shoc-frontend-new/terraform/main.tf
Adam Moussa 2a106d4e9e
ci(cd): convert SPA hosting to handbook HCP and GitHub content CD
Give HCP the bucket and CloudFront with an empty origin path. GitHub owns
bucket-root sync and invalidation so merge-to-main and a human staging tag
can deploy without creating HCP runs. G13 fails PRs that mix terraform/
with deployable application files.
2026-09-17 15:55:25 -04:00

45 lines
2.3 KiB
HCL

module "inventory" {
source = "./modules/environment-inventory"
aws_account_id = local.aws_account_id
aws_region = local.aws_region
hosted_zone_name = local.stack.domain_name
expected_hosted_zone_id = local.stack.hosted_zone_id
certificate_domain = "*.seahaven.com"
expected_certificate_arn = local.certificate_arn
expected_github_oidc_provider_arn = local.github_oidc_arn
expected_cache_policy_id = local.cache_policy_id
}
module "environment_owned" {
source = "./modules/environment-owned"
environment = var.environment
adoption_complete = local.stack.adoption_complete
aws_account_id = local.aws_account_id
aws_region = local.aws_region
github_repo = local.github_repo
bucket_name = local.stack.bucket_name
distribution_id = local.stack.distribution_id
origin_access_control_name = local.stack.oac_name
origin_access_control_description = ""
origin_id = local.stack.origin_id
function_name = local.stack.function_name
domain_name = local.stack.domain_name
hosted_zone_id = local.stack.hosted_zone_id
certificate_arn = local.certificate_arn
cache_policy_id = local.cache_policy_id
github_oidc_provider_arn = local.github_oidc_arn
deploy_role_name = local.stack.deploy_role_name
deploy_inline_policy_name = local.stack.inline_policy
deploy_permissions_boundary_arn = local.stack.permissions_boundary_arn
cloudformation_stack_name = local.stack.stack_name
bucket_auto_delete_helper_role_arn = local.stack.bucket_auto_delete_helper_role_arn
pre_adoption_tags = local.legacy_tags
pre_adoption_bucket_tags = merge(local.legacy_tags, {
"aws-cdk:auto-delete-objects" = "true"
})
ownership_tags = local.terraform_tags
pre_adoption_deploy_role_tags = merge(local.legacy_tags, local.manager_tag)
post_adoption_deploy_role_tags = merge(local.terraform_tags, local.manager_tag)
}