generated from cds-snc/project-template
-
Notifications
You must be signed in to change notification settings - Fork 0
53 lines (48 loc) · 1.7 KB
/
tf_plan.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
name: Terraform plan
on:
workflow_dispatch:
pull_request:
paths:
- "terragrunt/**"
- ".github/workflows/**"
env:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_REGION: ca-central-1
TERRAFORM_VERSION: 1.0.3
TERRAGRUNT_VERSION: v0.31.1
TF_VAR_api_auth_token: ${{ secrets.TF_VARS_API_AUTH_TOKEN }}
TF_VAR_notify_key: ${{ secrets.TF_VARS_NOTIFY_KEY }}
TF_VAR_rds_password: ${{ secrets.TF_VARS_RDS_PASSWORD }}
TF_VAR_slack_webhook_url: ${{ secrets.TF_VARS_SLACK_WEBHOOK_URL }}
jobs:
terraform-plan:
strategy:
fail-fast: false
matrix:
include:
- module: api
- module: hosted_zone
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@dc323e67f16fb5f7663d20ff7941f27f5809e9b6 # v2.6.0
- name: Setup Terraform
uses: hashicorp/setup-terraform@ed3a0531877aca392eb870f440d9ae7aba83a6bd # v1.4.0
with:
terraform_version: ${{ env.TERRAFORM_VERSION }}
terraform_wrapper: false
- name: Setup Terragrunt
run: |
mkdir -p bin
wget -O bin/terragrunt https://github.com/gruntwork-io/terragrunt/releases/download/$TERRAGRUNT_VERSION/terragrunt_linux_amd64
chmod +x bin/*
echo "$GITHUB_WORKSPACE/bin" >> $GITHUB_PATH
- name: Terraform plan
uses: cds-snc/terraform-plan@1519c0074bc5bee9e949c7d1d4d7636a75c2479e # v1.0.10
with:
comment-delete: true
comment-title: Plan for ${{ matrix.module }}
directory: ./terragrunt/env/${{ matrix.module }}
github-token: ${{ secrets.GITHUB_TOKEN }}
terragrunt: true