Add apply action.

Author: nikovirtala

README.md

@@ -1,6 +1,5 @@
 # Terraform GitHub Actions
-These official Terraform GitHub Actions allow you to run `terraform fmt`, `validate`
- and `plan` on your pull requests to help you review and validate Terraform changes.
+These official Terraform GitHub Actions allow you to run `terraform fmt`, `validate`, `plan` and `apply` on your pull requests to help you review, validate and apply Terraform changes.
 
 ## Getting Started
 To get started, check out our documentation: [https://www.terraform.io/docs/github-actions/getting-started/](https://www.terraform.io/docs/github-actions/getting-started/).
@@ -18,3 +17,7 @@ Runs `terraform validate` and comments back on error.
 ### Plan Action
 Runs `terraform plan` and comments back with the output.
 <img src="./assets/plan.png" alt="Terraform Plan Action" width="80%" />
+
+### Apply Action
+Runs `terraform apply` and comments back with the output.
+<img src="./assets/apply.png" alt="Terraform Apply Action" width="80%" />

apply/Dockerfile

@@ -0,0 +1,15 @@
+FROM hashicorp/terraform:0.11.11
+
+LABEL "com.github.actions.name"="terraform apply"
+LABEL "com.github.actions.description"="Run Terraform Apply"
+LABEL "com.github.actions.icon"="upload"
+LABEL "com.github.actions.color"="purple"
+
+LABEL "repository"="https://github.com/hashicorp/terraform-github-actions"
+LABEL "homepage"="http://github.com/hashicorp/terraform-github-actions"
+LABEL "maintainer"="HashiCorp Terraform Team <[email protected]>"
+
+RUN apk --no-cache add jq
+
+COPY entrypoint.sh /entrypoint.sh
+ENTRYPOINT ["/entrypoint.sh"]

apply/README.md

@@ -0,0 +1,4 @@
+# Terraform Apply Action
+Runs `terraform apply` and comments back on the pull request with the apply output.
+
+See [https://www.terraform.io/docs/github-actions/actions/apply.html](https://www.terraform.io/docs/github-actions/actions/apply.html).

apply/entrypoint.sh

@@ -0,0 +1,75 @@
+#!/bin/sh
+
+# wrap takes some output and wraps it in a collapsible markdown section if
+# it's over $TF_ACTION_WRAP_LINES long.
+wrap() {
+  if [[ $(echo "$1" | wc -l) -gt ${TF_ACTION_WRAP_LINES:-20} ]]; then
+    echo "
+<details><summary>Show Output</summary>
+
+\`\`\`diff
+$1
+\`\`\`
+
+</details>
+"
+else
+    echo "
+\`\`\`diff
+$1
+\`\`\`
+"
+fi
+}
+
+set -e
+
+cd "${TF_ACTION_WORKING_DIR:-.}"
+
+WORKSPACE=${TF_ACTION_WORKSPACE:-default}
+terraform workspace select "$WORKSPACE"
+
+# Name the plan file based on selected workspace
+PLANFILE=${WORKSPACE}.tfplan
+
+set +e
+OUTPUT=$(sh -c "TF_IN_AUTOMATION=true terraform apply -no-color $PLANFILE $*" 2>&1)
+SUCCESS=$?
+echo "$OUTPUT"
+set -e
+
+if [ "$TF_ACTION_COMMENT" = "1" ] || [ "$TF_ACTION_COMMENT" = "false" ]; then
+    exit $SUCCESS
+fi
+
+# Build the comment we'll post to the PR.
+COMMENT=""
+if [ $SUCCESS -ne 0 ]; then
+    OUTPUT=$(wrap "$OUTPUT")
+    COMMENT="#### \`terraform apply\` Failed
+$OUTPUT"
+else
+    # Remove "Refreshing state..." lines by only keeping output after the
+    # delimiter (72 dashes) that represents the end of the refresh stage.
+    # We do this to keep the comment output smaller.
+    if echo "$OUTPUT" | egrep '^-{72}$'; then
+        OUTPUT=$(echo "$OUTPUT" | sed -n -r '/-{72}/,/-{72}/{ /-{72}/d; p }')
+    fi
+
+    # Remove whitespace at the beginning of the line for added/modified/deleted
+    # resources so the diff markdown formatting highlights those lines.
+    OUTPUT=$(echo "$OUTPUT" | sed -r -e 's/^  \+/\+/g' | sed -r -e 's/^  ~/~/g' | sed -r -e 's/^  -/-/g')
+
+    # Call wrap to optionally wrap our output in a collapsible markdown section.
+    OUTPUT=$(wrap "$OUTPUT")
+
+    COMMENT="#### \`terraform apply\` Success
+$OUTPUT"
+fi
+
+# Post the comment.
+PAYLOAD=$(echo '{}' | jq --arg body "$COMMENT" '.body = $body')
+COMMENTS_URL=$(cat /github/workflow/event.json | jq -r .pull_request.comments_url)
+curl -s -S -H "Authorization: token $GITHUB_TOKEN" --header "Content-Type: application/json" --data "$PAYLOAD" "$COMMENTS_URL" > /dev/null
+
+exit $SUCCESS

assets/apply.png

@@ -38,8 +38,11 @@ if [[ ! -z "$TF_ACTION_WORKSPACE" ]] && [[ "$TF_ACTION_WORKSPACE" != "default" ]
   terraform workspace select "$TF_ACTION_WORKSPACE"
 fi
 
+# Name the plan file based on selected workspace
+PLANFILE=${WORKSPACE}.tfplan
+
 set +e
-OUTPUT=$(sh -c "TF_IN_AUTOMATION=true terraform plan -no-color -input=false $*" 2>&1)
+OUTPUT=$(sh -c "TF_IN_AUTOMATION=true terraform plan -no-color -input=false -out=$PLANFILE $*" 2>&1)
 SUCCESS=$?
 echo "$OUTPUT"
 set -e