06/26/2024 Production Release #4 #26
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Run Terraform plan in production | |
| on: | |
| pull_request: | |
| branches: [ production ] | |
| paths: [ 'terraform/**' ] | |
| defaults: | |
| run: | |
| working-directory: terraform/production | |
| jobs: | |
| terraform: | |
| name: Terraform plan | |
| runs-on: ubuntu-latest | |
| environment: production | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Terraform format | |
| id: format | |
| run: terraform fmt -check | |
| - name: Terraform init | |
| id: init | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }} | |
| run: terraform init | |
| - name: Terraform validate | |
| id: validation | |
| run: terraform validate -no-color | |
| - name: Terraform plan | |
| id: plan | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }} | |
| TF_VAR_cf_user: ${{ secrets.CLOUDGOV_USERNAME }} | |
| TF_VAR_cf_password: ${{ secrets.CLOUDGOV_PASSWORD }} | |
| run: terraform plan -no-color -input=false 2>&1 | tee plan_output.txt | |
| - name: Read Terraform plan output file | |
| id: terraform_output | |
| uses: juliangruber/read-file-action@v1 | |
| if: ${{ always() }} | |
| with: | |
| path: ./terraform/production/plan_output.txt | |
| # inspiration: https://learn.hashicorp.com/tutorials/terraform/github-actions#review-actions-workflow | |
| - name: Update PR | |
| uses: actions/github-script@v6 | |
| # we would like to update the PR even when a prior step failed | |
| if: ${{ always() }} | |
| with: | |
| script: | | |
| const output = `Terraform Format and Style: ${{ steps.format.outcome }} | |
| Terraform Initialization: ${{ steps.init.outcome }} | |
| Terraform Validation: ${{ steps.validation.outcome }} | |
| Terraform Plan: ${{ steps.plan.outcome }} | |
| <details><summary>Show Plan</summary> | |
| \`\`\`\n | |
| ${{ steps.terraform_output.outputs.content }} | |
| \`\`\` | |
| </details> | |
| *Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`*`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: output | |
| }) |