Skip to content

Commit 09cdf6f

Browse files
committed
fix: format agent knowledge configuration
1 parent e7bc23b commit 09cdf6f

1 file changed

Lines changed: 56 additions & 97 deletions

File tree

main.tf

Lines changed: 56 additions & 97 deletions
Original file line numberDiff line numberDiff line change
@@ -4,113 +4,72 @@ data "sops_file" "secret_vars" {
44

55
locals {
66
github_repositories = toset([
7-
".github", "ansible-project-libvirt", "ansible-site-cluster", "ansible-role-crc", "cflan", "charts", "agent-knowledge", "kustomize-cluster", "images", "shared-workflows", "terraform-libvirt-domain", "tfroot-aws", "tfroot-cloudflare", "tfroot-gcp", "tfroot-github", "tfroot-libvirt", "tfroot-namecheap", "www"
7+
".github",
8+
"ansible-project-libvirt",
9+
"ansible-site-cluster",
10+
"ansible-role-crc",
11+
"cflan",
12+
"charts",
13+
"agent-knowledge",
14+
"kustomize-cluster",
15+
"images",
16+
"shared-workflows",
17+
"terraform-libvirt-domain",
18+
"tfroot-aws",
19+
"tfroot-cloudflare",
20+
"tfroot-gcp",
21+
"tfroot-github",
22+
"tfroot-libvirt",
23+
"tfroot-namecheap",
24+
"www"
825
])
926
archived_github_repositories = toset([
10-
"ansible-project-libvirt", "ansible-site-cluster", "ansible-role-crc"
27+
"ansible-project-libvirt",
28+
"ansible-site-cluster",
29+
"ansible-role-crc"
30+
])
31+
private_github_repositories = toset([
32+
"agent-knowledge"
33+
])
34+
relaxed_branch_protection_github_repositories = toset([
35+
"agent-knowledge"
1136
])
12-
private_github_repositories = toset(["agent-knowledge"])
13-
relaxed_branch_protection_github_repositories = toset(["agent-knowledge"])
1437
active_github_repositories = toset([
1538
for repo in local.github_repositories : repo
1639
if !contains(local.archived_github_repositories, repo)
1740
])
1841
required_status_checks_by_repository = {
19-
".github" = ["pre-commit"]
20-
"cflan" = ["lint-and-test (3.10)", "lint-and-test (3.11)", "lint-and-test (3.12)", "lint-and-test (3.13)", "type-check"]
21-
"charts" = ["test"]
22-
"images" = ["checks"]
23-
"kustomize-cluster" = ["test"]
24-
"shared-workflows" = ["lint"]
42+
".github" = ["pre-commit"]
43+
"cflan" = ["lint-and-test (3.10)", "lint-and-test (3.11)", "lint-and-test (3.12)", "lint-and-test (3.13)", "type-check"]
44+
"charts" = ["test"]
45+
"images" = ["checks"]
46+
"kustomize-cluster" = ["test"]
47+
"shared-workflows" = ["lint"]
2548
"terraform-libvirt-domain" = ["test"]
26-
"tfroot-aws" = ["opentofu / test", "opentofu / plan"]
27-
"tfroot-cloudflare" = ["opentofu / test", "opentofu / plan"]
28-
"tfroot-gcp" = ["opentofu / test", "opentofu / plan"]
29-
"tfroot-github" = ["opentofu / test", "opentofu / plan"]
30-
"tfroot-libvirt" = ["opentofu / test", "opentofu / plan"]
31-
"tfroot-namecheap" = ["opentofu / test", "opentofu / plan"]
32-
"www" = ["static-checks"]
49+
"tfroot-aws" = ["opentofu / test", "opentofu / plan"]
50+
"tfroot-cloudflare" = ["opentofu / test", "opentofu / plan"]
51+
"tfroot-gcp" = ["opentofu / test", "opentofu / plan"]
52+
"tfroot-github" = ["opentofu / test", "opentofu / plan"]
53+
"tfroot-libvirt" = ["opentofu / test", "opentofu / plan"]
54+
"tfroot-namecheap" = ["opentofu / test", "opentofu / plan"]
55+
"www" = ["static-checks"]
3356
}
3457
secrets = {
35-
"onion_s3_bucket" = {
36-
name = "ONION_AWS_S3_BUCKET"
37-
value = data.sops_file.secret_vars.data["onion_s3_bucket"]
38-
repositories = ["www"]
39-
}
40-
"onion_aws_region" = {
41-
name = "ONION_AWS_REGION"
42-
value = data.sops_file.secret_vars.data["onion_aws_region"]
43-
repositories = ["www"]
44-
}
45-
"onion_access_key_id" = {
46-
name = "ONION_AWS_ACCESS_KEY_ID"
47-
value = data.sops_file.secret_vars.data["onion_aws_access_key_id"]
48-
repositories = ["www"]
49-
}
50-
"onion_secret_access_key" = {
51-
name = "ONION_AWS_SECRET_ACCESS_KEY"
52-
value = data.sops_file.secret_vars.data["onion_aws_secret_access_key"]
53-
repositories = ["www"]
54-
}
55-
"www_s3_bucket" = {
56-
name = "AWS_S3_BUCKET"
57-
value = data.sops_file.secret_vars.data["www_s3_bucket"]
58-
repositories = ["www"]
59-
}
60-
"www_aws_region" = {
61-
name = "AWS_REGION"
62-
value = data.sops_file.secret_vars.data["www_aws_region"]
63-
repositories = ["www"]
64-
}
65-
"www_access_key_id" = {
66-
name = "AWS_ACCESS_KEY_ID"
67-
value = data.sops_file.secret_vars.data["www_aws_access_key_id"]
68-
repositories = ["www"]
69-
}
70-
"www_secret_access_key" = {
71-
name = "AWS_SECRET_ACCESS_KEY"
72-
value = data.sops_file.secret_vars.data["www_aws_secret_access_key"]
73-
repositories = ["www"]
74-
}
75-
"cloudflare_zone_id" = {
76-
name = "CLOUDFLARE_ZONE_ID"
77-
value = data.sops_file.secret_vars.data["cloudflare_zone_id"]
78-
repositories = ["www"]
79-
}
80-
"cloudflare_api_token" = {
81-
name = "CLOUDFLARE_API_TOKEN"
82-
value = data.sops_file.secret_vars.data["cloudflare_api_token"]
83-
repositories = ["www", "tfroot-namecheap"]
84-
}
85-
"namecheap_api_key" = {
86-
name = "NAMECHEAP_API_KEY"
87-
value = data.sops_file.secret_vars.data["namecheap_api_key"]
88-
repositories = ["tfroot-namecheap"]
89-
}
90-
"cloudflare_auth_client_id" = {
91-
name = "CLOUDFLARE_AUTH_CLIENT_ID"
92-
value = data.sops_file.secret_vars.data["cloudflare_auth_client_id"]
93-
repositories = local.active_github_repositories
94-
}
95-
"cloudflare_auth_client_secret" = {
96-
name = "CLOUDFLARE_AUTH_CLIENT_SECRET"
97-
value = data.sops_file.secret_vars.data["cloudflare_auth_client_secret"]
98-
repositories = local.active_github_repositories
99-
}
100-
"chart_updater_github_app_private_key" = {
101-
name = "CHART_UPDATER_GITHUB_APP_PRIVATE_KEY"
102-
value = data.sops_file.secret_vars.data["chart_updater_github_app_private_key"]
103-
repositories = ["charts"]
104-
}
105-
"ssh_private_key" = {
106-
name = "SSH_PRIVATE_KEY"
107-
value = data.sops_file.secret_vars.data["ssh_private_key"]
108-
repositories = ["tfroot-libvirt"]
109-
}
110-
"ssh_known_hosts" = {
111-
name = "SSH_KNOWN_HOSTS"
112-
value = data.sops_file.secret_vars.data["ssh_known_hosts"]
113-
repositories = ["tfroot-libvirt"]
114-
}
58+
"onion_s3_bucket" = { name = "ONION_AWS_S3_BUCKET", value = data.sops_file.secret_vars.data["onion_s3_bucket"], repositories = ["www"] }
59+
"onion_aws_region" = { name = "ONION_AWS_REGION", value = data.sops_file.secret_vars.data["onion_aws_region"], repositories = ["www"] }
60+
"onion_access_key_id" = { name = "ONION_AWS_ACCESS_KEY_ID", value = data.sops_file.secret_vars.data["onion_aws_access_key_id"], repositories = ["www"] }
61+
"onion_secret_access_key" = { name = "ONION_AWS_SECRET_ACCESS_KEY", value = data.sops_file.secret_vars.data["onion_aws_secret_access_key"], repositories = ["www"] }
62+
"www_s3_bucket" = { name = "AWS_S3_BUCKET", value = data.sops_file.secret_vars.data["www_s3_bucket"], repositories = ["www"] }
63+
"www_aws_region" = { name = "AWS_REGION", value = data.sops_file.secret_vars.data["www_aws_region"], repositories = ["www"] }
64+
"www_access_key_id" = { name = "AWS_ACCESS_KEY_ID", value = data.sops_file.secret_vars.data["www_aws_access_key_id"], repositories = ["www"] }
65+
"www_secret_access_key" = { name = "AWS_SECRET_ACCESS_KEY", value = data.sops_file.secret_vars.data["www_aws_secret_access_key"], repositories = ["www"] }
66+
"cloudflare_zone_id" = { name = "CLOUDFLARE_ZONE_ID", value = data.sops_file.secret_vars.data["cloudflare_zone_id"], repositories = ["www"] }
67+
"cloudflare_api_token" = { name = "CLOUDFLARE_API_TOKEN", value = data.sops_file.secret_vars.data["cloudflare_api_token"], repositories = ["www", "tfroot-namecheap"] }
68+
"namecheap_api_key" = { name = "NAMECHEAP_API_KEY", value = data.sops_file.secret_vars.data["namecheap_api_key"], repositories = ["tfroot-namecheap"] }
69+
"cloudflare_auth_client_id" = { name = "CLOUDFLARE_AUTH_CLIENT_ID", value = data.sops_file.secret_vars.data["cloudflare_auth_client_id"], repositories = local.active_github_repositories }
70+
"cloudflare_auth_client_secret" = { name = "CLOUDFLARE_AUTH_CLIENT_SECRET", value = data.sops_file.secret_vars.data["cloudflare_auth_client_secret"], repositories = local.active_github_repositories }
71+
"chart_updater_github_app_private_key" = { name = "CHART_UPDATER_GITHUB_APP_PRIVATE_KEY", value = data.sops_file.secret_vars.data["chart_updater_github_app_private_key"], repositories = ["charts"] }
72+
"ssh_private_key" = { name = "SSH_PRIVATE_KEY", value = data.sops_file.secret_vars.data["ssh_private_key"], repositories = ["tfroot-libvirt"] }
73+
"ssh_known_hosts" = { name = "SSH_KNOWN_HOSTS", value = data.sops_file.secret_vars.data["ssh_known_hosts"], repositories = ["tfroot-libvirt"] }
11574
}
11675
}

0 commit comments

Comments
 (0)