Merge pull request #21 from zilliztech/record-caller

chore: record caller

Author: locustbaby

.github/workflows/hcl-check.yaml

@@ -0,0 +1,45 @@
+name: Terraform Validation
+
+on:
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  terraform:
+    runs-on: ubuntu-latest
+    steps:      
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: latest
+
+      - name: Configure Terraform plugin cache
+        run: |
+          echo "TF_PLUGIN_CACHE_DIR=$HOME/.terraform.d/plugin-cache" >>"$GITHUB_ENV"
+          mkdir --parents "$HOME/.terraform.d/plugin-cache"
+      
+      - name: Cache Terraform Plugin
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.terraform.d/plugin-cache
+          key: terraform-${{ runner.os }}-plugin-cache
+          restore-keys: |
+            terraform-${{ runner.os }}-plugin-cache
+      
+      - name: Terraform Validate in All Modules
+        run: |
+          export TF_PLUGIN_CACHE_DIR="${HOME}/.terraform.d/plugin-cache"
+          for dir in modules/*; do
+            if [ -d "$dir" ]; then
+              echo "Validating $dir"
+              cd "$dir"
+              terraform init
+              terraform validate
+              cd -
+            fi
+          done

modules/aws_bucket/bucket.tf

@@ -1,3 +1,5 @@
+data "aws_caller_identity" "current" {}
+
 module "s3_bucket" {
   source  = "terraform-aws-modules/s3-bucket/aws"
   version = "3.15.1"
@@ -8,8 +10,13 @@ module "s3_bucket" {
 
   control_object_ownership = true
   object_ownership         = "ObjectWriter"
+
+  tags = {
+    Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
+  }
 }
 
 output "s3_bucket_ids" {
   value = module.s3_bucket["milvus"].s3_bucket_id
-}
+}

modules/aws_byoc_op/eks.tf

@@ -8,10 +8,12 @@ resource "aws_eks_cluster" "zilliz_byoc_cluster" {
   tags = {
 
     "Vendor" = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
   tags_all = {
 
     "Vendor" = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
   # version = "1.31"
 

modules/aws_byoc_op/iam-role-eks-addon.tf

@@ -3,6 +3,7 @@ resource "aws_iam_role" "eks_addon_role" {
 
   tags = {
     Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
 
   assume_role_policy = jsonencode({

modules/aws_byoc_op/iam-role-eks.tf

@@ -3,6 +3,7 @@ resource "aws_iam_role" "eks_role" {
 
   tags = {
     Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
 
   assume_role_policy = jsonencode({

modules/aws_byoc_op/iam-role-maintaince.tf

@@ -36,6 +36,7 @@ resource "aws_iam_role" "maintaince_role" {
 
   tags = {
     Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
 }
 

modules/aws_byoc_op/iam-role-storage.tf

@@ -2,6 +2,7 @@ resource "aws_iam_role" "storage_role" {
   name = "${local.dataplane_id}-storage-role"
   tags = {
     Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
 
   lifecycle {

modules/aws_byoc_op/private_link.tf

@@ -14,6 +14,7 @@ resource "aws_vpc_endpoint" "byoc_endpoint" {
   tags = {
     Name   = "${local.dataplane_id}-endpoint"
     Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
 }
 
@@ -27,6 +28,11 @@ resource "aws_route53_zone" "byoc_private_zone" {
     vpc_id = module.vpc.vpc_id
   }
   comment = "Private hosted zone for BYOC project"
+
+  tags = {
+    Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
+  }
 }
 
 resource "aws_route53_record" "byoc_endpoint_alias" {

modules/aws_byoc_op/s3.tf

@@ -8,4 +8,9 @@ module "s3_bucket" {
 
   control_object_ownership = true
   object_ownership         = "ObjectWriter"
+
+  tags = {
+    Vendor = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
+  }
 }

modules/aws_byoc_op/vpc.tf

@@ -44,6 +44,7 @@ module "vpc" {
 
   tags = {
     Vendor    = "zilliz-byoc"
+    Caller = data.aws_caller_identity.current.arn
   }
 }