sync with terraform bootstrap project

Author: ivankatliarchuk

.chglog/CHANGELOG.tpl.md

@@ -1,6 +1,4 @@
 # top-most EditorConfig file
-root = true
-
 [*]
 end_of_line = lf
 charset = utf-8

.chglog/config.yml

@@ -0,0 +1,26 @@
+# These settings are synced to GitHub by https://probot.github.io/apps/settings/
+_extends: .github
+
+repository:
+  # See https://developer.github.com/v3/repos/#edit for all available settings.
+  name: terraform-kubernetes-velero
+  description: "ℹ️ Velero release with terraform and helm."
+  homepage: https://ivankatliarchuk.github.io
+  topics: ivank, terraform, terraform-module, helm, kubernetes, velero
+  private: false
+  has_issues: true
+  has_projects: false
+  has_wiki: false
+  has_downloads: false
+  has_pages: true
+  is_template: true
+  default_branch: master
+  allow_squash_merge: true
+  allow_merge_commit: true
+  allow_rebase_merge: true
+  delete_branch_on_merge: true
+  enable_automated_security_fixes: true
+  enable_vulnerability_alerts: false
+
+branches:
+  - name: master

.editorconfig

@@ -0,0 +1,52 @@
+---
+name: linter
+# This workflow is triggered on pushes to the repository.
+on:
+  push:
+  pull_request:
+    branches:
+      - main
+      - master
+  workflow_dispatch:
+
+jobs:
+  terraform-validate:
+    name: code format
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      # https://github.com/hashicorp/setup-terraform
+      - uses: hashicorp/setup-terraform@v2
+
+      - name: Cache terraform folder
+        uses: actions/cache@v3
+        with:
+          path: ./.terraform
+          key: terraform
+
+      - name: terraform fmt
+        run: terraform fmt -check -recursive -diff
+        continue-on-error: true
+
+      - name: terraform init
+        run: terraform init
+
+      - name: terraform validate
+        run: terraform validate
+
+  tflint:
+    name: "tflint"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/cache@v3
+        name: Cache tflint plugin dir
+        with:
+          path: ~/.tflint.d/plugins
+          key: ${{ matrix.os }}-tflint-${{ hashFiles('.tflint.hcl') }}
+      - uses: terraform-linters/setup-tflint@v2
+        name: setup tflint
+      - name: init tflint
+        run: tflint --init --config .tflint.hcl
+      - name: run tflint
+        run: tflint -f compact --config .tflint.hcl

.github/settings.yml

@@ -0,0 +1,49 @@
+name: 'validate-pr-title'
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - edited
+      - synchronize
+
+jobs:
+  main:
+    name: validate pr title
+    runs-on: ubuntu-latest
+    steps:
+      # Please look up the latest version from
+      # https://github.com/amannn/action-semantic-pull-request/releases
+      - uses: amannn/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          # Configure which types are allowed.
+          # Default: https://github.com/commitizen/conventional-commit-types
+          types: |
+            fix
+            feat
+            docs
+            ci
+            chore
+          # Configure that a scope must always be provided.
+          requireScope: false
+          # If `subjectPattern` is configured, you can use this property to override
+          # the default error message that is shown when the pattern doesn't match.
+          # The variables `subject` and `title` can be used within the message.
+          subjectPatternError: |
+            The subject "{subject}" found in the pull request title "{title}"
+            didn't match the configured pattern. Please ensure that the subject
+            starts with an uppercase character.
+          # For work-in-progress PRs you can typically use draft pull requests
+          # from Github. However, private repositories on the free plan don't have
+          # this option and therefore this action allows you to opt-in to using the
+          # special "[WIP]" prefix to indicate this state. This will avoid the
+          # validation of the PR title and the pull request checks remain pending.
+          # Note that a second check will be reported if this is enabled.
+          wip: true
+          # When using "Squash and merge" on a PR with only one commit, GitHub
+          # will suggest using that commit message instead of the PR title for the
+          # merge commit, and it's easy to commit this by mistake. Enable this option
+          # to also validate the commit message for one commit PRs.
+          validateSingleCommit: false

