Skip to content

chriswachira triggered a Terraform workflow #63

chriswachira triggered a Terraform workflow

chriswachira triggered a Terraform workflow #63

Workflow file for this run

name: Run Terraform jobs
run-name: ${{ github.actor }} triggered a Terraform workflow
on:
push:
branches: [ "main" ]
pull_request:
permissions:
contents: read
jobs:
terraform:
name: 'Terraform'
runs-on: ubuntu-latest
environment: production
# Use the Bash shell regardless whether the GitHub Actions runner is ubuntu-latest, macos-latest, or windows-latest
defaults:
run:
shell: bash
steps:
# Checkout the repository to the GitHub Actions runner
- name: Checkout
uses: actions/checkout@v3
# Install the latest version of Terraform CLI and configure the Terraform CLI configuration file with a Terraform Cloud user API token
- name: Setup Terraform
uses: hashicorp/setup-terraform@v1
with:
cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
# Initialize a new or existing Terraform working directory by creating initial files, loading any remote state, downloading modules, etc.
- name: Terraform Init
run: cd terraform/ && terraform init
# Checks that all Terraform configuration files adhere to a canonical format
- name: Terraform Format
run: cd terraform/ && terraform fmt -check
# Validates that all Terraform configurations make sense
- name: Terraform Validate
run: cd terraform/ && terraform validate
# Generates an execution plan for Terraform
# - name: Terraform Plan
# run: cd terraform/ && terraform plan -input=false
# On push to "main", build or change infrastructure according to Terraform configuration files
# Note: It is recommended to set up a required "strict" status check in your repository for "Terraform Cloud". See the documentation on "strict" required status checks for more information: https://help.github.com/en/github/administering-a-repository/types-of-required-status-checks
# - name: Terraform Apply
# if: github.ref == 'refs/heads/main' && github.event_name == 'push'
# run: cd terraform/ && terraform apply -auto-approve -input=false