Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion apps/backend/lambdas/auth/handler.ts
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ import {
} from '@aws-sdk/client-cognito-identity-provider';
import db from './db';

// Initialize Cognito client
// Initialize Cognito client (region defaults to us-east-2)
const cognitoClient = new CognitoIdentityProviderClient({
region: process.env.AWS_REGION || 'us-east-2',
});
Expand Down
8 changes: 6 additions & 2 deletions infrastructure/github/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@ No modules.
|------|------|
| [github_actions_secret.aws_access_key_id](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/actions_secret) | resource |
| [github_actions_secret.aws_secret_access_key](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/actions_secret) | resource |
| [github_actions_secret.cognito_client_id](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/actions_secret) | resource |
| [github_actions_secret.cognito_user_pool_id](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/actions_secret) | resource |
| [github_actions_secret.infisical_client_id](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/actions_secret) | resource |
| [github_actions_secret.infisical_client_secret](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/actions_secret) | resource |
| [github_actions_secret.slack_bot_token](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/actions_secret) | resource |
Expand All @@ -33,8 +35,10 @@ No modules.
| [github_branch_protection.main](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/branch_protection) | resource |
| [github_repository.branch](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository) | resource |
| [github_repository_collaborator.collaborators](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository_collaborator) | resource |
| [github_repository_file.rotation_json](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository_file) | resource |
| [github_repository_file.bot_config_json](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository_file) | resource |
| [github_repository_file.bot_state_json](https://registry.terraform.io/providers/integrations/github/latest/docs/resources/repository_file) | resource |
| [infisical_secrets.aws_folder](https://registry.terraform.io/providers/infisical/infisical/latest/docs/data-sources/secrets) | data source |
| [infisical_secrets.cognito_folder](https://registry.terraform.io/providers/infisical/infisical/latest/docs/data-sources/secrets) | data source |
| [infisical_secrets.github_folder](https://registry.terraform.io/providers/infisical/infisical/latest/docs/data-sources/secrets) | data source |
| [infisical_secrets.infisical_folder](https://registry.terraform.io/providers/infisical/infisical/latest/docs/data-sources/secrets) | data source |
| [infisical_secrets.slack_folder](https://registry.terraform.io/providers/infisical/infisical/latest/docs/data-sources/secrets) | data source |
Expand All @@ -50,7 +54,7 @@ No modules.
| <a name="input_review_bot_always_reviewer_slack"></a> [review\_bot\_always\_reviewer\_slack](#input\_review\_bot\_always\_reviewer\_slack) | Slack member ID of the person who reviews every PR | `string` | `"U07NGFM1QKE"` | no |
| <a name="input_review_bot_github_to_slack"></a> [review\_bot\_github\_to\_slack](#input\_review\_bot\_github\_to\_slack) | Map of GitHub username → Slack member ID (U0…) | `map(string)` | <pre>{<br> "Rayna-Yu": "U083UGSCU7P",<br> "bhuvanh66": "U084JKT1GG2",<br> "denniwang": "U07F8LM2X61",<br> "mehanana": "U084AMND8FK",<br> "nourshoreibah": "U07NGFM1QKE",<br> "saumyapalk23": "U09EYETUEGP",<br> "tsudhakar87": "U08NFFSJEG1"<br>}</pre> | no |
| <a name="input_review_bot_roster"></a> [review\_bot\_roster](#input\_review\_bot\_roster) | Ordered list of GitHub usernames for round-robin review assignment | `list(string)` | <pre>[<br> "denniwang",<br> "bhuvanh66",<br> "Rayna-Yu",<br> "mehanana",<br> "tsudhakar87",<br> "saumyapalk23"<br>]</pre> | no |
| <a name="input_review_bot_slack_channel_id"></a> [review\_bot\_slack\_channel\_id](#input\_review\_bot\_slack\_channel\_id) | Slack channel ID where review notifications are posted | `string` | `"C09DGFG5JR4"` | no |
| <a name="input_review_bot_slack_channel_id"></a> [review\_bot\_slack\_channel\_id](#input\_review\_bot\_slack\_channel\_id) | Slack channel ID where review notifications are posted | `string` | `"C0ADQN0B6F8"` | no |

## Outputs

Expand Down
20 changes: 20 additions & 0 deletions infrastructure/github/secrets.tf
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,26 @@ resource "github_actions_secret" "infisical_client_secret" {
plaintext_value = data.infisical_secrets.infisical_folder.secrets["infisical-tf-client-secret"].value
}

# ── Cognito (for lambda CI tests) ────────────────────────────

data "infisical_secrets" "cognito_folder" {
env_slug = "dev"
workspace_id = var.infisical_workspace_id
folder_path = "/aws/cognito"
}

resource "github_actions_secret" "cognito_user_pool_id" {
repository = github_repository.branch.name
secret_name = "COGNITO_USER_POOL_ID"
plaintext_value = data.infisical_secrets.cognito_folder.secrets["user_pool_id"].value
}

resource "github_actions_secret" "cognito_client_id" {
repository = github_repository.branch.name
secret_name = "COGNITO_CLIENT_ID"
plaintext_value = data.infisical_secrets.cognito_folder.secrets["client_id"].value
}

# ── PR Review Bot ────────────────────────────────────────────

data "infisical_secrets" "slack_folder" {
Expand Down