fix: Provision for making force deletion of s3

* fix: Provision for making force deletion of s3.

* terraform-docs: automated action

* terraform-docs: automated action

* fix(ci): Allow semantic-release to analyze PR merge commits

The release preview workflow was failing because semantic-release
detected it was running on refs/pull/*/merge instead of the actual
branch, causing it to skip release analysis.

Changes:
- Unset GITHUB_EVENT_NAME to remove pull_request context
- Set GITHUB_EVENT_NAME=push to treat PR as push event
- Add PR merge ref to allowed branches list

This allows the preview to show what release version will be created.

* ci: check preview release.

---------

Co-authored-by: rahul-infra <[email protected]>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Author: 3 people

.github/workflows/release-preview.yaml

@@ -47,14 +47,16 @@ jobs:
           export GITHUB_REF_NAME="${{ github.event.pull_request.head.ref }}"
 
           # Run semantic-release with inline configuration using CLI options
+          # Add PR merge ref to allowed branches since GitHub Actions runs PRs on refs/pull/*/merge
           OUTPUT=$(npx --package semantic-release@${{ env.SEMANTIC_RELEASE_VERSION }} \
             --package @semantic-release/exec \
             --package conventional-changelog-conventionalcommits \
             semantic-release \
             --dry-run \
             --no-ci \
             --debug \
-            --branches ${{ github.event.pull_request.head.ref }} 2>&1 || true)
+            --branches '${{ github.event.pull_request.head.ref }}' \
+            --branches 'refs/pull/${{ github.event.pull_request.number }}/merge' 2>&1 || true)
           echo "$OUTPUT"
 
           # Extract version information

README.md

@@ -95,6 +95,7 @@ aws ssm put-parameter --name "/rds/POSTGRES_DB_NAME" --value "value" --type "Sec
 | <a name="input_rds_db_tags"></a> [rds\_db\_tags](#input\_rds\_db\_tags) | List of tags | `map(string)` | `{}` | no |
 | <a name="input_rds_instance_class"></a> [rds\_instance\_class](#input\_rds\_instance\_class) | The RDS instance class for Kong database (e.g., db.t3.micro, db.r5.large) | `string` | `"db.t3.micro"` | no |
 | <a name="input_route53_assume_role_arn"></a> [route53\_assume\_role\_arn](#input\_route53\_assume\_role\_arn) | ARN of the IAM role to assume in the hosted-zone account (should be null for same-account). | `string` | `null` | no |
+| <a name="input_s3_bucket_force_destroy"></a> [s3\_bucket\_force\_destroy](#input\_s3\_bucket\_force\_destroy) | Whether to force destroy the S3 bucket used for Kong logs | `bool` | `false` | no |
 | <a name="input_ssl_policy"></a> [ssl\_policy](#input\_ssl\_policy) | Name of the SSL Policy for the listener. | `string` | `"ELBSecurityPolicy-2016-08"` | no |
 | <a name="input_vpc_id"></a> [vpc\_id](#input\_vpc\_id) | The ID of the VPC where Kong infrastructure will be deployed | `string` | n/a | yes |
 

examples/complete/README.md

@@ -101,6 +101,7 @@ No resources.
 | <a name="input_rds_instance_class"></a> [rds\_instance\_class](#input\_rds\_instance\_class) | The instance class to use | `string` | n/a | yes |
 | <a name="input_region"></a> [region](#input\_region) | The AWS region | `string` | n/a | yes |
 | <a name="input_route53_assume_role_arn"></a> [route53\_assume\_role\_arn](#input\_route53\_assume\_role\_arn) | IAM role ARN for cross-account Route53 access. | `string` | n/a | yes |
+| <a name="input_s3_bucket_force_destroy"></a> [s3\_bucket\_force\_destroy](#input\_s3\_bucket\_force\_destroy) | Whether to force destroy the S3 bucket used for Kong logs | `bool` | n/a | yes |
 | <a name="input_ssl_policy"></a> [ssl\_policy](#input\_ssl\_policy) | (Optional) Name of the SSL Policy for the listener. | `string` | n/a | yes |
 | <a name="input_vpc_id"></a> [vpc\_id](#input\_vpc\_id) | The ID of the VPC | `string` | n/a | yes |
 

