[DOC-595] test prod cicd

bitbucket-pipelines.yml

@@ -16,6 +16,14 @@ definitions:
         export AWS_SECRET_ACCESS_KEY=$(echo $STS_OUTPUT | jq -r '.Credentials.SecretAccessKey');
         export AWS_SECURITY_TOKEN=$(echo $STS_OUTPUT | jq -r '.Credentials.SessionToken');
         export AWS_REGION='us-east-2';
+    - script: &aws-context-prod
+        export AWS_ROLE_ARN=arn:aws:iam::$AWS_ACCOUNT_NO_PROD:role/$OIDC_ROLE_PROD;
+        export AWS_WEB_IDENTITY_TOKEN_FILE=$(pwd)/web-identity-token;
+        echo $BITBUCKET_STEP_OIDC_TOKEN > $(pwd)/web-identity-token;
+        export AWS_ACCESS_KEY_ID=$(echo $STS_OUTPUT | jq -r '.Credentials.AccessKeyId');
+        export AWS_SECRET_ACCESS_KEY=$(echo $STS_OUTPUT | jq -r '.Credentials.SecretAccessKey');
+        export AWS_SECURITY_TOKEN=$(echo $STS_OUTPUT | jq -r '.Credentials.SessionToken');
+        export AWS_REGION='us-east-2';
     - script: &ssm-send-command-dev
         aws ssm send-command --document-name "AWS-RunShellScript" --instance-ids $DEV_INSTANCE_ID_TF --region $AWS_DEFAULT_REGION --parameters commands='[
           "sudo -u ubuntu -i <<EOF",
@@ -211,6 +219,33 @@ pipelines:
               - snowflake/**/*.sql
 
 
+    feature/DOC-595-cicd-for-prod:
+      - parallel:
+          - step:
+              name: Plan devops-pipeline on PROD
+              image: hugree/bitbucket-aws-python38-tf154:latest
+              oidc: true
+              script:
+                - *aws-context-prod
+                - pip install -r requirements.txt
+                - BB_PIPELINE_BRANCH="DEV" python terraform.py plan --environment=prod --module=devops-pipeline/other-resources
+#          - step:
+#              name: Plan streamlit-server on PROD
+#              image: hugree/bitbucket-aws-python38-tf154:latest
+#              oidc: true
+#              script:
+#                - *aws-context-prod
+#                - pip install -r requirements.txt
+#                - BB_PIPELINE_BRANCH="DEV" python terraform.py plan --environment=prod --module=streamlit-server
+#          - step:
+#              name: Plan textract-pipeline on PROD
+#              image: hugree/terraform-with-snowsql:latest
+#              oidc: true
+#              script:
+#                - *aws-context-prod
+#                - pip install -r requirements.txt
+#                - BB_PIPELINE_BRANCH="DEV" python terraform.py plan --environment=prod --module=textract-pipeline/terraform
+
     feature/DOC-536-smart-git-diff:
       - parallel:
           - step:

devops-pipeline/other-resources/vars-prod.tfvars

@@ -0,0 +1,4 @@
+aws_account_id                  = 211125720533
+# TODO change to proper prod value
+storage_integration_external_id = "OQ11564_SFCRole=2_L4NUsKqd3NIBmrATa1djc/T3ECQ="
+cross_account_target_account_id = 660131068782