Merge pull request #10 from clouddrove/azure_1

feat: update github/workflows

.deepsource.toml

@@ -0,0 +1,4 @@
+version = 1
+
+[[analyzers]]
+name = "terraform"

.github/dependabot.yml

@@ -5,12 +5,39 @@
 
 version: 2
 updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 3
+    assignees:
+      - "clouddrove-ci"
+    reviewers:
+      - "approvers"
+
   - package-ecosystem: "terraform" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
       interval: "weekly"
+    # Add assignees
+    assignees:
+      - "clouddrove-ci"
+    # Add reviewer
+    reviewers:
+      - "approvers"
+    # Allow up to 3 open pull requests for pip dependencies
+    open-pull-requests-limit: 3
+
   - package-ecosystem: "terraform" # See documentation for possible values
-    directory: "_example" # Location of package manifests
+    directory: "/_example/" # Location of package manifests
     schedule:
       interval: "weekly"
-
+    # Add assignees
+    assignees:
+      - "clouddrove-ci"
+    # Add reviewer
+    reviewers:
+      - "approvers"
+    # Allow up to 3 open pull requests for pip dependencies
+    open-pull-requests-limit: 3

.github/workflows/auto_assignee.yml

@@ -0,0 +1,14 @@
+name: Auto Assign PRs
+
+on:
+  pull_request:
+    types: [opened, reopened]
+
+  workflow_dispatch:
+jobs:
+  assignee:
+    uses: clouddrove/github-shared-workflows/.github/workflows/[email protected]
+    secrets:
+      GITHUB: ${{ secrets.GITHUB }}
+    with:
+      assignees: 'clouddrove-ci'

.github/workflows/changelog.yml

@@ -6,8 +6,8 @@ on:
       - "*"
   workflow_dispatch:
 jobs:
-  call-workflow-changelog:
-    uses: clouddrove/github-shared-workflows/.github/workflows/changelog.yml@master
+  changelog:
+    uses: clouddrove/github-shared-workflows/.github/workflows/changelog.yml@1.0.8
     secrets: inherit
     with:
-      branch: 'master'
+      branch: 'master'

.github/workflows/readme.yml

@@ -13,29 +13,28 @@ jobs:
         uses: actions/checkout@master
 
       - name: 'Set up Python 3.7'
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: '3.x'
 
       - name: 'create readme'
-        uses: 'clouddrove/github-actions@v9.0.1'
+        uses: 'clouddrove/github-actions@9.0.3'
         with:
           actions_subcommand: 'readme'
           github_token: '${{ secrets.GITHUB }}'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-
       - name: 'pre-commit check errors'
-        uses: pre-commit/action@v2.0.0
+        uses: pre-commit/action@v3.0.0
         continue-on-error: true
 
       - name: 'pre-commit fix erros'
-        uses: pre-commit/action@v2.0.0
+        uses: pre-commit/action@v3.0.0
         continue-on-error: true
 
       - name: 'push readme'
-        uses: 'clouddrove/github-actions@v9.0.1'
+        uses: 'clouddrove/github-actions@9.0.3'
         continue-on-error: true
         with:
           actions_subcommand: 'push'

.github/workflows/tf-checks.yml

@@ -0,0 +1,11 @@
+name: tf-checks
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+  workflow_dispatch:
+jobs:
+  example:
+    uses: clouddrove/github-shared-workflows/.github/workflows/[email protected]
+    with:
+      working_directory: './_example/'

.github/workflows/tflint.yml

@@ -0,0 +1,11 @@
+name: tf-lint
+on:
+  push:
+    branches: [ master ]
+  pull_request:
+  workflow_dispatch:
+jobs:
+  tf-lint:
+    uses: clouddrove/github-shared-workflows/.github/workflows/[email protected]
+    secrets:
+      GITHUB: ${{ secrets.GITHUB }}

.github/workflows/tfsec.yml

@@ -5,7 +5,7 @@ on:
   workflow_dispatch:
 jobs:
   tfsec:
-    uses: clouddrove/github-shared-workflows/.github/workflows/tfsec.yml@master
+    uses: clouddrove/github-shared-workflows/.github/workflows/tfsec.yml@1.0.8
     secrets: inherit
     with:
-      working_directory: '.'
+      working_directory: '.'

