|
| 1 | +name: 'Terraform' |
| 2 | + |
| 3 | +on: |
| 4 | + workflow_dispatch: # manual action run |
| 5 | + |
| 6 | +permissions: |
| 7 | + contents: read |
| 8 | + |
| 9 | +jobs: |
| 10 | + terraform: |
| 11 | + name: 'Terraform' |
| 12 | + runs-on: ubuntu-latest |
| 13 | + environment: development |
| 14 | + defaults: |
| 15 | + run: |
| 16 | + shell: bash |
| 17 | + |
| 18 | + steps: |
| 19 | + # Checkout the repository to the GitHub Actions runner |
| 20 | + - name: Checkout |
| 21 | + uses: actions/checkout@v3 |
| 22 | + |
| 23 | + # Install the latest version of Terraform |
| 24 | + - name: Setup Terraform |
| 25 | + uses: hashicorp/setup-terraform@v3 |
| 26 | + |
| 27 | + |
| 28 | + # Run Terraform commands |
| 29 | + - name: Terraform Init |
| 30 | + run: terraform init |
| 31 | + env: |
| 32 | + GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS }} |
| 33 | + |
| 34 | + - name: Terraform Validate |
| 35 | + run: terraform validate |
| 36 | + env: |
| 37 | + GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS }} |
| 38 | + TF_VAR_project_id: ${{ vars.PROJECT_ID }} |
| 39 | + TF_VAR_region: ${{ vars.REGION }} |
| 40 | + |
| 41 | + - name: Terraform Apply |
| 42 | + run: terraform apply -input=false |
| 43 | + env: |
| 44 | + GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS }} |
| 45 | + TF_VAR_project_id: ${{ vars.PROJECT_ID }} |
| 46 | + TF_VAR_region: ${{ vars.REGION }} |
| 47 | + TF_VAR_mx_password: ${{ secrets.MX_PASSWORD }} |
| 48 | + TF_VAR_vpc_network: ${{ vars.VPC_NETWORK }} |
| 49 | + TF_VAR_subnet_name: ${{ vars.SUBNET_NAME }} |
| 50 | + TF_VAR_zone: ${{ vars.ZONE }} |
| 51 | + TF_VAR_instance_type: ${{ vars.INSTANCE_TYPE }} |
| 52 | + TF_VAR_waf_version: ${{ vars.WAF_VERSION }} |
| 53 | + TF_VAR_timezone: ${{ vars.TIMEZONE }} |
| 54 | + TF_VAR_ssh_access_source_ranges: ${{ vars.SSH_ACCESS_SOURCE_RANGES }} |
| 55 | + TF_VAR_ui_access_source_ranges: ${{ vars.UI_ACCESS_SOURCE_RANGES }} |
| 56 | + TF_VAR_deployment_name: ${{ vars.DEPLOYMENT_NAME }} |
| 57 | + TF_VAR_instance_name: ${{ vars.INSTANCE_NAME }} |
0 commit comments