add authorization

Author: barroco

.github/workflows/dss-deploy.yml

@@ -42,6 +42,7 @@ jobs:
           COMPOSE_PROFILES: aws-1
           AWS_REGION: us-east-1
           TF_VAR_app_hostname: ${{ secrets.APP_HOSTNAME }}
+          TF_VAR_authorization: ${{ secrets.AUTHORIZATION }}
           TF_VAR_aws_iam_administrator_role: ${{ secrets.AWS_IAM_ADMINISTRATOR_ROLE }}
           TF_VAR_aws_iam_ci_role: ${{ secrets.AWS_IAM_CI_ROLE }}
           TF_VAR_aws_iam_permissions_boundary: ${{ secrets.AWS_IAM_PERMISSIONS_BOUNDARY }}

deploy/operations/ci/aws-1/test.sh

@@ -40,6 +40,9 @@ helm dep update --kube-context="$KUBE_CONTEXT"
 helm upgrade --install --debug --kube-context="$KUBE_CONTEXT" -f "${WORKSPACE_LOCATION}/helm_values.yml" "$RELEASE_NAME" .
 kubectl wait --for=condition=complete --timeout=3m job --all
 
+# Write infrastructure information
+
+
 # Test the deployment of the DSS
 kubectl apply -f "$BASEDIR/test-resources.yaml"
 kubectl create secret generic -n tests dummy-oauth-certs --from-file="$BASEDIR/../../../../build/test-certs/auth2.key"

deploy/operations/docker-compose.yaml

@@ -11,12 +11,14 @@ services:
       - AWS_SESSION_TOKEN
       - AWS_REGION
       - TF_VAR_app_hostname
+      - TF_VAR_authorization
       - TF_VAR_aws_iam_administrator_role
       - TF_VAR_aws_iam_ci_role
       - TF_VAR_aws_iam_permissions_boundary
       - TF_VAR_aws_role_to_assume
       - TF_VAR_aws_route53_zone_id
       - TF_VAR_db_hostname_suffix
+      - DO_NOT_DESTROY=true
     volumes:
       - type: bind
         source: ../../