Remove legacy Terraform configuration files and add a new script for setting up the S3 backend. The script initializes the backend resources, generates necessary Terraform configuration files, and ensures prerequisites are met before execution.

Author: iam-oov

.github/workflows/deploy-to-ecr.yml

@@ -8,6 +8,8 @@ on:
 env:
   AWS_REGION: ${{ secrets.AWS_REGION }}
   AWS_IAM_ROLE_ARN: ${{ secrets.AWS_IAM_ROLE_ARN }}
+  TERRAFORM_DIR: ./01-tf
+  TERRAFORM_VERSION: '1.12.0'
 
 jobs:
   deploy:
@@ -30,24 +32,24 @@ jobs:
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@v3
         with:
-          terraform_version: '1.12.0'
+          terraform_version: ${{ env.TERRAFORM_VERSION }}
 
       - name: Terraform Init
         id: init
         run: terraform init -input=false
-        working-directory: ./terraform
+        working-directory: ${{ env.TERRAFORM_DIR }}
 
       - name: Terraform Apply
         id: apply
         run: |
           echo "O_AWS_REGION=${{ env.AWS_REGION }}"
           terraform apply -auto-approve -input=false -var="AWS_REGION=${{ env.AWS_REGION }}"
-        working-directory: ./terraform
+        working-directory: ${{ env.TERRAFORM_DIR }}
 
       - name: Get ECR Repository URL
         id: get_ecr_url
         run: echo "ECR_REPOSITORY_URL=$(terraform output -raw ecr_repository_url)" >> $GITHUB_ENV
-        working-directory: ./terraform
+        working-directory: ${{ env.TERRAFORM_DIR }}
 
       - name: Login to Amazon ECR
         id: login-ecr

pre-terraform/.terraform.lock.hcl renamed to 00-tf-infra/.terraform.lock.hcl

@@ -3,7 +3,7 @@ output "s3_bucket_name" {
   value       = aws_s3_bucket.terraform_state.bucket
 }
 
-output "dynamodb_table_name" {
+output "dynamodb_lock_table_name" {
   description = "DynamoDB table name for Terraform locks"
   value       = aws_dynamodb_table.terraform_locks.name
 }

pre-terraform/main.tf renamed to 00-tf-infra/main.tf

@@ -0,0 +1,13 @@
+# !!! DO NOT MODIFY THIS FILE MANUALLY !!!
+# File generated by 'setup_tf_backend.sh' dont modify this file manually
+# unless you know what you are doing
+
+terraform {
+  backend "s3" {
+    bucket         = "poc-hello-world-tfstate-058264118467-us-east-1"
+    key            = "states/poc-hello-world/terraform.tfstate"
+    region         = "us-east-1"
+    dynamodb_table = "poc-hello-world-terraform-lock-table"
+    encrypt        = true
+  }
+}

pre-terraform/outputs.tf renamed to 00-tf-infra/outputs.tf

@@ -0,0 +1,11 @@
+provider "aws" {
+  region = var.AWS_REGION
+}
+
+resource "aws_ecr_repository" "app_ecr" {
+  name = var.ECR_REPOSITORY_NAME
+
+  tags = {
+    Environment = "dev"
+  }
+}

pre-terraform/variables.tf renamed to 00-tf-infra/variables.tf

@@ -1,3 +1,7 @@
+# !!! DO NOT MODIFY THIS FILE MANUALLY !!!
+# File generated by 'setup_tf_backend.sh' dont modify this file manually
+# unless you know what you are doing
+
 variable "AWS_REGION" {
   description = "AWS region for ECR repository"
   type        = string