-
Notifications
You must be signed in to change notification settings - Fork 0
88 lines (79 loc) · 2.44 KB
/
tg-plan.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
name: "Run-all Plan Terragrunt"
on:
workflow_dispatch:
inputs:
tf_working_dir:
description: "Terragrunt working directory"
required: false
default: "terragrunt"
# push:
pull_request:
branches:
- main
env:
TG_DIR: ${{ inputs.tf_working_dir }}
jobs:
checks:
runs-on: ubuntu-22.04
steps:
- name: "Checkout"
uses: actions/checkout@v3
- name: Check terragrunt HCL
uses: gruntwork-io/terragrunt-action@v1.0.7
with:
tf_version: ${{ vars.TF_VERSION }}
tg_version: ${{ vars.TG_VERSION }}
tg_dir: ${{ env.TG_DIR }}
tg_command: "hclfmt --terragrunt-check --terragrunt-diff"
init:
permissions:
id-token: write
contents: read
runs-on: ubuntu-22.04
needs: [checks]
steps:
- name: "Checkout"
uses: actions/checkout@v3
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v2
with:
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
role-session-name: GitHub-Actions-OIDC
role-duration-seconds: 1700
aws-region: ${{ vars.AWS_REGION }}
- name: Init
uses: gruntwork-io/terragrunt-action@v1.0.7
env:
AWS_ACCESS_KEY_ID: ${{ env.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ env.AWS_SECRET_ACCESS_KEY }}
with:
tf_version: ${{ vars.TF_VERSION }}
tg_version: ${{ vars.TG_VERSION }}
tg_dir: ${{ env.TG_DIR }}
tg_command: "run-all init --terragrunt-non-interactive"
plan:
permissions:
id-token: write
contents: read
runs-on: ubuntu-22.04
needs: [checks, init]
steps:
- name: "Checkout"
uses: actions/checkout@v3
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v2
with:
role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
role-session-name: GitHub-Actions-OIDC
role-duration-seconds: 1700
aws-region: ${{ vars.AWS_REGION }}
- name: Plan
uses: gruntwork-io/terragrunt-action@v1.0.7
env:
AWS_ACCESS_KEY_ID: ${{ env.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ env.AWS_SECRET_ACCESS_KEY }}
with:
tf_version: ${{ vars.TF_VERSION }}
tg_version: ${{ vars.TG_VERSION }}
tg_dir: ${{ env.TG_DIR }}
tg_command: "run-all plan --terragrunt-non-interactive"