terraform-aws-codebuild

Initial release with production Semantic Versioning, part of Cloud Posse's general policy to convert to production versioning as we make updates to relatively mature modules, especially those where we see breaking changes coming in the near future. This module will evolve with breaking changes as we convert it to use our s3-log-storage module and be compatible with the new S3 resource structure introduced in AWS Terraform provider v4.0.

This release follows v0.39.0 with the change:

what

• use numeric instead of number as it's deprecated

why

deprecation warnings

references

https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/string#number

what

• Add codecommit:GitPull policy

why

• so that CodeBuild can be used against CodeCommit

what

• add option to enable LOCAL_CACHE

why

• In order to speed up docker build process in aws codebuild, we can enable local cache for caching docker layer.

what

• Port module to Terraform 0.12
• Pin all providers
• Add example for testing
• Add bats and terratest for the example
• Add Codefresh badge to point to the test pipeline in terraform-modules project
• Update README

why

• Module currently does not work with 0.12. Much easier syntax
• Better regression control
• Automatically test the example on every commit and pull request
• Provision resources on AWS in the test account and check the outputs for the correct values
• terraform-modules project contains pipelines for all terraform modules

what

• Add bucket ARN output

why

• In some cases (like interpolating the module's created bucket in another IAM policy) the ARN of the bucket is needed for interpolation

what

• Fix output: Rename "role_arn" output to "role_id"

why

• Output role_arn was wrongly named, because it exposes "aws_iam_role.role.id" attribute
  instead of "aws_iam_role.role.arn".

• Added both role_arn and role_id

what

• Add condition to manage creation of cache bucket policy

why

• Fixes #38

what

• Expose report_build_status as an external variable, defaulting to false

why

• This flag is useful for building out Github PR-verify workflows

what

• Add iam:PassRole to permissions

why

• Missing

what

• Add permission to run ECS task to build policy

why

• Running one-off tasks during build process requires ecs:RunTask action. Ability to run such tasks is required for example when applying database migrations

what

• Add variable build_timeout with a default of 60

why

• Was missing

what

• updated README.yaml file
• add tags and categories
• rebuild README.md file

why

• need to add categories and tags so we can pull them into the documentation

what

• Regenerate README.md

why

• Previous version of build-harness has some typos