-
Notifications
You must be signed in to change notification settings - Fork 1
67 lines (67 loc) · 2.29 KB
/
terraform.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
name: Terraform GitHub Actions
on:
- push
jobs:
terraform:
name: Terraform
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2-beta
- name: Install SOPS
run: |
wget https://github.com/mozilla/sops/releases/download/v3.5.0/sops_3.5.0_amd64.deb
sudo dpkg -i ./sops_3.5.0_amd64.deb
rm ./sops_3.5.0_amd64.deb
- name: Decrypt Terraform Variables
run: sops --decrypt --in-place ./main.auto.tfvars
env:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_DEFAULT_REGION: ${{ secrets.AWS_DEFAULT_REGION }}
- name: Terraform Format
uses: hashicorp/[email protected]
with:
tf_actions_version: 0.12.17
tf_actions_subcommand: fmt
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Terraform Init
uses: hashicorp/[email protected]
with:
tf_actions_version: 0.12.17
tf_actions_subcommand: init
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Terraform Validate
uses: hashicorp/[email protected]
with:
tf_actions_version: 0.12.17
tf_actions_subcommand: validate
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Terraform Plan
uses: hashicorp/[email protected]
with:
tf_actions_version: 0.12.17
tf_actions_subcommand: plan
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Terraform Apply
uses: hashicorp/[email protected]
with:
tf_actions_version: 0.12.17
tf_actions_subcommand: apply
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
if: github.ref == 'refs/heads/master'
- name: Terraform State
run: |
git config user.name 'GitHub Actions'
git config user.email '[email protected]'
git add ./terraform.tfstate
git commit -sm 'feat(Terraform): State File' || true
git push
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
if: github.ref == 'refs/heads/master'