@docupace/pipeline 1.0.6 → 1.0.7-7.micro-cli2

package/terraform/plan.sh

@@ -0,0 +1,76 @@
+#!/bin/bash
+set -e
+
+PROJECT=$1
+CURRENT_ENVIRONMENT=$2
+export ROLE_NAME="${3:-atlassian-bitbucket-pipelines-runner-eks-role}"
+
+if [[ -z "$PROJECT" ]]; then
+  echo "Error: Project name is required."
+  echo "Usage: $0 <project-name> $1 <environment>"
+  exit 1
+fi
+
+if [[ -z "$CURRENT_ENVIRONMENT" ]]; then
+  echo "Error: ENVIRONMENT is required."
+  echo "Usage: $0 <project-name> $1 <environment>"
+  exit 1
+fi
+
+if [ "$CURRENT_ENVIRONMENT" == "prd" ]; then
+  export EKS_CLUSTER_NAME="connect-next-prd-eks-cluster"
+  CURRENT_ENVIRONMENT="prod"
+elif [ "$CURRENT_ENVIRONMENT" == "stg" ]; then
+  export EKS_CLUSTER_NAME="connect-next-stg-eks-cluster"
+  CURRENT_ENVIRONMENT="stage"
+else
+  export EKS_CLUSTER_NAME="connect-next-${CURRENT_ENVIRONMENT}-eks-cluster"
+fi
+
+echo "Using EKS cluster: $EKS_CLUSTER_NAME"
+
+export SESSION_NAME="EKSAdminSession"
+export ROLE_ARN="arn:aws:iam::$(aws sts get-caller-identity | jq -r '.Account'):role/$ROLE_NAME"
+export ASSUME_ROLE_OUTPUT=$(aws sts assume-role --role-arn $ROLE_ARN --role-session-name $SESSION_NAME)
+export AWS_ACCESS_KEY_ID=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.AccessKeyId')
+export AWS_SECRET_ACCESS_KEY=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.SecretAccessKey')
+export AWS_SESSION_TOKEN=$(echo $ASSUME_ROLE_OUTPUT | jq -r '.Credentials.SessionToken')
+
+aws sts get-caller-identity
+
+cd "$BITBUCKET_CLONE_DIR/${PROJECT}"
+
+if [[ "$PROJECT" == "bb-build-agent-shell" ]]; then
+  if [[ "$CURRENT_ENVIRONMENT" == "dev" ]]; then
+    echo "$dev_build_agent_configuration" | base64 -d >./env/${CURRENT_ENVIRONMENT}/us-west-2/build_agent_configuration.tfvars.json
+  elif [[ "$CURRENT_ENVIRONMENT" == "qa" ]]; then
+    echo "$qa_build_agent_configuration" | base64 -d >./env/${CURRENT_ENVIRONMENT}/us-west-2/build_agent_configuration.tfvars.json
+  fi
+
+  terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" \
+    -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/build_agent_configuration.tfvars.json" \
+    -out .tfplan
+elif [[ "$PROJECT" == "s3" ]]; then
+  terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" \
+    -var="site=${SITE_NAME}" \
+    -var="env=${CURRENT_ENVIRONMENT}" \
+    -out .tfplan
+elif [[ "$PROJECT" == "idp" ]]; then
+  terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" \
+    -var="site=${SITE_NAME}" \
+    -var="env=${CURRENT_ENVIRONMENT}" \
+    -var="docupace_domain=${DOCUPACE_DOMAIN}" \
+    -var="docupace_next_domain=${DOCUPACE_NEXT_DOMAIN}" \
+    -var="old_page_design=${USE_OLD_PAGE_DESIGN}" \
+    -var="use_new_domain=${USE_NEW_DOMAIN}" \
+    -var="configure_autologin=${CONFIGURE_AUTOLOGIN}" \
+    -var="configure_enterprise_ui=${CONFIGURE_ENTERPRISE_UI}" \
+    -var="enable_mfa=${ENABLE_MFA}" \
+    -var="configure_ui_cc=${CONFIGURE_UI_CC}" \
+    -var="configure_precisefp_client_credentials=${CONFIGURE_PRECISEFP_CLIENT_CREDENTIALS}" \
+    -var="use_azuread_app=${USE_AZUREAD_APP}" \
+    -var="deploy_azuread_app=${DEPLOY_AZUREAD_APP}" \
+    -out .tfplan
+else
+  terraform plan -var-file="./env/${CURRENT_ENVIRONMENT}/us-west-2/terraform.tfvars" -out .tfplan
+fi

package/terraform/validate.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+set -e
+
+PROJECT=$1
+
+if [[ -z "$PROJECT" ]]; then
+  echo "Error: Project name is required."
+  echo "Usage: $0 <project-name>"
+  exit 1
+fi
+
+cd "$BITBUCKET_CLONE_DIR/${PROJECT}"
+
+terraform version
+terraform init -backend=false
+terraform validate
+terraform fmt -check -recursive --diff || exit 0