | ||
| actions: | ||
| comment: | ||
| message: "This pull request is now in conflict. Could you fix it @{{author}}? 🙏" | ||
|
|
||
| - name: "remove outdated reviews" | ||
| conditions: | ||
| - "base=master" | ||
| actions: | ||
| dismiss_reviews: | ||
| changes_requested: true | ||
| approved: true | ||
| message: "This Pull Request has been updated, so we're dismissing all reviews." |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,55 @@ | ||
| name: "auto-context" | ||
| on: | ||
| schedule: | ||
| # Update context.tf nightly | ||
| - cron: '0 3 * * *' | ||
|
|
||
| jobs: | ||
| update: | ||
| if: github.event_name == 'schedule' | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
|
|
||
| - name: Update context.tf | ||
| shell: bash | ||
| id: update | ||
| env: | ||
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | ||
| run: | | ||
| if [[ -f context.tf ]]; then | ||
| echo "Discovered existing context.tf! Fetching most recent version to see if there is an update." | ||
| curl -o context.tf -fsSL https://raw.githubusercontent.com/cloudposse/terraform-null-label/master/exports/context.tf | ||
| if git diff --no-patch --exit-code context.tf; then | ||
| echo "No changes detected! Exiting the job..." | ||
| else | ||
| echo "context.tf file has changed. Update examples and rebuild README.md." | ||
| make init | ||
| make github/init/context.tf | ||
| make readme/build | ||
| echo "::set-output name=create_pull_request=true" | ||
| fi | ||
| else | ||
| echo "This module has not yet been updated to support the context.tf pattern! Please update in order to support automatic updates." | ||
| fi | ||
| - name: Create Pull Request | ||
| if: steps.update.outputs.create_pull_request == 'true' | ||
| uses: cloudposse/actions/github/create-pull-request@0.22.0 | ||
| with: | ||
| token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }} | ||
| commit-message: Update context.tf from origin source | ||
| title: Update context.tf | ||
| body: |- | ||
| ## what | ||
| This is an auto-generated PR that updates the `context.tf` file to the latest version from `cloudposse/terraform-null-label` | ||
| ## why | ||
| To support all the features of the `context` interface. | ||
| branch: auto-update/context.tf | ||
| base: master | ||
| delete-branch: true | ||
| labels: | | ||
| auto-update | ||
| context |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,41 @@ | ||
| name: "auto-readme" | ||
| on: | ||
| schedule: | ||
| # Update README.md nightly | ||
| - cron: '0 4 * * *' | ||
|
|
||
| jobs: | ||
| update: | ||
| if: github.event_name == 'schedule' | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 | ||
|
|
||
| - name: Update readme | ||
| shell: bash | ||
| id: update | ||
| env: | ||
| GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | ||
| run: | | ||
| make init | ||
| make readme/build | ||
| - name: Create Pull Request | ||
| uses: cloudposse/actions/github/create-pull-request@0.20.0 | ||
| with: | ||
| token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }} | ||
| commit-message: Update README.md and docs | ||
| title: Update README.md and docs | ||
| body: |- | ||
| ## what | ||
| This is an auto-generated PR that updates the README.md and docs | ||
| ## why | ||
| To have most recent changes of README.md and doc from origin templates | ||
| branch: auto-update/readme | ||
| base: master | ||
| delete-branch: true | ||
| labels: | | ||
| auto-update | ||
| readme |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,25 @@ | ||
| name: Validate Codeowners | ||
| on: | ||
| pull_request: | ||
|
|
||
| jobs: | ||
| validate-codeowners: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: "Checkout source code at current commit" | ||
| uses: actions/checkout@v2 | ||
| - uses: mszostok/codeowners-validator@v0.5.0 | ||
| if: github.event.pull_request.head.repo.full_name == github.repository | ||
| name: "Full check of CODEOWNERS" | ||
| with: | ||
| # For now, remove "files" check to allow CODEOWNERS to specify non-existent | ||
| # files so we can use the same CODEOWNERS file for Terraform and non-Terraform repos | ||
| # checks: "files,syntax,owners,duppatterns" | ||
| checks: "syntax,owners,duppatterns" | ||
| # GitHub access token is required only if the `owners` check is enabled | ||
| github_access_token: "${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}" | ||
| - uses: mszostok/codeowners-validator@v0.5.0 | ||
| if: github.event.pull_request.head.repo.full_name != github.repository | ||
| name: "Syntax check of CODEOWNERS" | ||
| with: | ||
| checks: "syntax,duppatterns" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.