add CI/CD

Author: y-popov

.github/workflows/terraform-validate.yml

@@ -0,0 +1,33 @@
+name: Terraform Validate
+
+on:
+  push:
+    paths:
+      - 'terraform/**'
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    name: Init and Validate
+    runs-on: ubuntu-latest
+    env:
+      TF_IN_AUTOMATION: "true"
+      TF_INPUT: "false"
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: 1.13.1
+
+      - name: Terraform Init
+        working-directory: terraform
+        run: terraform init
+
+      - name: Terraform Validate
+        working-directory: terraform
+        run: terraform validate

.github/workflows/terraform-webhook.yml

@@ -0,0 +1,37 @@
+name: Terraform via Webhook
+
+on:
+  repository_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  terraform:
+    name: Run Terraform
+    runs-on: ubuntu-latest
+    env:
+      TF_IN_AUTOMATION: "true"
+      TF_INPUT: "false"
+      TF_VAR_iam_token: ${{ secrets.YC_IAM_TOKEN }}
+      TF_VAR_cloud_id: ${{ secrets.YC_CLOUD_ID }}
+      TF_VAR_folder_id: ${{ secrets.YC_FOLDER_ID }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: 1.13.1
+
+      - name: Terraform Init
+        run: terraform init
+
+      - name: Terraform Plan
+        run: terraform plan -var="preemptible=true" -out=tfplan
+
+      - name: Terraform Apply
+        run: terraform apply -auto-approve tfplan

main.tf terraform/main.tfmain.tf renamed to terraform/main.tf

@@ -5,27 +5,19 @@ terraform {
     }
   }
   required_version = ">= 0.13"
-}
-
-variable "cloud_id" {
-  type     = string
-  nullable = false
-}
-
-variable "folder_id" {
-  type     = string
-  nullable = false
-}
 
-variable "iam_token" {
-  type     = string
-  nullable = false
-}
+  backend "s3" {
+    endpoints = {
+      s3 = "https://storage.yandexcloud.net"
+    }
+    bucket   = "tf-states-bucket"
+    region   = "ru-central1"
+    key      = "ru-proxy/terraform.tfstate"
 
-variable "preemptible" {
-  type        = bool
-  default     = false
-  description = "reduces the price twice but instance may stop suddenly"
+    skip_region_validation      = true
+    skip_credentials_validation = true
+    skip_requesting_account_id  = true
+  }
 }
 
 provider "yandex" {

metadata.yml terraform/metadata.ymlmetadata.yml renamed to terraform/metadata.yml

@@ -0,0 +1,20 @@
+variable "cloud_id" {
+  type     = string
+  nullable = false
+}
+
+variable "folder_id" {
+  type     = string
+  nullable = false
+}
+
+variable "iam_token" {
+  type     = string
+  nullable = false
+}
+
+variable "preemptible" {
+  type        = bool
+  default     = false
+  description = "reduces the price twice but instance may stop suddenly"
+}