From a42fa7024ada66ffe726c54455d1e7fef23752c6 Mon Sep 17 00:00:00 2001 From: Oleksandr Kuzminskyi Date: Tue, 26 May 2026 07:53:24 -0700 Subject: [PATCH] Add production environment for aws-service-infrahouse-app Co-Authored-By: Claude Opus 4.6 --- repo-aws-service-infrahouse-app.tf | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/repo-aws-service-infrahouse-app.tf b/repo-aws-service-infrahouse-app.tf index be54617..fe74049 100644 --- a/repo-aws-service-infrahouse-app.tf +++ b/repo-aws-service-infrahouse-app.tf @@ -34,6 +34,25 @@ module "aws_service_infrahouse_app_gha_sandbox" { ] } +module "aws_service_infrahouse_app_gha_production" { + source = "registry.infrahouse.com/infrahouse/gha-admin/aws" + version = "4.0.0" + providers = { + aws = aws.aws-493370826424-uw1 + aws.cicd = aws.aws-493370826424-uw1 + aws.tfstates = aws.aws-289256138624-uw1 + } + environment = "production" + gh_org_name = local.gh_org_name + repo_name = "aws-service-infrahouse-app" + state_bucket = module.aws_service_infrahouse_app_state.bucket_name + state_key = "production/terraform.tfstate" + terraform_locks_table_arn = module.aws_service_infrahouse_app_state.lock_table_arn + trusted_arns = [ + local.root_sso_admin_arn + ] +} + # --- The service repo (pure GitHub, no AWS) --- module "aws_service_infrahouse_app" { source = "./modules/service-repo" @@ -52,6 +71,13 @@ module "aws_service_infrahouse_app" { state_manager_role_arn = module.aws_service_infrahouse_app_gha_sandbox.state_manager_role_arn deploy_order = 0 } + production = { + region = local.aws_default_region + admin_role_arn = module.aws_service_infrahouse_app_gha_production.admin_role_arn + github_role_arn = module.aws_service_infrahouse_app_gha_production.github_role_arn + state_manager_role_arn = module.aws_service_infrahouse_app_gha_production.state_manager_role_arn + deploy_order = 1 + } } pipeline_guardians = github_team.admins.slug