Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "add gha oidc module and invoke for incubator; add tyler for HomeUniteUs" #33

Closed
wants to merge 1 commit into from

Conversation

chelseybeck
Copy link
Member

Reverts #28

Reverting b/c the Apply stage is failing due to lack of access to the GitHub action. Will move the user account creation to a new pr while we get those added

Copy link

github-actions bot commented May 16, 2024

Terraform plan in terraform

Plan: 0 to add, 0 to change, 3 to destroy.
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
-   destroy

Terraform will perform the following actions:

  # module.iam_oidc_gha_incubator.aws_iam_role.github_actions_oidc will be destroyed
  # (because aws_iam_role.github_actions_oidc is not in configuration)
-   resource "aws_iam_role" "github_actions_oidc" {
-       arn                   = "arn:aws:iam::035866691871:role/gha-incubator" -> null
-       assume_role_policy    = jsonencode(
            {
-               Statement = [
-                   {
-                       Action    = "sts:AssumeRoleWithWebIdentity"
-                       Condition = {
-                           StringEquals = {
-                               "token.actions.githubusercontent.com:aud" = "*****************"
                            }
-                           StringLike   = {
-                               "token.actions.githubusercontent.com:sub" = "******************************************************"
                            }
                        }
-                       Effect    = "Allow"
-                       Principal = {
-                           Federated = "arn:aws:iam::035866691871:oidc-provider/token.actions.githubusercontent.com"
                        }
                    },
                ]
-               Version   = "2012-10-17"
            }
        ) -> null
-       create_date           = "2024-05-16T02:01:39Z" -> null
-       force_detach_policies = false -> null
-       id                    = "gha-incubator" -> null
-       managed_policy_arns   = [
-           "arn:aws:iam::aws:policy/AdministratorAccess",
        ] -> null
-       max_session_duration  = 3600 -> null
-       name                  = "gha-incubator" -> null
-       path                  = "/" -> null
-       tags                  = {} -> null
-       tags_all              = {} -> null
-       unique_id             = "AROAQQWOSJEP6ON6DAODK" -> null
    }

  # module.iam_user_tylerthome.aws_iam_user.user will be destroyed
  # (because aws_iam_user.user is not in configuration)
-   resource "aws_iam_user" "user" {
-       arn           = "arn:aws:iam::035866691871:user/tyler.thome" -> null
-       force_destroy = false -> null
-       id            = "tyler.thome" -> null
-       name          = "tyler.thome" -> null
-       path          = "/" -> null
-       tags          = {
-           "Access Level" = "1"
-           "Project"      = "home-unite-us"
        } -> null
-       tags_all      = {
-           "Access Level" = "1"
-           "Project"      = "home-unite-us"
        } -> null
-       unique_id     = "AIDAQQWOSJEP2DBAAAHP3" -> null
    }

  # module.iam_user_tylerthome.aws_iam_user_group_membership.user_group_membership will be destroyed
  # (because aws_iam_user_group_membership.user_group_membership is not in configuration)
-   resource "aws_iam_user_group_membership" "user_group_membership" {
-       groups = [
-           "read-only-group",
        ] -> null
-       id     = "terraform-20240516020139255000000001" -> null
-       user   = "tyler.thome" -> null
    }

Plan: 0 to add, 0 to change, 3 to destroy.

📝 Plan generated in Write Terraform Plan to Pull Request #44

@chelseybeck chelseybeck deleted the revert-28-iam/add-aws-oidc-provider branch May 16, 2024 03:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant