fix: Address linting issues, add automated tests

Update module to leverage common validation pipeline + address issues as part of this effort.

Author: vburckhardt

.github/settings.yml

@@ -0,0 +1,18 @@
+# The settings are inherited from common repository repo-settings (same file name and location)
+# You can append settings that are deeply-merged with the inherited settings.
+#
+# When you have installed the GitHub App "repo-settings" in this repository,
+# any change of this settings.yml file is detected by the GitHub App and
+# the settings of this repository are updated immediately.
+
+_extends: repo-settings:.github/common-settings.yml
+
+# repo-specific settings
+#
+repository:
+  # By changing this field, you rename the repository.
+  name: "terraform-ibm-kms"
+
+  # The description is displayed under the repository name on the
+  # organization page and in the 'About' section of the repository.
+  description: "Terraform modules to create and work with IBM Key Management Service"

.github/workflows/ci.yml

@@ -0,0 +1,17 @@
+name: CI-Pipeline
+
+# Controls when the workflow will run
+on:
+  # Triggers the workflow on push or pull request events but only for the main branch
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+jobs:
+  call-terraform-ci-pipeline:
+    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/[email protected]
+    secrets: inherit

.github/workflows/release.yml

@@ -0,0 +1,17 @@
+name: Release-Pipeline
+
+on:
+  workflow_run:
+    workflows: [CI-Pipeline]
+    branches: [main]
+    types:
+      - completed
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+jobs:
+  call-terraform-release-pipeline:
+    if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') }}
+    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/[email protected]
+    secrets: inherit

.github/workflows/test.yml

@@ -1,14 +1,56 @@
 # Local .terraform directories
 **/.terraform/*
+
 # .tfstate files
 *.tfstate
 *.tfstate.*
 *.terraform.lock.hcl
+
 # Crash log files
 crash.log
-.DS_Store
+
 # Exclude all .tfvars files, which are likely to contain sentitive data, such as
 # password, private keys, and other secrets. These should not be part of version
 # control as they are data points which are potentially sensitive and subject
 # to change depending on the environment.
+#
+*.tfvars
+
+# Ignore files for local testing
+test.tf
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+#
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc
+
+# Ignore .tfsec
+.tfsec/
+
+# Ignore brew lock
+Brewfile.lock.json
+
+# Ignore Mac files
+.DS_Store
+
+# Ignore IDE files
+.idea/
+
+# Node modules
+/node_modules
 
+# Ignore .vscode files
+.vscode/

.github/workflows/validate_terraform.yml

@@ -0,0 +1,3 @@
+[submodule "common-dev-assets"]
+	path = common-dev-assets
+	url = https://github.com/terraform-ibm-modules/common-dev-assets

.gitignore

@@ -0,0 +1 @@
+./common-dev-assets/module-assets/.pre-commit-config.yaml

.gitmodules

@@ -0,0 +1,15 @@
+{
+  "tagFormat": "v${version}",
+  "branches": ["main"],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/github",
+    ["@semantic-release/git", {
+      "assets": "false"
+    }],
+    ["@semantic-release/exec", {
+      "successCmd": "echo \"SEMVER_VERSION=${nextRelease.version}\" >> $GITHUB_ENV"
+    }]
+  ]
+}