mirror of
https://github.com/Sea-Haven-Industries/shoc-frontend-new.git
synced 2026-10-07 16:19:01 +00:00
Give HCP the bucket and CloudFront with an empty origin path. GitHub owns bucket-root sync and invalidation so merge-to-main and a human staging tag can deploy without creating HCP runs. G13 fails PRs that mix terraform/ with deployable application files.
45 lines
2.3 KiB
HCL
45 lines
2.3 KiB
HCL
module "inventory" {
|
|
source = "./modules/environment-inventory"
|
|
|
|
aws_account_id = local.aws_account_id
|
|
aws_region = local.aws_region
|
|
hosted_zone_name = local.stack.domain_name
|
|
expected_hosted_zone_id = local.stack.hosted_zone_id
|
|
certificate_domain = "*.seahaven.com"
|
|
expected_certificate_arn = local.certificate_arn
|
|
expected_github_oidc_provider_arn = local.github_oidc_arn
|
|
expected_cache_policy_id = local.cache_policy_id
|
|
}
|
|
|
|
module "environment_owned" {
|
|
source = "./modules/environment-owned"
|
|
|
|
environment = var.environment
|
|
adoption_complete = local.stack.adoption_complete
|
|
aws_account_id = local.aws_account_id
|
|
aws_region = local.aws_region
|
|
github_repo = local.github_repo
|
|
bucket_name = local.stack.bucket_name
|
|
distribution_id = local.stack.distribution_id
|
|
origin_access_control_name = local.stack.oac_name
|
|
origin_access_control_description = ""
|
|
origin_id = local.stack.origin_id
|
|
function_name = local.stack.function_name
|
|
domain_name = local.stack.domain_name
|
|
hosted_zone_id = local.stack.hosted_zone_id
|
|
certificate_arn = local.certificate_arn
|
|
cache_policy_id = local.cache_policy_id
|
|
github_oidc_provider_arn = local.github_oidc_arn
|
|
deploy_role_name = local.stack.deploy_role_name
|
|
deploy_inline_policy_name = local.stack.inline_policy
|
|
deploy_permissions_boundary_arn = local.stack.permissions_boundary_arn
|
|
cloudformation_stack_name = local.stack.stack_name
|
|
bucket_auto_delete_helper_role_arn = local.stack.bucket_auto_delete_helper_role_arn
|
|
pre_adoption_tags = local.legacy_tags
|
|
pre_adoption_bucket_tags = merge(local.legacy_tags, {
|
|
"aws-cdk:auto-delete-objects" = "true"
|
|
})
|
|
ownership_tags = local.terraform_tags
|
|
pre_adoption_deploy_role_tags = merge(local.legacy_tags, local.manager_tag)
|
|
post_adoption_deploy_role_tags = merge(local.terraform_tags, local.manager_tag)
|
|
}
|