-
Notifications
You must be signed in to change notification settings - Fork 2
123 lines (120 loc) · 4.16 KB
/
tf-ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
name: tf-ci
on:
- pull_request
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
tf_module_changes:
runs-on: [ARM64, self-hosted, Linux]
permissions:
pull-requests: read
outputs:
run_tf_modules_ci: ${{ steps.filter.outputs.dependencies }}
steps:
- name: Check for changed files
uses: dorny/paths-filter@v2
id: filter
with:
filters: |
dependencies:
- '.github/**'
- 'terraform/modules/**'
find-changed-dirs:
needs: tf_module_changes
if: ${{ needs.tf_module_changes.outputs.run_tf_modules_ci == 'true' }}
runs-on: [ARM64, self-hosted, Linux]
outputs:
allChanges: ${{ steps.changedDirs.outputs.allChanges }}
steps:
- name: Generate token
id: generate_token
uses: tibdex/github-app-token@v2
with:
app_id: ${{ secrets.CZI_GITHUB_HELPER_APP_ID }}
private_key: ${{ secrets.CZI_GITHUB_HELPER_PK }}
- uses: actions/checkout@v3
with:
token: ${{ steps.generate_token.outputs.token }}
- uses: dorny/[email protected]
id: filter
with:
initial-fetch-depth: '1'
list-files: json
filters: |
changed:
- added|modified: 'terraform/modules/**'
- uses: actions/github-script@v6
id: changedDirs
with:
script: |
const path = require("path")
const changedFiles = ${{ steps.filter.outputs.changed_files }}
const changedDirs = changedFiles.map(f => path.dirname(f))
const uniqueChangedDirs = [...new Set(changedDirs)];
console.log(`Found the following changed dirs: ${JSON.stringify(uniqueChangedDirs, null, 2)}\n OG: ${JSON.stringify(changedFiles, null, 2)} `)
core.setOutput("allChanges", uniqueChangedDirs)
lint-changed-dirs:
runs-on: [X64, self-hosted, Linux]
needs: [find-changed-dirs, tf_module_changes]
strategy:
matrix:
tfmodule: ${{ fromJson(needs.find-changed-dirs.outputs.allChanges) }}
if: ${{ needs.find-changed-dirs.outputs.allChanges != '[]' && needs.tf_module_changes.outputs.run_tf_modules_ci == 'true' }}
steps:
- name: Generate token
id: generate_token
uses: tibdex/github-app-token@v2
with:
app_id: ${{ secrets.CZI_GITHUB_HELPER_APP_ID }}
private_key: ${{ secrets.CZI_GITHUB_HELPER_PK }}
- run: |
mkdir -p ~/.ssh/
ssh-keyscan -H github.com >> ~/.ssh/known_hosts
- name: Install SSH key
uses: webfactory/[email protected]
with:
ssh-private-key: |
${{ secrets.SHARED_INFRA_DEPLOY_KEY }}
- uses: actions/checkout@v3
with:
token: ${{ steps.generate_token.outputs.token }}
ref: ${{ github.event.pull_request.head.ref }}
- uses: hashicorp/setup-terraform@v2
with:
terraform_version: 1.3.0
- name: fix terraform docs
uses: terraform-docs/[email protected]
with:
working-dir: ${{matrix.tfmodule}}
git-push: "true"
template: <!-- START -->\n{{ .Content }}\n<!-- END -->
git-commit-message: |
commit from ci -- ran terraform-docs and pushed
- uses: actions/setup-node@v2
with:
node-version: '18'
- name: fix terraform fmt
run: |
cd ${{matrix.tfmodule}}
terraform fmt
- uses: EndBug/add-and-commit@v9
with:
add: -A
message: |
commit from ci -- ran terraform fmt and pushed
- name: terraform init
run: |
[ -d "${{matrix.tfmodule}}/.validate" ] && cd ${{matrix.tfmodule}}/.validate || cd ${{matrix.tfmodule}}
terraform init
- name: terraform validate
run: |
[ -d "${{matrix.tfmodule}}/.validate" ] && cd ${{matrix.tfmodule}}/.validate || cd ${{matrix.tfmodule}}
terraform validate -no-color
- uses: terraform-linters/setup-tflint@v3
with:
tflint_version: latest
- name: run tflint
run: |
cd ${{matrix.tfmodule}}
tflint -f compact