name: "Terraform Apply"

on:
  push:
    branches:
      - main

env:
  TF_CLOUD_ORGANIZATION: "MealCraft"
  TF_API_TOKEN: "${{ secrets.TF_API_TOKEN }}"
  TF_WORKSPACE: "production"
  CONFIG_DIRECTORY: aws_environment
  TF_VAR_public_ip: "${{ secrets.PUBLIC_IP }}"

jobs:
  terraform:
    if: github.repository != 'hashicorp-education/learn-terraform-github-actions'
    name: "Terraform Apply"
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Debug Paths
        run: |
          echo "Workspace: $GITHUB_WORKSPACE"
          ls -R .
          echo "CONFIG_DIRECTORY: $CONFIG_DIRECTORY"
          ls -R "$CONFIG_DIRECTORY"

      - name: Upload Configuration
        uses: hashicorp/tfc-workflows-github/actions/upload-configuration@v1.0.0
        id: apply-upload
        with:
          workspace: ${{ env.TF_WORKSPACE }}
          directory: ${{ env.CONFIG_DIRECTORY }}

      - name: Create Apply Run
        uses: hashicorp/tfc-workflows-github/actions/create-run@v1.0.0
        id: apply-run
        with:
          workspace: ${{ env.TF_WORKSPACE }}
          configuration_version: ${{ steps.apply-upload.outputs.configuration_version_id }}

      # Terraform marks the run as "confirmable" using lowercase attribute
      - name: Apply
        if: fromJSON(steps.apply-run.outputs.payload).data.attributes.actions.is_confirmable
        uses: hashicorp/tfc-workflows-github/actions/apply-run@v1.0.0
        id: apply
        with:
          comment: "Apply from GitHub Actions CI ${{ github.sha }}"
          run: ${{ steps.apply-run.outputs.run_id }}

      - name: Print TF_VAR_public_ip
        run: 'echo "📡 Public IP used by Terraform: $TF_VAR_public_ip"'