This repository was archived by the owner on Aug 20, 2026. It is now read-only.
08/28/2025 Production Hot Fix #49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Run Terraform plan in demo | |
| on: | |
| pull_request: | |
| branches: [ production ] | |
| paths: [ 'terraform/**' ] | |
| defaults: | |
| run: | |
| working-directory: terraform/demo | |
| jobs: | |
| terraform: | |
| name: Terraform plan | |
| runs-on: ubuntu-latest | |
| environment: demo | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| # Looks like we need to install Terraform ourselves now! | |
| # https://github.com/actions/runner-images/issues/10796#issuecomment-2417064348 | |
| - name: Setup Terraform | |
| uses: hashicorp/setup-terraform@v3 | |
| with: | |
| terraform_version: "^1.7.5" | |
| terraform_wrapper: false | |
| - name: Terraform format | |
| id: format | |
| run: terraform fmt -check | |
| - name: Terraform init | |
| id: init | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }} | |
| run: terraform init | |
| - name: Terraform validate | |
| id: validation | |
| run: terraform validate -no-color | |
| - name: Terraform plan | |
| id: plan | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }} | |
| TF_VAR_cf_user: ${{ secrets.CLOUDGOV_USERNAME }} | |
| TF_VAR_cf_password: ${{ secrets.CLOUDGOV_PASSWORD }} | |
| run: terraform plan -no-color -input=false 2>&1 | tee plan_output.txt | |
| - name: Read Terraform plan output file | |
| id: terraform_output | |
| uses: juliangruber/read-file-action@v1 | |
| if: ${{ always() }} | |
| with: | |
| path: ./terraform/demo/plan_output.txt | |
| # inspiration: https://learn.hashicorp.com/tutorials/terraform/github-actions#review-actions-workflow | |
| - name: Update PR | |
| uses: actions/github-script@v7 | |
| # we would like to update the PR even when a prior step failed | |
| if: ${{ always() }} | |
| with: | |
| script: | | |
| const output = `Terraform Format and Style: ${{ steps.format.outcome }} | |
| Terraform Initialization: ${{ steps.init.outcome }} | |
| Terraform Validation: ${{ steps.validation.outcome }} | |
| Terraform Plan: ${{ steps.plan.outcome }} | |
| <details><summary>Show Plan</summary> | |
| \`\`\`\n | |
| ${{ steps.terraform_output.outputs.content }} | |
| \`\`\` | |
| </details> | |
| *Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`*`; | |
| github.rest.issues.createComment({ | |
| issue_number: context.issue.number, | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| body: output | |
| }) |