Adding SQS to manage messages in the SRE bot #582

	name: Terraform plan
	on:
	pull_request:
	paths:
	- "terraform/**"
	- ".github/workflows/tf_plan.yml"

	env:
	AWS_REGION: ca-central-1
	TERRAFORM_VERSION: 1.3.3
	TERRAGRUNT_VERSION: 0.31.1
	TF_VAR_google_oauth_pickle_string: "${{ secrets.GOOGLE_PICKLE_STRING }}"
	TF_VAR_slack_webhook_url: ${{ secrets.SLACK_WEBHOOK_URL }}
	TF_VAR_gcp_sre_service_account_key: ${{ secrets.GCP_SRE_SERVICE_ACCOUNT_KEY_FILE }}


	permissions:
	id-token: write
	contents: read
	pull-requests: write

	jobs:
	terraform-plan:
	strategy:
	fail-fast: false
	matrix:
	include:
	- module: terraform

	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0

	- name: setup terraform tools
	uses: cds-snc/terraform-tools-setup@v1

	- name: configure aws credentials using OIDC
	uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
	with:
	role-to-assume: arn:aws:iam::283582579564:role/sre-bot-plan
	role-session-name: TFPlan
	aws-region: ${{ env.AWS_REGION }}

	- name: Terraform plan
	uses: cds-snc/terraform-plan@4719878d72d1b0078e0bce2e7571e854e79903b8 # v3.2.2
	with:
	comment-delete: true
	comment-title: "Production: ${{ matrix.module }}"
	directory: ${{ matrix.module }}
	github-token: ${{ secrets.GITHUB_TOKEN }}
	terragrunt: true

Provide feedback