docs: add readme #3
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "[DEV] - Terraform Deployment" | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| env: | |
| AWS_REGION: "sa-east-1" | |
| TERRAFORM_DYNAMODB_LOCK_TABLE: "buildrun-terraform-state-lock" | |
| TERRAFORM_S3_STATEFILE_BUCKET: "buildrun-sa-east-1-terraform-s3-statefile" | |
| permissions: | |
| id-token: write | |
| contents: read | |
| jobs: | |
| terraform: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| shell: bash | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Setup Terraform | |
| uses: hashicorp/setup-terraform@v3 | |
| with: | |
| terraform_version: 1.8.3 | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| role-to-assume: arn:aws:iam::179916804929:role/BuildRun-GithubActions-Role | |
| role-session-name: GitHub_to_AWS_via_FederatedOIDC | |
| aws-region: ${{ env.AWS_REGION }} | |
| - name: Read destroy configuration | |
| id: read-destroy-config | |
| run: | | |
| DESTROY_DEV="$(jq -r '.dev' ./infra/destroy_config.json)" | |
| echo "destroy_dev=$(echo $DESTROY_DEV)" >> $GITHUB_OUTPUT | |
| - name: Terraform Init | |
| run: | | |
| cd infra && terraform init \ | |
| -backend-config="bucket=${{ env.TERRAFORM_S3_STATEFILE_BUCKET }}" \ | |
| -backend-config="key=${{ github.event.repository.name }}" \ | |
| -backend-config="region=${{ env.AWS_REGION }}" \ | |
| -backend-config="dynamodb_table=${{ env.TERRAFORM_DYNAMODB_LOCK_TABLE }}" | |
| - name: Terraform Validate | |
| run: terraform validate | |
| - name: Terraform Destroy for Dev | |
| if: steps.read-destroy-config.outputs.destroy_dev == 'true' && github.ref == 'refs/heads/develop' && github.event_name == 'push' | |
| id: terraform-destroy-dev | |
| run: cd infra && | |
| terraform workspace select dev || terraform workspace new dev && | |
| terraform destroy -var-file="./envs/dev/terraform.tfvars" -auto-approve | |
| - name: Terraform Plan for Dev | |
| if: steps.read-destroy-config.outputs.destroy_dev != 'true' && github.ref == 'refs/heads/develop' && github.event_name == 'push' | |
| id: terraform-plan-dev | |
| run: cd infra && | |
| terraform workspace select dev || terraform workspace new dev && | |
| terraform plan -var-file="./envs/dev/terraform.tfvars" -out=dev.plan | |
| - name: Terraform Apply for Dev | |
| id: terraform-apply-dev | |
| if: steps.read-destroy-config.outputs.destroy_dev != 'true' && github.ref == 'refs/heads/develop' && github.event_name == 'push' | |
| run: cd infra && | |
| terraform workspace select dev || terraform workspace new dev && | |
| terraform apply "dev.plan" |