Yuki Takei 3 лет назад
Родитель
Сommit
a739487e4b

+ 12 - 0
packages/app/docker/codebuild/secretsmanager.tf

@@ -0,0 +1,12 @@
+resource "aws_secretsmanager_secret" "secret" {
+  name = "growi/official-image-builder"
+}
+
+resource "aws_secretsmanager_secret_version" "main" {
+  secret_id     = aws_secretsmanager_secret.secret.id
+  secret_string = "CHANGE THIS"
+
+  lifecycle {
+    ignore_changes = [secret_string, version_stages]
+  }
+}

+ 63 - 4
packages/app/docker/codebuild/terraform.tfstate

@@ -1,10 +1,67 @@
 {
   "version": 4,
   "terraform_version": "1.3.7",
-  "serial": 143,
+  "serial": 150,
   "lineage": "7413839f-c67c-02f5-4933-fcb84251bb29",
   "outputs": {},
   "resources": [
+    {
+      "mode": "managed",
+      "type": "aws_secretsmanager_secret",
+      "name": "secret",
+      "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "arn": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-0BTXD4",
+            "description": "",
+            "force_overwrite_replica_secret": false,
+            "id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-0BTXD4",
+            "kms_key_id": "",
+            "name": "growi/official-image-builder",
+            "name_prefix": "",
+            "policy": "",
+            "recovery_window_in_days": 30,
+            "replica": [],
+            "rotation_enabled": false,
+            "rotation_lambda_arn": "",
+            "rotation_rules": [],
+            "tags": null,
+            "tags_all": {}
+          },
+          "sensitive_attributes": [],
+          "private": "bnVsbA=="
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "aws_secretsmanager_secret_version",
+      "name": "main",
+      "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "arn": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-0BTXD4",
+            "id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-0BTXD4|4091DD32-8C5C-4657-9F8B-8004A2AAD0FF",
+            "secret_binary": "",
+            "secret_id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-0BTXD4",
+            "secret_string": "CHANGE THIS",
+            "version_id": "4091DD32-8C5C-4657-9F8B-8004A2AAD0FF",
+            "version_stages": [
+              "AWSCURRENT"
+            ]
+          },
+          "sensitive_attributes": [],
+          "private": "bnVsbA==",
+          "dependencies": [
+            "aws_secretsmanager_secret.secret"
+          ]
+        }
+      ]
+    },
     {
       "module": "module.codebuild",
       "mode": "data",
@@ -601,7 +658,7 @@
               "sts.amazonaws.com"
             ],
             "id": "arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com",
-            "tags": null,
+            "tags": {},
             "tags_all": {},
             "thumbprint_list": [
               "6938fd4d98bab03faadb97b34396831e3780aea1"
@@ -634,13 +691,15 @@
             "force_detach_policies": false,
             "id": "github",
             "inline_policy": [],
-            "managed_policy_arns": [],
+            "managed_policy_arns": [
+              "arn:aws:iam::aws:policy/ReadOnlyAccess"
+            ],
             "max_session_duration": 3600,
             "name": "github",
             "name_prefix": "",
             "path": "/",
             "permissions_boundary": "",
-            "tags": null,
+            "tags": {},
             "tags_all": {},
             "unique_id": "AROATY5XBDC5J7M3H4LH3"
           },