mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-10-01 23:13:22 +00:00
24f08d3cb1
* feat(terraform): add safe backend environment adoption Introduce import-guarded environment roots and retire temporary bootstrap and POC provisioning after ownership transfer. * ci(deploy): pause dev and staging deployments Prevent application releases from racing Terraform adoption while retaining production deployment and validation. * ci(deploy): require manual environment dispatch * fix: update `required_version` from `>=1.7.0` to `>=1.9.0` The deploy-boundary check interpolates `var.aws_account_id` and `var.environment`. Terraform only allows other variables inside `validation` from 1.9.0+. CI already runs against `1.9.8` so `versions.tf` setting version as `>=1.7.0` is a breaking finding * chore(deps): add `terraform` to renovate dependency coverage * ci(deploy): drop unprovisioned prod dispatch path
54 lines
1.3 KiB
HCL
54 lines
1.3 KiB
HCL
import {
|
|
to = module.environment.aws_elastic_beanstalk_environment.this
|
|
id = "e-hehnrqjjrt"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_role.runtime
|
|
id = "shoc-backend-dev"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_instance_profile.runtime
|
|
id = "shoc-backend-dev"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_role_policy_attachment.web_tier
|
|
id = "shoc-backend-dev/arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_role_policy.runtime_app_config
|
|
id = "shoc-backend-dev:shoc-dev-secrets-read"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_role_policy.runtime_webhook[0]
|
|
id = "shoc-backend-dev:shoc-procurement-webhook-hmac-read"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_role_policy.runtime_dynamo[0]
|
|
id = "shoc-backend-dev:shoc-assume-dynamo-reader"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_role.github_deploy
|
|
id = "githubdeploy-shoc-backend-dev"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_iam_role_policy.github_deploy
|
|
id = "githubdeploy-shoc-backend-dev:GithubDeployRoleDefaultPolicyE8F540D1"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_secretsmanager_secret.app_config
|
|
id = "arn:aws:secretsmanager:us-east-1:396287094661:secret:shoc/dev/app-config-jLRBiw"
|
|
}
|
|
|
|
import {
|
|
to = module.environment.aws_route53_record.api_alias[0]
|
|
id = "Z07671212N75U4YLPWZR8_api.dev.seahaven.com_A"
|
|
}
|