Initial commit

.github/workflows/check-pr-ap-dev-cluster.yml

@@ -0,0 +1,27 @@
+---
+name: "Check PR - Terraform Module"
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - "./**"
+
+# These permissions are required to use AWS OIDC federate roles
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  terraform:
+    name: "Terraform"
+    uses: ministryofjustice/ap-shared-github-actions/.github/workflows/check-pr-workflow.yml@main
+    with:
+      github_action_access_role: arn:aws:iam::042130406152:role/GlobalGitHubActionAccess
+      working_directory: .
+      aws_region : "eu-west-1"
+      terraform_version: 1.2.2
+      terraform_backend_role: arn:aws:iam::042130406152:role/GlobalGitHubActionAdmin
+      terraform_provider_role_name: "GlobalGitHubActionAdmin"

.github/workflows/commitlint.yaml

@@ -0,0 +1,8 @@
+name: Run commitlint on PR
+
+on:
+  pull_request:
+
+jobs:
+  run-commitlint-on-pr:
+    uses: ministryofjustice/ap-shared-github-actions/.github/workflows/commitlint.yaml@main

.github/workflows/release.yaml

@@ -0,0 +1,12 @@
+name: Run semantic-release
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    uses: ministryofjustice/ap-shared-github-actions/.github/workflows/release.yaml@main
+    secrets: inherit

.gitignore

@@ -0,0 +1,29 @@
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+
+# Ignore any .tfvars files that are generated automatically for each Terraform run. Most
+# .tfvars files are managed as part of configuration and so should be included in
+# version control.
+#
+# example.tfvars
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+#
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*

.releaserc

@@ -0,0 +1,8 @@
+branch: main
+branches: ["main"]
+plugins:
+  [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/github",
+  ]

.terraform-docs.yml

@@ -0,0 +1,9 @@
+formatter: "markdown"
+
+output:
+  file: "README.md"
+  mode: inject
+  template: |-
+    <!-- BEGIN_TF_DOCS -->
+    {{ .Content }}
+    <!-- END_TF_DOCS -->

.tflint.hcl

@@ -0,0 +1,22 @@
+config {
+  disabled_by_default = false
+}
+
+rule "terraform_comment_syntax" { enabled = true }
+rule "terraform_deprecated_index" { enabled = true }
+rule "terraform_documented_outputs" { enabled = true }
+rule "terraform_documented_variables" { enabled = true }
+rule "terraform_naming_convention" { enabled = true }
+rule "terraform_required_providers" { enabled = true }
+rule "terraform_required_version" { enabled = true }
+rule "terraform_standard_module_structure" { enabled = true }
+rule "terraform_typed_variables" { enabled = true }
+rule "terraform_unused_declarations" { enabled = true }
+rule "terraform_unused_required_providers" { enabled = true }
+
+plugin "aws" {
+    enabled = true
+    version = "0.13.4"
+    source  = "github.com/terraform-linters/tflint-ruleset-aws"
+}
+

README.md

@@ -0,0 +1,28 @@
+<!-- BEGIN_TF_DOCS -->
+## Requirements
+
+| Name | Version |
+|------|---------|
+| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
+| <a name="requirement_aws"></a> [aws](#requirement\_aws) | ~> 3.71.0 |
+
+## Providers
+
+No providers.
+
+## Modules
+
+No modules.
+
+## Resources
+
+No resources.
+
+## Inputs
+
+No inputs.
+
+## Outputs
+
+No outputs.
+<!-- END_TF_DOCS -->

outputs.tf

@@ -0,0 +1,4 @@
+# output "example_output" {
+#   description = "example output"
+#   value       = 
+# }

test/README.md

@@ -0,0 +1,8 @@
+# Test
+
+Configuration here SHOULD allow a user to successfully perform:
+
+- `terrafrom init`
+- `terraform validate`
+
+It COULD form a complete example and allow a user to successfully perform `terraform apply` although this is not neccessary.

test/main.tf

@@ -0,0 +1,3 @@
+module "example" {
+    source = "./.."
+}

test/outputs.tf

@@ -0,0 +1,4 @@
+# output "example_output" {
+#   description = "example output"
+#   value       = 
+# }

test/variables.tf

@@ -0,0 +1,4 @@
+# variable "example" {
+#   description = "This is an example variable"
+#   type        = string
+# }

test/versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.71.0"
+    }
+  }
+
+  required_version = ">= 0.14.0"
+}

variables.tf

@@ -0,0 +1,4 @@
+# variable "example" {
+#   description = "This is an example variable"
+#   type        = string
+# }

versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 3.71.0"
+    }
+  }
+
+  required_version = ">= 0.14.0"
+}