Initial commit

Author: ocofaigh

.github/settings.yml

@@ -0,0 +1,25 @@
+# The settings are inherited from common repository repo-settings (same file name and location)
+# You can append settings that are deeply merged with the inherited settings.
+#
+# When you have installed the GitHub App "repo-settings" in this repository,
+# any change of this settings.yml file is detected by the GitHub App and
+# the settings of this repository are updated immediately.
+#
+_extends: repo-settings:.github/common-settings.yml
+
+# repo-specific settings
+#
+repository:
+  # See https://terraform-ibm-modules.github.io/documentation/#/implementation-guidelines?id=module-names-and-descriptions
+
+  # By changing this field, you rename the repository.
+
+  # Uncomment this name property and set the name to the current repo name.
+  # name: ""
+
+  # The description is displayed under the repository name on the
+  # organization page and in the 'About' section of the repository.
+
+  # Uncomment this description property
+  # and update the description to the current repo description.
+  # description: ""

.github/workflows/ci.yml

@@ -0,0 +1,20 @@
+name: CI-Pipeline
+
+# Controls when the workflow will run
+on:
+  # Triggers the workflow on push or pull request events but only for the main branch
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+jobs:
+  call-terraform-ci-pipeline:
+    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/[email protected]
+    secrets: inherit
+    with:
+      craTarget: "examples/default"
+      craGoalIgnoreFile: "cra-tf-validate-ignore-goals.json"

.github/workflows/release.yml

@@ -0,0 +1,17 @@
+name: Release-Pipeline
+
+on:
+  workflow_run:
+    workflows: [CI-Pipeline]
+    branches: [main]
+    types:
+      - completed
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+jobs:
+  call-terraform-release-pipeline:
+    if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') }}
+    uses: terraform-ibm-modules/common-pipeline-assets/.github/workflows/[email protected]
+    secrets: inherit

.gitignore

@@ -0,0 +1,56 @@
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+*.terraform.lock.hcl
+
+# Crash log files
+crash.log
+
+# Exclude all .tfvars files, which are likely to contain sentitive data, such as
+# password, private keys, and other secrets. These should not be part of version
+# control as they are data points which are potentially sensitive and subject
+# to change depending on the environment.
+#
+*.tfvars
+
+# Ignore files for local testing
+test.tf
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Include override files you do wish to add to version control using negated pattern
+#
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc
+
+# Ignore .tfsec
+.tfsec/
+
+# Ignore brew lock
+Brewfile.lock.json
+
+# Ignore Mac files
+.DS_Store
+
+# Ignore IDE files
+.idea/
+
+# Node modules
+/node_modules
+
+# Visual Studio Code
+.vscode/

.gitmodules

@@ -0,0 +1,4 @@
+[submodule "common-dev-assets"]
+	path = common-dev-assets
+	url = https://github.com/terraform-ibm-modules/common-dev-assets
+	branch = main

.pre-commit-config.yaml

@@ -0,0 +1 @@
+common-dev-assets/module-assets/.pre-commit-config.yaml

.releaserc

@@ -0,0 +1,15 @@
+{
+  "tagFormat": "v${version}",
+  "branches": ["main"],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/github",
+    ["@semantic-release/git", {
+      "assets": "false"
+    }],
+    ["@semantic-release/exec", {
+      "successCmd": "echo \"SEMVER_VERSION=${nextRelease.version}\" >> $GITHUB_ENV"
+    }]
+  ]
+}

.secrets.baseline

@@ -0,0 +1,85 @@
+{
+  "exclude": {
+    "files": "go.sum|^.secrets.baseline$",
+    "lines": null
+  },
+  "generated_at": "2023-04-05T23:25:59Z",
+  "plugins_used": [
+    {
+      "name": "AWSKeyDetector"
+    },
+    {
+      "name": "ArtifactoryDetector"
+    },
+    {
+      "name": "AzureStorageKeyDetector"
+    },
+    {
+      "base64_limit": 4.5,
+      "name": "Base64HighEntropyString"
+    },
+    {
+      "name": "BasicAuthDetector"
+    },
+    {
+      "name": "BoxDetector"
+    },
+    {
+      "name": "CloudantDetector"
+    },
+    {
+      "ghe_instance": "github.ibm.com",
+      "name": "GheDetector"
+    },
+    {
+      "name": "GitHubTokenDetector"
+    },
+    {
+      "hex_limit": 3,
+      "name": "HexHighEntropyString"
+    },
+    {
+      "name": "IbmCloudIamDetector"
+    },
+    {
+      "name": "IbmCosHmacDetector"
+    },
+    {
+      "name": "JwtTokenDetector"
+    },
+    {
+      "keyword_exclude": null,
+      "name": "KeywordDetector"
+    },
+    {
+      "name": "MailchimpDetector"
+    },
+    {
+      "name": "NpmDetector"
+    },
+    {
+      "name": "PrivateKeyDetector"
+    },
+    {
+      "name": "SlackDetector"
+    },
+    {
+      "name": "SoftlayerDetector"
+    },
+    {
+      "name": "SquareOAuthDetector"
+    },
+    {
+      "name": "StripeDetector"
+    },
+    {
+      "name": "TwilioKeyDetector"
+    }
+  ],
+  "results": {},
+  "version": "0.13.1+ibm.58.dss",
+  "word_list": {
+    "file": null,
+    "hash": null
+  }
+}

Brewfile

@@ -0,0 +1 @@
+common-dev-assets/module-assets/Brewfile