terraform.tfstate 34 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793
  1. {
  2. "version": 4,
  3. "terraform_version": "1.3.7",
  4. "serial": 170,
  5. "lineage": "7413839f-c67c-02f5-4933-fcb84251bb29",
  6. "outputs": {},
  7. "resources": [
  8. {
  9. "mode": "managed",
  10. "type": "aws_iam_policy",
  11. "name": "policy",
  12. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  13. "instances": [
  14. {
  15. "schema_version": 0,
  16. "attributes": {
  17. "arn": "arn:aws:iam::259692501178:policy/terraform-20230117075546916900000001",
  18. "description": "",
  19. "id": "arn:aws:iam::259692501178:policy/terraform-20230117075546916900000001",
  20. "name": "terraform-20230117075546916900000001",
  21. "name_prefix": null,
  22. "path": "/",
  23. "policy": "{\"Statement\":[{\"Action\":[\"codebuild:StartBuild\",\"codebuild:StopBuild\",\"codebuild:RetryBuild\"],\"Effect\":\"Allow\",\"Resource\":[\"*\"]}],\"Version\":\"2012-10-17\"}",
  24. "policy_id": "ANPATY5XBDC5MRV6GEQHJ",
  25. "tags": null,
  26. "tags_all": {}
  27. },
  28. "sensitive_attributes": [],
  29. "private": "bnVsbA=="
  30. }
  31. ]
  32. },
  33. {
  34. "mode": "managed",
  35. "type": "aws_secretsmanager_secret",
  36. "name": "secret",
  37. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  38. "instances": [
  39. {
  40. "schema_version": 0,
  41. "attributes": {
  42. "arn": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  43. "description": "",
  44. "force_overwrite_replica_secret": false,
  45. "id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  46. "kms_key_id": "",
  47. "name": "growi/official-image-builder",
  48. "name_prefix": "",
  49. "policy": "",
  50. "recovery_window_in_days": 30,
  51. "replica": [],
  52. "rotation_enabled": false,
  53. "rotation_lambda_arn": "",
  54. "rotation_rules": [],
  55. "tags": {},
  56. "tags_all": {}
  57. },
  58. "sensitive_attributes": [],
  59. "private": "bnVsbA=="
  60. }
  61. ]
  62. },
  63. {
  64. "mode": "managed",
  65. "type": "aws_secretsmanager_secret_version",
  66. "name": "main",
  67. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  68. "instances": [
  69. {
  70. "schema_version": 0,
  71. "attributes": {
  72. "arn": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  73. "id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz|C8147827-E635-4B07-80B8-B80E82FE22E5",
  74. "secret_binary": "",
  75. "secret_id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  76. "secret_string": "{\"KEY1\":\"CHANGE THIS\",\"KEY2\":\"CHANGE THIS\"}",
  77. "version_id": "C8147827-E635-4B07-80B8-B80E82FE22E5",
  78. "version_stages": [
  79. "AWSPREVIOUS"
  80. ]
  81. },
  82. "sensitive_attributes": [],
  83. "private": "bnVsbA==",
  84. "dependencies": [
  85. "aws_secretsmanager_secret.secret"
  86. ]
  87. }
  88. ]
  89. },
  90. {
  91. "module": "module.codebuild",
  92. "mode": "data",
  93. "type": "aws_caller_identity",
  94. "name": "default",
  95. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  96. "instances": [
  97. {
  98. "schema_version": 0,
  99. "attributes": {
  100. "account_id": "259692501178",
  101. "arn": "arn:aws:iam::259692501178:user/yuki",
  102. "id": "259692501178",
  103. "user_id": "AIDAI6K42G2YZESELYLD4"
  104. },
  105. "sensitive_attributes": []
  106. }
  107. ]
  108. },
  109. {
  110. "module": "module.codebuild",
  111. "mode": "data",
  112. "type": "aws_iam_policy_document",
  113. "name": "combined_permissions",
  114. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  115. "instances": [
  116. {
  117. "schema_version": 0,
  118. "attributes": {
  119. "id": "1570789323",
