Merge branch 'main' into mes/pretty

Author: buenos-nachos

.env.example

@@ -0,0 +1,23 @@
+# ---
+# These are used for the site health script, run from GitHub Actions. They can
+# be set manually if you need to run the script locally.
+
+# Coder admins for Instatus can get this value from https://dashboard.instatus.com/developer
+export INSTATUS_API_KEY=
+
+# Can be obtained from calling the Instatus API with a valid token. This value
+# might not actually need to be private, but better safe than sorry
+# https://instatus.com/help/api/status-pages
+export INSTATUS_PAGE_ID=
+
+# Can be obtained from calling the Instatus API with a valid token. This value
+# might not actually need to be private, but better safe than sorry
+# https://instatus.com/help/api/components
+export INSTATUS_COMPONENT_ID=
+
+# Can be grabbed from https://vercel.com/codercom/registry/stores/integration/upstash/store_1YDPuBF4Jd0aNpuV/guides
+# Please make sure that the token you use is KV_REST_API_TOKEN; the script needs
+# to be able to queries and mutations
+export VERCEL_API_KEY=
+
+# ---

.github/scripts/check_registry_site_health.sh

@@ -0,0 +1,23 @@
+# Check modules health on registry.coder.com
+name: check-registry-site-health
+on:
+  schedule:
+    - cron: "0,15,30,45 * * * *" # Runs every 15 minutes
+  workflow_dispatch: # Allows manual triggering of the workflow if needed
+
+jobs:
+  run-script:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run check.sh
+        run: |
+          ./.github/scripts/check_registry_site_health.sh
+        env:
+          INSTATUS_API_KEY: ${{ secrets.INSTATUS_API_KEY }}
+          INSTATUS_PAGE_ID: ${{ secrets.INSTATUS_PAGE_ID }}
+          INSTATUS_COMPONENT_ID: ${{ secrets.INSTATUS_COMPONENT_ID }}
+          VERCEL_API_KEY: ${{ secrets.VERCEL_API_KEY }}

.github/workflows/check_registry_site_health.yaml

@@ -26,8 +26,10 @@ jobs:
           bun-version: latest
       - name: Install dependencies
         run: bun install
-      - name: Run tests
+      - name: Run TypeScript tests
         run: bun test
+      - name: Run Terraform Validate
+        run: bun terraform-validate
   validate-style:
     name: Check for typos and unformatted code
     runs-on: ubuntu-latest

.github/workflows/ci.yaml

@@ -1,3 +1,3 @@
-# hub
+# Coder Registry
 
 Publish Coder modules and templates for other developers to use.

README.md

@@ -1,9 +1,10 @@
 {
   "name": "modules",
   "scripts": {
-    "test": "bun test",
     "fmt": "bun x prettier --write **/*.sh **/*.ts **/*.md *.md && terraform fmt -recursive -diff",
     "fmt:ci": "bun x prettier --check **/*.sh **/*.ts **/*.md *.md && terraform fmt -check -recursive -diff",
+    "terraform-validate": "./scripts/terraform_validate.sh",
+    "test": "bun test",
     "update-version": "./update-version.sh"
   },
   "devDependencies": {

package.json

@@ -0,0 +1,37 @@
+#!/bin/bash
+
+set -euo pipefail
+
+validate_terraform_directory() {
+    local dir="$1"
+    echo "Running \`terraform validate\` in $dir"
+    pushd "$dir"
+    terraform init -upgrade
+    terraform validate
+    popd
+}
+
+main() {
+    # Get the directory of the script
+    local script_dir=$(dirname "$(readlink -f "$0")")
+
+    # Code assumes that registry directory will always be in same position
+    # relative to the main script directory
+    local registry_dir="$script_dir/../registry"
+
+    # Get all subdirectories in the registry directory. Code assumes that
+    # Terraform directories won't begin to appear until three levels deep into
+    # the registry (e.g., registry/coder/modules/coder-login, which will then
+    # have a main.tf file inside it)
+    local subdirs=$(find "$registry_dir" -mindepth 3 -type d | sort)
+
+    for dir in $subdirs; do
+        # Skip over any directories that obviously don't have the necessary
+        # files
+        if test -f "$dir/main.tf"; then
+            validate_terraform_directory "$dir"
+        fi
+    done
+}
+
+main