diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 97d0c80..bb406ca 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -28,11 +28,11 @@ jobs: with: directory: . quiet: true - skip_check: CKV_TF_1,CKV_GCP_32,CKV_GCP_34,CKV2_GCP_18,CKV_TF_2 + skip_check: CKV_TF_1,CKV_TF_2,CKV_GCP_32,CKV_GCP_34,CKV2_GCP_18 framework: terraform # Terraform-docs - - uses: terraform-docs/gh-actions@v1.1.0 + - uses: terraform-docs/gh-actions@v1.3.0 id: terraform-docs with: working-dir: . @@ -43,7 +43,7 @@ jobs: git-push: 'false' # Push Terraform-docs changes - - uses: planetscale/ghcommit-action@v0.1.38 + - uses: planetscale/ghcommit-action@v0.2.0 # Run this step even if previous steps fails (there are changes to commit) # but skip when on forks if: ${{ !cancelled() && github.repository_owner == 'runatlantis' }} diff --git a/README.md b/README.md index 78647b7..2bac1b2 100644 --- a/README.md +++ b/README.md @@ -193,7 +193,7 @@ You can check the status of the certificate in the Google Cloud Console. |------|---------| | [terraform](#requirement\_terraform) | >= 0.13.0 | | [cloudinit](#requirement\_cloudinit) | >=2.2.0 | -| [google](#requirement\_google) | >=4.79.0 | +| [google](#requirement\_google) | >=6.9.0 | | [google-beta](#requirement\_google-beta) | >=4.79.0 | | [random](#requirement\_random) | >=3.4.3 | @@ -201,16 +201,16 @@ You can check the status of the certificate in the Google Cloud Console. | Name | Version | |------|---------| -| [cloudinit](#provider\_cloudinit) | >=2.2.0 | -| [google](#provider\_google) | >=4.79.0 | -| [google-beta](#provider\_google-beta) | >=4.79.0 | -| [random](#provider\_random) | >=3.4.3 | +| [cloudinit](#provider\_cloudinit) | 2.3.4 | +| [google](#provider\_google) | 5.38.0 | +| [google-beta](#provider\_google-beta) | 5.38.0 | +| [random](#provider\_random) | 3.6.2 | ## Modules | Name | Source | Version | |------|--------|---------| -| [container](#module\_container) | terraform-google-modules/container-vm/google | 3.1.1 | +| [container](#module\_container) | terraform-google-modules/container-vm/google | ~> 3.2 | ## Resources @@ -265,6 +265,7 @@ You can check the status of the certificate in the Google Cloud Console. | [name](#input\_name) | Custom name that's used during resource creation | `string` | n/a | yes | | [network](#input\_network) | Name of the network | `string` | n/a | yes | | [persistent\_disk\_size\_gb](#input\_persistent\_disk\_size\_gb) | The size of the persistent disk that Atlantis uses to store its data on | `number` | `50` | no | +| [persistent\_disk\_type](#input\_persistent\_disk\_type) | The type of persistent disk that Atlantis uses to store its data on | `string` | `"pd-ssd"` | no | | [project](#input\_project) | The ID of the project in which the resource belongs | `string` | `null` | no | | [region](#input\_region) | The region that resources should be created in | `string` | n/a | yes | | [service\_account](#input\_service\_account) | Service account to attach to the instance running Atlantis |
object({
email = string,
scopes = list(string)
})
|
{
"email": "",
"scopes": [
"cloud-platform"
]
}
| no | diff --git a/main.tf b/main.tf index c9f248a..59288b6 100644 --- a/main.tf +++ b/main.tf @@ -1,4 +1,5 @@ locals { + # The default port that Atlantis runs on is 4141, we default to this. atlantis_port = lookup(var.env_vars, "ATLANTIS_PORT", 4141) # Atlantis' home directory is "/home/atlantis", we default to this. @@ -79,7 +80,7 @@ data "cloudinit_config" "config" { module "container" { source = "terraform-google-modules/container-vm/google" - version = "3.2.0" + version = "~> 3.2" container = { image = var.image @@ -218,7 +219,7 @@ resource "google_compute_instance_template" "default" { resource "google_compute_disk" "persistent" { name = var.name - type = "pd-ssd" + type = var.persistent_disk_type size = var.persistent_disk_size_gb zone = var.zone labels = merge( @@ -382,7 +383,7 @@ resource "google_compute_backend_service" "iap" { } iap { - enabled = var.iap.enabled + enabled = true oauth2_client_id = var.iap.oauth2_client_id oauth2_client_secret = var.iap.oauth2_client_secret } diff --git a/variables.tf b/variables.tf index 07d111d..b37faad 100644 --- a/variables.tf +++ b/variables.tf @@ -141,7 +141,6 @@ variable "enable_oslogin" { variable "iap" { type = object({ - enabled = bool oauth2_client_id = string oauth2_client_secret = string }) @@ -234,3 +233,9 @@ variable "shared_vpc" { }) default = null } + +variable "persistent_disk_type" { + type = string + description = "The type of persistent disk that Atlantis uses to store its data on" + default = "pd-ssd" +} diff --git a/versions.tf b/versions.tf index d184637..b4d8a93 100644 --- a/versions.tf +++ b/versions.tf @@ -4,7 +4,7 @@ terraform { required_providers { google = { source = "hashicorp/google" - version = ">=4.79.0" + version = ">=6.9.0" } google-beta = { source = "hashicorp/google-beta"