feat: add trigger filters to aws codepipeline

tf/environments/dev/main.tf

@@ -318,6 +318,7 @@ module "ooniapi_ooniprobe_deployer" {
   repo                    = "ooni/backend"
   branch_name             = "master"
   buildspec_path          = "ooniapi/services/ooniprobe/buildspec.yml"
+  trigger_path            = "ooniapi/services/ooniprobe/**"
   codestar_connection_arn = aws_codestarconnections_connection.oonidevops.arn
 
   codepipeline_bucket = aws_s3_bucket.ooniapi_codepipeline_bucket.bucket
@@ -359,7 +360,6 @@ module "ooniapi_ooniprobe" {
   )
 }
 
-
 #### OONI Run service
 
 module "ooniapi_oonirun_deployer" {
@@ -369,6 +369,7 @@ module "ooniapi_oonirun_deployer" {
   repo                    = "ooni/backend"
   branch_name             = "master"
   buildspec_path          = "ooniapi/services/oonirun/buildspec.yml"
+  trigger_path            = "ooniapi/services/oonirun/**"
   codestar_connection_arn = aws_codestarconnections_connection.oonidevops.arn
 
   codepipeline_bucket = aws_s3_bucket.ooniapi_codepipeline_bucket.bucket
@@ -416,6 +417,7 @@ module "ooniapi_ooniauth_deployer" {
   repo                    = "ooni/backend"
   branch_name             = "master"
   buildspec_path          = "ooniapi/services/ooniauth/buildspec.yml"
+  trigger_path            = "ooniapi/services/ooniauth/**"
   codestar_connection_arn = aws_codestarconnections_connection.oonidevops.arn
 
   codepipeline_bucket = aws_s3_bucket.ooniapi_codepipeline_bucket.bucket
@@ -508,6 +510,7 @@ module "oonith_oohelperd_deployer" {
   repo                    = "ooni/probe-cli"
   branch_name             = "master"
   buildspec_path          = "oonith/buildspec.yml"
+  trigger_tag             = "release*"
   codestar_connection_arn = aws_codestarconnections_connection.oonidevops.arn
 
   codepipeline_bucket = aws_s3_bucket.oonith_codepipeline_bucket.bucket

tf/modules/ooniapi_service_deployer/main.tf

@@ -201,6 +201,24 @@ resource "aws_codepipeline" "ooniapi" {
     aws_codebuild_project.ooniapi
   ]
 
+  trigger {
+    provider_type = "CodeStarSourceConnection"
+
+    git_configuration {
+      source_action_name = "Source"
+
+      push {
+        branches {
+          includes = ["master"]
+        }
+        file_paths {
+          includes = [var.trigger_path]
+          excludes = ["**/README.md"]
+        }
+      }
+    }
+  }
+
   stage {
     action {
 

tf/modules/ooniapi_service_deployer/variables.tf

@@ -26,6 +26,10 @@ variable "repo" {
   default = "ooni/backend"
 }
 
+variable "trigger_path" {
+  description = "path filter for push changes which trigger the codepipeline eg. ooniapi/services/oonirun/**"
+}
+
 variable "ecs_cluster_name" {
   description = "id of the cluster to deploy into"
 }

tf/modules/oonith_service_deployer/main.tf

@@ -201,6 +201,23 @@ resource "aws_codepipeline" "oonith" {
     aws_codebuild_project.oonith
   ]
 
+  trigger {
+    provider_type = "CodeStarSourceConnection"
+
+    git_configuration {
+      source_action_name = "Source"
+
+      push {
+        branches {
+          includes = ["master"]
+        }
+        tags {
+          includes = [var.trigger_tag]
+        }
+      }
+    }
+  }
+
   stage {
     action {
 

tf/modules/oonith_service_deployer/variables.tf

@@ -22,6 +22,10 @@ variable "branch_name" {
   default = "main"
 }
 
+variable "trigger_tag" {
+  description = "tag filters to use to trigger pipeline eg. release-1.0"
+}
+
 variable "repo" {
   default = "ooni/backend"
 }