tfaction.yaml

Type: object

tfaction.yaml

root aws_assume_role_arn
Type: string

AWS Assume Role ARN

root aws_region
Type: string

AWS Region. This is used for AWS OIDC Authentication, Getting Secrets from AWS Secrets Manager, and so on

root aws_secrets_manager
Type: array of object

list of AWS Secrets Manager's secret and exported environment variables

 No Additional Items

Each item of this array must be:

root aws_secrets_manager aws_secrets_manager items
Type: object

target group configuration

root aws_secrets_manager aws_secrets_manager items secret_id
Type: string

AWS Secrets Manager's secret id

root aws_secrets_manager aws_secrets_manager items envs
Type: array of object

exported environment variables

 No Additional Items

Each item of this array must be:

root aws_secrets_manager aws_secrets_manager items envs envs items
Type: object

exported environment variable

root aws_secrets_manager aws_secrets_manager items envs envs items env_name
Type: string

exported environment variable

root aws_secrets_manager aws_secrets_manager items envs envs items secret_key
Type: string

AWS Secrets Manager's secret key

root drift_detection
Type: object

root drift_detection enabled
Type: boolean Default: "false"

If true, drift detection is enabled in the working directory

root envs
Type: object

environment variables

root gcp_workload_identity_provider
Type: string

GCP Workload Identity Provider

root gcp_access_token_scopes
Type: string

List of OAuth 2.0 access scopes to be included in the generated token for authenticating to Google Cloud

root gcs_bucket_name_tfmigrate_history
Type: string

GCS Bucket name to store tfmigrate History files

root providers_lock_opts
Type: string Default: "-platform=windows_amd64 -platform=linux_amd64 -platform=darwin_amd64"

terraform providers lock command's option

root s3_bucket_name_tfmigrate_history
Type: string

S3 Bucket name to store tfmigrate History files

root secrets
Type: array of object

list of exported GitHub Secrets

 No Additional Items

Each item of this array must be:

root secrets secrets items
Type: object

exported GitHub Secret

root secrets secrets items env_name
Type: string Default: "the value of 'secret_name'"

exported environment variable

root secrets secrets items secret_name
Type: string Default: "the value of 'env_name'"

exported GitHub Secret name

root terraform_plan_config
Type: object

configuration which is used in the job for 'terraform plan'

root terraform_plan_config aws_region
Type: string

AWS Region. This is used for AWS OIDC Authentication, Getting Secrets from AWS Secrets Manager, and so on

Same definition as aws_region

root terraform_plan_config gcp_service_account
Type: string

GCP Service Account

root terraform_plan_config gcp_access_token_scopes
Type: string

List of OAuth 2.0 access scopes to be included in the generated token for authenticating to Google Cloud

Same definition as gcp_access_token_scopes

root terraform_plan_config secrets
Type: array of object

list of exported GitHub Secrets

Same definition as secrets

root terraform_plan_config aws_secrets_manager
Type: array of object

list of AWS Secrets Manager's secret and exported environment variables

Same definition as aws_secrets_manager

root terraform_plan_config envs
Type: object

environment variables

Same definition as envs

root terraform_apply_config
Type: object

configuration which is used in the job for 'terraform apply'

Same definition as terraform_plan_config

root tfmigrate_plan_config
Type: object

configuration which is used in the job for 'tfmigrate plan'

Same definition as terraform_plan_config

root tfmigrate_apply_config
Type: object

configuration which is used in the job for 'tfmigrate apply'

Same definition as terraform_plan_config