cloudposse · goruha · Jun 1, 2024 · May 29, 2024 · May 30, 2024 · May 30, 2024
@@ -9,6 +9,11 @@ on:
         required: false
         default: '["ubuntu-latest"]'
 
+permissions:
+  id-token: write
+  contents: write
+  pull-requests: write
+
 jobs:
   major-release-tagger:
     runs-on: ${{ fromJSON(inputs.runs-on) }}

@@ -0,0 +1,5 @@
+## what
+- Update workflow (`.github/workflows/release.yaml`) to have permission to comment on PR
+
+## why
+- Add comment to PR when it is released
@@ -0,0 +1,14 @@
+cloudposse/github-action-test-action
+cloudposse/github-action-atmos-get-setting
+cloudposse/github-action-pre-commit
+cloudposse/github-action-config-levels
+cloudposse/github-action-atmos-terraform-drift-detection
+cloudposse/github-action-matrix-outputs-write
+cloudposse/github-action-setup-atmos
+cloudposse/github-action-docker-build-push
+cloudposse/github-action-docker-image-exists
+cloudposse/github-action-docker-promote
+cloudposse/github-action-deploy-argocd
+cloudposse/github-action-deploy-helmfile
+cloudposse/github-action-auto-release
+cloudposse/github-action-preview-environment-controller
@@ -0,0 +1,15 @@
+cloudposse/github-action-kubernetes-environment
+cloudposse/github-action-yaml-config-query
+cloudposse/github-action-run-ecspresso
+cloudposse/github-action-jq
+cloudposse/github-action-auto-format
+cloudposse/github-action-sync-docker-repos
+cloudposse/github-action-matrix-extended
+cloudposse/github-action-atmos-terraform-select-components
+cloudposse/github-action-atmos-terraform-apply
+cloudposse/github-action-atmos-affected-trigger-spacelift
+cloudposse/github-action-matrix-outputs-read
+cloudposse/github-action-release-label-validator
+cloudposse/github-action-atmos-terraform-plan
+cloudposse/github-action-atmos-affected-stacks
+cloudposse/github-action-atmos-terraform-drift-remediation
@@ -0,0 +1,16 @@
+cloudposse/github-action-release-branch-manager
+cloudposse/github-action-major-release-tagger
+cloudposse/github-action-validate-codeowners
+cloudposse/github-action-terraform-auto-context
+cloudposse/github-action-atmos-component-updater
+cloudposse/github-action-deploy-ecspresso
+cloudposse/github-action-wait-commit-status
+cloudposse/github-action-secret-outputs
+cloudposse/github-action-interface-environment
+cloudposse/github-action-terratest
+cloudposse/github-action-spacelift-stack-deploy
+cloudposse/github-action-aws-region-reduction-map
+cloudposse/github-action-docker-compose-test-run
+cloudposse/github-action-seek-deployment
+cloudposse/github-action-preview-labels-cleanup
+cloudposse/github-action-monorepo-random-controller
@@ -0,0 +1,5 @@
+cloudposse/github-action-deploy-spacelift
+cloudposse/github-action-telemetry
+cloudposse/github-action-mega-linter
+cloudposse/github-action-datadog-notify
+cloudposse/github-action-pull-request-labeling
@@ -0,0 +1,5 @@
+#!/bin/bash
+gh repo list cloudposse --limit 500 --json name,owner \
+	--jq '.[] | select(.name | test("^github-action-")) | .owner.login + "/" + .name' > repos.txt
+
+split -d -l 16 repos.txt repos-
@@ -0,0 +1,51 @@
+cloudposse/github-action-test-action
+cloudposse/github-action-atmos-get-setting
+cloudposse/github-action-pre-commit
+cloudposse/github-action-config-levels
+cloudposse/github-action-atmos-terraform-drift-detection
+cloudposse/github-action-matrix-outputs-write
