From a622002c557eb41b35ffe868e83debd79589882e Mon Sep 17 00:00:00 2001
From: arnol377 <david.j.arnold.jr@census.gov>
Date: Tue, 5 Nov 2024 17:33:23 -0500
Subject: [PATCH] cleaning up repo

---
 actions_secrets.tf   | 14 --------
 encode_jwt.py        | 80 --------------------------------------------
 runner_workspaces.tf |  3 +-
 3 files changed, 2 insertions(+), 95 deletions(-)
 delete mode 100644 actions_secrets.tf
 delete mode 100644 encode_jwt.py

diff --git a/actions_secrets.tf b/actions_secrets.tf
deleted file mode 100644
index 2c43dce..0000000
--- a/actions_secrets.tf
+++ /dev/null
@@ -1,14 +0,0 @@
-locals {
-  secrets = [
-    "AWS_SECRET_ACCESS_KEY",
-    "AWS_SESSION_TOKEN",
-    "AWS_ACCESS_KEY_ID",
-    "GITHUB_TOKEN"
-  ]
-}
-
-module "env_var" {
-  source   = "HappyPathway/var/env"
-  for_each = toset(local.secrets)
-  env_var  = each.value
-}
diff --git a/encode_jwt.py b/encode_jwt.py
deleted file mode 100644
index a777670..0000000
--- a/encode_jwt.py
+++ /dev/null
@@ -1,80 +0,0 @@
-## Run this script set the private key as github_app_private_key and installation_id as the installation id of the app
-
-#export REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-bundle.crt
-#export github_app_private_key="-----BEGIN"
-#export github_app_installation_id=11
-#export github_app_url=https://github.e.it.census.gov
-#export GITHUB_TOKEN=$(python encode_jwt.py "$github_app_private_key" "$github_app_installation_id" "$github_app_url")
-
-import time
-import json
-import base64
-import argparse
-import requests
-from cryptography.hazmat.primitives import hashes
-from cryptography.hazmat.primitives.asymmetric import padding
-from cryptography.hazmat.primitives.serialization import load_pem_private_key
-import sys
-
-# Set up argument parser
-parser = argparse.ArgumentParser(description='Encode JWT with RS256 and get GitHub Enterprise installation access token')
-parser.add_argument('private_key', type=str, help='PEM formatted private key string')
-parser.add_argument('installation_id', type=str, help='GitHub App Installation ID')
-parser.add_argument('enterprise_url', type=str, help='GitHub Enterprise API URL (e.g., https://github.e.it.census.gov)')
-args = parser.parse_args()
-
-# Load the PEM private key
-private_key = load_pem_private_key(args.private_key.encode(), password=None)
-
-# JWT Header
-header = {
-    "alg": "RS256",
-    "typ": "JWT"
-}
-
-# JWT Payload
-payload = {
-    "iat": int(time.time()),
-    "exp": int(time.time()) + (10 * 60),
-    "iss": "6"  # Replace with your actual GitHub App ID
-}
-
-# Encode Header and Payload as Base64
-header_encoded = base64.urlsafe_b64encode(json.dumps(header).encode()).decode().rstrip("=")
-payload_encoded = base64.urlsafe_b64encode(json.dumps(payload).encode()).decode().rstrip("=")
-
-# Create the message (header + payload)
-message = f"{header_encoded}.{payload_encoded}".encode()
-
-# Sign the message using RS256
-signature = private_key.sign(
-    message,
-    padding.PKCS1v15(),
-    hashes.SHA256()
-)
-
-# Encode the signature in Base64
-signature_encoded = base64.urlsafe_b64encode(signature).decode().rstrip("=")
-
-# Construct the full JWT
-jwt_token = f"{header_encoded}.{payload_encoded}.{signature_encoded}"
-
-# Prepare the request to get the installation access token
-headers = {
-    "Authorization": f"Bearer {jwt_token}",
-    "Accept": "application/vnd.github+json"
-}
-
-# Make the request to the GitHub Enterprise API to get the installation access token
-url = f"{args.enterprise_url}api/v3/app/installations/{args.installation_id}/access_tokens"
-response = requests.post(url, headers=headers)
-
-# Check if the request was successful
-if response.status_code == 201:
-    installation_access_token = response.json().get('token')
-    print(installation_access_token)  # Output the token only
-else:
-    # Raise an error with a message
-    sys.stderr.write(f"Error: Failed to get installation access token. Status code: {response.status_code}\n")
-    sys.stderr.write(f"{response.text}\n")
-    sys.exit(1)  # Exit with an error code
diff --git a/runner_workspaces.tf b/runner_workspaces.tf
index 220306f..8af342f 100644
--- a/runner_workspaces.tf
+++ b/runner_workspaces.tf
@@ -11,7 +11,8 @@ locals {
       name        = "github-runners-${repo}"
       repo_topics = [
         "terraform-tools",
-        "github-actions"
+        "github-actions",
+        "github-runners-workspace"
       ]
     }
   ]