Skip to content

Revert "Add development environment for aws-service-infrahouse-app"#31

Merged
akuzminsky merged 1 commit into
mainfrom
revert-29-add-development-env-infrahouse-app
May 25, 2026
Merged

Revert "Add development environment for aws-service-infrahouse-app"#31
akuzminsky merged 1 commit into
mainfrom
revert-29-add-development-env-infrahouse-app

Conversation

@infrahouse8
Copy link
Copy Markdown
Contributor

Reverts #29

The environment has to be in a dedciated account, otherwise roles conflict. Reverting - i don't need it that bad, will create needed resources in the cicd account.

@github-actions
Copy link
Copy Markdown

State s3://infrahouse-github-control-state/terraform.tfstate

Affected resources counts

Success Add 🟡 Change 🔴 Destroy
0 3 2

Affected resources by action

Action Resources
🟡 github_team_members.admins
🟡 github_team_members.dev
🟡 module.aws_service_infrahouse_app.github_repository_file.makefile_fragment[0]
🔴 module.aws_service_infrahouse_app_gha_development.module.state-manager.aws_iam_policy.permissions_ro
🔴 module.aws_service_infrahouse_app_gha_development.module.state-manager.aws_iam_policy.permissions_rw
STDOUT
Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place
  - destroy

Terraform will perform the following actions:

  # github_team_members.admins will be updated in-place
  ~ resource "github_team_members" "admins" {
        id      = "14268696"
        # (1 unchanged attribute hidden)

      - members {
          - role     = "maintainer" -> null
          - username = "infrahouse8" -> null
        }
      + members {
          + role     = "member"
          + username = "infrahouse8"
        }

        # (1 unchanged block hidden)
    }

  # github_team_members.dev will be updated in-place
  ~ resource "github_team_members" "dev" {
        id      = "7332815"
        # (1 unchanged attribute hidden)

      - members {
          - role     = "maintainer" -> null
          - username = "infrahouse8" -> null
        }
      + members {
          + role     = "member"
          + username = "infrahouse8"
        }

        # (2 unchanged blocks hidden)
    }

  # module.aws_service_infrahouse_app.github_repository_file.makefile_fragment[0] will be updated in-place
  ~ resource "github_repository_file" "makefile_fragment" {
      ~ commit_message      = "Update makefiles/Makefile" -> "Add makefiles/Makefile"
        id                  = "aws-service-infrahouse-app:makefiles/Makefile:main"
        # (9 unchanged attributes hidden)
    }

  # module.aws_service_infrahouse_app_gha_development.module.state-manager.aws_iam_policy.permissions_ro will be destroyed
  # (because aws_iam_policy.permissions_ro is not in configuration)
  - resource "aws_iam_policy" "permissions_ro" {
      - arn              = "arn:aws:iam::289256138624:policy/ih-tf-aws-service-infrahouse-app-state-manager-ro20260525035601478300000001" -> null
      - attachment_count = 0 -> null
      - id               = "arn:aws:iam::289256138624:policy/ih-tf-aws-service-infrahouse-app-state-manager-ro20260525035601478300000001" -> null
      - name             = "ih-tf-aws-service-infrahouse-app-state-manager-ro20260525035601478300000001" -> null
      - name_prefix      = "ih-tf-aws-service-infrahouse-app-state-manager-ro" -> null
      - path             = "/" -> null
      - policy           = jsonencode(
            {
              - Statement = [
                  - {
                      - Action   = "s3:ListBucket"
                      - Effect   = "Allow"
                      - Resource = "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app"
                    },
                  - {
                      - Action   = "s3:GetObject"
                      - Effect   = "Allow"
                      - Resource = [
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/plans/*",
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/development/terraform.tfstate.tflock",
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/development/terraform.tfstate",
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/*.zip",
                        ]
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - policy_id        = "ANPAUGWICM6AJ4AVBO7MR" -> null
      - tags             = {
          - "created_by_module" = "infrahouse/state-manager/aws"
          - "environment"       = "development"
        } -> null
      - tags_all         = {
          - "created_by"        = "infrahouse/github-control"
          - "created_by_module" = "infrahouse/state-manager/aws"
          - "environment"       = "development"
        } -> null
        # (1 unchanged attribute hidden)
    }

