Inicio Explorar Axuda
Rexistro Iniciar sesión
AFS
/
xdr-terraform-modules
2
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: 6b04d75ef0
Ramas Etiquetas
xdr-terraform-m...
/
base
/
codebuild_ecr_project
Jeremy Cooper [AFS MBP] 67c98b7677 Updates IMDS & ECR encryption syntax | tfsec/chekov ignores | %!s(int64=3) %!d(string=hai) anos
..
README.md 1a04527d29 Adds GHE Key to Secrets Manager; Schedules App Builds; Adds GHE Secret to Codebuild Projects %!s(int64=3) %!d(string=hai) anos
accounts.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos
constants.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos
default-lifecycle-policy.json a15a8adf5b Adds lifecycle policy for ECR images %!s(int64=4) %!d(string=hai) anos
ghe-key.tf baa1f43824 Applied `terraform fmt` to all modules %!s(int64=3) %!d(string=hai) anos
globals.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos
main.tf 67c98b7677 Updates IMDS & ECR encryption syntax | tfsec/chekov ignores | %!s(int64=3) %!d(string=hai) anos
outputs.tf baa1f43824 Applied `terraform fmt` to all modules %!s(int64=3) %!d(string=hai) anos
vars.tf 7a08ba10cf Migrated most variables out of xdr-terraform-live and into xdr-terraform-modules %!s(int64=3) %!d(string=hai) anos

README.md

How to Use this Module

This module is where the CodeBuild projects are created. It uses the Terraform GitHub Provider and requires a Personal Access Token. This should be your Personal Access Token not mdr-aws-codebuild's token. The provider will look in the environmental variables for the token.

export GITHUB_TOKEN=<gihub_token>

This module should NOT create the github repo. That is a manual process. I am not comfortable with terraform adding/removing github repos. The github repo should have the same name as the name variable in the terrafgrunt.hcl file. The user associated with the Personal Access Token needs to have admin permissions on the github repo.

Github Service Account ( mdr-aws-codebuild )

AWS CodeBuild needs a Github Personal Access Token to pull code after the code in a repository has been updated. This is the mdr-aws-codebuild account. The secret github token is stored in the C2 account and automatically added.

Despite the Web Interface, there can be only one GHE token per account and region.

The mdr-aws-codebuild user must have read access to the repositories you wish to build from.