rssnyder

apiVersion: harness.io/v1
kind: Workflow
name: external-template-test
identifier: external_template_test
type: service
owner: group:account/HSF_Admins
metadata:
  tags:
    - solutions-factory
spec:

rssnyder

#
# Create a copy of a built in role by copying the permissions and removing any that are not needed
#
# usage: tf apply -var org_id=default -var project_id=default -var scopes_to_remove='["iac_workspace_approve","idp_plugin_edit"]'
#

terraform {
  required_providers {
    harness = {
      source = "harness/harness"

rssnyder

terraform {
  required_providers {
    harness = {
      source = "harness/harness"
    }
  }
}

variable "folder_id" {
  type = string

rssnyder

Content-Type: multipart/mixed; boundary="//"
MIME-Version: 1.0

--//
Content-Type: text/cloud-config; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="cloud-config.txt"

#cloud-config

rssnyder

terraform {
  required_providers {
    harness = {
      source = "harness/harness"
    }
    aws = {
      source = "hashicorp/aws"
    }
  }
}

rssnyder

auth

HARNESS_ACCOUNT_ID: harness account id

HARNESS_PLATFORM_API_KEY: harness api key, requires delegate:read and connectors:read/write

settings

NEW_FEATURE: new feature to add to connectors

rssnyder

resource "aws_iam_policy" "harness_actions" {
  name        = "harness_actions"

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Action = [
          "ec2:DeleteSnapshot",
          "rds:StartDBCluster",

rssnyder

terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.0"
    }
  }
}

variable "region" {

rssnyder

pipeline:
  name: catalog ingestion api
  identifier: catalog_ingestion_api
  projectIdentifier: idp
  orgIdentifier: default
  tags: {}
  stages:
    - stage:
        name: add data
        identifier: add_data

rssnyder

terraform {
  required_providers {
    harness = {
      source = "harness/harness"
    }
  }
}

variable "org_id" {
  type        = string