  120. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ssm:GetParameters\",\n \"secretsmanager:GetSecretValue\",\n \"logs:PutLogEvents\",\n \"logs:CreateLogStream\",\n \"logs:CreateLogGroup\",\n \"iam:PassRole\",\n \"ecs:RunTask\",\n \"ecr:UploadLayerPart\",\n \"ecr:PutImage\",\n \"ecr:InitiateLayerUpload\",\n \"ecr:GetAuthorizationToken\",\n \"ecr:CompleteLayerUpload\",\n \"ecr:BatchCheckLayerAvailability\",\n \"codecommit:GitPull\"\n ],\n \"Resource\": \"*\"\n }\n ]\n}",
  121. "override_json": null,
  122. "override_policy_documents": [
  123. "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ssm:GetParameters\",\n \"secretsmanager:GetSecretValue\",\n \"logs:PutLogEvents\",\n \"logs:CreateLogStream\",\n \"logs:CreateLogGroup\",\n \"iam:PassRole\",\n \"ecs:RunTask\",\n \"ecr:UploadLayerPart\",\n \"ecr:PutImage\",\n \"ecr:InitiateLayerUpload\",\n \"ecr:GetAuthorizationToken\",\n \"ecr:CompleteLayerUpload\",\n \"ecr:BatchCheckLayerAvailability\",\n \"codecommit:GitPull\"\n ],\n \"Resource\": \"*\"\n }\n ]\n}"
  124. ],
  125. "policy_id": null,
  126. "source_json": null,
  127. "source_policy_documents": null,
  128. "statement": null,
  129. "version": "2012-10-17"
  130. },
  131. "sensitive_attributes": []
  132. }
  133. ]
  134. },
  135. {
  136. "module": "module.codebuild",
  137. "mode": "data",
  138. "type": "aws_iam_policy_document",
  139. "name": "permissions",
  140. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  141. "instances": [
  142. {
  143. "index_key": 0,
  144. "schema_version": 0,
  145. "attributes": {
  146. "id": "1570789323",
  147. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ssm:GetParameters\",\n \"secretsmanager:GetSecretValue\",\n \"logs:PutLogEvents\",\n \"logs:CreateLogStream\",\n \"logs:CreateLogGroup\",\n \"iam:PassRole\",\n \"ecs:RunTask\",\n \"ecr:UploadLayerPart\",\n \"ecr:PutImage\",\n \"ecr:InitiateLayerUpload\",\n \"ecr:GetAuthorizationToken\",\n \"ecr:CompleteLayerUpload\",\n \"ecr:BatchCheckLayerAvailability\",\n \"codecommit:GitPull\"\n ],\n \"Resource\": \"*\"\n }\n ]\n}",
  148. "override_json": null,
  149. "override_policy_documents": null,
  150. "policy_id": null,
  151. "source_json": null,
  152. "source_policy_documents": null,
  153. "statement": [
  154. {
  155. "actions": [
  156. "codecommit:GitPull",
  157. "ecr:BatchCheckLayerAvailability",
  158. "ecr:CompleteLayerUpload",
  159. "ecr:GetAuthorizationToken",
  160. "ecr:InitiateLayerUpload",
  161. "ecr:PutImage",
  162. "ecr:UploadLayerPart",
  163. "ecs:RunTask",
  164. "iam:PassRole",
  165. "logs:CreateLogGroup",
  166. "logs:CreateLogStream",
  167. "logs:PutLogEvents",
  168. "secretsmanager:GetSecretValue",
  169. "ssm:GetParameters"
  170. ],
  171. "condition": [],
  172. "effect": "Allow",
  173. "not_actions": [],
  174. "not_principals": [],
  175. "not_resources": [],
  176. "principals": [],
  177. "resources": [
  178. "*"
  179. ],
  180. "sid": ""
  181. }
  182. ],
  183. "version": "2012-10-17"
  184. },
  185. "sensitive_attributes": []
  186. }
  187. ]
  188. },
  189. {
  190. "module": "module.codebuild",
  191. "mode": "data",
  192. "type": "aws_iam_policy_document",
  193. "name": "role",
  194. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  195. "instances": [
  196. {
  197. "schema_version": 0,
  198. "attributes": {
  199. "id": "442947395",
  200. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"sts:AssumeRole\",\n \"Principal\": {\n \"Service\": \"codebuild.amazonaws.com\"\n }\n }\n ]\n}",
  201. "override_json": null,
  202. "override_policy_documents": null,
  203. "policy_id": null,
  204. "source_json": null,
  205. "source_policy_documents": null,
  206. "statement": [
  207. {
  208. "actions": [
  209. "sts:AssumeRole"
  210. ],
  211. "condition": [],
  212. "effect": "Allow",
  213. "not_actions": [],
  214. "not_principals": [],
  215. "not_resources": [],
  216. "principals": [
  217. {
  218. "identifiers": [
  219. "codebuild.amazonaws.com"
  220. ],
  221. "type": "Service"
  222. }
  223. ],
  224. "resources": [],
  225. "sid": ""
  226. }
  227. ],
  228. "version": "2012-10-17"
  229. },
  230. "sensitive_attributes": []
  231. }
  232. ]
  233. },
  234. {
  235. "module": "module.codebuild",
  236. "mode": "data",
  237. "type": "aws_region",
  238. "name": "default",
  239. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  240. "instances": [
  241. {
  242. "schema_version": 0,
  243. "attributes": {
  244. "description": "Asia Pacific (Tokyo)",
  245. "endpoint": "ec2.ap-northeast-1.amazonaws.com",
  246. "id": "ap-northeast-1",
  247. "name": "ap-northeast-1"
  248. },
  249. "sensitive_attributes": []
  250. }
  251. ]
  252. },
  253. {
  254. "module": "module.codebuild",
  255. "mode": "managed",
  256. "type": "aws_codebuild_project",
  257. "name": "default",
  258. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  259. "instances": [
  260. {
  261. "index_key": 0,
  262. "schema_version": 0,
  263. "attributes": {
  264. "arn": "arn:aws:codebuild:ap-northeast-1:259692501178:project/growi-official-image-builder",
  265. "artifacts": [
  266. {
  267. "artifact_identifier": "",
  268. "bucket_owner_access": "",
  269. "encryption_disabled": false,
  270. "location": "",
  271. "name": "",
  272. "namespace_type": "",
  273. "override_artifact_name": false,
  274. "packaging": "",
  275. "path": "",
  276. "type": "NO_ARTIFACTS"
  277. }
  278. ],
  279. "badge_enabled": false,
  280. "badge_url": "",
  281. "build_batch_config": [
  282. {
  283. "combine_artifacts": false,
  284. "restrictions": [
  285. {
  286. "compute_types_allowed": [],
  287. "maximum_builds_allowed": 100
  288. }
  289. ],
  290. "service_role": "arn:aws:iam::259692501178:role/growi-official-image-builder",
  291. "timeout_in_mins": 2160
  292. }
  293. ],
  294. "build_timeout": 60,
  295. "cache": [
  296. {
  297. "location": "",
  298. "modes": [
  299. "LOCAL_DOCKER_LAYER_CACHE",
  300. "LOCAL_CUSTOM_CACHE"
  301. ],
  302. "type": "LOCAL"
  303. }
  304. ],
  305. "concurrent_build_limit": 0,
  306. "description": "The CodeBuild Project for GROWI official docker image",
  307. "encryption_key": "arn:aws:kms:ap-northeast-1:259692501178:alias/aws/s3",
  308. "environment": [
  309. {
  310. "certificate": "",
  311. "compute_type": "BUILD_GENERAL1_LARGE",
  312. "environment_variable": [
  313. {
  314. "name": "AWS_REGION",
  315. "type": "PLAINTEXT",
  316. "value": "ap-northeast-1"
  317. },
  318. {
  319. "name": "AWS_ACCOUNT_ID",
  320. "type": "PLAINTEXT",
  321. "value": "259692501178"
  322. },
  323. {
  324. "name": "IMAGE_REPO_NAME",
  325. "type": "PLAINTEXT",
  326. "value": "UNSET"
  327. },
  328. {
  329. "name": "IMAGE_TAG",
  330. "type": "PLAINTEXT",
  331. "value": "latest"
  332. },
  333. {
  334. "name": "NO_ADDITIONAL_BUILD_VARS",
  335. "type": "PLAINTEXT",
  336. "value": "TRUE"
  337. }
  338. ],
  339. "image": "aws/codebuild/standard:6.0",
  340. "image_pull_credentials_type": "CODEBUILD",
  341. "privileged_mode": true,
  342. "registry_credential": [],
  343. "type": "LINUX_CONTAINER"
  344. }
  345. ],
  346. "file_system_locations": [],
  347. "id": "arn:aws:codebuild:ap-northeast-1:259692501178:project/growi-official-image-builder",
  348. "logs_config": [
  349. {
  350. "cloudwatch_logs": [
  351. {
  352. "group_name": "",
  353. "status": "ENABLED",
