Skip to content

Commit

Permalink
try again
Browse files Browse the repository at this point in the history
  • Loading branch information
LamSut committed Oct 16, 2024
1 parent 2b138e5 commit 73a4885
Showing 1 changed file with 63 additions and 54 deletions.
117 changes: 63 additions & 54 deletions .gitlab-ci.yml
Original file line number Diff line number Diff line change
@@ -1,54 +1,63 @@
image:
name: registry.gitlab.com/gitlab-org/gitlab-build-images:terraform
entrypoint:
- '/usr/bin/env'
- 'PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'

variables:
TF_VAR_gitlab_token: ${GITLAB_ACCESS_TOKEN}
AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY}
AWS_SECRET_ACCESS_KEY : ${AWS_SECRET_KEY}
AWS_DEFAULT_REGION: "us-east-1"

cache:
paths:
- .terraform

before_script:
- terraform --version
- terraform init

stages:
- validate
- plan
- apply
- destroy

validate:
stage: validate
script:
- terraform validate

plan:
stage: plan
script:
- terraform plan -out="planfile"
dependencies:
- validate
artifacts:
paths:
- planfile

apply:
stage: apply
script:
- terraform apply -input=false "planfile"
dependencies:
- plan
when: manual

destroy:
stage: destroy
script:
- terraform destroy --auto-approve
when: manual
name: Terraform Workflow

on:
push:
branches: [ main ]

env:
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
AWS_DEFAULT_REGION: us-east-1

jobs:
terraform:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v3

- name: Set up Terraform
uses: hashicorp/setup-terraform@v2
with:
terraform_version: latest

- name: Cache Terraform modules (optional)
uses: actions/cache@v3
with:
path: ~/.terraform/modules
key: ${{ runner.os }}-terraform-${{ hashFiles('.terraform') }}
restore-keys: |
${{ runner.os }}-terraform-
- name: Initialize Terraform
run: terraform init

- name: Validate Terraform configuration
run: terraform validate

- name: Create Terraform plan (optional)
run: terraform plan -out=planfile
outputs: plan_file: planfile

- name: Upload plan artifacts (optional)
uses: actions/upload-artifact@v3
with:
name: terraform-plan
if: steps.plan.outputs.plan_file
path: ${{ steps.plan.outputs.plan_file }}

- name: Apply Terraform changes (manual)
run: terraform apply planfile
when: needs.apply

- name: Destroy infrastructure (manual)
run: terraform destroy --auto-approve
when: needs.destroy

needs:
apply:
inputs:
- types: approval
destroy:
inputs:
- types: approval

0 comments on commit 73a4885

Please sign in to comment.