[pull] master from TykTechnologies:master

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+/ci/ @TykTechnologies/devops
+.github/workflows/release.yml @TykTechnologies/devops
+.github/workflows/sync-automation.yml @TykTechnologies/devops
+.github/workflows/pac.yml @TykTechnologies/devops
+/repo-policy/ @TykTechnologies/devops

.github/dependabot.yml

@@ -1,6 +1,6 @@
 
 # Generated by: gromit policy
-# Generated on: Mon Aug  8 03:03:25 UTC 2022
+# Generated on: Wed Jul 26 08:25:03 UTC 2023
 
 version: 2
 updates:
@@ -9,6 +9,8 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    reviewers:
+      - "TykTechnologies/devops"
 
   - package-ecosystem: "gomod"
     # Look for `go.mod` file in the `root` directory

.github/workflows/ci-test.yml

@@ -1,9 +1,9 @@
 name: CI tests
 
-on: 
+on:
   pull_request:
   push:
-    branches: 
+    branches:
       - master
 
 env:
@@ -21,11 +21,11 @@ jobs:
       matrix:
         redis-version: [5]
         mongodb-version: [4.2]
-        go: [1.16]
+        go: [1.19]
 
     steps:
       - name: Checkout Tyk Pump
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
         with:
           fetch-depth: 2
 
@@ -38,7 +38,7 @@ jobs:
         id: hygiene
         run: |
           go install golang.org/x/tools/cmd/goimports@latest
-          
+
       - name: Fetch base branch
         if: ${{ github.event_name == 'pull_request' }}
         run: git fetch origin ${{ github.base_ref }}
@@ -51,10 +51,10 @@ jobs:
       - name: Start MongoDB
         uses: supercharge/[email protected]
         with:
-          mongodb-version: '${{ matrix.mongodb-version }}'
+          mongodb-version: "${{ matrix.mongodb-version }}"
 
       - name: Cache
-        uses: actions/cache@v2
+        uses: actions/cache@v3
         with:
           path: ~/go/pkg/mod
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
@@ -66,7 +66,7 @@ jobs:
         run: |
           ./bin/ci-test.sh 2>&1 | tee test.log
           result_code=${PIPESTATUS[0]}
-          echo "::set-output name=log::$(sed -ze 's/%/%25/g;s/\n/%0A/g' test.log)"
+          echo "log=$(sed -ze 's/%/%25/g;s/\n/%0A/g' test.log)" >> $GITHUB_OUTPUT
           exit $result_code
 
       - name: Download golangci-lint
@@ -81,4 +81,3 @@ jobs:
         if: ${{ github.event_name == 'push' }}
         run: |
           $(go env GOPATH)/bin/golangci-lint run --out-format checkstyle --timeout=300s --max-issues-per-linter=0 --max-same-issues=0 --issues-exit-code=0 ./... > golanglint.xml
-

.github/workflows/codeql-analysis.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.

.github/workflows/del-env.yml

@@ -1,6 +1,6 @@
 
 # Generated by: gromit policy
-# Generated on: Mon Aug  8 03:03:25 UTC 2022
+# Generated on: Wed May 10 06:24:08 UTC 2023
 
 name: Retiring dev env
 

.github/workflows/linter.yaml

@@ -9,7 +9,7 @@ on:
       - main
   pull_request:
   workflow_dispatch:
-  
+
 env:
   TYK_PMP_ANALYTICSSTORAGETYPE: redis
   TYK_PMP_ANALYTICSSTORAGECONFIG_TYPE: redis
@@ -22,17 +22,19 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        go: [1.16, 1.17]
+        go: [1.19]
     with:
       go: ${{ matrix.go }}
       redis: 5
       mongo: 4.2
+      test-options: ""-count=1 -failfast -v""
   golangci:
     needs: gotest
     if: ${{ always() }}
     uses: TykTechnologies/github-actions/.github/workflows/golangci.yaml@main
     with:
       main_branch: "master"
+      go_version: 1.19
   sonarcloud:
     if: ${{ always() }}
     needs: [gotest, golangci]

.github/workflows/pac.yml

@@ -0,0 +1,85 @@
+name: Policy as Code
+
+on:
+  pull_request:
+    paths:
+      - repo-policy/**
+
+env:
+  TERRAFORM_DIR: "./repo-policy"
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 1
+
+      - uses: aws-actions/configure-aws-credentials@v1
+        with:
+          role-to-assume: arn:aws:iam::754489498669:role/gromit-ci
+          role-session-name: gromitci
+          aws-region: eu-central-1
+
+      - uses: hashicorp/setup-terraform@v2
+        with:
+          terraform_version: 1.3.0
+          cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
+
+      - name: Terraform Init
+        working-directory: ${{ env.TERRAFORM_DIR }}
+        id: init
+        run: terraform init -input=false
+
+      - name: Terraform Validate
+        id: validate
+        run: terraform validate -no-color
+
+      - name: Terraform Plan
+        working-directory: ${{ env.TERRAFORM_DIR }}
+        id: plan
+        run: |
+          echo "::group::Terraform Plan"
+          terraform plan -no-color -input=false
+          echo "::endgroup::"
+        continue-on-error: true
+
+      - name: Update Pull Request
+        uses: actions/github-script@v6
+        if: github.event_name == 'pull_request'
+        env:
+          PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const output = `#### Terraform Format and Style 🖌\`${{ steps.fmt.outcome }}\`
+            #### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
+            #### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
+            #### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
+
+            <details><summary>Show Plan</summary>
+
+            \`\`\`\n
+            ${process.env.PLAN}
+            \`\`\`
+
+            </details>
+
+            *Pushed by: @${{ github.actor }}, Action: \`${{ github.event_name }}\`*`;
+
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: output
+            })
+
+      - name: Terraform Plan Status
+        if: steps.plan.outcome == 'failure'
+        run: exit 1