examples/complete/main.tf

@@ -49,4 +49,5 @@ module "kong" {
   postgres_engine_version        = var.postgres_engine_version
   postgres_major_engine_version  = var.postgres_major_engine_version
   route53_assume_role_arn        = var.route53_assume_role_arn
+  s3_bucket_force_destroy        = var.s3_bucket_force_destroy
 }

examples/complete/variables.tf

@@ -142,3 +142,7 @@ variable "region" {
   description = "The AWS region"
   type        = string
 }
+variable "s3_bucket_force_destroy" {
+  description = "Whether to force destroy the S3 bucket used for Kong logs"
+  type        = bool
+}

examples/cross-account/README.md

@@ -49,6 +49,7 @@ No resources.
 | <a name="input_public_subnet_ids"></a> [public\_subnet\_ids](#input\_public\_subnet\_ids) | List of public subnet IDs | `list(string)` | n/a | yes |
 | <a name="input_region"></a> [region](#input\_region) | The AWS region | `string` | n/a | yes |
 | <a name="input_route53_assume_role_arn"></a> [route53\_assume\_role\_arn](#input\_route53\_assume\_role\_arn) | The ARN of the DNS role | `string` | `null` | no |
+| <a name="input_s3_bucket_force_destroy"></a> [s3\_bucket\_force\_destroy](#input\_s3\_bucket\_force\_destroy) | Whether to force destroy the S3 bucket used for Kong logs | `bool` | `false` | no |
 | <a name="input_vpc_id"></a> [vpc\_id](#input\_vpc\_id) | The ID of the VPC | `string` | n/a | yes |
 
 ## Outputs

examples/cross-account/main.tf

@@ -28,4 +28,5 @@ module "kong" {
   postgres_engine_version       = var.postgres_engine_version
   postgres_major_engine_version = var.postgres_major_engine_version
   route53_assume_role_arn       = var.route53_assume_role_arn
+  s3_bucket_force_destroy       = var.s3_bucket_force_destroy
 }

examples/cross-account/variables.tf

@@ -48,3 +48,9 @@ variable "region" {
   description = "The AWS region"
   type        = string
 }
+
+variable "s3_bucket_force_destroy" {
+  description = "Whether to force destroy the S3 bucket used for Kong logs"
+  type        = bool
+  default     = false
+}

examples/same-account/README.md

@@ -48,6 +48,7 @@ No resources.
 | <a name="input_public_subnet_ids"></a> [public\_subnet\_ids](#input\_public\_subnet\_ids) | List of public subnet IDs | `list(string)` | n/a | yes |
 | <a name="input_region"></a> [region](#input\_region) | The AWS region | `string` | n/a | yes |
 | <a name="input_route53_assume_role_arn"></a> [route53\_assume\_role\_arn](#input\_route53\_assume\_role\_arn) | The ARN of the DNS role | `string` | `null` | no |
+| <a name="input_s3_bucket_force_destroy"></a> [s3\_bucket\_force\_destroy](#input\_s3\_bucket\_force\_destroy) | Whether to force destroy the S3 bucket used for Kong logs | `bool` | n/a | yes |
 | <a name="input_vpc_id"></a> [vpc\_id](#input\_vpc\_id) | The ID of the VPC | `string` | n/a | yes |
 
 ## Outputs

examples/same-account/main.tf

@@ -20,4 +20,5 @@ module "kong" {
   postgres_engine_version       = var.postgres_engine_version
   postgres_major_engine_version = var.postgres_major_engine_version
   route53_assume_role_arn       = var.route53_assume_role_arn
+  s3_bucket_force_destroy       = var.s3_bucket_force_destroy
 }