Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

revert(terraform): validate configuration if triggered by Dependabot #635

Conversation

hknutsen
Copy link
Member

@hknutsen hknutsen commented Jan 16, 2025

The Terraform workflow currently throws an error if triggered by Dependabot and Dependabot secrets AZURE_CLIENT_ID, AZURE_SUBSCRIPTION_ID and/or AZURE_TENANT_ID are not configured, as these secrets are required by the Terraform workflow.

There are three possible solutions to this issue:

  1. Set these secrets as not required in the Terraform workflow. The downside of this solution is that it can cause confusion regarding the usage of the Terraform workflow, as these secrets are still required for normal use, they're just not marked as required to prevent this error when triggered by Dependabot.

  2. Add these Dependabot secrets to the relevant repository and set the values to empty strings. This adds an, in my opinion, unnecessary and confusing prerequisite for the Terraform workflow.

  3. Revert the commit that broke the Terraform workflow.

Going for solution 3 keeps the Terraform workflow as simple as possible, so that is the solution that I've gone for.

This reverts commit 9d552d9.

…#623)"

The Terraform workflow currently throws an error if triggered by
Dependabot and Dependabot secrets `AZURE_CLIENT_ID`,
`AZURE_SUBSCRIPTION_ID` and/or `AZURE_TENANT_ID` are not configured, as
these secrets are required by the Terraform workflow.

There are two possible solutions to this issue:

1. Set these secrets as not required in the Terraform workflow.
   The downside of this solution is that it can cause confusion regarding
   the usage of the Terraform workflow, as these secrets are still
   required for normal use, they're just not marked as required to
   prevent this error when triggered by Dependabot.

2. Add these Dependabot secrets to the relevant repository and set the
   values to empty strings. This adds an, in my opinion, unnecessary
   and confusing prerequisite for the Terraform workflow.

3. Revert the commit that broke the Terraform workflow.

Going for solution 3 keeps the Terraform workflow as simple as possible,
so that is the solution that I've gone for.

This reverts commit 9d552d9.
@hknutsen hknutsen self-assigned this Jan 16, 2025
@hknutsen hknutsen marked this pull request as ready for review January 16, 2025 09:25
@hknutsen hknutsen requested a review from a team as a code owner January 16, 2025 09:25
@hknutsen hknutsen merged commit 1ef1222 into main Jan 16, 2025
11 checks passed
@hknutsen hknutsen deleted the revert/terraform/validate-configuration-if-triggered-by-dependabot branch January 16, 2025 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants