Patrick de Ruiter
899fac55bb
Some checks failed
Code Quality & Security Scan / TFLint (push) Successful in 20s
Code Quality & Security Scan / Terraform Destroy (push) Has been skipped
Code Quality & Security Scan / Tfsec Security Scan (push) Successful in 30s
Code Quality & Security Scan / Checkov Security Scan (push) Successful in 37s
Code Quality & Security Scan / Terraform Validate (push) Failing after 31s
Code Quality & Security Scan / SonarQube Scan (push) Has been skipped
Code Quality & Security Scan / Terraform Plan (push) Has been skipped
Code Quality & Security Scan / Terraform Apply (push) Has been skipped
Added working pipeline based on terraform-docker-eda module: - Added pipeline.yaml with complete CI/CD workflow including Vault CLI setup - Added setup-ssh.sh for Docker provider SSH key authentication - Added .tflint.hcl for Terraform linting configuration - Removed old sonarqube.yaml pipeline file Pipeline now includes: - Vault CLI installation and SSH key setup via script - Proper backend configuration with -backend-config flags - All security scans: TFLint, Tfsec, Checkov - SonarQube integration - Terraform plan/apply with MinIO artifact storage - Terraform destroy workflow with manual approval This pipeline configuration has been proven to work with Vault, MinIO, and Docker providers using self-signed certificates.
38 lines
586 B
HCL
38 lines
586 B
HCL
plugin "terraform" {
|
|
enabled = true
|
|
preset = "recommended"
|
|
}
|
|
|
|
# Additional Terraform best practice rules
|
|
rule "terraform_deprecated_interpolation" {
|
|
enabled = true
|
|
}
|
|
|
|
rule "terraform_documented_outputs" {
|
|
enabled = true
|
|
}
|
|
|
|
rule "terraform_documented_variables" {
|
|
enabled = true
|
|
}
|
|
|
|
rule "terraform_naming_convention" {
|
|
enabled = true
|
|
}
|
|
|
|
rule "terraform_required_version" {
|
|
enabled = true
|
|
}
|
|
|
|
rule "terraform_required_providers" {
|
|
enabled = true
|
|
}
|
|
|
|
rule "terraform_unused_declarations" {
|
|
enabled = true
|
|
}
|
|
|
|
rule "terraform_standard_module_structure" {
|
|
enabled = true
|
|
}
|