-
-
Notifications
You must be signed in to change notification settings - Fork 131
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: add support for optional S3 secondary artifact #78
Conversation
150b0fd
to
4cea1c8
Compare
/test all |
/rebuild-readme |
/test all |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍 Handful of comments -- let me know if you have any questions
main.tf
Outdated
type = "S3" | ||
location = var.secondary_artifact_location | ||
artifact_identifier = var.secondary_artifact_identifier | ||
encryption_disabled = true |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you add an additional variable for secondary_artifact_encryption_enabled
, set the default to false
, and use that var here? All Cloud Posse modules are trying to pass BridgeCrew security scanning and I'd bet this might fail in the future if the default / hardcoded value is false.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@Gowiem just to clarify, do you want secondary_artifact_encryption_enabled
, with it set to false
, or secondary_artifact_encryption_disabled
, with it set to false
? I'm guessing you actually meant the latter?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I went ahead with that assumption that the variable name should be secondary_artifact_encryption_disabled
, and set to false
. I can fix if this is not what you intended.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah sorry @jhosteny I did mean secondary_artifact_encryption_enabled
. We have _enabled
as a convention for any new bool
vars. Please update if you don't mind.
/test all |
/test all |
@Gowiem this has been updated per your last comment. However, |
@jhosteny ah frustrating. Let's try building via ChatOps and see if it will pass after that... |
/rebuild-readme |
/test readme |
@Gowiem does this look okay now? |
This pull request is now in conflict. Could you fix it @jhosteny? 🙏 |
/test all |
/test all |
This pull request is now in conflict. Could you fix it @jhosteny? 🙏 |
/test all |
Fixes #77.
what
why
references
Closes #77