README.yaml

@@ -16,9 +16,12 @@ github_repo: clouddrove/terraform-azure-resource-group
 
 # Badges to display
 badges:
-  - name: "Terraform"
-    image: "https://img.shields.io/badge/Terraform-v1.0.0-green"
-    url: "https://www.terraform.io"
+  - name: "Latest Release"
+    image: "https://img.shields.io/github/release/clouddrove/terraform-azure-resource-group.svg"
+    url: "https://github.com/clouddrove/terraform-azure-resource-group/releases/latest"
+  - name: "tfsec"
+    image: "https://github.com/clouddrove/terraform-azure-resource-group/actions/workflows/tfsec.yml/badge.svg"
+    url: "https://github.com/clouddrove/terraform-azure-resource-group/actions/workflows/tfsec.yml"
   - name: "Licence"
     image: "https://img.shields.io/badge/License-APACHE-blue.svg"
     url: "LICENSE.md"
@@ -36,13 +39,16 @@ include:
 usage: |-
   ### Simple Example
   Here is an example of how you can use this module in your inventory structure:
-    ```hcl
-    module "resource_group" {
-     source      = "terraform/resource-group/azure"
-     version     = "1.0.0"
-     environment = "test"
-     label_order = ["name","environment"]
-     name        = "example"
-     location    = "North Europe"
-    }
-    ```
+   ```hcl
+      module "resource_group" {
+      source      = "terraform/resource-group/azure"
+      version     = "1.0.0"
+      name        = "example"
+      environment = "test"
+      location    = "North Europe"
+
+       #resource lock
+      resource_lock_enabled = true
+      lock_level            = "CanNotDelete"
+     }
+  ```

_example/example.tf

@@ -3,13 +3,10 @@ provider "azurerm" {
 }
 
 module "resource_group" {
-  source = "../"
-
-  environment = "tested"
-  label_order = ["name", "environment", ]
-
-  name     = "example"
-  location = "North Europe"
+  source      = "../"
+  name        = "example"
+  environment = "test"
+  location    = "North Europe"
 
   #resource lock
   resource_lock_enabled = true

_example/versions.tf

@@ -0,0 +1,13 @@
+# Terraform version
+terraform {
+  required_version = ">= 1.6.6"
+}
+
+terraform {
+  required_providers {
+    azurerm = {
+      source  = "hashicorp/azurerm"
+      version = ">=3.85.0"
+    }
+  }
+}

main.tf

@@ -34,7 +34,7 @@ resource "azurerm_resource_group" "default" {
 resource "azurerm_management_lock" "resource-group-level" {
   count      = var.enabled && var.resource_lock_enabled ? 1 : 0
   name       = format("%s-rg-lock", var.lock_level)
-  scope      = azurerm_resource_group.default.*.id[0]
+  scope      = azurerm_resource_group.default[0].id
   lock_level = var.lock_level
-  notes      = "This Resource Group is locked by terrafrom"
-}
+  notes      = var.notes
+}

outputs.tf

@@ -1,15 +1,15 @@
 output "resource_group_id" {
-  value       = join("", azurerm_resource_group.default.*.id)
+  value       = azurerm_resource_group.default[0].id
   description = "The ID of the Resource Group."
 }
 
 output "resource_group_name" {
-  value       = join("", azurerm_resource_group.default.*.name)
+  value       = azurerm_resource_group.default[0].name
   description = "The Name which should be used for this Resource Group. Changing this forces a new Resource Group to be created."
 }
 
 output "resource_group_location" {
-  value       = join("", azurerm_resource_group.default.*.location)
+  value       = azurerm_resource_group.default[0].location
   description = "The Azure Region where the Resource Group should exist. Changing this forces a new Resource Group to be created."
 }