55 lines
2.0 KiB
YAML
55 lines
2.0 KiB
YAML
name: 'Terraform'
|
|
|
|
on:
|
|
push:
|
|
branches: [ "staging", "main" ]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
terraform:
|
|
name: 'Terraform'
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
TF_WORKSPACE: ${{github.ref == 'refs/heads/main' && 'prod' || 'staging'}}
|
|
|
|
# Use the Bash shell regardless whether the GitHub Actions runner is ubuntu-latest, macos-latest, or windows-latest
|
|
defaults:
|
|
run:
|
|
shell: bash
|
|
|
|
steps:
|
|
# Checkout the repository to the GitHub Actions runner
|
|
- name: Checkout
|
|
uses: actions/checkout@v3
|
|
|
|
# Install the latest version of Terraform CLI and configure the Terraform CLI configuration file with a Terraform Cloud user API token
|
|
- name: Setup Terraform
|
|
uses: hashicorp/setup-terraform@v1
|
|
with:
|
|
cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
|
|
|
|
# Initialize a new or existing Terraform working directory by creating initial files, loading any remote state, downloading modules, etc.
|
|
- name: Terraform Init
|
|
run: terraform init
|
|
|
|
# Generates an execution plan for Terraform
|
|
- name: Terraform Plan
|
|
run: terraform plan -input=false
|
|
|
|
# On push to "main", build or change infrastructure according to Terraform configuration files
|
|
# Note: It is recommended to set up a required "strict" status check in your repository for "Terraform Cloud". See the documentation on "strict" required status checks for more information: https://help.github.com/en/github/administering-a-repository/types-of-required-status-checks
|
|
- name: Terraform Apply
|
|
if: github.event_name == 'push'
|
|
run: terraform apply -auto-approve -input=false
|
|
|
|
- name: Deploy Project via Dispatcher
|
|
if: env.TF_WORKSPACE == 'prod'
|
|
env:
|
|
DISPATCHER_EVENT: 'deploy-prod'
|
|
run: |
|
|
curl -X POST https://api.github.com/repos/HideyoshiNakazone/infra-hideyoshi.com/dispatches \
|
|
-H 'Accept: application/vnd.github.everest-preview+json' \
|
|
-u ${{ secrets.ACTIONS_KEY }} \
|
|
--data '{"event_type": "${{env.DISPATCHER_EVENT}}" }' |