terraform.tfstate 33 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747
  1. {
  2. "version": 4,
  3. "terraform_version": "1.3.7",
  4. "serial": 156,
  5. "lineage": "7413839f-c67c-02f5-4933-fcb84251bb29",
  6. "outputs": {},
  7. "resources": [
  8. {
  9. "mode": "managed",
  10. "type": "aws_secretsmanager_secret",
  11. "name": "secret",
  12. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  13. "instances": [
  14. {
  15. "schema_version": 0,
  16. "attributes": {
  17. "arn": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  18. "description": "",
  19. "force_overwrite_replica_secret": false,
  20. "id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  21. "kms_key_id": "",
  22. "name": "growi/official-image-builder",
  23. "name_prefix": "",
  24. "policy": "",
  25. "recovery_window_in_days": 30,
  26. "replica": [],
  27. "rotation_enabled": false,
  28. "rotation_lambda_arn": "",
  29. "rotation_rules": [],
  30. "tags": null,
  31. "tags_all": {}
  32. },
  33. "sensitive_attributes": [],
  34. "private": "bnVsbA=="
  35. }
  36. ]
  37. },
  38. {
  39. "mode": "managed",
  40. "type": "aws_secretsmanager_secret_version",
  41. "name": "main",
  42. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  43. "instances": [
  44. {
  45. "schema_version": 0,
  46. "attributes": {
  47. "arn": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  48. "id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz|C8147827-E635-4B07-80B8-B80E82FE22E5",
  49. "secret_binary": "",
  50. "secret_id": "arn:aws:secretsmanager:ap-northeast-1:259692501178:secret:growi/official-image-builder-LMU1uz",
  51. "secret_string": "{\"KEY1\":\"CHANGE THIS\",\"KEY2\":\"CHANGE THIS\"}",
  52. "version_id": "C8147827-E635-4B07-80B8-B80E82FE22E5",
  53. "version_stages": [
  54. "AWSCURRENT"
  55. ]
  56. },
  57. "sensitive_attributes": [],
  58. "private": "bnVsbA==",
  59. "dependencies": [
  60. "aws_secretsmanager_secret.secret"
  61. ]
  62. }
  63. ]
  64. },
  65. {
  66. "module": "module.codebuild",
  67. "mode": "data",
  68. "type": "aws_caller_identity",
  69. "name": "default",
  70. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  71. "instances": [
  72. {
  73. "schema_version": 0,
  74. "attributes": {
  75. "account_id": "259692501178",
  76. "arn": "arn:aws:iam::259692501178:user/yuki",
  77. "id": "259692501178",
  78. "user_id": "AIDAI6K42G2YZESELYLD4"
  79. },
  80. "sensitive_attributes": []
  81. }
  82. ]
  83. },
  84. {
  85. "module": "module.codebuild",
  86. "mode": "data",
  87. "type": "aws_iam_policy_document",
  88. "name": "combined_permissions",
  89. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  90. "instances": [
  91. {
  92. "schema_version": 0,
  93. "attributes": {
  94. "id": "1570789323",
  95. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ssm:GetParameters\",\n \"secretsmanager:GetSecretValue\",\n \"logs:PutLogEvents\",\n \"logs:CreateLogStream\",\n \"logs:CreateLogGroup\",\n \"iam:PassRole\",\n \"ecs:RunTask\",\n \"ecr:UploadLayerPart\",\n \"ecr:PutImage\",\n \"ecr:InitiateLayerUpload\",\n \"ecr:GetAuthorizationToken\",\n \"ecr:CompleteLayerUpload\",\n \"ecr:BatchCheckLayerAvailability\",\n \"codecommit:GitPull\"\n ],\n \"Resource\": \"*\"\n }\n ]\n}",
  96. "override_json": null,
  97. "override_policy_documents": [
