♻️ Use REDCap Data Entry Triggers

Co-authored-by: Gabriel Schubiner <gabriel.schubiner@childmind.org>
Co-authored-by: Alex Franco <eng.franco@gmail.com>

Author: 3 people

.github/workflows/terraform-test.yaml

@@ -0,0 +1,50 @@
+name: Terraform Tests
+
+on:
+  pull_request:
+    paths:
+      - 'infrastructure/**'
+  push:
+    branches:
+      - main
+      - fix-alerts-more
+    paths:
+      - 'infrastructure/**'
+
+jobs:
+  terraform-tests:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: infrastructure
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: 1.6.0
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install testing tools
+        run: |
+          pip install checkov
+          curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sh | bash
+
+      - name: Make test script executable
+        run: chmod +x tests/test-terraform.sh
+
+      - name: Run tests
+        run: ./tests/test-terraform.sh
+
+      - name: Terraform Plan
+        run: |
+          terraform init -backend=false
+          terraform plan -no-color
+        continue-on-error: true

.gitignore

@@ -26,6 +26,8 @@ terraform.rc
 # Generated files
 generated_*
 **/generated_*
+.generated_*
+**/.generated_*
 
 # Keep backups in git (they're important!)
 !backups/

.pre-commit-config.yaml

@@ -28,11 +28,13 @@ repos:
     - id: terraform_tflint
       args:
       - --init
-      - --config=__GIT_WORKING_DIR__/.tflint.hcl
+      - --config=__GIT_WORKING_DIR__/infrastructure/tests/.tflint.hcl
       files: ^infrastructure/
     - id: terraform_validate
       files: ^infrastructure/
     - id: terraform_checkov
+      args:
+      - --args=--config-file __GIT_WORKING_DIR__/infrastructure/tests/.checkov.yaml
       files: ^infrastructure/
 - repo: https://github.com/DavidAnson/markdownlint-cli2
   rev: v0.22.0

infrastructure/.terraform.lock.hcl

@@ -0,0 +1,65 @@
+.PHONY: help test init plan apply destroy fmt validate lint security clean install-tools
+
+help:
+    @echo "Available targets:"
+    @echo "  test          - Run all tests"
+    @echo "  install-tools - Install testing dependencies"
+    @echo "  init          - Initialize Terraform"
+    @echo "  plan          - Show execution plan"
+    @echo "  apply         - Apply infrastructure changes"
+    @echo "  destroy       - Destroy infrastructure"
+    @echo "  fmt           - Format Terraform files"
+    @echo "  validate      - Validate configuration"
+    @echo "  lint          - Run tflint"
+    @echo "  security      - Run security scan"
+    @echo "  clean         - Clean up generated files"
+
+test:
+    @./tests/test-terraform.sh
+
+install-tools:
+    @chmod +x tests/install-tools.sh
+    @./tests/install-tools.sh
+
+init:
+    terraform init
+
+plan: init
+    terraform plan
+
+apply: test
+    ./safe-apply.sh
+
+destroy:
+    terraform destroy
+
+fmt:
+    terraform fmt -recursive
+
+validate: init
+    terraform validate
+
+lint:
+    @if command -v tflint >/dev/null 2>&1; then \
+        tflint --config tests/.tflint.hcl --init; \
+        tflint --config tests/.tflint.hcl; \
+    else \
+        echo "tflint not installed. Run: make install-tools"; \
+        exit 1; \
+    fi
+
+security:
+    @if command -v checkov >/dev/null 2>&1; then \
+        checkov -d . --config-file tests/.checkov.yaml; \
+    else \
+        echo "checkov not installed. Run: make install-tools"; \
+        exit 1; \
+    fi
+
+clean:
+    rm -rf .terraform
+    rm -f .terraform.lock.hcl
+    rm -f terraform.tfstate
+    rm -f terraform.tfstate.backup
+    rm -f plan.tfplan
+    rm -rf generated/