Terraform 0.14 upgrade (#12)

Co-authored-by: Matt Gowie <gowie.matt@gmail.com>

.github/auto-release.yml

@@ -43,11 +43,3 @@ change-template: |
 
 template: |
   $CHANGES
-
-replacers:
-# Remove irrelevant information from Renovate bot
-- search: '/---\s+^#.*Renovate configuration(?:.|\n)*?This PR has been generated .*/gm'
-  replace: ''
-# Remove Renovate bot banner image
-- search: '/\[!\[[^\]]*Renovate\][^\]]*\](\([^)]*\))?\s*\n+/gm'
-  replace: ''

.github/mergify.yml

@@ -1,16 +1,12 @@
-# https://docs.mergify.io/conditions.html
-# https://docs.mergify.io/actions.html
 pull_request_rules:
 - name: "approve automated PRs that have passed checks"
   conditions:
-  - "author~=^(cloudpossebot|renovate\\[bot\\])$"
+  - "check-success~=test/bats"
+  - "check-success~=test/readme"
+  - "check-success~=test/terratest"
   - "base=master"
-  - "-closed"
-  - "head~=^(auto-update|renovate)/.*"
-  - "check-success=test/bats"
-  - "check-success=test/readme"
-  - "check-success=test/terratest"
-  - "check-success=validate-codeowners"
+  - "author=cloudpossebot"
+  - "head~=auto-update/.*"
   actions:
     review:
       type: "APPROVE"
@@ -19,17 +15,16 @@ pull_request_rules:
 
 - name: "merge automated PRs when approved and tests pass"
   conditions:
-  - "author~=^(cloudpossebot|renovate\\[bot\\])$"
+  - "check-success~=test/bats"
+  - "check-success~=test/readme"
+  - "check-success~=test/terratest"
   - "base=master"
-  - "-closed"
-  - "head~=^(auto-update|renovate)/.*"
-  - "check-success=test/bats"
-  - "check-success=test/readme"
-  - "check-success=test/terratest"
-  - "check-success=validate-codeowners"
+  - "head~=auto-update/.*"
   - "#approved-reviews-by>=1"
   - "#changes-requested-reviews-by=0"
   - "#commented-reviews-by=0"
+  - "base=master"
+  - "author=cloudpossebot"
   actions:
     merge:
       method: "squash"
@@ -43,7 +38,6 @@ pull_request_rules:
 - name: "ask to resolve conflict"
   conditions:
   - "conflict"
-  - "-closed"
   actions:
     comment:
       message: "This pull request is now in conflict. Could you fix it @{{author}}? 🙏"

.github/workflows/auto-context.yml

@@ -27,19 +27,17 @@ jobs:
             make init
             make github/init/context.tf
             make readme/build
-            echo "::set-output name=create_pull_request::true"
+            echo "::set-output name=create_pull_request=true"
           fi
         else
           echo "This module has not yet been updated to support the context.tf pattern! Please update in order to support automatic updates."
         fi
 
     - name: Create Pull Request
-      if: steps.update.outputs.create_pull_request == 'true'
+      if: {{ steps.update.outputs.create_pull_request == 'true' }}
       uses: cloudposse/actions/github/create-pull-request@0.22.0
       with:
         token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}
-        committer: 'cloudpossebot <11232728+cloudpossebot@users.noreply.github.com>'
-        author: 'cloudpossebot <11232728+cloudpossebot@users.noreply.github.com>'
         commit-message: Update context.tf from origin source
         title: Update context.tf
         body: |-

.github/workflows/auto-readme.yml

@@ -1,41 +1,41 @@
 name: "auto-readme"
 on:
   schedule:
-    # Update README.md nightly
-    - cron: '0 4 * * *'
+  # Update README.md nightly
+  - cron:  '0 4 * * *'
 
 jobs:
   update:
     if: github.event_name == 'schedule'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+    - uses: actions/checkout@v2
 
-      - name: Update readme
-        shell: bash
-        id: update
-        env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-        run: |
-          make init
-          make readme/build
+    - name: Update readme
+      shell: bash
+      id: update
+      env:
+        GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+      run: |
+        make init
+        make readme/build
 
-      - name: Create Pull Request
-        uses: cloudposse/actions/github/create-pull-request@0.20.0
-        with:
-          token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}
-          commit-message: Update README.md and docs
-          title: Update README.md and docs
-          body: |-
-            ## what
-            This is an auto-generated PR that updates the README.md and docs
+    - name: Create Pull Request
+      uses: cloudposse/actions/github/create-pull-request@0.20.0
+      with:
+        token: ${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}
+        commit-message: Update README.md and docs
+        title: Update README.md and docs
+        body: |-
+          ## what
+          This is an auto-generated PR that updates the README.md and docs
 
-            ## why
-            To have most recent changes of README.md and doc from origin templates
+          ## why
+          To have most recent changes of README.md and doc from origin templates
 
-          branch: auto-update/readme
-          base: master
-          delete-branch: true
-          labels: |
-            auto-update
-            readme
+        branch: auto-update/readme
+        base: master
+        delete-branch: true
+        labels: |
+          auto-update
+          readme

.github/workflows/auto-release.yml

@@ -6,7 +6,7 @@ on:
     - master
 
 jobs:
-  publish:
+  semver:
     runs-on: ubuntu-latest
     steps:
     # Drafts your next Release notes as Pull Requests are merged into "master"

.github/workflows/chatops.yml

@@ -35,4 +35,3 @@ jobs:
           reactions: false
 
 
-

.github/workflows/validate-codeowners.yml

@@ -9,17 +9,10 @@ jobs:
     - name: "Checkout source code at current commit"
       uses: actions/checkout@v2
     - uses: mszostok/codeowners-validator@v0.5.0
-      if: github.event.pull_request.head.repo.full_name == github.repository
-      name: "Full check of CODEOWNERS"
       with:
         # For now, remove "files" check to allow CODEOWNERS to specify non-existent
         # files so we can use the same CODEOWNERS file for Terraform and non-Terraform repos
         #   checks: "files,syntax,owners,duppatterns"
         checks: "syntax,owners,duppatterns"
         # GitHub access token is required only if the `owners` check is enabled
         github_access_token: "${{ secrets.PUBLIC_REPO_ACCESS_TOKEN }}"
-    - uses: mszostok/codeowners-validator@v0.5.0
-      if: github.event.pull_request.head.repo.full_name != github.repository
-      name: "Syntax check of CODEOWNERS"
-      with:
-        checks: "syntax,duppatterns"