  98. "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ssm:GetParameters\",\n \"secretsmanager:GetSecretValue\",\n \"logs:PutLogEvents\",\n \"logs:CreateLogStream\",\n \"logs:CreateLogGroup\",\n \"iam:PassRole\",\n \"ecs:RunTask\",\n \"ecr:UploadLayerPart\",\n \"ecr:PutImage\",\n \"ecr:InitiateLayerUpload\",\n \"ecr:GetAuthorizationToken\",\n \"ecr:CompleteLayerUpload\",\n \"ecr:BatchCheckLayerAvailability\",\n \"codecommit:GitPull\"\n ],\n \"Resource\": \"*\"\n }\n ]\n}"
  99. ],
  100. "policy_id": null,
  101. "source_json": null,
  102. "source_policy_documents": null,
  103. "statement": null,
  104. "version": "2012-10-17"
  105. },
  106. "sensitive_attributes": []
  107. }
  108. ]
  109. },
  110. {
  111. "module": "module.codebuild",
  112. "mode": "data",
  113. "type": "aws_iam_policy_document",
  114. "name": "permissions",
  115. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  116. "instances": [
  117. {
  118. "index_key": 0,
  119. "schema_version": 0,
  120. "attributes": {
  121. "id": "1570789323",
  122. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": [\n \"ssm:GetParameters\",\n \"secretsmanager:GetSecretValue\",\n \"logs:PutLogEvents\",\n \"logs:CreateLogStream\",\n \"logs:CreateLogGroup\",\n \"iam:PassRole\",\n \"ecs:RunTask\",\n \"ecr:UploadLayerPart\",\n \"ecr:PutImage\",\n \"ecr:InitiateLayerUpload\",\n \"ecr:GetAuthorizationToken\",\n \"ecr:CompleteLayerUpload\",\n \"ecr:BatchCheckLayerAvailability\",\n \"codecommit:GitPull\"\n ],\n \"Resource\": \"*\"\n }\n ]\n}",
  123. "override_json": null,
  124. "override_policy_documents": null,
  125. "policy_id": null,
  126. "source_json": null,
  127. "source_policy_documents": null,
  128. "statement": [
  129. {
  130. "actions": [
  131. "codecommit:GitPull",
  132. "ecr:BatchCheckLayerAvailability",
  133. "ecr:CompleteLayerUpload",
  134. "ecr:GetAuthorizationToken",
  135. "ecr:InitiateLayerUpload",
  136. "ecr:PutImage",
  137. "ecr:UploadLayerPart",
  138. "ecs:RunTask",
  139. "iam:PassRole",
  140. "logs:CreateLogGroup",
  141. "logs:CreateLogStream",
  142. "logs:PutLogEvents",
  143. "secretsmanager:GetSecretValue",
  144. "ssm:GetParameters"
  145. ],
  146. "condition": [],
  147. "effect": "Allow",
  148. "not_actions": [],
  149. "not_principals": [],
  150. "not_resources": [],
  151. "principals": [],
  152. "resources": [
  153. "*"
  154. ],
  155. "sid": ""
  156. }
  157. ],
  158. "version": "2012-10-17"
  159. },
  160. "sensitive_attributes": []
  161. }
  162. ]
  163. },
  164. {
  165. "module": "module.codebuild",
  166. "mode": "data",
  167. "type": "aws_iam_policy_document",
  168. "name": "role",
  169. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  170. "instances": [
  171. {
  172. "schema_version": 0,
  173. "attributes": {
  174. "id": "442947395",
  175. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"sts:AssumeRole\",\n \"Principal\": {\n \"Service\": \"codebuild.amazonaws.com\"\n }\n }\n ]\n}",
  176. "override_json": null,
  177. "override_policy_documents": null,
  178. "policy_id": null,
  179. "source_json": null,
  180. "source_policy_documents": null,
  181. "statement": [
  182. {
  183. "actions": [
  184. "sts:AssumeRole"
  185. ],
  186. "condition": [],
  187. "effect": "Allow",
  188. "not_actions": [],
  189. "not_principals": [],
  190. "not_resources": [],
  191. "principals": [
  192. {
  193. "identifiers": [
  194. "codebuild.amazonaws.com"
  195. ],
  196. "type": "Service"
  197. }
  198. ],
  199. "resources": [],
  200. "sid": ""
  201. }
  202. ],
  203. "version": "2012-10-17"
  204. },
  205. "sensitive_attributes": []
  206. }
  207. ]
  208. },
  209. {
  210. "module": "module.codebuild",
  211. "mode": "data",
  212. "type": "aws_region",
  213. "name": "default",
  214. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  215. "instances": [
  216. {
  217. "schema_version": 0,
  218. "attributes": {
  219. "description": "Asia Pacific (Tokyo)",
  220. "endpoint": "ec2.ap-northeast-1.amazonaws.com",
  221. "id": "ap-northeast-1",
  222. "name": "ap-northeast-1"
  223. },
  224. "sensitive_attributes": []
  225. }
  226. ]
  227. },
  228. {
  229. "module": "module.codebuild",
  230. "mode": "managed",
  231. "type": "aws_codebuild_project",
  232. "name": "default",
  233. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  234. "instances": [
  235. {
  236. "index_key": 0,
  237. "schema_version": 0,
  238. "attributes": {
  239. "arn": "arn:aws:codebuild:ap-northeast-1:259692501178:project/growi-official-image-builder",
  240. "artifacts": [
  241. {
  242. "artifact_identifier": "",
  243. "bucket_owner_access": "",
  244. "encryption_disabled": false,
  245. "location": "",
  246. "name": "",
  247. "namespace_type": "",
  248. "override_artifact_name": false,
  249. "packaging": "",
  250. "path": "",
  251. "type": "NO_ARTIFACTS"
  252. }
  253. ],
  254. "badge_enabled": false,
  255. "badge_url": "",
  256. "build_batch_config": [
  257. {
  258. "combine_artifacts": false,
  259. "restrictions": [
  260. {
  261. "compute_types_allowed": [],
  262. "maximum_builds_allowed": 100
  263. }
  264. ],
  265. "service_role": "arn:aws:iam::259692501178:role/growi-official-image-builder",
  266. "timeout_in_mins": 2160
  267. }
  268. ],
  269. "build_timeout": 60,
  270. "cache": [
  271. {
  272. "location": "",
  273. "modes": [
  274. "LOCAL_DOCKER_LAYER_CACHE",
  275. "LOCAL_CUSTOM_CACHE"
  276. ],
  277. "type": "LOCAL"
  278. }
  279. ],
  280. "concurrent_build_limit": 0,
  281. "description": "The CodeBuild Project for GROWI official docker image",
  282. "encryption_key": "arn:aws:kms:ap-northeast-1:259692501178:alias/aws/s3",
  283. "environment": [
  284. {
  285. "certificate": "",
  286. "compute_type": "BUILD_GENERAL1_LARGE",
  287. "environment_variable": [
  288. {
  289. "name": "AWS_REGION",
  290. "type": "PLAINTEXT",
  291. "value": "ap-northeast-1"
  292. },
  293. {
  294. "name": "AWS_ACCOUNT_ID",
  295. "type": "PLAINTEXT",
  296. "value": "259692501178"
  297. },
  298. {
  299. "name": "IMAGE_REPO_NAME",
  300. "type": "PLAINTEXT",
  301. "value": "UNSET"
  302. },
  303. {
  304. "name": "IMAGE_TAG",
  305. "type": "PLAINTEXT",
  306. "value": "latest"
  307. },
  308. {
  309. "name": "NO_ADDITIONAL_BUILD_VARS",
  310. "type": "PLAINTEXT",
  311. "value": "TRUE"
  312. }
  313. ],
  314. "image": "aws/codebuild/standard:6.0",
  315. "image_pull_credentials_type": "CODEBUILD",
  316. "privileged_mode": true,
  317. "registry_credential": [],
  318. "type": "LINUX_CONTAINER"
  319. }
  320. ],
  321. "file_system_locations": [],
  322. "id": "arn:aws:codebuild:ap-northeast-1:259692501178:project/growi-official-image-builder",
  323. "logs_config": [
  324. {
  325. "cloudwatch_logs": [
  326. {
  327. "group_name": "",
  328. "status": "ENABLED",
  329. "stream_name": ""
  330. }
  331. ],
  332. "s3_logs": [
  333. {
  334. "bucket_owner_access": "",
  335. "encryption_disabled": false,
  336. "location": "",
  337. "status": "DISABLED"
  338. }
  339. ]
  340. }
  341. ],
  342. "name": "growi-official-image-builder",
  343. "project_visibility": "PRIVATE",
  344. "public_project_alias": "",
  345. "queued_timeout": 480,
  346. "resource_access_role": "",
  347. "secondary_artifacts": [],
  348. "secondary_source_version": [],
  349. "secondary_sources": [],
  350. "service_role": "arn:aws:iam::259692501178:role/growi-official-image-builder",
  351. "source": [
  352. {
  353. "auth": [],
  354. "build_status_config": [],
  355. "buildspec": "packages/app/docker/codebuild/buildspec/root.yml",
  356. "git_clone_depth": 1,
  357. "git_submodules_config": [],
  358. "insecure_ssl": false,
  359. "location": "https://github.com/weseek/growi.git",
  360. "report_build_status": false,
  361. "type": "GITHUB"
  362. }
  363. ],
  364. "source_version": "refs/heads/support/build-with-codebuild",
  365. "tags": {
  366. "Name": "growi-official-image-builder"
  367. },
  368. "tags_all": {
  369. "Name": "growi-official-image-builder"
  370. },
  371. "vpc_config": []
  372. },
  373. "sensitive_attributes": [],
  374. "private": "bnVsbA==",
  375. "dependencies": [
  376. "module.codebuild.aws_codebuild_source_credential.authorization",
  377. "module.codebuild.aws_iam_role.default",
  378. "module.codebuild.aws_s3_bucket.cache_bucket",
  379. "module.codebuild.data.aws_caller_identity.default",
  380. "module.codebuild.data.aws_region.default"
  381. ]
  382. }
  383. ]
  384. },
  385. {
  386. "module": "module.codebuild",
  387. "mode": "managed",
  388. "type": "aws_iam_policy",
  389. "name": "default",
  390. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  391. "instances": [
  392. {
  393. "index_key": 0,
  394. "schema_version": 0,
  395. "attributes": {
  396. "arn": "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder",
  397. "description": "",
  398. "id": "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder",
  399. "name": "growi-official-image-builder",
  400. "name_prefix": null,
  401. "path": "/service-role/",
  402. "policy": "{\"Statement\":[{\"Action\":[\"ssm:GetParameters\",\"secretsmanager:GetSecretValue\",\"logs:PutLogEvents\",\"logs:CreateLogStream\",\"logs:CreateLogGroup\",\"iam:PassRole\",\"ecs:RunTask\",\"ecr:UploadLayerPart\",\"ecr:PutImage\",\"ecr:InitiateLayerUpload\",\"ecr:GetAuthorizationToken\",\"ecr:CompleteLayerUpload\",\"ecr:BatchCheckLayerAvailability\",\"codecommit:GitPull\"],\"Effect\":\"Allow\",\"Resource\":\"*\",\"Sid\":\"\"}],\"Version\":\"2012-10-17\"}",
  403. "policy_id": "ANPATY5XBDC5HSN3IY7CW",
  404. "tags": {
  405. "Name": "growi-official-image-builder"
  406. },
  407. "tags_all": {
  408. "Name": "growi-official-image-builder"
  409. }
  410. },
  411. "sensitive_attributes": [],
  412. "private": "bnVsbA==",
  413. "dependencies": [
  414. "module.codebuild.data.aws_iam_policy_document.combined_permissions",
  415. "module.codebuild.data.aws_iam_policy_document.permissions",
  416. "module.codebuild.data.aws_iam_policy_document.vpc_permissions",
  417. "module.codebuild.data.aws_s3_bucket.secondary_artifact"
  418. ]
  419. }
  420. ]
  421. },
  422. {
  423. "module": "module.codebuild",
  424. "mode": "managed",
  425. "type": "aws_iam_role",
  426. "name": "default",
  427. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  428. "instances": [
  429. {
  430. "index_key": 0,
  431. "schema_version": 0,
  432. "attributes": {
  433. "arn": "arn:aws:iam::259692501178:role/growi-official-image-builder",
  434. "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRole\",\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"codebuild.amazonaws.com\"},\"Sid\":\"\"}],\"Version\":\"2012-10-17\"}",
  435. "create_date": "2023-01-16T09:02:08Z",
  436. "description": "",
  437. "force_detach_policies": true,
  438. "id": "growi-official-image-builder",
  439. "inline_policy": [],
  440. "managed_policy_arns": [
  441. "arn:aws:iam::259692501178:policy/service-role/CodeBuildBuildBatchPolicy-growi-official-image-builder-ap-northeast-1-growi-official-image-builder",
  442. "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder"
  443. ],
  444. "max_session_duration": 3600,
  445. "name": "growi-official-image-builder",
  446. "name_prefix": "",
  447. "path": "/",
  448. "permissions_boundary": null,
  449. "tags": {
  450. "Name": "growi-official-image-builder"
  451. },
  452. "tags_all": {
  453. "Name": "growi-official-image-builder"
  454. },
  455. "unique_id": "AROATY5XBDC5EIUMPRJKC"
  456. },
  457. "sensitive_attributes": [],
  458. "private": "bnVsbA==",
  459. "dependencies": [
  460. "module.codebuild.data.aws_iam_policy_document.role"
  461. ]
  462. }
  463. ]
  464. },
  465. {
  466. "module": "module.codebuild",
  467. "mode": "managed",
  468. "type": "aws_iam_role_policy_attachment",
  469. "name": "default",
  470. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  471. "instances": [
  472. {
  473. "index_key": 0,
  474. "schema_version": 0,
  475. "attributes": {
  476. "id": "growi-official-image-builder-20230116090200654500000001",
  477. "policy_arn": "arn:aws:iam::259692501178:policy/service-role/growi-official-image-builder",
  478. "role": "growi-official-image-builder"
  479. },
  480. "sensitive_attributes": [],
  481. "private": "bnVsbA==",
  482. "dependencies": [
  483. "module.codebuild.aws_iam_policy.default",
  484. "module.codebuild.aws_iam_role.default",
  485. "module.codebuild.data.aws_iam_policy_document.combined_permissions",
  486. "module.codebuild.data.aws_iam_policy_document.permissions",
  487. "module.codebuild.data.aws_iam_policy_document.role",
  488. "module.codebuild.data.aws_iam_policy_document.vpc_permissions",
  489. "module.codebuild.data.aws_s3_bucket.secondary_artifact"
  490. ]
  491. }
  492. ]
  493. },
  494. {
  495. "module": "module.codebuild",
  496. "mode": "managed",
  497. "type": "random_string",
  498. "name": "bucket_prefix",
  499. "provider": "provider[\"registry.terraform.io/hashicorp/random\"]",
  500. "instances": [
  501. {
  502. "index_key": 0,
  503. "schema_version": 2,
  504. "attributes": {
  505. "id": "vpkowftojwbb",
  506. "keepers": null,
  507. "length": 12,
  508. "lower": true,
  509. "min_lower": 0,
  510. "min_numeric": 0,
  511. "min_special": 0,
  512. "min_upper": 0,
  513. "number": false,
  514. "numeric": false,
  515. "override_special": null,
  516. "result": "vpkowftojwbb",
  517. "special": false,
  518. "upper": false
  519. },
  520. "sensitive_attributes": []
  521. }
  522. ]
  523. },
  524. {
  525. "module": "module.oidc_github",
  526. "mode": "data",
  527. "type": "aws_iam_policy_document",
  528. "name": "assume_role",
  529. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  530. "instances": [
  531. {
  532. "index_key": 0,
  533. "schema_version": 0,
  534. "attributes": {
  535. "id": "3444559009",
  536. "json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Sid\": \"\",\n \"Effect\": \"Allow\",\n \"Action\": \"sts:AssumeRoleWithWebIdentity\",\n \"Principal\": {\n \"Federated\": \"arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com\"\n },\n \"Condition\": {\n \"StringLike\": {\n \"token.actions.githubusercontent.com:sub\": \"repo:weseek/github:*\"\n }\n }\n }\n ]\n}",
