terraform-github-actions/.github/workflows/test-early-eval.yaml at main · dflook/terraform-github-actions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
name: Test OpenTofu early eval

on:
  - pull_request

permissions:
  contents: read

jobs:
  s3-backend:
    runs-on: ubuntu-24.04
    name: Plan with early eval
    permissions:
      contents: read
      pull-requests: write
    env:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          persist-credentials: false

      - name: tofu plan
        uses: ./tofu-plan
        id: plan
        with:
          path: tests/workflows/test-early-eval/s3
          variables: |
            passphrase = "tofuqwertyuiopasdfgh"

      - name: Verify outputs
        env:
          JSON_PLAN_PATH: ${{ steps.plan.outputs.json_plan_path }}
        run: |
          if [[ ! -f "$JSON_PLAN_PATH" ]]; then
            echo "::error:: json_plan_path not set correctly"
            exit 1
          fi

      - name: tofu apply
        uses: ./tofu-apply
        with:
          path: tests/workflows/test-early-eval/s3
          variables: |
            passphrase = "tofuqwertyuiopasdfgh"

      - name: Create workspace
        uses: ./tofu-new-workspace
        with:
          path: tests/workflows/test-early-eval/s3
          workspace: test-workspace
          variables: |
            passphrase = "tofuqwertyuiopasdfgh"

      - name: Create workspace again
        uses: ./tofu-new-workspace
        with:
          path: tests/workflows/test-early-eval/s3
          workspace: test-workspace
          variables: |
            passphrase = "tofuqwertyuiopasdfgh"

      - name: Destroy workspace
        uses: ./tofu-destroy-workspace
        with:
          path: tests/workflows/test-early-eval/s3
          workspace: test-workspace
          variables: |
            passphrase = "tofuqwertyuiopasdfgh"