  # module.aws_service_infrahouse_app_gha_development.module.state-manager.aws_iam_policy.permissions_rw will be destroyed
  # (because aws_iam_policy.permissions_rw is not in configuration)
  - resource "aws_iam_policy" "permissions_rw" {
      - arn              = "arn:aws:iam::289256138624:policy/ih-tf-aws-service-infrahouse-app-state-manager-rw20260525035601478400000002" -> null
      - attachment_count = 0 -> null
      - id               = "arn:aws:iam::289256138624:policy/ih-tf-aws-service-infrahouse-app-state-manager-rw20260525035601478400000002" -> null
      - name             = "ih-tf-aws-service-infrahouse-app-state-manager-rw20260525035601478400000002" -> null
      - name_prefix      = "ih-tf-aws-service-infrahouse-app-state-manager-rw" -> null
      - path             = "/" -> null
      - policy           = jsonencode(
            {
              - Statement = [
                  - {
                      - Action   = [
                          - "s3:PutObject",
                          - "s3:DeleteObject",
                        ]
                      - Effect   = "Allow"
                      - Resource = [
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/plans/*",
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/development/terraform.tfstate.tflock",
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/development/terraform.tfstate",
                          - "arn:aws:s3:::infrahouse-github-control-aws-service-infrahouse-app/*.zip",
                        ]
                    },
                  - {
                      - Action   = [
                          - "dynamodb:PutItem",
                          - "dynamodb:GetItem",
                          - "dynamodb:DescribeTable",
                          - "dynamodb:DeleteItem",
                        ]
                      - Effect   = "Allow"
                      - Resource = "arn:aws:dynamodb:us-west-1:289256138624:table/infrahouse-github-control-aws-service-infrahouse-app-exciting-buzzard"
                    },
                ]
              - Version   = "2012-10-17"
            }
        ) -> null
      - policy_id        = "ANPAUGWICM6ABV7BROCJZ" -> null
      - tags             = {
          - "created_by_module" = "infrahouse/state-manager/aws"
          - "environment"       = "development"
        } -> null
      - tags_all         = {
          - "created_by"        = "infrahouse/github-control"
          - "created_by_module" = "infrahouse/state-manager/aws"
          - "environment"       = "development"
        } -> null
        # (1 unchanged attribute hidden)
    }

Plan: 0 to add, 3 to change, 2 to destroy.

Warning: Argument is deprecated

  with module.ih_8_repos.github_repository.repo,
  on modules/local-repo/repos.tf line 4, in resource "github_repository" "repo":
   4:   has_downloads        = false

This attribute is no longer in use, but it hasn't been removed yet. It will
be removed in a future version. See
https://github.com/orgs/community/discussions/102145#discussioncomment-8351756

(and 6 more similar warnings elsewhere)

Warning: Deprecated attribute

  on .terraform/modules/actions-runner-pem-493370826424-uw1/data_sources.tf line 11, in data "external" "secret_value":
  11:     "python", "${path.module}/assets/get_secret.py", data.aws_region.current.name, aws_secretsmanager_secret.secret.id, data.aws_iam_role.caller_role.arn

The attribute "name" is deprecated. Refer to the provider documentation for
details.

(and 5 more similar warnings elsewhere)

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tf.plan

To perform exactly these actions, run the following command to apply:
    terraform apply "tf.plan"
metadata
eyJzMzovL2luZnJhaG91c2UtZ2l0aHViLWNvbnRyb2wtc3RhdGUvdGVycmFmb3JtLnRmc3RhdGUiOiB7InN1Y2Nlc3MiOiB0cnVlLCAiYWRkIjogMCwgImNoYW5nZSI6IDMsICJkZXN0cm95IjogMn19

@akuzminsky akuzminsky merged commit 11a154e into main May 25, 2026
2 checks passed
@akuzminsky akuzminsky deleted the revert-29-add-development-env-infrahouse-app branch May 25, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants