diff --git a/examples/snippets/.github/workflows/atmos-components-updater.yml b/examples/snippets/.github/workflows/atmos-components-updater.yml index 2799e0f9b..02a52f950 100644 --- a/examples/snippets/.github/workflows/atmos-components-updater.yml +++ b/examples/snippets/.github/workflows/atmos-components-updater.yml @@ -15,11 +15,11 @@ jobs: - "private=false" steps: - name: "Checkout source code at current commit" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Generate a token id: github-app - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@v3 with: app-id: ${{ secrets.ATMOS_APP_ID }} private-key: ${{ secrets.ATMOS_PRIVATE_KEY }} diff --git a/examples/snippets/.github/workflows/atmos-pro-list-instances.yaml b/examples/snippets/.github/workflows/atmos-pro-list-instances.yaml index 05e349e25..fe7c39728 100644 --- a/examples/snippets/.github/workflows/atmos-pro-list-instances.yaml +++ b/examples/snippets/.github/workflows/atmos-pro-list-instances.yaml @@ -35,7 +35,7 @@ jobs: atmos-version: ${{ vars.ATMOS_VERSION }} - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 diff --git a/examples/snippets/.github/workflows/atmos-pro-terraform-apply.yaml b/examples/snippets/.github/workflows/atmos-pro-terraform-apply.yaml index 5207e98fd..c7f4df709 100644 --- a/examples/snippets/.github/workflows/atmos-pro-terraform-apply.yaml +++ b/examples/snippets/.github/workflows/atmos-pro-terraform-apply.yaml @@ -48,7 +48,7 @@ jobs: - uses: runs-on/action@v2 - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: ref: ${{ inputs.sha }} diff --git a/examples/snippets/.github/workflows/atmos-pro-terraform-plan.yaml b/examples/snippets/.github/workflows/atmos-pro-terraform-plan.yaml index 0abba24d3..c1fa678ff 100644 --- a/examples/snippets/.github/workflows/atmos-pro-terraform-plan.yaml +++ b/examples/snippets/.github/workflows/atmos-pro-terraform-plan.yaml @@ -40,7 +40,7 @@ jobs: - uses: runs-on/action@v2 - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: ref: ${{ inputs.sha }} diff --git a/examples/snippets/.github/workflows/atmos-pro.yaml b/examples/snippets/.github/workflows/atmos-pro.yaml index 9ab143528..982fa423c 100644 --- a/examples/snippets/.github/workflows/atmos-pro.yaml +++ b/examples/snippets/.github/workflows/atmos-pro.yaml @@ -53,7 +53,7 @@ jobs: # Checkout the PR head SHA so the uploaded HeadSHA matches the webhook trigger event. - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 0 diff --git a/examples/snippets/stacks/catalog/iam-role/example-app.yaml b/examples/snippets/stacks/catalog/iam-role/example-app.yaml deleted file mode 100644 index d3de06699..000000000 --- a/examples/snippets/stacks/catalog/iam-role/example-app.yaml +++ /dev/null @@ -1,62 +0,0 @@ -import: - - catalog/iam-role/defaults - -components: - terraform: - example-app/iam-role: - metadata: - component: iam-role - inherits: - - iam-role/defaults - vars: - name: example-app - attributes: - - "terraform" - role_description: | - Role for GitHub Actions to access the GitOps resources, such as the S3 Bucket and DynamoDB Table. - github_oidc_provider_enabled: true - github_oidc_provider_arn: !terraform.state github-oidc-provider oidc_provider_arn - trusted_github_org: acme - trusted_github_repos: - - example-app - policy_statements: - AllowECRAccess: - effect: "Allow" - actions: - - "ecr:GetAuthorizationToken" - - "ecr:BatchCheckLayerAvailability" - - "ecr:GetDownloadUrlForLayer" - - "ecr:BatchGetImage" - - "ecr:InitiateLayerUpload" - - "ecr:UploadLayerPart" - - "ecr:CompleteLayerUpload" - - "ecr:PutImage" - - "ecr:CreatePullThroughCacheRule" - - "ecr:BatchImportUpstreamImage" - - "ecr:CreateRepository" - resources: - - "*" - AllowAssumeRole: - effect: "Allow" - actions: - - "sts:AssumeRole" - - "sts:TagSession" - - "sts:SetSourceIdentity" - resources: - - "*" - AllowServicesAccess: - effect: "Allow" - actions: - - "s3:*" - - "iam:*" - - "ecs:*" - - "ecr:*" - - "logs:*" - - "ssm:*" - - "ec2:*" - - "elasticloadbalancing:*" - - "application-autoscaling:*" - - "cloudwatch:*" - - "kms:Decrypt" - resources: - - "*"