mirror of
https://github.com/projecthorus/sondehub-infra.git
synced 2024-12-19 05:07:55 +00:00
adb6c377ec
* Add reordering of CSV field names * Terraform fmt [skip ci] * pin terraform version data --------- Co-authored-by: Mark Jessop <darkside@Marks-MacBook-Pro.local> Co-authored-by: darksidelemm <darksidelemm@users.noreply.github.com> Co-authored-by: xss <michaela@michaela.lgbt>
90 lines
2.7 KiB
YAML
90 lines
2.7 KiB
YAML
name: 'Terraform GitHub Actions'
|
|
on:
|
|
- pull_request
|
|
env:
|
|
tf_version: 'latest'
|
|
tf_working_dir: '.'
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
jobs:
|
|
terraform:
|
|
environment: main
|
|
name: 'Terraform'
|
|
runs-on: ubuntu-latest
|
|
# These permissions are needed to interact with GitHub's OIDC Token endpoint.
|
|
permissions:
|
|
id-token: write
|
|
contents: write
|
|
pull-requests: write
|
|
steps:
|
|
- name: Configure AWS Credentials
|
|
uses: aws-actions/configure-aws-credentials@v1
|
|
with:
|
|
aws-region: ap-southeast-2
|
|
role-to-assume: arn:aws:iam::143841941773:role/github
|
|
role-session-name: Terraform
|
|
- uses: hashicorp/setup-terraform@v1
|
|
with:
|
|
terraform_version: 1.1.5
|
|
- name: 'Checkout'
|
|
uses: actions/checkout@master
|
|
- name: Terraform fmt
|
|
id: fmt
|
|
run: terraform fmt
|
|
continue-on-error: true
|
|
- uses: EndBug/add-and-commit@v7
|
|
with:
|
|
message: Terraform fmt [skip ci]
|
|
committer_name: GitHub Actions
|
|
committer_email: actions@github.com
|
|
continue-on-error: true
|
|
- name: Terraform Init
|
|
id: init
|
|
run: terraform init
|
|
|
|
- name: Terraform Validate
|
|
id: validate
|
|
run: terraform validate -no-color
|
|
|
|
- name: Terraform Plan
|
|
id: plan
|
|
run: terraform plan -no-color -out prod.plan
|
|
continue-on-error: true
|
|
|
|
- uses: actions/github-script@0.9.0
|
|
if: github.event_name == 'pull_request'
|
|
env:
|
|
PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
|
|
with:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
script: |
|
|
const output = `#### Terraform Format and Style 🖌
|
|
|
|
<details><summary>Show Formatted Files</summary>
|
|
|
|
\`\`\`\n
|
|
${{ steps.fmt.outputs.stdout }}
|
|
\`\`\`
|
|
|
|
</details>
|
|
|
|
#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
|
|
#### Terraform Validation 🤖 ${{ steps.validate.outputs.stdout }}
|
|
#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
|
|
|
|
<details><summary>Show Plan</summary>
|
|
|
|
\`\`\`\n
|
|
${process.env.PLAN}
|
|
\`\`\`
|
|
|
|
</details>
|
|
|
|
*Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`, Working Directory: \`${{ env.tf_actions_working_dir }}\`, Workflow: \`${{ github.workflow }}\`*`;
|
|
|
|
github.issues.createComment({
|
|
issue_number: context.issue.number,
|
|
owner: context.repo.owner,
|
|
repo: context.repo.repo,
|
|
body: output
|
|
})
|