Archive arigato usagi

.github/workflows/lint.yml

@@ -1,5 +1,5 @@
 name: Lint
-on: [push, pull_request]
+on: [pull_request]
 jobs:
   tflint:
     runs-on: ubuntu-latest

.github/workflows/terraform_cloud.yml

@@ -0,0 +1,98 @@
+name: terraform-cloud
+on: 
+  push:
+    branches: main
+  pull_request:
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: hashicorp/setup-terraform@v2
+        with:
+          cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
+          terraform_wrapper: false
+      - name: Terraform init
+        id: init
+        run: terraform init
+
+      - name: Terraform Validate
+        id: validate
+        run: terraform validate -no-color
+
+      - name: Terraform plan
+        id: plan
+        env:
+          GITHUB_APP_ID: ${{ secrets.TF_GITHUB_APP_ID }}
+          GITHUB_APP_INSTALLATION_ID: ${{ secrets.TF_GITHUB_APP_INSTALLATION_ID }}
+          GITHUB_APP_PEM_FILE: ${{ secrets.TF_GITHUB_APP_PEM_FILE }}
+        run: terraform plan -no-color
+        continue-on-error: true
+
+      - name: Terraform apply
+        id: apply
+        if: github.branch == 'main'
+        env:
+          GITHUB_APP_ID: ${{ secrets.TF_GITHUB_APP_ID }}
+          GITHUB_APP_INSTALLATION_ID: ${{ secrets.TF_GITHUB_APP_INSTALLATION_ID }}
+          GITHUB_APP_PEM_FILE: ${{ secrets.TF_GITHUB_APP_PEM_FILE }}
+        run: terraform apply -no-color -auto-approve
+
+      - name: Output results as a comment to PR
+        uses: actions/github-script@v6
+        if: github.event_name == 'pull_request'
+        env:
+          PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            // 1. Retrieve existing bot comments for the PR
+            const { data: comments } = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+            })
+            const botComment = comments.find(comment => {
+              return comment.user.type === 'Bot' && comment.body.includes('Terraform Format and Style')
+            })
+
+            // 2. Prepare format of the comment
+            const output = `#### Terraform Format and Style 🖌\`${{ steps.fmt.outcome }}\`
+            #### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
+            #### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
+            <details><summary>Validation Output</summary>
+
+            \`\`\`\n
+            ${{ steps.validate.outputs.stdout }}
+            \`\`\`
+
+            </details>
+
+            #### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
+
+            <details><summary>Show Plan</summary>
+
+            \`\`\`\n
+            ${process.env.PLAN}
+            \`\`\`
+
+            </details>
+
+            *Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`, Working Directory: \`${{ env.tf_actions_working_dir }}\`, Workflow: \`${{ github.workflow }}\`*`;
+
+            // 3. If we have a comment, update it, otherwise create a new one
+            if (botComment) {
+              github.rest.issues.updateComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: botComment.id,
+                body: output
+              })
+            } else {
+              github.rest.issues.createComment({
+                issue_number: context.issue.number,
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                body: output
+              })
+            }

github.tf

@@ -9,15 +9,21 @@ terraform {
   required_providers {
     github = {
       source  = "integrations/github"
-      version = "4.22.0"
+      version = ">= 4.22.0"
     }
   }
 }
 
 variable "token" {
+  default = null
 }
 
 provider "github" {
   owner = "makiton"
-  token = var.token # or `GITHUB_TOKEN`
+  token = ""
+  app_auth {
+    # id              = var.app_id              # or `GITHUB_APP_ID`
+    # installation_id = var.app_installation_id # or `GITHUB_APP_INSTALLATION_ID`
+    # pem_file        = var.app_pem_file        # or `GITHUB_APP_PEM_FILE`
+  }
 }

modules/repository/repository.tf

@@ -18,4 +18,6 @@ resource "github_repository" "repository" {
   gitignore_template = var.gitignore_template
 
   vulnerability_alerts = true
+
+  archived = var.archived
 }

modules/repository/variables.tf

@@ -30,3 +30,8 @@ variable "protected_branches" {
   type    = map(object({}))
   default = { main = {} }
 }
+
+variable "archived" {
+  type    = bool
+  default = false
+}

repositories.tf

@@ -36,6 +36,10 @@ locals {
     makiton = {
       description = "github profile page"
     }
+    "slack-arigato-usagi" = {
+      description = ""
+      archived    = true
+    }
   }
 }
 
@@ -57,4 +61,6 @@ module "repository" {
   protected_branches = lookup(each.value, "private", false) ? {} : { main = {} }
 
   status_checks = lookup(each.value, "status_checks", [])
+
+  archived = lookup(each.value, "archived", false)
 }