Skip to content

Add new post access control custom action #211

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
odgrim merged 12 commits into from
Apr 15, 2026
Merged

Add new post access control custom action #211

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
2b6db1a
Add job and account_names inputs
Resonance1584 Apr 13, 2026
cb99700
Simplify execute inputs
Resonance1584 Apr 13, 2026
affdc3d
Pipelines actions v4.6.0
Resonance1584 Apr 13, 2026
88d6c68
Pipelines CLI v0.50.0
Resonance1584 Apr 13, 2026
3032f44
require workflow
odgrim Apr 15, 2026
75b9dac
Add inputs to specify a separate repository for custom actions
Resonance1584 Apr 15, 2026
3cbc89b
change base
odgrim Apr 15, 2026
6699a9b
Add job and account_names inputs to custom actions
Resonance1584 Apr 10, 2026
ef56aa2
Add inputs to specify a separate repository for custom actions
Resonance1584 Apr 15, 2026
2d0309e
Merge branch '2026-04-13_add-jobs-inputs' into add-post-access-control
odgrim Apr 15, 2026
97ff994
uptick actions and fix inputs
odgrim Apr 15, 2026
ad5c602
Merge branch '2026-04-13_add-jobs-inputs' into add-post-access-control
odgrim Apr 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/pipelines-drift-detection.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ on:
description: "Repository to fetch pipelines actions from (e.g. use your org/repo for self-hosted)"
pipelines_actions_ref:
type: string
default: "v4.6.0"
default: "v4.7.0"
description: "For Gruntwork internal testing - the ref of the pipelines actions to use"
pipelines_credentials_repo:
type: string
Expand Down
31 changes: 26 additions & 5 deletions .github/workflows/pipelines-root.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ on:
description: "Repository to fetch pipelines actions from (e.g. use your org/repo for self-hosted)"
pipelines_actions_ref:
type: string
default: "v4.6.0"
default: "v4.7.0"
description: "For Gruntwork internal testing - the ref of the pipelines actions to use"
pipelines_actions_customizations_repo:
type: string
Expand Down Expand Up @@ -582,7 +582,7 @@ jobs:
version: ${{ env.PIPELINES_CLI_VERSION }}
PIPELINES_GRUNTWORK_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).gruntwork_read }}

- name: "Provision access control account(s) and create PR"
- name: "Provision access control account(s)"
id: access_control_account
uses: ./pipelines-actions/.github/actions/pipelines-provision-access-control-action
with:
Expand All @@ -591,13 +591,34 @@ jobs:
PIPELINES_CUSTOMER_ORG_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).customer_org_read }}
ORG_REPO_ADMIN_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).org_repo_admin }}

# To learn more about customizing Pipelines see our documentation at https://docs.gruntwork.io/pipelines/maintain/extending/
- name: "Post access control account custom action"
uses: ./${{ env.PIPELINES_ACTIONS_CUSTOMIZATIONS_PATH }}/.github/custom-actions/post-access-control-account
with:
job: ${{ toJson(fromJson(needs.pipelines_orchestrate.outputs.pipelines_jobs)[0]) }}
account_names: ${{ join(fromJson(needs.pipelines_orchestrate.outputs.pipelines_jobs)[0].NewAccounts.*.Name, ',') }}
access_control_repo_dir: ${{ steps.access_control_account.outputs.access_control_repo_dir }}
PIPELINES_GRUNTWORK_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).gruntwork_read }}
PIPELINES_CUSTOMER_ORG_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).customer_org_read }}
ORG_REPO_ADMIN_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).org_repo_admin }}

- name: "Create access control account pull request"
id: access_control_account_pr
uses: ./pipelines-actions/.github/actions/pipelines-access-control-new-pr-action
with:
job: ${{ toJson(fromJson(needs.pipelines_orchestrate.outputs.pipelines_jobs)[0]) }}
access_control_repo_dir: ${{ steps.access_control_account.outputs.access_control_repo_dir }}
PIPELINES_GRUNTWORK_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).gruntwork_read }}
PIPELINES_CUSTOMER_ORG_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).customer_org_read }}
ORG_REPO_ADMIN_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).org_repo_admin }}

- name: "Create delegated repo and bootstrap"
id: provision_delegated_repo
uses: ./pipelines-actions/.github/actions/pipelines-provision-repo-action
with:
job: ${{ toJson(fromJson(needs.pipelines_orchestrate.outputs.pipelines_jobs)[0]) }}
workflow_job_name: ${{ env.JOB_NAME }}
access_control_pull_request_url: ${{ steps.access_control_account.outputs.pull_request_url }}
access_control_pull_request_url: ${{ steps.access_control_account_pr.outputs.pull_request_url }}
new_account_name: ${{ fromJson(needs.pipelines_orchestrate.outputs.pipelines_jobs)[0].NewAccounts[0].Name }}
PIPELINES_GRUNTWORK_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).gruntwork_read }}
PIPELINES_CUSTOMER_ORG_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).customer_org_read }}
Expand All @@ -607,7 +628,7 @@ jobs:
- name: "Post create delegated repo custom actions"
uses: ./${{ env.PIPELINES_ACTIONS_CUSTOMIZATIONS_PATH }}/.github/custom-actions/post-create-delegated-repo
with:
access_control_pull_request_url: ${{ steps.access_control_account.outputs.pull_request_url }}
access_control_pull_request_url: ${{ steps.access_control_account_pr.outputs.pull_request_url }}
PIPELINES_GRUNTWORK_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).gruntwork_read }}
PIPELINES_CUSTOMER_ORG_READ_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).customer_org_read }}
ORG_REPO_ADMIN_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).org_repo_admin }}
Expand All @@ -621,7 +642,7 @@ jobs:
delegated_repo_path: ${{ steps.provision_delegated_repo.outputs.delegated_repo_path }}
delegated_step_output_file_path: ${{ steps.provision_delegated_repo.outputs.step_output_file_path }}
delegated_step_output_file_name: ${{ steps.provision_delegated_repo.outputs.step_output_file_name }}
access_control_pr_url: ${{ steps.access_control_account.outputs.pull_request_url }}
access_control_pr_url: ${{ steps.access_control_account_pr.outputs.pull_request_url }}
GH_TOKEN: ${{ fromJson(steps.pipelines-tokens.outputs.tokens_json).org_repo_admin }}

pipelines_status_check:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pipelines-unlock.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,7 +55,7 @@ on:
description: "Repository to fetch pipelines actions from (e.g. use your org/repo for self-hosted)"
pipelines_actions_ref:
type: string
default: "v4.6.0"
default: "v4.7.0"
description: "For Gruntwork internal testing - the ref of the pipelines actions to use"
pipelines_credentials_repo:
type: string
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pipelines.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ on:
description: "Repository to fetch pipelines actions from (e.g. use your org/repo for self-hosted)"
pipelines_actions_ref:
type: string
default: "v4.6.0"
default: "v4.7.0"
description: "For Gruntwork internal testing - the ref of the pipelines actions to use"
pipelines_credentials_repo:
type: string
Expand Down