@@ -4,113 +4,72 @@ data "sops_file" "secret_vars" {
44
55locals {
66 github_repositories = toset ([
7- " .github" , " ansible-project-libvirt" , " ansible-site-cluster" , " ansible-role-crc" , " cflan" , " charts" , " agent-knowledge" , " kustomize-cluster" , " images" , " shared-workflows" , " terraform-libvirt-domain" , " tfroot-aws" , " tfroot-cloudflare" , " tfroot-gcp" , " tfroot-github" , " tfroot-libvirt" , " tfroot-namecheap" , " www"
7+ " .github" ,
8+ " ansible-project-libvirt" ,
9+ " ansible-site-cluster" ,
10+ " ansible-role-crc" ,
11+ " cflan" ,
12+ " charts" ,
13+ " agent-knowledge" ,
14+ " kustomize-cluster" ,
15+ " images" ,
16+ " shared-workflows" ,
17+ " terraform-libvirt-domain" ,
18+ " tfroot-aws" ,
19+ " tfroot-cloudflare" ,
20+ " tfroot-gcp" ,
21+ " tfroot-github" ,
22+ " tfroot-libvirt" ,
23+ " tfroot-namecheap" ,
24+ " www"
825 ])
926 archived_github_repositories = toset ([
10- " ansible-project-libvirt" , " ansible-site-cluster" , " ansible-role-crc"
27+ " ansible-project-libvirt" ,
28+ " ansible-site-cluster" ,
29+ " ansible-role-crc"
30+ ])
31+ private_github_repositories = toset ([
32+ " agent-knowledge"
33+ ])
34+ relaxed_branch_protection_github_repositories = toset ([
35+ " agent-knowledge"
1136 ])
12- private_github_repositories = toset ([" agent-knowledge" ])
13- relaxed_branch_protection_github_repositories = toset ([" agent-knowledge" ])
1437 active_github_repositories = toset ([
1538 for repo in local . github_repositories : repo
1639 if ! contains (local. archived_github_repositories , repo)
1740 ])
1841 required_status_checks_by_repository = {
19- " .github" = [" pre-commit" ]
20- " cflan" = [" lint-and-test (3.10)" , " lint-and-test (3.11)" , " lint-and-test (3.12)" , " lint-and-test (3.13)" , " type-check" ]
21- " charts" = [" test" ]
22- " images" = [" checks" ]
23- " kustomize-cluster" = [" test" ]
24- " shared-workflows" = [" lint" ]
42+ " .github" = [" pre-commit" ]
43+ " cflan" = [" lint-and-test (3.10)" , " lint-and-test (3.11)" , " lint-and-test (3.12)" , " lint-and-test (3.13)" , " type-check" ]
44+ " charts" = [" test" ]
45+ " images" = [" checks" ]
46+ " kustomize-cluster" = [" test" ]
47+ " shared-workflows" = [" lint" ]
2548 " terraform-libvirt-domain" = [" test" ]
26- " tfroot-aws" = [" opentofu / test" , " opentofu / plan" ]
27- " tfroot-cloudflare" = [" opentofu / test" , " opentofu / plan" ]
28- " tfroot-gcp" = [" opentofu / test" , " opentofu / plan" ]
29- " tfroot-github" = [" opentofu / test" , " opentofu / plan" ]
30- " tfroot-libvirt" = [" opentofu / test" , " opentofu / plan" ]
31- " tfroot-namecheap" = [" opentofu / test" , " opentofu / plan" ]
32- " www" = [" static-checks" ]
49+ " tfroot-aws" = [" opentofu / test" , " opentofu / plan" ]
50+ " tfroot-cloudflare" = [" opentofu / test" , " opentofu / plan" ]
51+ " tfroot-gcp" = [" opentofu / test" , " opentofu / plan" ]
52+ " tfroot-github" = [" opentofu / test" , " opentofu / plan" ]
53+ " tfroot-libvirt" = [" opentofu / test" , " opentofu / plan" ]
54+ " tfroot-namecheap" = [" opentofu / test" , " opentofu / plan" ]
55+ " www" = [" static-checks" ]
3356 }
3457 secrets = {
35- " onion_s3_bucket" = {
36- name = " ONION_AWS_S3_BUCKET"
37- value = data.sops_file.secret_vars.data[" onion_s3_bucket" ]
38- repositories = [" www" ]
39- }
40- " onion_aws_region" = {
41- name = " ONION_AWS_REGION"
42- value = data.sops_file.secret_vars.data[" onion_aws_region" ]
43- repositories = [" www" ]
44- }
45- " onion_access_key_id" = {
46- name = " ONION_AWS_ACCESS_KEY_ID"
47- value = data.sops_file.secret_vars.data[" onion_aws_access_key_id" ]
48- repositories = [" www" ]
49- }
50- " onion_secret_access_key" = {
51- name = " ONION_AWS_SECRET_ACCESS_KEY"
52- value = data.sops_file.secret_vars.data[" onion_aws_secret_access_key" ]
53- repositories = [" www" ]
54- }
55- " www_s3_bucket" = {
56- name = " AWS_S3_BUCKET"
57- value = data.sops_file.secret_vars.data[" www_s3_bucket" ]
58- repositories = [" www" ]
59- }
60- " www_aws_region" = {
61- name = " AWS_REGION"
62- value = data.sops_file.secret_vars.data[" www_aws_region" ]
63- repositories = [" www" ]
64- }
65- " www_access_key_id" = {
66- name = " AWS_ACCESS_KEY_ID"
67- value = data.sops_file.secret_vars.data[" www_aws_access_key_id" ]
68- repositories = [" www" ]
69- }
70- " www_secret_access_key" = {
71- name = " AWS_SECRET_ACCESS_KEY"
