Weekly Terragrunt Output Inventory Across Every Unit

id: terragrunt-output-inventory
namespace: company.team
description: |
  Weekly living inventory of what every environment exposes. run-all
  output -json captures the outputs of every Terragrunt unit into one
  file, a Python task parses and counts them, and a Slack digest lists
  the output names, with failures escalated to Discord.

triggers:
  - id: weekly
    type: io.kestra.plugin.core.trigger.Schedule
    description: Refresh the inventory every Monday morning. Enable once the flow
      points at your real repository and state.
    cron: "0 7 * * 1"
    disabled: true

tasks:
  - id: collect_outputs
    type: io.kestra.plugin.terragrunt.cli.TerragruntCLI
    description: Apply the demo estate so outputs exist, then capture run-all output
      -json for every unit into inventory.json and export it as an artifact.
    containerImage: alpine/terragrunt
    inputFiles:
      live/root.hcl: |
        inputs = {
          owner = "platform-team"
        }
      live/network/terragrunt.hcl: |
        include "root" {
          path = find_in_parent_folders("root.hcl")
        }

        terraform {
          source = "${get_terragrunt_dir()}/../../modules/network"
        }
      live/app/terragrunt.hcl: |
        include "root" {
          path = find_in_parent_folders("root.hcl")
        }

        terraform {
          source = "${get_terragrunt_dir()}/../../modules/app"
        }
      modules/network/main.tf: |
        variable "owner" {
          type = string
        }

        resource "local_file" "network_manifest" {
          filename = "${path.module}/network-manifest.txt"
          content  = "network owned by ${var.owner}\n"
        }

        output "network_manifest_path" {
          value = local_file.network_manifest.filename
        }

        output "network_cidr" {
          value = "10.20.0.0/16"
        }
      modules/app/main.tf: |
        variable "owner" {
          type = string
        }

        resource "local_file" "app_manifest" {
          filename = "${path.module}/app-manifest.txt"
          content  = "app owned by ${var.owner}\n"
        }

        output "app_manifest_path" {
          value = local_file.app_manifest.filename
        }

        output "app_internal_url" {
          value = "http://app.internal.example"
        }
    commands:
      - terragrunt run-all apply --non-interactive --working-dir live -no-color
      - 'terragrunt run-all output -json --working-dir live > inventory.json'
    outputFiles:
      - inventory.json

  - id: summarize_inventory
    type: io.kestra.plugin.scripts.python.Script
    description: Parse the captured JSON, which may contain one document per unit,
      count units and output values, and emit the digest fields through the
      outputs protocol.
    taskRunner:
      type: io.kestra.plugin.core.runner.Process
    inputFiles:
      inventory.json: "{{ outputs.collect_outputs.outputFiles['inventory.json'] }}"
    script: |
      import json

      with open("inventory.json") as handle:
          raw = handle.read()

      decoder = json.JSONDecoder()
      documents = []
      index = 0
      while index < len(raw):
          while index < len(raw) and raw[index] in " \t\r\n":
              index += 1
          if index >= len(raw):
              break
          document, index = decoder.raw_decode(raw, index)
          documents.append(document)

      total = sum(len(document) for document in documents)
      names = sorted({name for document in documents for name in document})
      summary = ", ".join(names) if names else "none"
      print("::" + json.dumps({"outputs": {"units": len(documents), "total_outputs": total, "output_names": summary}}) + "::")

  - id: post_digest
    type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
    description: Post the weekly digest so the team has a current list of what the
      estate exposes without opening a terminal.
    url: "{{ secret('SLACK_WEBHOOK_URL') }}"
    payload: |
      {
        "text": "Terragrunt output inventory: {{ outputs.summarize_inventory.vars.total_outputs }} output value(s) across {{ outputs.summarize_inventory.vars.units }} unit(s). Names: {{ outputs.summarize_inventory.vars.output_names }} (execution {{ execution.id }})."
      }

errors:
  - id: alert_failure
    type: io.kestra.plugin.discord.DiscordIncomingWebhook
    description: Escalate a broken inventory run to the on-call Discord channel, the
      routine digest goes to Slack, failures need a louder room.
    url: "{{ secret('DISCORD_WEBHOOK_URL') }}"
    payload: |
      {
        "content": "Terragrunt output inventory FAILED in flow {{ flow.id }} (execution {{ execution.id }}). This week's estate inventory is missing, review the task logs."
      }