From 325a99efee9b788a6d22b497a397816b8721ddba Mon Sep 17 00:00:00 2001
From: Grzegorz Huber <ghuber@aarete.com>
Date: Wed, 26 Jun 2024 15:34:04 +0200
Subject: [PATCH] [DOC-595] test prod cicd

---
 bitbucket-pipelines.yml                       | 35 +++++++++++++++++++
 .../other-resources/vars-prod.tfvars          |  4 +++
 2 files changed, 39 insertions(+)
 create mode 100644 devops-pipeline/other-resources/vars-prod.tfvars

diff --git a/bitbucket-pipelines.yml b/bitbucket-pipelines.yml
index e01bf18..59a71b7 100644
--- a/bitbucket-pipelines.yml
+++ b/bitbucket-pipelines.yml
@@ -16,6 +16,14 @@ definitions:
         export AWS_SECRET_ACCESS_KEY=$(echo $STS_OUTPUT | jq -r '.Credentials.SecretAccessKey');
         export AWS_SECURITY_TOKEN=$(echo $STS_OUTPUT | jq -r '.Credentials.SessionToken');
         export AWS_REGION='us-east-2';
+    - script: &aws-context-prod
+        export AWS_ROLE_ARN=arn:aws:iam::$AWS_ACCOUNT_NO_PROD:role/$OIDC_ROLE_PROD;
+        export AWS_WEB_IDENTITY_TOKEN_FILE=$(pwd)/web-identity-token;
+        echo $BITBUCKET_STEP_OIDC_TOKEN > $(pwd)/web-identity-token;
+        export AWS_ACCESS_KEY_ID=$(echo $STS_OUTPUT | jq -r '.Credentials.AccessKeyId');
+        export AWS_SECRET_ACCESS_KEY=$(echo $STS_OUTPUT | jq -r '.Credentials.SecretAccessKey');
+        export AWS_SECURITY_TOKEN=$(echo $STS_OUTPUT | jq -r '.Credentials.SessionToken');
+        export AWS_REGION='us-east-2';
     - script: &ssm-send-command-dev
         aws ssm send-command --document-name "AWS-RunShellScript" --instance-ids $DEV_INSTANCE_ID_TF --region $AWS_DEFAULT_REGION --parameters commands='[
           "sudo -u ubuntu -i <<EOF",
@@ -211,6 +219,33 @@ pipelines:
               - snowflake/**/*.sql
 
 
+    feature/DOC-595-cicd-for-prod:
+      - parallel:
+          - step:
+              name: Plan devops-pipeline on PROD
+              image: hugree/bitbucket-aws-python38-tf154:latest
+              oidc: true
+              script:
+                - *aws-context-prod
+                - pip install -r requirements.txt
+                - BB_PIPELINE_BRANCH="DEV" python terraform.py plan --environment=prod --module=devops-pipeline/other-resources
+#          - step:
+#              name: Plan streamlit-server on PROD
+#              image: hugree/bitbucket-aws-python38-tf154:latest
+#              oidc: true
+#              script:
+#                - *aws-context-prod
+#                - pip install -r requirements.txt
+#                - BB_PIPELINE_BRANCH="DEV" python terraform.py plan --environment=prod --module=streamlit-server
+#          - step:
+#              name: Plan textract-pipeline on PROD
+#              image: hugree/terraform-with-snowsql:latest
+#              oidc: true
+#              script:
+#                - *aws-context-prod
+#                - pip install -r requirements.txt
+#                - BB_PIPELINE_BRANCH="DEV" python terraform.py plan --environment=prod --module=textract-pipeline/terraform
+
     feature/DOC-536-smart-git-diff:
       - parallel:
           - step:
diff --git a/devops-pipeline/other-resources/vars-prod.tfvars b/devops-pipeline/other-resources/vars-prod.tfvars
new file mode 100644
index 0000000..d6c899d
--- /dev/null
+++ b/devops-pipeline/other-resources/vars-prod.tfvars
@@ -0,0 +1,4 @@
+aws_account_id                  = 211125720533
+# TODO change to proper prod value
+storage_integration_external_id = "OQ11564_SFCRole=2_L4NUsKqd3NIBmrATa1djc/T3ECQ="
+cross_account_target_account_id = 660131068782
\ No newline at end of file