Skip to content

Conversation

christopher-maboh
Copy link
Contributor

@christopher-maboh christopher-maboh commented Aug 13, 2025

🎫 Ticket

https://jira.cms.gov/browse/PLT-1253

🛠 Changes

legacy terraform backends were removed

ℹ️ Context

With legacy accounts deleted, the is the need to remove terraform backends for this legacy accounts

🧪 Validation

See checks.

@christopher-maboh christopher-maboh requested a review from a team as a code owner August 13, 2025 16:06
Copy link
Member

@gsf gsf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR should update backends to drop the -gf suffix and update workflows to point at non-gf backends.

@christopher-maboh
Copy link
Contributor Author

This PR should update backends to drop the -gf suffix and update workflows to point at non-gf backends.

@christopher-maboh
Copy link
Contributor Author

All checks now passing. got a .terraform/modules/iam_github_oidc_provider/modules/iam-github-oi…
…dc-provider does not exist earlier. checked documentation and seems source has to be source = "terraform-aws-modules/iam/aws//modules/iam-oidc-provider" and not source = "terraform-aws-modules/iam/aws//modules/iam-github-oidc-provider"

@gsf
Copy link
Member

gsf commented Aug 15, 2025

All checks now passing. got a .terraform/modules/iam_github_oidc_provider/modules/iam-github-oi… …dc-provider does not exist earlier. checked documentation and seems source has to be source = "terraform-aws-modules/iam/aws//modules/iam-oidc-provider" and not source = "terraform-aws-modules/iam/aws//modules/iam-github-oidc-provider"

Looks like that rename was merged a couple of days ago terraform-aws-modules/terraform-aws-iam#585

Copy link
Member

@gsf gsf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like the api_customers IP set for AB2D is now handled in their app repo, so modify the api-waf service and remove it from that state.

Copy link
Member

@gsf gsf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm seeing other changes to the WAF rules in the api-waf plan on AB2D environments. Let's remove ab2d from the tf-api-waf workflow matrix and undo the changes made to the api-waf service.

Copy link
Member

@gsf gsf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The file at terraform/services/github-actions-oidc-provider/.terraform.lock.hcl should be removed from version control.

@christopher-maboh
Copy link
Contributor Author

The file at terraform/services/github-actions-oidc-provider/.terraform.lock.hcl should be removed from version control.

.terraform.lock.hcl from version control has been dropped

Copy link
Member

@gsf gsf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! Thanks for working in changes

@christopher-maboh christopher-maboh merged commit 0b026c6 into main Aug 18, 2025
43 checks passed
@christopher-maboh christopher-maboh deleted the PLT-1253 branch August 18, 2025 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants