juntekim.com/.github/workflows/terraform-apply.yml
Jun-te Kim 02a78dbae2 ses
2026-02-08 20:44:26 +00:00

106 lines
3 KiB
YAML

name: "Terraform Apply"
on:
push:
branches:
- main
env:
TF_CLOUD_ORGANIZATION: "MealCraft"
TF_API_TOKEN: "${{ secrets.TF_API_TOKEN }}"
TF_WORKSPACE: "production"
CONFIG_DIRECTORY: aws_environment
TF_VAR_public_ip: "${{ secrets.PUBLIC_IP }}"
jobs:
terraform:
if: github.repository != 'hashicorp-education/learn-terraform-github-actions'
name: "Terraform Apply"
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Debug Paths
run: |
echo "Workspace: $GITHUB_WORKSPACE"
ls -R .
echo "CONFIG_DIRECTORY: $CONFIG_DIRECTORY"
ls -R "$CONFIG_DIRECTORY"
- name: Upload Configuration
uses: hashicorp/tfc-workflows-github/actions/upload-configuration@v1.0.0
id: apply-upload
with:
workspace: ${{ env.TF_WORKSPACE }}
directory: ${{ env.CONFIG_DIRECTORY }}
- name: Create Apply Run
uses: hashicorp/tfc-workflows-github/actions/create-run@v1.0.0
id: apply-run
with:
workspace: ${{ env.TF_WORKSPACE }}
configuration_version: ${{ steps.apply-upload.outputs.configuration_version_id }}
# Terraform marks the run as "confirmable" using lowercase attribute
- name: Apply
if: fromJSON(steps.apply-run.outputs.payload).data.attributes.actions.is_confirmable
uses: hashicorp/tfc-workflows-github/actions/apply-run@v1.0.0
id: apply
with:
comment: "Apply from GitHub Actions CI ${{ github.sha }}"
run: ${{ steps.apply-run.outputs.run_id }}
- name: Print TF_VAR_public_ip
run: 'echo "📡 Public IP used by Terraform: $TF_VAR_public_ip"'
terraform-ses:
if: github.repository != 'hashicorp-education/learn-terraform-github-actions'
name: "Terraform Apply - SES"
runs-on: mealcraft-runners
needs: terraform
permissions:
contents: read
steps:
- name: Checkout repo
uses: actions/checkout@v4
- name: Setup Terraform
uses: hashicorp/setup-terraform@v3
with:
terraform_version: "1.6.6"
- name: Install AWS CLI v2
run: |
sudo apt-get update
sudo apt-get install -y unzip curl
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install
aws --version
- name: Verify AWS identity
run: aws sts get-caller-identity
- name: Terraform Init
working-directory: aws_environment/ses-juntekim
run: terraform init
- name: Terraform Validate
working-directory: aws_environment/ses-juntekim
run: terraform validate
- name: Terraform Plan
id: plan
working-directory: aws_environment/ses-juntekim
run: terraform plan -input=false
- name: Terraform Apply
working-directory: aws_environment/ses-juntekim
run: terraform apply -auto-approve -input=false