  354. "stream_name": ""
  355. }
  356. ],
  357. "s3_logs": [
  358. {
  359. "bucket_owner_access": "",
  360. "encryption_disabled": false,
  361. "location": "",
  362. "status": "DISABLED"
  363. }
  364. ]
  365. }
  366. ],
  367. "name": "growi-official-image-builder",
  368. "project_visibility": "PRIVATE",
  369. "public_project_alias": "",
  370. "queued_timeout": 480,
  371. "resource_access_role": "",
  372. "secondary_artifacts": [],
  373. "secondary_source_version": [],
  374. "secondary_sources": [],
  375. "service_role": "arn:aws:iam::259692501178:role/growi-official-image-builder",
  376. "source": [
  377. {
  378. "auth": [],
  379. "build_status_config": [],
  380. "buildspec": "packages/app/docker/codebuild/buildspec/root.yml",
  381. "git_clone_depth": 1,
  382. "git_submodules_config": [],
  383. "insecure_ssl": false,
  384. "location": "https://github.com/weseek/growi.git",
  385. "report_build_status": false,
  386. "type": "GITHUB"
  387. }
  388. ],
  389. "source_version": "refs/heads/support/build-with-codebuild",
  390. "tags": {
  391. "Name": "growi-official-image-builder"
  392. },
  393. "tags_all": {
  394. "Name": "growi-official-image-builder"
  395. },
  396. "vpc_config": []
  397. },
  398. "sensitive_attributes": [],
  399. "private": "bnVsbA==",
  400. "dependencies": [
  401. "module.codebuild.aws_codebuild_source_credential.authorization",
  402. "module.codebuild.aws_iam_role.default",
  403. "module.codebuild.aws_s3_bucket.cache_bucket",
  404. "module.codebuild.data.aws_caller_identity.default",
  405. "module.codebuild.data.aws_region.default"
  406. ]
  407. }
  408. ]
  409. },
  410. {
  411. "module": "module.codebuild",
  412. "mode": "managed",
  413. "type": "aws_iam_policy",
  414. "name": "default",
  415. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  416. "instances": [
  417. {
  418. "index_key": 0,
  419. "schema_version": 0,
  420. "attributes": {
  421. "arn": "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder",
  422. "description": "",
  423. "id": "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder",
  424. "name": "growi-official-image-builder",
  425. "name_prefix": null,
  426. "path": "/service-role/",
  427. "policy": "{\"Statement\":[{\"Action\":[\"ssm:GetParameters\",\"secretsmanager:GetSecretValue\",\"logs:PutLogEvents\",\"logs:CreateLogStream\",\"logs:CreateLogGroup\",\"iam:PassRole\",\"ecs:RunTask\",\"ecr:UploadLayerPart\",\"ecr:PutImage\",\"ecr:InitiateLayerUpload\",\"ecr:GetAuthorizationToken\",\"ecr:CompleteLayerUpload\",\"ecr:BatchCheckLayerAvailability\",\"codecommit:GitPull\"],\"Effect\":\"Allow\",\"Resource\":\"*\",\"Sid\":\"\"}],\"Version\":\"2012-10-17\"}",
  428. "policy_id": "ANPATY5XBDC5HSN3IY7CW",
  429. "tags": {
  430. "Name": "growi-official-image-builder"
  431. },
  432. "tags_all": {
  433. "Name": "growi-official-image-builder"
  434. }
  435. },
  436. "sensitive_attributes": [],
  437. "private": "bnVsbA==",
  438. "dependencies": [
  439. "module.codebuild.data.aws_iam_policy_document.combined_permissions"
  440. ]
  441. }
  442. ]
  443. },
  444. {
  445. "module": "module.codebuild",
  446. "mode": "managed",
  447. "type": "aws_iam_role",
  448. "name": "default",
  449. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  450. "instances": [
  451. {
  452. "index_key": 0,
  453. "schema_version": 0,
  454. "attributes": {
  455. "arn": "arn:aws:iam::259692501178:role/growi-official-image-builder",
  456. "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"codebuild.amazonaws.com\"},\"Sid\":\"\"}],\"Version\":\"2012-10-17\"}",
  457. "create_date": "2023-01-16T09:02:08Z",
  458. "description": "",
