Skip to content

Merge pull request #27 from FIAP-3SOAT-G15/fix-cognito-params #24

Merge pull request #27 from FIAP-3SOAT-G15/fix-cognito-params

Merge pull request #27 from FIAP-3SOAT-G15/fix-cognito-params #24

Workflow file for this run

name: Provision
on:
workflow_dispatch:
push:
branches:
- main
paths:
- .github/workflows/provision.yml
- 'terraform/**'
- 'src/**'
pull_request:
branches:
- main
paths:
- .github/workflows/provision.yml
- 'terraform/**'
- 'src/**'
jobs:
provision:
runs-on: ubuntu-latest
defaults:
run:
working-directory: ./terraform
permissions:
id-token: write
contents: read
pull-requests: write
steps:
- name: Set up Python
uses: actions/setup-python@v4
with:
python-version: '3.12'
- name: Checkout Repository
uses: actions/checkout@v4
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@v4
with:
role-to-assume: ${{ vars.AWS_IAM_ROLE }}
aws-region: ${{ vars.AWS_REGION }}
- name: Setup Terraform
uses: hashicorp/setup-terraform@v2
with:
cli_config_credentials_token: ${{ secrets.TF_CLOUD_USER_API_TOKEN }}
- name: Terraform fmt
id: fmt
run: terraform fmt -check
continue-on-error: true
- name: Terraform Init
id: init
run: terraform init
- name: Terraform Validate
id: validate
run: terraform validate
- name: Terraform Plan
id: plan
run: terraform plan
- name: Check Errors
if: steps.plan.outcome == 'failure'
run: exit 1
- name: Terraform Apply
if: (github.ref == 'refs/heads/main' && github.event_name == 'push') || github.event_name == 'workflow_dispatch'
run: terraform apply -auto-approve -input=false