Update resources

Author: craigthackerx

Local-DevelopmentScript.ps1

@@ -9,7 +9,11 @@ param (
     [string]$TerraformVersion = "latest",
     [string]$RunCheckov = "false",
     [string]$TfPlanFileName = "tfplan.plan",
-    [string]$TerraformCodeLocation = "terraform/0_rg",
+    [string]$TerraformCodeLocation = "terraform",
+    [string[]]$TerraformStackToRun = @('all'),
+    [string]$CreateTerraformWorkspace = "true",
+    [string]$TerraformWorkspace = "dev",
+    [string]$AttemptAzureLogin = "true",
     [string]$UseAzureClientSecretLogin = "true",
     [string]$UseAzureOidcLogin = "false",
     [string]$UseAzureUserLogin = "false",
@@ -20,16 +24,11 @@ $ErrorActionPreference = 'Stop'
 $currentWorkingDirectory = (Get-Location).path
 $fullTerraformCodePath = Join-Path -Path $currentWorkingDirectory -ChildPath $TerraformCodeLocation
 
-# Get timestamp in "HH:mm:ss" format
-$timestamp = Get-Date -Format "HH:mm:ss"
-
-## Setup script modules etc
-
 # Get script directory
 $scriptDir = Split-Path -Path $MyInvocation.MyCommand.Definition -Parent
 
 # Import all required modules
-$modules = @("Logger", "Utils", "AzureCliLogin", "AzurePwshLogin", "Nsg", "Terraform", "Storage", "Homebrew", "Checkov", "Tenv", "Choco")
+$modules = @("Logger", "Utils", "AzureCliLogin", "Terraform", "Storage", "Homebrew", "Checkov", "Tenv", "Choco")
 foreach ($module in $modules)
 {
     $modulePath = Join-Path -Path $scriptDir -ChildPath "PowerShellModules/$module.psm1"
@@ -39,18 +38,17 @@ foreach ($module in $modules)
     }
     else
     {
-        Write-Host "ERROR: $timestamp - [$( $MyInvocation.MyCommand.Name )] Module not found: $modulePath" -ForegroundColor Red
+        Write-Host "ERROR:  [$( $MyInvocation.MyCommand.Name )] Module not found: $modulePath" -ForegroundColor Red
         exit 1
     }
 }
 
 # Log that modules were loaded
-_LogMessage -Level "INFO" -Message "$timestamp - [$( $MyInvocation.MyCommand.Name )] Modules loaded successfully" -InvocationName "$( $MyInvocation.MyCommand.Name )"
+_LogMessage -Level "INFO" -Message "[$( $MyInvocation.MyCommand.Name )] Modules loaded successfully" -InvocationName "$( $MyInvocation.MyCommand.Name )"
 
 $convertedDebugMode = ConvertTo-Boolean $DebugMode
 _LogMessage -Level 'DEBUG' -Message "DebugMode: `"$DebugMode`" → $convertedDebugMode" -InvocationName "$( $MyInvocation.MyCommand.Name )"
 
-
 # Enable debug mode if DebugMode is set to $true
 if ($true -eq $convertedDebugMode)
 {
@@ -85,6 +83,9 @@ try
 
     # Convert the string flags to Boolean and log the results at DEBUG level
 
+    $convertedAttemptAzureLogin = ConvertTo-Boolean $AttemptAzureLogin
+    _LogMessage -Level 'DEBUG' -Message "AttemptAzureLogin:   `"$AttemptAzureLogin`"   → $convertedAttemptAzureLogin"   -InvocationName $MyInvocation.MyCommand.Name
+
     $convertedUseAzureClientSecretLogin = ConvertTo-Boolean $UseAzureClientSecretLogin
     _LogMessage -Level 'DEBUG' -Message "UseAzureClientSecretLogin:   `"$UseAzureClientSecretLogin`"   → $convertedUseAzureClientSecretLogin"   -InvocationName $MyInvocation.MyCommand.Name
 
@@ -118,6 +119,10 @@ try
     $convertedRunCheckov = ConvertTo-Boolean $RunCheckov
     _LogMessage -Level 'DEBUG' -Message "RunCheckov: `"$RunCheckov`" → $convertedRunCheckov" -InvocationName "$( $MyInvocation.MyCommand.Name )"
 
+    $convertedCreateTerraformWorkspace = ConvertTo-Boolean $CreateTerraformWorkspace
+    _LogMessage -Level 'DEBUG' -Message "CreateTerraformWorkspace: `"$CreateTerraformWorkspace`" → $convertedCreateTerraformWorkspace" -InvocationName "$( $MyInvocation.MyCommand.Name )"
+
+
     # ── Chicken-and-egg / mutual exclusivity checks ───────────────────────────────
     if (-not $convertedRunTerraformInit -and (
     $convertedRunTerraformPlan -or
@@ -160,11 +165,31 @@ try
     try
     {
 
