search

defenseunicorns / delivery-aws-iac

Apache License 2.0
16 stars 5 forks source link

Centralized repo for Delivery github actions is needed #338

Closed zack-is-cool closed 11 months ago

zack-is-cool commented 1 year ago

Persona

Delivery IaC Unicorn

Description

We need centralized pipeline/workflow/actions for all of our different terraform module testing and release process

Right now we don't have any proper testing for any of our terraform-aws-uds-* repos, they are just tested in this monorepo.

zack-is-cool commented 1 year ago

this pattern has been implemented in the EKS repo https://github.com/defenseunicorns/terraform-aws-uds-eks

slash command in PR -> local trigger of workflow dispatch -> remote workflow -> remote composite action

this pattern keeps most of the meat centralized but the runners/cache/logs in each repo where the code is being developed

this also means that secrets are spread. We can either use org level secrets or some kind of tool to manage repo/secret sprawl per repo.

additionally we could use terraform to provide configuration for each repo + secrets + ownership groups https://registry.terraform.io/providers/integrations/github/latest/docs

zack-is-cool commented 1 year ago

using a githubapp narwhal-bot, this pattern is currently configured in https://github.com/defenseunicorns/terraform-aws-uds-eks https://github.com/defenseunicorns/terraform-aws-uds-vpc