Skip to content
Terraform

karpenter #86

Sign in to view logs

karpenter

karpenter #86

Workflow file for this run

.github/workflows/main.yaml at 24316fd
name: Terraform
on:
push:
branches:
- master
- main
- dev
- feature/*
pull_request:
branches:
- feature/*
jobs:
# tflint-checks:
# name: TFLint Checks
# runs-on: ubuntu-latest
# steps:
# - name: Checkout
# uses: actions/checkout@v3
# - uses: terraform-linters/setup-tflint@v2
# name: Setup TFLint
# with:
# tflint_version: v0.38.1
# - name: Show version
# run: tflint --version
# - name: Init TFLint
# run: tflint --init
# - name: Run TFLint
# run: tflint -f compact
# tfsec-checks:
# name: TFSec Checks
# runs-on: ubuntu-latest
# steps:
# - name: Checkout
# uses: actions/checkout@v3
# - name: Run Tfsec
# uses: aquasecurity/tfsec-action@v1.0.0
# with:
# soft_fail: true
terraform-plan:
name: Terraform Plan
runs-on: ubuntu-latest
permissions:
id-token: write
contents: read
steps:
- name: Checkout
uses: actions/checkout@v3
- uses: aws-actions/configure-aws-credentials@v1
with:
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
aws-region: ${{ secrets.AWS_REGION }}
role-session-name: "TerraformPlan"
- name: Setup Nodejs
uses: actions/setup-node@v2
with:
node-version: '14'
- name: Setup Terraform
uses: hashicorp/setup-terraform@v2
- name: Terraform Plan
id: terraform-plan
run: |
./plan.sh
env:
TF_VAR_AWS_ROLE_ARN: ${{ secrets.AWS_ROLE_TO_ASSUME }}
TF_STATE_BUCKET: ${{ secrets.TF_STATE_BUCKET }}
TF_STATE_KEY: ${{ secrets.TF_STATE_KEY }}
TF_STATE_REGION: ${{ secrets.AWS_REGION }}
TF_STATE_DYNAMODB_TABLE: ${{ secrets.TF_STATE_DYNAMODB_TABLE }}
- name: Upload Plan
uses: actions/upload-artifact@v3
with:
name: terraform-plan
if-no-files-found: error
path: |
plan.out
.terraform
.terraform.lock.hcl
terraform-apply:
name: Terraform Apply
needs: terraform-plan
runs-on: ubuntu-latest
permissions:
id-token: write
contents: read
steps:
- name: Checkout
uses: actions/checkout@v3
- uses: aws-actions/configure-aws-credentials@v1
with:
role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
aws-region: ${{ secrets.AWS_REGION }}
role-session-name: "TerraformPlan"
- name: Setup Nodejs
uses: actions/setup-node@v2
with:
node-version: '14'
- name: Setup Terraform
uses: hashicorp/setup-terraform@v2
- name: Download Plan
uses: actions/download-artifact@v3
with:
name: terraform-plan
- name: Terraform Apply
id: terraform-apply
run: |
chmod -R a+x .terraform
./apply.sh