  459. "force_detach_policies": true,
  460. "id": "growi-official-image-builder",
  461. "inline_policy": [],
  462. "managed_policy_arns": [
  463. "arn:aws:iam::259692501178:policy/service-role/CodeBuildBuildBatchPolicy-growi-official-image-builder-ap-northeast-1-growi-official-image-builder",
  464. "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder"
  465. ],
  466. "max_session_duration": 3600,
  467. "name": "growi-official-image-builder",
  468. "name_prefix": "",
  469. "path": "/",
  470. "permissions_boundary": null,
  471. "tags": {
  472. "Name": "growi-official-image-builder"
  473. },
  474. "tags_all": {
  475. "Name": "growi-official-image-builder"
  476. },
  477. "unique_id": "AROATY5XBDC5EIUMPRJKC"
  478. },
  479. "sensitive_attributes": [],
  480. "private": "bnVsbA==",
  481. "dependencies": [
  482. "module.codebuild.data.aws_iam_policy_document.role"
  483. ]
  484. }
  485. ]
  486. },
  487. {
  488. "module": "module.codebuild",
  489. "mode": "managed",
  490. "type": "aws_iam_role_policy_attachment",
  491. "name": "default",
  492. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  493. "instances": [
  494. {
  495. "index_key": 0,
  496. "schema_version": 0,
  497. "attributes": {
  498. "id": "growi-official-image-builder-20230116090200654500000001",
  499. "policy_arn": "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder",
  500. "role": "growi-official-image-builder"
  501. },
  502. "sensitive_attributes": [],
  503. "private": "bnVsbA==",
  504. "dependencies": [
  505. "module.codebuild.aws_iam_policy.default",
  506. "module.codebuild.aws_iam_role.default",
  507. "module.codebuild.data.aws_iam_policy_document.combined_permissions",
  508. "module.codebuild.data.aws_iam_policy_document.permissions",
  509. "module.codebuild.data.aws_iam_policy_document.role",
  510. "module.codebuild.data.aws_iam_policy_document.vpc_permissions",
  511. "module.codebuild.data.aws_s3_bucket.secondary_artifact"
  512. ]
  513. }
  514. ]
  515. },
  516. {
  517. "module": "module.codebuild",
  518. "mode": "managed",
  519. "type": "random_string",
  520. "name": "bucket_prefix",
  521. "provider": "provider[\"registry.terraform.io/hashicorp/random\"]",
  522. "instances": [
  523. {
  524. "index_key": 0,
  525. "schema_version": 2,
  526. "attributes": {
  527. "id": "vpkowftojwbb",
  528. "keepers": null,
  529. "length": 12,
  530. "lower": true,
  531. "min_lower": 0,
  532. "min_numeric": 0,
  533. "min_special": 0,
  534. "min_upper": 0,
  535. "number": false,
  536. "numeric": false,
  537. "override_special": null,
  538. "result": "vpkowftojwbb",
  539. "special": false,
  540. "upper": false
  541. },
  542. "sensitive_attributes": []
  543. }
  544. ]
  545. },
  546. {
  547. "module": "module.oidc_github",
  548. "mode": "data",
  549. "type": "aws_iam_policy_document",
  550. "name": "assume_role",
  551. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  552. "instances": [
  553. {
  554. "index_key": 0,
  555. "schema_version": 0,
  556. "attributes": {
  557. "id": "2164859932",
  558. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"sts:AssumeRoleWithWebIdentity\",\n \"Principal\": {\n \"Federated\": \"arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com\"\n },\n \"Condition\": {\n \"StringLike\": {\n \"token.actions.githubusercontent.com:sub\": \"repo:weseek/growi:*\"\n }\n }\n }\n ]\n}",
  559. "override_json": null,
  560. "override_policy_documents": null,
  561. "policy_id": null,
  562. "source_json": null,
  563. "source_policy_documents": null,
  564. "statement": [
  565. {
  566. "actions": [
  567. "sts:AssumeRoleWithWebIdentity"
  568. ],
