|
| 1 | +name: Terraform ETL State Unlock |
| 2 | +concurrency: terraform-state-unlock |
| 3 | + |
| 4 | +on: |
| 5 | + workflow_dispatch: |
| 6 | + inputs: |
| 7 | + environment: |
| 8 | + description: "Environment you wish to unlock the state file for" |
| 9 | + options: |
| 10 | + - stg |
| 11 | + - prod |
| 12 | + required: true |
| 13 | + lock_id: |
| 14 | + description: "The lock id of the state file" |
| 15 | + required: true |
| 16 | + terraform_directory: |
| 17 | + description: "Which area of terraform do you need to unlock the state for" |
| 18 | + options: |
| 19 | + - core |
| 20 | + - etl |
| 21 | + required: true |
| 22 | + |
| 23 | +jobs: |
| 24 | + unlock: |
| 25 | + uses: ./.github/workflows/unlock_terraform_state.yml |
| 26 | + with: |
| 27 | + environment: ${{ github.event.inputs.environment }} |
| 28 | + automation_build_url: "https://github.com/LBHackney-IT/data-platform/actions/workflows/data_platform_${{ github.event.inputs.environment }}.yml" |
| 29 | + build_path: "./terraform/${{ github.event.inputs.terraform_directory }}" |
| 30 | + terraform_state_s3_key_prefix: "data-platform" |
| 31 | + terraform_state_file_name: "${{ github.event.inputs.environment }}-terraform-${{ github.event.inputs.terraform_directory }}.tfstate" |
| 32 | + terraform_state_lock_id: ${{ github.event.inputs.lock_id }} |
| 33 | + secrets: |
| 34 | + GOOGLE_PROJECT_ID: ${{ secrets.GOOGLE_PROJECT_ID_STG }} |
| 35 | + AWS_DEPLOY_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_DATA_PLATFORM_STG }} |
| 36 | + INFRASTRUCTURE_PRIVATE_KEY: ${{ secrets.INFRASTRUCTURE_PRIVATE_KEY }} |
| 37 | + AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} |
| 38 | + AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} |
| 39 | + AWS_API_ACCOUNT_PROD: ${{ secrets.AWS_API_ACCOUNT_PROD }} |
| 40 | + AWS_MOSAIC_PROD_ACCOUNT_ID: ${{ secrets.AWS_MOSAIC_PROD_ACCOUNT_ID }} |
| 41 | + AWS_HACKIT_ACCOUNT_ID: ${{ secrets.AWS_HACKIT_ACCOUNT_ID }} |
| 42 | + AWS_DATA_PLATFORM_ACCOUNT_ID: ${{ secrets.AWS_ACCOUNT_DATA_PLATFORM_DEV }} |
| 43 | + AWS_ROLE_TO_ASSUME: ${{ secrets.AWS_ROLE_TO_ASSUME }} |
| 44 | + AWS_API_VPC_ID: ${{ secrets.AWS_API_VPC_ID }} |
| 45 | + AWS_HOUSING_VPC_ID: ${{ secrets.AWS_HOUSING_VPC_ID }} |
| 46 | + AWS_MOSAIC_VPC_ID: ${{ secrets.AWS_MOSAIC_VPC_ID }} |
| 47 | + AWS_DP_VPC_ID: ${{ secrets.AWS_DP_DEV_VPC_ID }} |
| 48 | + GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS_STG }} |
| 49 | + COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE: ${{ secrets.COPY_LIBERATOR_TO_PRE_PROD_LAMBDA_EXECUTION_ROLE }} |
| 50 | + SYNC_PRODUCTION_TO_PRE_PRODUCTION_TASK_ROLE: ${{ secrets.SYNC_PRODUCTION_TO_PRE_PRODUCTION_TASK_ROLE }} |
| 51 | + PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN: ${{ secrets.PRE_PRODUCTION_LIBERATOR_DATA_STORAGE_KMS_KEY_ARN }} |
0 commit comments