feat: fun :)

.github/workflows/digger_workflow_dev.yml

@@ -0,0 +1,40 @@
+name: Digger Workflow
+
+on:
+ workflow_dispatch:
+ inputs:
+ spec:
+ required: true
+ run_name:
+ required: false
+
+run-name: "${{inputs.run_name}}"
+
+jobs:
+ digger-job:
+ runs-on: ubuntu-latest
+ environment: dev
+ permissions:
+ contents: write # required to merge PRs
+ actions: write # required for plan persistence
+ id-token: write # required for workload-identity-federation
+ pull-requests: write # required to post PR comments
+ statuses: write # required to validate combined PR status
+
+ steps:
+ - uses: actions/checkout@v4
+ - name: ${{ fromJSON(github.event.inputs.spec).job_id }}
+ run: echo "job id ${{ fromJSON(github.event.inputs.spec).job_id }}"
+ - uses: diggerhq/[email protected]
+ with:
+ digger-spec: ${{ inputs.spec }}
+ setup-opentofu: true
+ opentofu-version: v1.8.1
+ setup-terragrunt: true
+ terragrunt-version: 0.66.4
+ setup-aws: true
+ aws-role-to-assume: arn:aws:iam::891377085136_Admin:role/github-oidc-auth-role
+ aws-region: eu-central-1
+ env:
+ GITHUB_CONTEXT: ${{ toJson(github) }}
+ GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/digger_workflow_prod.yml

@@ -0,0 +1,40 @@
+name: Digger Workflow
+
+on:
+ workflow_dispatch:
+ inputs:
+ spec:
+ required: true
+ run_name:
+ required: false
+
+run-name: "${{inputs.run_name}}"
+
+jobs:
+ digger-job:
+ runs-on: ubuntu-latest
+ environment: prod
+ permissions:
+ contents: write # required to merge PRs
+ actions: write # required for plan persistence
+ id-token: write # required for workload-identity-federation
+ pull-requests: write # required to post PR comments
+ statuses: write # required to validate combined PR status
+
+ steps:
+ - uses: actions/checkout@v4
+ - name: ${{ fromJSON(github.event.inputs.spec).job_id }}
+ run: echo "job id ${{ fromJSON(github.event.inputs.spec).job_id }}"
+ - uses: diggerhq/[email protected]
+ with:
+ digger-spec: ${{ inputs.spec }}
+ setup-opentofu: true
+ opentofu-version: v1.8.1
+ setup-terragrunt: true
+ terragrunt-version: 0.66.4
+ setup-aws: true
+ aws-role-to-assume: arn:aws:iam::730335356331_Admin:role/github-oidc-auth-role
+ aws-region: eu-central-1
+ env:
+ GITHUB_CONTEXT: ${{ toJson(github) }}
+ GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

digger.yml

@@ -0,0 +1,12 @@
+generate_projects:
+ blocks:
+ - block_name: prod
+ terragrunt: true
+ root_dir: "live/prod/"
+ workflow: default
+ workflow_file: digger_workflow_prod.yml
+ - block_name: dev
+ terragrunt: true
+ root_dir: "live/dev/"
+ workflow: default
+ workflow_file: digger_workflow_dev.yml

live/dev/dns/terragrunt.hcl

@@ -12,11 +12,13 @@ locals {
  environment = include.root.locals.environment
  domain_name = include.root.locals.domain_name
 
+ dnssec = false
  records = []
 }
 
 inputs = {
  aws_profile = local.aws_profile
  domain_name = local.domain_name
  records = local.records
+ dnssec = local.dnssec
 }