.github/workflows/linter.yml

@@ -1,3 +1,4 @@
+---
 name: release.draft
 
 on:
@@ -10,32 +11,39 @@ on:
         description: Is this a pre-release
         required: true
         default: true
+        type: boolean
       publish:
         description: Publish release
         required: false
         default: false
+        type: boolean
       bump:
         description: 'Bumping (#major, #minor or #patch)'
         required: false
         default: patch
+        type: choice
+        options:
+        - 'patch'
+        - 'minor'
+        - 'major'
 
 jobs:
   draft-a-release:
     runs-on: ubuntu-latest
     steps:
 
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - name: check next version
-        uses: anothrNick/github-tag-action@1.38.0
+        uses: anothrNick/github-tag-action@1.39.0
         id: tag
         env:
           DRY_RUN: true
           WITH_V: true
           DEFAULT_BUMP: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.bump || 'patch' }}
 
       - name: release-draft
-        uses: release-drafter/release-drafter@v5.15.0
+        uses: release-drafter/release-drafter@v5.20.0
         if: "!contains(github.event.head_commit.message, 'skip')"
         id: release
         env:

.github/workflows/main.yaml

@@ -1,12 +1,12 @@
 repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v4.0.1
+  rev: v4.3.0
   hooks:
   - id: check-added-large-files
     args: ['--maxkb=500']
   - id: check-executables-have-shebangs
   - id: pretty-format-json
-    args: ['--autofix', '--no-sort-keys', '--indent=4']
+    args: ['--autofix', '--no-sort-keys', '--indent=2']
   - id: check-byte-order-marker
   - id: check-case-conflict
   - id: check-executables-have-shebangs
@@ -16,13 +16,9 @@ repos:
   - id: check-merge-conflict
   - id: detect-aws-credentials
     args: ['--allow-missing-credentials']
-- repo: git://github.com/antonbabenko/pre-commit-terraform
-  rev: v1.51.0
+- repo: https://github.com/antonbabenko/pre-commit-terraform
+  rev: v1.74.1
   hooks:
   - id: terraform_fmt
   - id: terraform_docs
   - id: terraform_tflint
-- repo: git://github.com/smian/pre-commit-makefile
-  rev: 261f8fb4b31dfdc05d1a1d7fbde1f1462ecde66d
-  hooks:
-  - id: makefile-doc

.github/workflows/pr-title.yml

@@ -1,37 +1,48 @@
 config {
-  ignore_module = {}
-  varfile = []
+  module = false
 }
 
-rule "terraform_documented_variables" {
+plugin "aws" {
   enabled = true
+  version = "0.13.3"
+  source  = "github.com/terraform-linters/tflint-ruleset-aws"
 }
 
-rule "terraform_documented_outputs" {
+rule "terraform_comment_syntax" {
   enabled = true
 }
 
-rule "terraform_comment_syntax" {
+rule "terraform_deprecated_index" {
   enabled = true
 }
 
-rule "terraform_naming_convention" {
+rule "terraform_deprecated_interpolation" {
   enabled = true
 }
 
-rule "terraform_deprecated_interpolation" {
+rule "terraform_documented_outputs" {
   enabled = true
 }
 
-rule "terraform_deprecated_index" {
+rule "terraform_documented_variables" {
   enabled = true
 }
 
-rule "terraform_required_providers" {
+rule "terraform_module_pinned_source" {
   enabled = true
+  style = "flexible"
 }
 
-rule "terraform_required_version" {
+rule "terraform_module_version" {
+  enabled = true
+}
+
+rule "terraform_naming_convention" {
+  enabled = true
+  format  = "snake_case"
+}
+
+rule "terraform_standard_module_structure" {
   enabled = true
 }
 
@@ -42,3 +53,7 @@ rule "terraform_typed_variables" {
 rule "terraform_unused_declarations" {
   enabled = true
 }
+
+rule "terraform_unused_required_providers" {
+  enabled = true
+}