Puppet Jenkins

Jenkinsfile

    stages{
        stage('Linting') {
            parallel {
                stage('Chekov') {
                    steps {
                        script {
                            dir("${env.WORKSPACE}/terraform"){
                                sh "checkov --directory terraform/modules -o junitxml > $WORKSPACE/checkov.xml || true"
                            }
                        }
                    }
                    post {
                        always {
                            junit "checkov.xml"
                        }
                    }
                }
                stage('tfsec') {
                    steps {
                        script {
                            dir("${env.WORKSPACE}/terraform"){
                               sh "tfsec -f junit > $WORKSPACE/tfsec.xml || true"
                            }
                        }
                    }
                    post {
                        always {
                            junit "tfsec.xml"
                        }
                    }
                }
                 stage('tf fmt') {
                    steps {
                        script {
                            dir("${env.WORKSPACE}/terraform"){
                               sh "terraform fmt -check -recursive"
                            }
                        }
                    }
                }
            }
        }
        stage('Terraform Init') {
            steps {
                withAWS(credentials:'terraform-executor') {
                    dir("${env.WORKSPACE}/terraform/platform"){
                        sh "terraform workspace show"
                        sh "terraform init -input=false"
                    }
                }
            }
        }
        stage('Planning') {
            parallel {
                stage('tflint') {
                    steps {
                        script {
                            dir("${env.WORKSPACE}/terraform/platform"){
                               sh "tflint -c /etc/tflint.hcl --module -f junit > $WORKSPACE/tflint.xml || true"
                            }
                        }
                    }
                    post {
                        always {
                            junit "tflint.xml"
                        }
                    }
                }
                stage('Terraform Plan') {
                    steps {
                        withAWS(credentials:'terraform-executor') {
                            dir("${env.WORKSPACE}/terraform/platform"){
                                sh "terraform plan -out=tfplan -input=false"
                                sh "$WORKSPACE/terraform/bin/plan-report.sh"
                            }
                        }
                        publishHTML (target : [allowMissing: false,
                            alwaysLinkToLastBuild: true,
                             keepAll: true,
                             reportDir: 'reports',
                             reportFiles: 'terraform-plan.html',
                             reportName: 'Terraform Plan Report',
                             reportTitles: 'Terraform Plan Report']
                        )
                    }
                }
            }
        }
        stage('Terraform Compliance') {
            steps {
                withAWS(credentials:'terraform-executor') {
                    dir("${env.WORKSPACE}/terraform/platform"){
                        sh "terraform-compliance --features ./features --planfile tfplan --junit-xml=$WORKSPACE/compliance.xml || true"
                    }
                }
            }
            post {
                always {
                    junit "compliance.xml"
                }
            }
        }
        stage('Terraform Apply') {
            steps {
                withAWS(credentials:'terraform-executor') {
                    dir("${env.WORKSPACE}/terraform/platform"){
                        input 'Apply Plan?'
                        sh "terraform apply -input=false tfplan"
                    }
                }
            }
        }
        stage('Terraform Output') {
            steps {
                withAWS(credentials:'terraform-executor') {
                    dir("${env.WORKSPACE}/terraform/platform"){
                        sh "terraform output --json > $WORKSPACE/terraform.json"
                    }
                }
            }
        }
        stage('AWSpec Tests') {
            parallel {
                stage('VPC') {
                    steps {
                        withAWS(credentials:'terraform-executor') {
                            dir("${env.WORKSPACE}/terraform/platform"){
                                sh "mkdir -p $WORKSPACE/terraform/modules/vpc/test/vpc/files && cp $WORKSPACE/terraform.json $WORKSPACE/terraform/modules/vpc/test/vpc/files/terraform.json"
                                sh "inspec exec $WORKSPACE/terraform/modules/vpc/test/vpc -t aws:// --reporter=junit:$WORKSPACE/inspec-vpc.xml"
                            }
                        }
                    }
                    post {
                        always {
                            junit "inspec-vpc.xml"
                        }
                    }
                }
                stage('AWS Account') {
                    steps {
                        withAWS(credentials:'terraform-executor') {
                            dir("${env.WORKSPACE}/terraform/platform"){
                                sh "mkdir -p $WORKSPACE/terraform/modules/aws_account/test/aws_account/files && cp $WORKSPACE/terraform.json $WORKSPACE/terraform/modules/aws_account/test/aws_account/files/terraform.json"
                                sh "inspec exec $WORKSPACE/terraform/modules/aws_account/test/aws_account -t aws:// --reporter=junit:$WORKSPACE/inspec-aws.xml"
                            }
                        }
                    }
                    post {
                        always {
                            junit "inspec-aws.xml"
                        }
                    }
                }
            }
        }
    }