Refactoring

.github/settings.json

@@ -0,0 +1,18 @@
+{
+  "repos": {
+    "description": "A Terraform module that manages the container resources from the azurerm provider.",
+    "visibility": "public",
+    "default_branch": "main",
+    "homepage": "https://telekom-mms.github.io/terraform-template",
+    "topics": [
+      "terraform",
+      "azure",
+      "azurerm-dns-zone",
+      "azurerm-private-dns-zone",
+      "azurerm-dns-a-record",
+      "azurerm-dns-cname-record",
+      "azurerm-dns-txt-record",
+      "azurerm-dns-mx-record"
+    ]
+  }
+}

.github/workflows/codespell.yml

@@ -0,0 +1,12 @@
+---
+name: codespell
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  call-codespell:
+    uses: telekom-mms/.github/.github/workflows/codespell.yml@main

.github/workflows/linting.yml

@@ -0,0 +1,12 @@
+---
+name: linting
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  call-linting:
+    uses: telekom-mms/.github/.github/workflows/terraform_linting.yml@main

.github/workflows/release.yml

@@ -1,80 +1,19 @@
 ---
-name: New release
+name: release
 
-on:  # yamllint disable-line rule:truthy
-  workflow_dispatch:
+on:
   push:
-    branches:
-      - main
+    branches: [main]
 
-jobs:
-  generate_changelog:
-    runs-on: ubuntu-latest
-    name: create release draft
-    steps:
-      - uses: actions/[email protected]
-        with:
-          fetch-depth: 0
-
-      - name: 'Get Previous tag'
-        id: previoustag
-        uses: "WyriHaximus/github-action-get-previous-tag@master"
-        env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-
-      - name: calculate next version
-        id: version
-        uses: patrickjahns/version-drafter-action@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Generate changelog
-        uses: charmixer/auto-changelog-action@v1
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          future_release: ${{ steps.version.outputs.next-version }}
-
-      - name: Generate readme
-        uses: terraform-docs/gh-actions@main
-        with:
-          working-dir: .
-          output-file: README.md
-          output-method: inject
+env:
+  TEMPLATE_REPOSITORY: telekom-mms/terraform-template
 
-      - name: push changelog and readme
-        uses: github-actions-x/[email protected]
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          push-branch: 'main'
-          commit-message: 'update changelog'
-          force-add: 'true'
-          files: CHANGELOG.md README.md
-          name: T-Systems MMS
-          email: [email protected]
-
-      # do a second checkout to prevent race situation
-      # changelog gets updated but action works on old commit id
-      - uses: actions/[email protected]
-        with:
-          ref: main
-
-      - name: Generate changelog for the release
-        run: |
-          sed '/## \[${{ steps.previoustag.outputs.tag }}\]/Q' CHANGELOG.md > CHANGELOGRELEASE.md
-      - name: Read CHANGELOG.md
-        id: package
-        uses: juliangruber/read-file-action@v1
-        with:
-          path: ./CHANGELOGRELEASE.md
-
-      - name: Create Release draft
-        id: create_release
-        uses: actions/create-release@v1
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # This token is provided by Actions, you do not need to create your own token
-        with:
-          release_name: ${{ steps.version.outputs.next-version }}
-          tag_name: ${{ steps.version.outputs.next-version }}
-          body: |
-            ${{ steps.package.outputs.content }}
-          draft: true
+jobs:
+  call-readme:
+    if: github.repository != '$TEMPLATE_REPOSITORY'
+    uses: telekom-mms/.github/.github/workflows/terraform_docs.yml@main
+  call-release:
+    if: github.repository != '$TEMPLATE_REPOSITORY'
+    uses: telekom-mms/.github/.github/workflows/release.yml@main
+    with:
+      files: README.md

.github/workflows/settings.yml

@@ -0,0 +1,18 @@
+---
+name: settings
+
+on:
+  push:
+    branches: [main]
+  schedule:
+    - cron: '0 10 * * *'
+
+env:
+  TEMPLATE_REPOSITORY: telekom-mms/terraform-template
+
+jobs:
+  call-settings:
+    if: github.repository != '$TEMPLATE_REPOSITORY'
+    uses: telekom-mms/.github/.github/workflows/github_repository.yml@main
+    secrets:
+      GH_APP_CREDENTIALS_TOKEN: ${{ secrets.GH_APP_CREDENTIALS_TOKEN }}

.github/workflows/terrascan.yml

@@ -0,0 +1,18 @@
+---
+name: terrascan
+
+on:
+  pull_request:
+    branches: [main]
+
+env:
+  TEMPLATE_REPOSITORY: telekom-mms/terraform-template
+
+jobs:
+  call-terrascan:
+    if: github.repository != '$TEMPLATE_REPOSITORY'
+    uses: telekom-mms/.github/.github/workflows/terrascan.yml@main
+    with:
+      iac_type: terraform
+      policy_type: all
+      non_recursive: true

.github/workflows/terratest.yml

@@ -0,0 +1,21 @@
+---
+name: terratest
+
+on:
+  pull_request:
+    branches: [main]
+
+env:
+  TEMPLATE_REPOSITORY: telekom-mms/terraform-template
+
+jobs:
+  call-terratest:
+    if: github.repository != '$TEMPLATE_REPOSITORY'
+    uses: telekom-mms/.github/.github/workflows/terratest.yml@main
+    with:
+      test: azure
+    secrets:
+      azure_client_id: ${{ secrets.AZURE_CLIENT_ID }}
+      azure_client_secret: ${{ secrets.AZURE_CLIENT_SECRET }}
+      azure_subscription_id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+      azure_tenant_id: ${{ secrets.AZURE_TENANT_ID }}