Create reweeden CI stack (#4245)

* Add personal stack

* Apply deployment tag everywhere using provider level `default_tags`

* Add quotes to git commit logs in scripts

This should prevent backticks in commit messages from being executed as
shell commands

Author: reweeden

bamboo/abort-if-skip-unit-tests.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 set -e
 
-if [[ $(git log --pretty='format:%Creset%s' -1) =~ '[skip-unit-tests]' ]]; then
+if [[ "$(git log --pretty='format:%Creset%s' -1)" =~ '[skip-unit-tests]' ]]; then
   >&2 echo "*** Skipping unit tests based on commit message: $COMMIT_MESSAGE"
   exit 0
 fi

bamboo/audit.sh

@@ -8,7 +8,7 @@ commit_message_contains_skip_audit_flag=false
 commit_matches_version_tag=false
 
 
-if [[ $(git log --pretty='format:%Creset%s' -1) =~ '[skip-audit]' ]]; then
+if [[ "$(git log --pretty='format:%Creset%s' -1)" =~ '[skip-audit]' ]]; then
   commit_message_contains_skip_audit_flag=true;
 fi
 if [[ $(git describe --exact-match HEAD 2>/dev/null |sed -n '1p') =~ ^v[0-9]+.* ]]; then

bamboo/select-stack.js

@@ -37,6 +37,7 @@ function determineIntegrationTestStackName(cb) {
     'Naga Nages': 'nnaga-ci',
     'Paul Pilone': 'ppilone-ci',
     'Robert Swanson': 'rs-ci',
+    'Rohan Weeden': 'reweeden-ci',
     'Tim Clark': 'teclark-ci',
     wisdomaj: 'awisdom-ci',
     'Yonggang Liu': 'yliu10-ci',

bamboo/set-bamboo-env-variables.sh

@@ -175,7 +175,7 @@ echo GIT_PR is $GIT_PR
 ## Exporting the commit message as an env variable to be brought in
 ## for yes/no toggles on build
 if [[ -z $COMMIT_MESSAGE ]]; then
-  COMMIT_MESSAGE=$(git log --pretty='format:%Creset%s' -1)
+  COMMIT_MESSAGE="$(git log --pretty='format:%Creset%s' -1)"
   export COMMIT_MESSAGE
   echo export COMMIT_MESSAGE=\""$COMMIT_MESSAGE"\" >> .bamboo_env_vars
 fi

example/config.yml

@@ -62,6 +62,9 @@ np:
 nnaga-tf:
   bucket: nnaga-internal
 
+reweeden:
+  bucket: reweeden-internal
+
 rs:
   bucket: rs-internal
 

example/cumulus-tf/main.tf

@@ -15,6 +15,12 @@ provider "aws" {
   region  = var.region
   profile = var.aws_profile
 
+  default_tags {
+    tags = {
+      Deployment = var.prefix
+    }
+  }
+
   ignore_tags {
     key_prefixes = ["gsfc-ngap"]
   }
@@ -25,6 +31,12 @@ provider "aws" {
   region  = "us-west-2"
   profile = var.aws_profile
 
+  default_tags {
+    tags = {
+      Deployment = var.prefix
+    }
+  }
+
   ignore_tags {
     key_prefixes = ["gsfc-ngap"]
   }

example/cumulus-tf/variables.tf

@@ -298,6 +298,7 @@ variable "archive_api_users" {
     "mikedorfman",
     "nnageswa",
     "npauzenga",
+    "reweeden",
     "terrafirma13",
     "yliu10"
   ]

example/data-persistence-tf/main.tf

@@ -14,6 +14,12 @@ terraform {
 provider "aws" {
   region = var.aws_region
 
+  default_tags {
+    tags = {
+      Deployment = var.prefix
+    }
+  }
+
   ignore_tags {
     key_prefixes = ["gsfc-ngap"]
   }
@@ -32,7 +38,7 @@ module "provision_database" {
   prefix                                 = var.prefix
   rds_security_group                     = var.rds_security_group
   rds_admin_access_secret_arn            = var.rds_admin_access_secret_arn
-  tags                                   = var.tags
+  tags                                   = merge(var.tags, { Deployment = var.prefix })
   permissions_boundary_arn               = var.permissions_boundary_arn
   rds_user_password                      = var.rds_user_password == "" ? random_string.db_pass.result : var.rds_user_password
   rds_connection_timing_configuration    = var.rds_connection_timing_configuration

example/deployments/cumulus/reweeden-ci-tf.tfvars

@@ -0,0 +1 @@
+prefix = "reweeden-ci-tf"

example/deployments/data-persistence/reweeden-ci-tf.tfvars

@@ -0,0 +1 @@
+prefix = "reweeden-ci-tf"