72- value = data.sops_file.secret_vars.data[" www_aws_secret_access_key" ]
73- repositories = [" www" ]
74- }
75- " cloudflare_zone_id" = {
76- name = " CLOUDFLARE_ZONE_ID"
77- value = data.sops_file.secret_vars.data[" cloudflare_zone_id" ]
78- repositories = [" www" ]
79- }
80- " cloudflare_api_token" = {
81- name = " CLOUDFLARE_API_TOKEN"
82- value = data.sops_file.secret_vars.data[" cloudflare_api_token" ]
83- repositories = [" www" , " tfroot-namecheap" ]
84- }
85- " namecheap_api_key" = {
86- name = " NAMECHEAP_API_KEY"
87- value = data.sops_file.secret_vars.data[" namecheap_api_key" ]
88- repositories = [" tfroot-namecheap" ]
89- }
90- " cloudflare_auth_client_id" = {
91- name = " CLOUDFLARE_AUTH_CLIENT_ID"
92- value = data.sops_file.secret_vars.data[" cloudflare_auth_client_id" ]
93- repositories = local.active_github_repositories
94- }
95- " cloudflare_auth_client_secret" = {
96- name = " CLOUDFLARE_AUTH_CLIENT_SECRET"
97- value = data.sops_file.secret_vars.data[" cloudflare_auth_client_secret" ]
98- repositories = local.active_github_repositories
99- }
100- " chart_updater_github_app_private_key" = {
101- name = " CHART_UPDATER_GITHUB_APP_PRIVATE_KEY"
102- value = data.sops_file.secret_vars.data[" chart_updater_github_app_private_key" ]
103- repositories = [" charts" ]
104- }
105- " ssh_private_key" = {
106- name = " SSH_PRIVATE_KEY"
107- value = data.sops_file.secret_vars.data[" ssh_private_key" ]
108- repositories = [" tfroot-libvirt" ]
109- }
110- " ssh_known_hosts" = {
111- name = " SSH_KNOWN_HOSTS"
112- value = data.sops_file.secret_vars.data[" ssh_known_hosts" ]
113- repositories = [" tfroot-libvirt" ]
114- }
58+ " onion_s3_bucket" = { name = " ONION_AWS_S3_BUCKET" , value = data.sops_file.secret_vars.data[" onion_s3_bucket" ], repositories = [" www" ] }
59+ " onion_aws_region" = { name = " ONION_AWS_REGION" , value = data.sops_file.secret_vars.data[" onion_aws_region" ], repositories = [" www" ] }
60+ " onion_access_key_id" = { name = " ONION_AWS_ACCESS_KEY_ID" , value = data.sops_file.secret_vars.data[" onion_aws_access_key_id" ], repositories = [" www" ] }
61+ " onion_secret_access_key" = { name = " ONION_AWS_SECRET_ACCESS_KEY" , value = data.sops_file.secret_vars.data[" onion_aws_secret_access_key" ], repositories = [" www" ] }
62+ " www_s3_bucket" = { name = " AWS_S3_BUCKET" , value = data.sops_file.secret_vars.data[" www_s3_bucket" ], repositories = [" www" ] }
63+ " www_aws_region" = { name = " AWS_REGION" , value = data.sops_file.secret_vars.data[" www_aws_region" ], repositories = [" www" ] }
64+ " www_access_key_id" = { name = " AWS_ACCESS_KEY_ID" , value = data.sops_file.secret_vars.data[" www_aws_access_key_id" ], repositories = [" www" ] }
65+ " www_secret_access_key" = { name = " AWS_SECRET_ACCESS_KEY" , value = data.sops_file.secret_vars.data[" www_aws_secret_access_key" ], repositories = [" www" ] }
66+ " cloudflare_zone_id" = { name = " CLOUDFLARE_ZONE_ID" , value = data.sops_file.secret_vars.data[" cloudflare_zone_id" ], repositories = [" www" ] }
67+ " cloudflare_api_token" = { name = " CLOUDFLARE_API_TOKEN" , value = data.sops_file.secret_vars.data[" cloudflare_api_token" ], repositories = [" www" , " tfroot-namecheap" ] }
68+ " namecheap_api_key" = { name = " NAMECHEAP_API_KEY" , value = data.sops_file.secret_vars.data[" namecheap_api_key" ], repositories = [" tfroot-namecheap" ] }
69+ " cloudflare_auth_client_id" = { name = " CLOUDFLARE_AUTH_CLIENT_ID" , value = data.sops_file.secret_vars.data[" cloudflare_auth_client_id" ], repositories = local.active_github_repositories }
70+ " cloudflare_auth_client_secret" = { name = " CLOUDFLARE_AUTH_CLIENT_SECRET" , value = data.sops_file.secret_vars.data[" cloudflare_auth_client_secret" ], repositories = local.active_github_repositories }
71+ " chart_updater_github_app_private_key" = { name = " CHART_UPDATER_GITHUB_APP_PRIVATE_KEY" , value = data.sops_file.secret_vars.data[" chart_updater_github_app_private_key" ], repositories = [" charts" ] }
72+ " ssh_private_key" = { name = " SSH_PRIVATE_KEY" , value = data.sops_file.secret_vars.data[" ssh_private_key" ], repositories = [" tfroot-libvirt" ] }
73+ " ssh_known_hosts" = { name = " SSH_KNOWN_HOSTS" , value = data.sops_file.secret_vars.data[" ssh_known_hosts" ], repositories = [" tfroot-libvirt" ] }
11574 }
11675}
0 commit comments