Merge pull request #14 from recognizegroup/develop

Initial release

Author: DutchKel

.github/actions/brew_and_gittoken/action.yaml

@@ -0,0 +1,41 @@
+name: Setup dependencies
+description: Setup dependencies required to run pipeline
+inputs:
+  git_token:
+    required: true
+    description: "Team orange git token"
+  
+runs:
+  using: "composite"
+  steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+    - name: Git token to git url
+      run: git config --global url."https://oauth2:${{ inputs.git_token }}@github.com/recognizegroup".insteadOf https://github.com/recognizegroup
+      shell: bash
+    - run: echo "/home/linuxbrew/.linuxbrew/bin:/home/linuxbrew/.linuxbrew/sbin" >> $GITHUB_PATH
+      shell: bash
+
+    - name: Setup
+      run: |
+        wget https://github.com/gruntwork-io/terragrunt/releases/download/v0.84.1/terragrunt_linux_amd64
+        mv terragrunt_linux_amd64 terragrunt
+        chmod +x terragrunt
+        mv terragrunt /usr/local/bin
+      shell: bash
+
+    - name: Setup
+      run: |
+        mkdir -p tmp
+        cd tmp
+        wget https://releases.hashicorp.com/terraform/1.12.2/terraform_1.12.2_linux_amd64.zip
+        unzip -o terraform_1.12.2_linux_amd64.zip
+        chmod +x terraform
+        mv terraform /usr/local/bin
+      shell: bash
+    - name: Versions
+      run: |
+        terragrunt -v
+        terraform --version
+      shell: bash
+   

.github/actions/terragrunt_apply/action.yaml

@@ -0,0 +1,36 @@
+name: Terragrunt Apply
+description: Runs Terragrunt apply and reports failure if occurs 
+inputs:
+  webhook:
+    required: true
+    description: "teams webhook"
+  terragrunt_download_directory:
+    required: true
+    description: "Terragrunt download directory"
+  working_directory:
+    required: false
+    default: .
+    description: "Location where to execute terragrunt apply command"
+
+runs:
+  using: composite
+  steps:
+    - name: Create Terraform Download Directory
+      run: |
+        rm -r ${{ inputs.terragrunt_download_directory }}/* --force
+        mkdir --parents ${{ inputs.terragrunt_download_directory }}
+      working-directory: ${{ inputs.working_directory }}
+      shell: bash
+    - name: Terragrunt Apply
+      run: |
+        terragrunt run-all apply --non-interactive --terragrunt-parallelism 5
+      working-directory: ${{ inputs.working_directory }}
+      shell: bash
+    - name: Notify about failures
+      if: ${{ failure() }}
+      run: |
+        cat << EOF > message.json
+        {"@type":"MessageCard","@context":"https://schema.org/extensions","summary":"Pipeline failed!","themeColor":"ff0000","title":"$GITHUB_REPOSITORY pipeline failed 💢!","sections":[{"facts":[{"name":"Repository:","value":"$GITHUB_REPOSITORY"},{"name":"Branch:","value":"$GITHUB_REF_NAME"},{"name":"Commit:","value":"$GITHUB_SHA"}]}],"potentialAction":[{"@type":"OpenUri","name":"View on GitHub","targets":[{"os":"default","uri":"$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID"}]}]}
+        EOF
+        curl -X POST ${{ inputs.webhook }} --header 'Content-Type: application/json' -d @message.json
+      shell: bash

.github/workflows/dummy-code-scanning.yaml

@@ -0,0 +1,11 @@
+name: "Dummy Code Scanning"
+
+on:
+  schedule:
+    - cron: '0 0 * * 1'
+  workflow_dispatch:
+
+jobs:
+  code-scanning-dummy:
+    name: Perform code scanning (Dummy)
+    uses: recognizegroup/security/.github/workflows/code-scanning-dummy.yaml@v2

.github/workflows/pull_request_title.yaml

@@ -0,0 +1,19 @@
+name: PR Title Checker
+on:
+  workflow_call:
+  pull_request:
+    branches:
+      - develop
+    types:
+      - opened
+      - edited
+      - synchronize
+
+jobs:
+  check-pr-title:
+    runs-on: ubuntu-latest
+    steps:     
+      - uses: Slashgear/action-check-pr-title@v4.3.0
+        with:
+          regexp: ".*(ab|AB)#[0-9]+.*" # Regex the title should match ab#(number) or AB#(number).
+          helpMessage: "PR title check failed: AB# must be included somewhere in the PR title!'"

.gitignore

@@ -0,0 +1,4 @@
+#Rider
+.idea
+
+.vs/

README.md

@@ -1 +1,66 @@
-# vwt-ip-action-modules
+# vwt-ip-action-modules
+These are actions which are used in our workflows. 
+# Actions
+### Brew and git action
+##### Input parameters 
+- git_token (this is a token required to allow data modules to be imported) 
+
+##### Example of use brew and git
+```yaml
+  - name: Setup git token and brew
+    id: brew_and_git
+    uses: recognizegroup/vwt-ip-action-modules/.github/actions/brew_and_gittoken@{desired version}
+    with:
+      git_token: ${{ secrets.TEAM_ORANGE_GIT_TOKEN }}
+```
+
+### Terragrunt apply
+##### Input parameters
+- webhook (Webhook is used for notifying when terragrunt apply fails)
+##### Example of use terragrunt apply
+
+By the environement parameters you should set directory the     
+
+ - TERRAGRUNT_DOWNLOAD:
+ - TF_PLUGIN_CACHE_DIR
+
+example with environment 
+
+```yaml
+env:
+  TERRAGRUNT_DOWNLOAD: ${{ github.workspace }}/.terragrunt
+  TF_PLUGIN_CACHE_DIR: ${{ github.workspace }}/.terragrunt/plugin-cache
+```
+
+Under steps add
+
+```yaml
+  - name: Terragrunt apply
+    id: terragrunt_apply
+    uses: recognizegroup/vwt-ip-action-modules/.github/actions/terragrunt_apply@{desired version}
+    with:
+      webhook: ${{ secrets.TEAMS_WEBHOOK_URL }}
+      terragrunt_download_directory: $TERRAGRUNT_DOWNLOAD
+      tf_plugin_directory: $TF_PLUGIN_CACHE_DIR
+  ```
+
+# Workflows
+
+#### Pr title check
+
+```yaml
+name: PR Title Checker
+on:
+  pull_request:
+    branches:
+      - develop
+    types:
+      - opened
+      - edited
+      - synchronize
+
+jobs:
+  check-pr-title:
+    uses: recognizegroup/vwt-ip-action-modules/.github/workflows/pull_request_title.yaml@{desired version}
+```
+