-    Connect-AzureCli `
-        -UseClientSecret $convertedUseAzureClientSecretLogin `
-        -UseOidc $convertedUseAzureOidcLogin `
-        -UseUserDeviceCode $convertedUseAzureUserLogin `
-        -UseManagedIdentity $convertedUseAzureManagedIdentityLogin
+        if ($convertedAttemptAzureLogin)
+        {
+
+            Connect-AzureCli `
+            -UseClientSecret $convertedUseAzureClientSecretLogin `
+            -UseOidc $convertedUseAzureOidcLogin `
+            -UseUserDeviceCode $convertedUseAzureUserLogin `
+            -UseManagedIdentity $convertedUseAzureManagedIdentityLogin
+        }
+
+        $stackFolders = Get-TerraformStackFolders `
+                    -CodeRoot $fullTerraformCodePath `
+                    -StacksToRun $TerraformStackToRun
+
+        foreach ($folder in $stackFolders)
+        {
+            # Example: validate + fmt-check for each stack
+            Invoke-TerraformFmtCheck  -CodePath $folder
+            Invoke-TerraformInit -CodePath $folder
+            if ($convertedCreateTerraformWorkspace -and -not [string]::IsNullOrWhiteSpace($TerraformWorkspace))
+            {
+                Invoke-TerraformWorkspaceSelect -CodePath $folder -WorkspaceName $TerraformWorkspace
+            }
+            Invoke-TerraformValidate -CodePath $folder
+        }
     }
     catch
     {
@@ -174,7 +199,7 @@ try
 }
 catch
 {
-    _LogMessage -Level "ERROR" -Message "$timestamp - [$( $MyInvocation.MyCommand.Name )] Error: $( $_.Exception.Message )" -InvocationName "$( $MyInvocation.MyCommand.Name )"
+    _LogMessage -Level "ERROR" -Message "Error: $( $_.Exception.Message )" -InvocationName "$( $MyInvocation.MyCommand.Name )"
     exit 1
 }
 
@@ -215,6 +240,7 @@ finally
         Disconnect-AzureCli -IsUserDeviceLogin $false
     }
 
+    $Env:TF_LOG = $null
     Set-Location $currentWorkingDirectory
 }
 

PowerShellModules/AzureCliLogin.psm1

@@ -13,7 +13,7 @@ function Connect-ToAzureCliClientSecret {
         --username $ClientId `
         --password $ClientSecret `
         --tenant   $TenantId `
-        --allow-no-subscriptions
+        --allow-no-subscriptions | Out-Null
     _LogMessage -Level 'DEBUG' -Message "az login exit-code: $LASTEXITCODE" -InvocationName $MyInvocation.MyCommand.Name
     if ($LASTEXITCODE -ne 0) {
         _LogMessage -Level 'ERROR' -Message 'az login failed (client-secret).' -InvocationName $MyInvocation.MyCommand.Name
@@ -47,7 +47,7 @@ function Connect-ToAzureCliOidc {
         --username $ClientId `
         --tenant   $TenantId `
         --allow-no-subscriptions `
-        --federated-token $OidcToken
+        --federated-token $OidcToken | Out-Null
     _LogMessage -Level 'DEBUG' -Message "az login exit-code: $LASTEXITCODE" -InvocationName $MyInvocation.MyCommand.Name
     if ($LASTEXITCODE -ne 0) {
         _LogMessage -Level 'ERROR' -Message 'az login failed (OIDC).' -InvocationName $MyInvocation.MyCommand.Name
@@ -218,7 +218,7 @@ function Disconnect-AzureCli {
     }
 
     try {
-        _LogMessage -Level 'INFO' -Message 'azure-cli logout …' -InvocationName $MyInvocation.MyCommand.Name
+        _LogMessage -Level 'INFO' -Message 'Attempting Azure-Cli logout to cleanup …' -InvocationName $MyInvocation.MyCommand.Name
 
         az logout | Out-Null
         $code = $LASTEXITCODE
@@ -230,7 +230,7 @@ function Disconnect-AzureCli {
 
     }
     catch {
-        _LogMessage -Level 'ERROR' -Message "error during azure-cli logout: $($_.Exception.Message)" -InvocationName $MyInvocation.MyCommand.Name
+        _LogMessage -Level 'ERROR' -Message "Error: Azure-Cli logout failed: $($_.Exception.Message)" -InvocationName $MyInvocation.MyCommand.Name
         throw
     }
 }