  537. "override_json": null,
  538. "override_policy_documents": null,
  539. "policy_id": null,
  540. "source_json": null,
  541. "source_policy_documents": null,
  542. "statement": [
  543. {
  544. "actions": [
  545. "sts:AssumeRoleWithWebIdentity"
  546. ],
  547. "condition": [
  548. {
  549. "test": "StringLike",
  550. "values": [
  551. "repo:weseek/github:*"
  552. ],
  553. "variable": "token.actions.githubusercontent.com:sub"
  554. }
  555. ],
  556. "effect": "Allow",
  557. "not_actions": [],
  558. "not_principals": [],
  559. "not_resources": [],
  560. "principals": [
  561. {
  562. "identifiers": [
  563. "arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com"
  564. ],
  565. "type": "Federated"
  566. }
  567. ],
  568. "resources": [],
  569. "sid": ""
  570. }
  571. ],
  572. "version": "2012-10-17"
  573. },
  574. "sensitive_attributes": []
  575. }
  576. ]
  577. },
  578. {
  579. "module": "module.oidc_github",
  580. "mode": "data",
  581. "type": "aws_partition",
  582. "name": "current",
  583. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  584. "instances": [
  585. {
  586. "schema_version": 0,
  587. "attributes": {
  588. "dns_suffix": "amazonaws.com",
  589. "id": "aws",
  590. "partition": "aws",
  591. "reverse_dns_prefix": "com.amazonaws"
  592. },
  593. "sensitive_attributes": []
  594. }
  595. ]
  596. },
  597. {
  598. "module": "module.oidc_github",
  599. "mode": "data",
  600. "type": "tls_certificate",
  601. "name": "github",
  602. "provider": "provider[\"registry.terraform.io/hashicorp/tls\"]",
  603. "instances": [
  604. {
  605. "schema_version": 0,
  606. "attributes": {
  607. "certificates": [
  608. {
  609. "cert_pem": "-----BEGIN CERTIFICATE-----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\n8ks5T1KESaZMkE4f97Q=\n-----END CERTIFICATE-----\n",
  610. "is_ca": true,
  611. "issuer": "CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US",
  612. "not_after": "2030-09-23T23:59:59Z",
  613. "not_before": "2020-09-24T00:00:00Z",
  614. "public_key_algorithm": "RSA",
  615. "serial_number": "13567650854749339296468135199911180260",
  616. "sha1_fingerprint": "6938fd4d98bab03faadb97b34396831e3780aea1",
  617. "signature_algorithm": "SHA256-RSA",
  618. "subject": "CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US",
  619. "version": 3
  620. },
  621. {
  622. "cert_pem": "-----BEGIN CERTIFICATE-----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\nBL7FKjOM\n-----END CERTIFICATE-----\n",
  623. "is_ca": false,
  624. "issuer": "CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US",
  625. "not_after": "2023-11-07T23:59:59Z",
  626. "not_before": "2022-11-04T00:00:00Z",
  627. "public_key_algorithm": "RSA",
  628. "serial_number": "13948856879982995920425685801082500444",
  629. "sha1_fingerprint": "f879abce0008e4eb126e0097e46620f5aaae26ad",
  630. "signature_algorithm": "SHA256-RSA",
  631. "subject": "CN=*.actions.githubusercontent.com,O=GitHub\\, Inc.,L=San Francisco,ST=California,C=US",
  632. "version": 3
  633. }
  634. ],
  635. "content": null,
  636. "id": "2f98b9dddcf0778622dc6788373a7f8c02e3a2c3",
  637. "url": "https://token.actions.githubusercontent.com/.well-known/openid-configuration",
  638. "verify_chain": true
  639. },
  640. "sensitive_attributes": []
  641. }
  642. ]
  643. },
  644. {
  645. "module": "module.oidc_github",
  646. "mode": "managed",
  647. "type": "aws_iam_openid_connect_provider",
  648. "name": "github",
  649. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  650. "instances": [
  651. {
  652. "index_key": 0,
  653. "schema_version": 0,
  654. "attributes": {
  655. "arn": "arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com",
  656. "client_id_list": [
  657. "https://github.com/weseek",
  658. "sts.amazonaws.com"
  659. ],
  660. "id": "arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com",
  661. "tags": {},
  662. "tags_all": {},
  663. "thumbprint_list": [
  664. "6938fd4d98bab03faadb97b34396831e3780aea1"
  665. ],
  666. "url": "token.actions.githubusercontent.com"
  667. },
  668. "sensitive_attributes": [],
  669. "private": "bnVsbA==",
  670. "dependencies": [
  671. "module.oidc_github.data.tls_certificate.github"
  672. ]
  673. }
  674. ]
  675. },
  676. {
  677. "module": "module.oidc_github",
  678. "mode": "managed",
  679. "type": "aws_iam_role",
  680. "name": "github",
  681. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  682. "instances": [
  683. {
  684. "index_key": 0,
  685. "schema_version": 0,
  686. "attributes": {
  687. "arn": "arn:aws:iam::259692501178:role/github",
  688. "assume_role_policy": "{\"Statement\":[{\"Action\":\"sts:AssumeRoleWithWebIdentity\",\"Condition\":{\"StringLike\":{\"token.actions.githubusercontent.com:sub\":\"repo:weseek/github:*\"}},\"Effect\":\"Allow\",\"Principal\":{\"Federated\":\"arn:aws:iam::259692501178:oidc-provider/token.actions.githubusercontent.com\"},\"Sid\":\"\"}],\"Version\":\"2012-10-17\"}",
  689. "create_date": "2023-01-16T11:34:45Z",
  690. "description": "Role assumed by the GitHub OIDC provider.",
  691. "force_detach_policies": false,
  692. "id": "github",
  693. "inline_policy": [],
  694. "managed_policy_arns": [
  695. "arn:aws:iam::aws:policy/ReadOnlyAccess"
  696. ],
  697. "max_session_duration": 3600,
  698. "name": "github",
  699. "name_prefix": "",
  700. "path": "/",
  701. "permissions_boundary": "",
  702. "tags": {},
  703. "tags_all": {},
  704. "unique_id": "AROATY5XBDC5J7M3H4LH3"
  705. },
  706. "sensitive_attributes": [],
  707. "private": "bnVsbA==",
  708. "dependencies": [
  709. "module.oidc_github.aws_iam_openid_connect_provider.github",
  710. "module.oidc_github.data.aws_iam_openid_connect_provider.github",
  711. "module.oidc_github.data.aws_iam_policy_document.assume_role",
  712. "module.oidc_github.data.tls_certificate.github"
  713. ]
  714. }
  715. ]
  716. },
  717. {
  718. "module": "module.oidc_github",
  719. "mode": "managed",
  720. "type": "aws_iam_role_policy_attachment",
  721. "name": "read_only",
  722. "provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
  723. "instances": [
  724. {
  725. "index_key": 0,
  726. "schema_version": 0,
  727. "attributes": {
  728. "id": "github-20230116113437638800000001",
  729. "policy_arn": "arn:aws:iam::aws:policy/ReadOnlyAccess",
  730. "role": "github"
  731. },
  732. "sensitive_attributes": [],
  733. "private": "bnVsbA==",
  734. "dependencies": [
  735. "module.oidc_github.aws_iam_openid_connect_provider.github",
  736. "module.oidc_github.aws_iam_role.github",
  737. "module.oidc_github.data.aws_iam_openid_connect_provider.github",
  738. "module.oidc_github.data.aws_iam_policy_document.assume_role",
  739. "module.oidc_github.data.aws_partition.current",
  740. "module.oidc_github.data.tls_certificate.github"
  741. ]
  742. }
  743. ]
  744. }
  745. ],
  746. "check_results": null
  747. }