Skip to content
This repository has been archived by the owner on Mar 10, 2024. It is now read-only.

Add resume to repo

Add resume to repo #20

Workflow file for this run

name: Terraform Plan Development Environment
on:
pull_request:
branches:
- main
paths:
- 'dev/**'
defaults:
run:
working-directory: ./dev
permissions:
pull-requests: write
jobs:
terraform_plan:
if: github.repository == 'dpgraham-com/dpgraham-infra'
name: Terraform Plan
environment: development
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
id-token: 'write'
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup Terraform
uses: hashicorp/setup-terraform@v2
- name: Authenticate Google Cloud
uses: google-github-actions/auth@v1
id: auth
with:
workload_identity_provider: ${{ secrets.WIF_PROVIDER }}
service_account: ${{ secrets.SA_EMAIL }}
- name: Terraform Init
run: terraform init -input=false -no-color
- name: Terraform Plan
id: plan
run: terraform plan -input=false -no-color -out=tfplan
env:
TF_VAR_db_name: ${{ secrets.DB_NAME }}
TF_VAR_db_username: ${{ secrets.DB_USERNAME }}
TF_VAR_db_password: ${{ secrets.DB_PASSWORD }}
TF_VAR_cloud_infra_sa: ${{ secrets.CLOUD_INFRA_SA }}
TF_VAR_cloud_run_sa: ${{ secrets.CLOUD_RUN_SA }}
- name: Comment on PR
uses: actions/github-script@v6
if: github.event_name == 'pull_request'
env:
PLAN: "terraform\n${{ steps.plan.outputs.stdout }}"
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
const output = `#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`
<details><summary>Show Plan</summary>
\`\`\`\n
${process.env.PLAN}
\`\`\`
</details>
*Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`, Working Directory: \`${{ env.tf_actions_working_dir }}\`, Workflow: \`${{ github.workflow }}\`*`;
github.rest.issues.createComment({
issue_number: context.issue.number,
owner: context.repo.owner,
repo: context.repo.repo,
body: output
})