+cloudposse/github-action-setup-atmos
+cloudposse/github-action-docker-build-push
+cloudposse/github-action-docker-image-exists
+cloudposse/github-action-docker-promote
+cloudposse/github-action-deploy-argocd
+cloudposse/github-action-deploy-helmfile
+cloudposse/github-action-auto-release
+cloudposse/github-action-preview-environment-controller
+cloudposse/github-action-kubernetes-environment
+cloudposse/github-action-yaml-config-query
+cloudposse/github-action-run-ecspresso
+cloudposse/github-action-terraform-plan-storage
+cloudposse/github-action-jq
+cloudposse/github-action-auto-format
+cloudposse/github-action-sync-docker-repos
+cloudposse/github-action-matrix-extended
+cloudposse/github-action-atmos-terraform-select-components
+cloudposse/github-action-atmos-terraform-apply
+cloudposse/github-action-atmos-affected-trigger-spacelift
+cloudposse/github-action-matrix-outputs-read
+cloudposse/github-action-release-label-validator
+cloudposse/github-action-atmos-terraform-plan
+cloudposse/github-action-atmos-affected-stacks
+cloudposse/github-action-atmos-terraform-drift-remediation
+cloudposse/github-action-release-branch-manager
+cloudposse/github-action-major-release-tagger
+cloudposse/github-action-validate-codeowners
+cloudposse/github-action-terraform-auto-context
+cloudposse/github-action-atmos-component-updater
+cloudposse/github-action-deploy-ecspresso
+cloudposse/github-action-wait-commit-status
+cloudposse/github-action-secret-outputs
+cloudposse/github-action-interface-environment
+cloudposse/github-action-terratest
+cloudposse/github-action-spacelift-stack-deploy
+cloudposse/github-action-aws-region-reduction-map
+cloudposse/github-action-docker-compose-test-run
+cloudposse/github-action-seek-deployment
+cloudposse/github-action-preview-labels-cleanup
+cloudposse/github-action-monorepo-random-controller
+cloudposse/github-action-deploy-spacelift
+cloudposse/github-action-telemetry
+cloudposse/github-action-mega-linter
+cloudposse/github-action-datadog-notify
+cloudposse/github-action-pull-request-labeling
@@ -0,0 +1,6 @@
+title "Update release workflow to allow pull-requests: write"
+
+install .github/workflows/release.yml
+
+# Merge the PR
+auto_merge
@@ -0,0 +1,5 @@
+## what
+- Update workflow (`.github/workflows/release.yaml`) to have permission to comment on PR
+
+## why
+- So we can support commenting on PRs with a link to the release
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-rds
+cloudposse/terraform-aws-ec2-autoscale-group
+cloudposse/terraform-aws-ecs-alb-service-task
+cloudposse/terraform-aws-waf
+cloudposse/terraform-module-test
+cloudposse/terraform-aws-vpn-connection
+cloudposse/terraform-aws-elastic-beanstalk-environment
+cloudposse/terraform-aws-ssm-tls-ssh-key-pair
+cloudposse/terraform-aws-dynamic-subnets
+cloudposse/terraform-spacelift-cloud-infrastructure-automation
+cloudposse/terraform-aws-alb-ingress
+cloudposse/terraform-aws-ecs-web-app
+cloudposse/terraform-aws-eks-fargate-profile
+cloudposse/terraform-aws-eks-node-group
+cloudposse/terraform-aws-iam-policy
+cloudposse/terraform-aws-eks-cluster
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-ec2-instance
+cloudposse/terraform-aws-named-subnets
+cloudposse/terraform-aws-documentdb-cluster
+cloudposse/terraform-aws-cloudfront-s3-cdn
+cloudposse/terraform-aws-ec2-bastion-server
+cloudposse/terraform-aws-api-gateway
+cloudposse/terraform-null-smtp-mail
+cloudposse/terraform-aws-ssm-patch-manager
+cloudposse/terraform-aws-iam-user
+cloudposse/terraform-aws-vpc-peering-multi-account
+cloudposse/terraform-aws-step-functions
+cloudposse/terraform-aws-athena
+cloudposse/terraform-aws-ecr-public
+cloudposse/terraform-aws-service-quotas
+cloudposse/terraform-aws-elasticache-memcached
+cloudposse/terraform-aws-macie
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-sso
+cloudposse/terraform-aws-rds-replica
+cloudposse/terraform-aws-eks-spotinst-ocean-nodepool
+cloudposse/terraform-aws-inspector
+cloudposse/terraform-yaml-config
+cloudposse/terraform-opsgenie-incident-management
+cloudposse/terraform-aws-cloudwatch-events
+cloudposse/terraform-aws-transit-gateway
+cloudposse/terraform-aws-sns-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ses
+cloudposse/terraform-aws-ssm-parameter-chamber-reader
+cloudposse/terraform-aws-cloudformation-stack
+cloudposse/terraform-aws-cloudformation-stack-set
+cloudposse/terraform-aws-iam-chamber-s3-role
+cloudposse/terraform-aws-iam-s3-user
+cloudposse/terraform-kubernetes-tfc-cloud-agent
@@ -0,0 +1,16 @@
+cloudposse/terraform-example-module
+cloudposse/terraform-aws-rds-cluster-instance-group
+cloudposse/terraform-aws-iam-account-settings
+cloudposse/terraform-aws-ecs-launch-template
+cloudposse/terraform-aws-sns-lambda-notify-slack
+cloudposse/terraform-aws-ecs-cloudwatch-autoscaling
+cloudposse/terraform-aws-alb-target-group-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ecs-cloudwatch-sns-alarms
+cloudposse/terraform-aws-cloudtrail-cloudwatch-alarms
+cloudposse/terraform-aws-ssm-parameter-store-policy-documents
+cloudposse/terraform-aws-ecs-spot-fleet
+cloudposse/terraform-aws-ssm-iam-role
+cloudposse/terraform-aws-sqs-cloudwatch-sns-alarms
+cloudposse/terraform-aws-lambda-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ecs-events
+cloudposse/terraform-aws-ecs-container-definition
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-ec2-instance-group
+cloudposse/terraform-aws-rds-cloudwatch-sns-alarms
+cloudposse/terraform-aws-ssm-parameter-store
+cloudposse/terraform-terraform-label
+cloudposse/terraform-tls-ssh-key-pair
+cloudposse/terraform-aws-kms-key
+cloudposse/terraform-aws-dynamodb-autoscaler
+cloudposse/terraform-aws-organization-access-group
+cloudposse/terraform-aws-organization-access-role
+cloudposse/terraform-aws-cloudwatch-flow-logs
+cloudposse/terraform-aws-cloudwatch-logs
+cloudposse/terraform-aws-multi-az-subnets
+cloudposse/terraform-aws-vpc-peering
+cloudposse/terraform-aws-datadog-integration
+cloudposse/terraform-aws-iam-assumed-roles
+cloudposse/terraform-aws-elastic-beanstalk-application
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-ec2-ami-snapshot
+cloudposse/terraform-aws-ec2-admin-server
+cloudposse/terraform-null-ansible
+cloudposse/terraform-aws-codebuild
+cloudposse/terraform-aws-s3-log-storage
+cloudposse/terraform-aws-route53-cluster-zone
+cloudposse/terraform-aws-route53-alias
+cloudposse/terraform-aws-key-pair
+cloudposse/terraform-aws-efs-backup
+cloudposse/terraform-aws-ecr
+cloudposse/terraform-aws-dynamodb
+cloudposse/terraform-aws-ec2-ami-backup
+cloudposse/terraform-datadog-platform
+cloudposse/terraform-aws-efs
+cloudposse/terraform-aws-sns-topic
+cloudposse/terraform-aws-firewall-manager
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-config
+cloudposse/terraform-aws-health-events
+cloudposse/terraform-aws-global-accelerator
+cloudposse/terraform-cloudflare-waf-rulesets
+cloudposse/terraform-aws-ssm-tls-self-signed-cert
+cloudposse/terraform-aws-config-storage
+cloudposse/terraform-cloudflare-zone
+cloudposse/terraform-aws-s3-website
+cloudposse/terraform-github-repository-webhooks
+cloudposse/terraform-external-module-artifact
+cloudposse/terraform-aws-code-deploy
+cloudposse/terraform-aws-ses-lambda-forwarder
+cloudposse/terraform-aws-elasticsearch
+cloudposse/terraform-aws-security-hub
+cloudposse/terraform-aws-guardduty
+cloudposse/terraform-aws-mwaa
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-efs-cloudwatch-sns-alarms
+cloudposse/terraform-aws-iam-role
+cloudposse/terraform-aws-cloudfront-cdn
+cloudposse/terraform-null-label
+cloudposse/terraform-aws-alb
+cloudposse/terraform-aws-rds-db-proxy
+cloudposse/terraform-aws-lakeformation
+cloudposse/terraform-aws-glue
+cloudposse/terraform-aws-lambda-function
+cloudposse/terraform-aws-transfer-sftp
+cloudposse/terraform-aws-emr-cluster
+cloudposse/terraform-aws-redshift-cluster
+cloudposse/terraform-aws-route53-resolver-dns-firewall
+cloudposse/terraform-aws-network-firewall
+cloudposse/terraform-aws-route53-cluster-hostname
+cloudposse/terraform-aws-dms
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-github-action-token-rotator
+cloudposse/terraform-aws-iam-system-user
+cloudposse/terraform-aws-kinesis-stream
+cloudposse/terraform-artifactory-kv-store
+cloudposse/terraform-aws-vpc
+cloudposse/terraform-aws-kv-store
+cloudposse/terraform-aws-nlb
+cloudposse/terraform-aws-refarch-utils
+cloudposse/terraform-aws-batch
+cloudposse/terraform-aws-utils
+cloudposse/terraform-aws-ecs-cluster
+cloudposse/terraform-aws-security-group
+cloudposse/terraform-aws-cicd
+cloudposse/terraform-aws-msk-apache-kafka-cluster
+cloudposse/terraform-aws-tfstate-backend
+cloudposse/terraform-yaml-stack-config
@@ -0,0 +1,16 @@
+cloudposse/terraform-aws-lambda-elasticsearch-cleanup
+cloudposse/terraform-aws-mq-broker
+cloudposse/terraform-aws-vpc-flow-logs-s3-bucket
+cloudposse/terraform-aws-datadog-lambda-forwarder
+cloudposse/terraform-aws-helm-release
+cloudposse/terraform-aws-cloudtrail-s3-bucket
+cloudposse/terraform-aws-ec2-client-vpn
+cloudposse/terraform-aws-eks-iam-role
+cloudposse/terraform-aws-s3-bucket
+cloudposse/terraform-aws-rds-cluster
+cloudposse/terraform-aws-backup
+cloudposse/terraform-aws-budgets
+cloudposse/terraform-aws-eks-workers
+cloudposse/terraform-aws-cloudtrail
+cloudposse/terraform-aws-ecs-codepipeline
+cloudposse/terraform-aws-acm-request-certificate
@@ -0,0 +1,6 @@
+cloudposse/terraform-aws-service-control-policies
+cloudposse/terraform-aws-lb-s3-bucket
+cloudposse/terraform-aws-elasticache-redis
+cloudposse/terraform-aws-amplify-app
+cloudposse/terraform-aws-managed-prometheus
+cloudposse/terraform-aws-managed-grafana
@@ -0,0 +1,5 @@
+#!/bin/bash
+gh repo list cloudposse --limit 500 --json name,owner \
+    --jq '.[] | select(.name | test("^terraform")) | select(.name | test("^terraform-provider") | not) | select(.name | test("^terraform-aws-components") | not) | .owner.login + "/" + .name' > repos.txt
+
+split -d -l 16 repos.txt repos-