  569. "condition": [
  570. {
  571. "test": "StringLike",
  572. "values": [
  573. "repo:weseek/growi:*"
  574. ],
  575. "variable": "token.actions.githubusercontent.com:sub"
  576. }
  577. ],
  578. "effect": "Allow",
  579. "not_actions": [],
  580. "not_principals": [],
  581. "not_resources": [],
  582. "principals": [
  583. {
  584. "identifiers": [
  585. "arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com"
  586. ],
  587. "type": "Federated"
  588. }
  589. ],
  590. "resources": [],
  591. "sid": ""
  592. }
  593. ],
  594. "version": "2012-10-17"
  595. },
  596. "sensitive_attributes": []
  597. }
  598. ]
  599. },
  600. {
  601. "module": "module.oidc_github",
  602. "mode": "data",
  603. "type": "aws_partition",
  604. "name": "current",
  605. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  606. "instances": [
  607. {
  608. "schema_version": 0,
  609. "attributes": {
  610. "dns_suffix": "amazonaws.com",
  611. "id": "aws",
  612. "partition": "aws",
  613. "reverse_dns_prefix": "com.amazonaws"
  614. },
  615. "sensitive_attributes": []
  616. }
  617. ]
  618. },
  619. {
  620. "module": "module.oidc_github",
  621. "mode": "data",
  622. "type": "tls_certificate",
  623. "name": "github",
  624. "provider": "provider[\"registry.terraform.io/hashicorp/tls\"]",
  625. "instances": [
  626. {
  627. "schema_version": 0,
  628. "attributes": {
  629. "certificates": [
  630. {
  631. "cert_pem": "-----BEGIN CERTIFICATE-----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\n8ks5T1KESaZMkE4f97Q=\n-----END CERTIFICATE-----\n",
  632. "is_ca": true,
  633. "issuer": "CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US",
  634. "not_after": "2030-09-23T23:59:59Z",
  635. "not_before": "2020-09-24T00:00:00Z",
  636. "public_key_algorithm": "RSA",
  637. "serial_number": "13567650854749339296468135199911180260",
  638. "sha1_fingerprint": "6938fd4d98bab03faadb97b34396831e3780aea1",
  639. "signature_algorithm": "SHA256-RSA",
  640. "subject": "CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US",
  641. "version": 3
  642. },
  643. {
  644. "cert_pem": "-----BEGIN CERTIFICATE-----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\nBL7FKjOM\n-----END CERTIFICATE-----\n",
  645. "is_ca": false,
  646. "issuer": "CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US",
  647. "not_after": "2023-11-07T23:59:59Z",
  648. "not_before": "2022-11-04T00:00:00Z",
  649. "public_key_algorithm": "RSA",
  650. "serial_number": "13948856879982995920425685801082500444",
  651. "sha1_fingerprint": "f879abce0008e4eb126e0097e46620f5aaae26ad",
  652. "signature_algorithm": "SHA256-RSA",
  653. "subject": "CN=*.actions.githubusercontent.com,O=GitHub\\, Inc.,L=San Francisco,ST=California,C=US",
  654. "version": 3
  655. }
  656. ],
  657. "content": null,
  658. "id": "2f98b9dddcf0778622dc6788373a7f8c02e3a2c3",
  659. "url": "https://token.actions.githubusercontent.com/.well-known/openid-configuration",
  660. "verify_chain": true
  661. },
  662. "sensitive_attributes": []
  663. }
  664. ]
  665. },
  666. {
  667. "module": "module.oidc_github",
  668. "mode": "managed",
  669. "type": "aws_iam_openid_connect_provider",
  670. "name": "github",
  671. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  672. "instances": [
  673. {
  674. "index_key": 0,
  675. "schema_version": 0,
  676. "attributes": {
  677. "arn": "arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com",
  678. "client_id_list": [
  679. "https://github.com/weseek",
  680. "sts.amazonaws.com"
  681. ],
  682. "id": "arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com",
  683. "tags": {},
  684. "tags_all": {},
  685. "thumbprint_list": [
  686. "6938fd4d98bab03faadb97b34396831e3780aea1"
  687. ],
  688. "url": "token.actions.githubusercontent.com"
  689. },
  690. "sensitive_attributes": [],
  691. "private": "bnVsbA==",
  692. "dependencies": [
  693. "module.oidc_github.data.tls_certificate.github"
  694. ]
  695. }
  696. ]
  697. },
  698. {
  699. "module": "module.oidc_github",
  700. "mode": "managed",
  701. "type": "aws_iam_role",
  702. "name": "github",
  703. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  704. "instances": [
  705. {
  706. "index_key": 0,
  707. "schema_version": 0,
  708. "attributes": {
  709. "arn": "arn:aws:iam::259692501178:role/GitHubOIDC-for-growi",
  710. "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRoleWithWebIdentity\",\"Condition\":{\"StringLike\":{\"token.actions.githubusercontent.com:sub\":\"repo:weseek/growi:*\"}},\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com\"},\"Sid\":\"\"}],\"Version\":\"2012-10-17\"}",
  711. "create_date": "2023-01-16T12:17:26Z",
  712. "description": "Role assumed by the GitHub OIDC provider.",
  713. "force_detach_policies": false,
  714. "id": "GitHubOIDC-for-growi",
  715. "inline_policy": [],
  716. "managed_policy_arns": [
  717. "arn:aws:iam::aws:policy/ReadOnlyAccess"
  718. ],
  719. "max_session_duration": 3600,
  720. "name": "GitHubOIDC-for-growi",
  721. "name_prefix": "",
  722. "path": "/",
  723. "permissions_boundary": "",
  724. "tags": {},
  725. "tags_all": {},
  726. "unique_id": "AROATY5XBDC5JJ573R2X5"
  727. },
  728. "sensitive_attributes": [],
  729. "private": "bnVsbA==",
  730. "dependencies": [
  731. "module.oidc_github.aws_iam_openid_connect_provider.github",
  732. "module.oidc_github.data.aws_iam_openid_connect_provider.github",
  733. "module.oidc_github.data.aws_iam_policy_document.assume_role",
  734. "module.oidc_github.data.tls_certificate.github"
  735. ]
  736. }
  737. ]
  738. },
  739. {
  740. "module": "module.oidc_github",
  741. "mode": "managed",
  742. "type": "aws_iam_role_policy_attachment",
  743. "name": "custom",
  744. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  745. "instances": [
  746. {
  747. "index_key": 0,
  748. "schema_version": 0,
  749. "attributes": {
  750. "id": "GitHubOIDC-for-growi-20230117075548501900000002",
  751. "policy_arn": "arn:aws:iam::259692501178:policy/terraform-20230117075546916900000001",
  752. "role": "GitHubOIDC-for-growi"
  753. },
  754. "sensitive_attributes": [],
  755. "private": "bnVsbA==",
  756. "dependencies": [
  757. "aws_iam_policy.policy",
  758. "module.oidc_github.aws_iam_role.github"
  759. ]
  760. }
  761. ]
  762. },
  763. {
  764. "module": "module.oidc_github",
  765. "mode": "managed",
  766. "type": "aws_iam_role_policy_attachment",
  767. "name": "read_only",
  768. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  769. "instances": [
  770. {
  771. "index_key": 0,
  772. "schema_version": 0,
  773. "attributes": {
  774. "id": "GitHubOIDC-for-growi-20230116121718851400000001",
  775. "policy_arn": "arn:aws:iam::aws:policy/ReadOnlyAccess",
  776. "role": "GitHubOIDC-for-growi"
  777. },
  778. "sensitive_attributes": [],
  779. "private": "bnVsbA==",
  780. "dependencies": [
  781. "module.oidc_github.aws_iam_openid_connect_provider.github",
  782. "module.oidc_github.aws_iam_role.github",
  783. "module.oidc_github.data.aws_iam_openid_connect_provider.github",
  784. "module.oidc_github.data.aws_iam_policy_document.assume_role",
  785. "module.oidc_github.data.aws_partition.current",
  786. "module.oidc_github.data.tls_certificate.github"
  787. ]
  788. }
  789. ]
  790. }
  791. ],
  792. "check_results": null
  793. }