Skip to content

Bump hashicorp/setup-terraform from 3.1.1 to 3.1.2 #246

Bump hashicorp/setup-terraform from 3.1.1 to 3.1.2

Bump hashicorp/setup-terraform from 3.1.1 to 3.1.2 #246

---
name: modernisation-platform
on:
push:
branches:
- main
- feature/*
paths:
- 'modernisation-platform/**'
- '.github/workflows/modernisation-platform.yml'
pull_request:
branches:
- main
types: [opened, edited, reopened, synchronize]
paths:
- 'modernisation-platform/**'
- '.github/workflows/modernisation-platform.yml'
workflow_dispatch:
env:
AWS_REGION: "eu-west-2"
ENVIRONMENT_MANAGEMENT: ${{ secrets.MODERNISATION_PLATFORM_ENVIRONMENTS }}
TF_IN_AUTOMATION: true
permissions: {}
defaults:
run:
shell: bash
jobs:
plan-modernisation-platform:
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
name: Plan - modernisation-platform pipelines
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Set Account Number
run: |
ACCOUNT_NUMBER=$(jq -r -e '.modernisation_platform_account_id' <<< $ENVIRONMENT_MANAGEMENT)
echo "::add-mask::$ACCOUNT_NUMBER"
echo ACCOUNT_NUMBER=$ACCOUNT_NUMBER >> $GITHUB_ENV
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
with:
role-to-assume: "arn:aws:iam::${{ env.ACCOUNT_NUMBER }}:role/github-actions"
role-session-name: githubactionsrolesession
aws-region: ${{ env.AWS_REGION }}
- name: Load and Configure Terraform
uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
with:
terraform_version: ~> 1.0
terraform_wrapper: false
- name: Terraform plan - modernisation-platform pipelines
run: |
echo "Terraform plan - ${TF_ENV}"
bash scripts/terraform-init.sh modernisation-platform
terraform -chdir="modernisation-platform" workspace select "core-shared-services-${TF_ENV}"
bash scripts/terraform-plan.sh modernisation-platform
env:
TF_ENV: production
deploy-modernisation-platform:
if: github.event.ref == 'refs/heads/main'
permissions:
id-token: write # This is required for requesting the JWT
contents: read # This is required for actions/checkout
name: Deploy - modernisation-platform pipelines
needs: plan-modernisation-platform
runs-on: ubuntu-latest
environment:
name: core-shared-services
steps:
- name: Checkout Repository
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Set Account Number
run: |
ACCOUNT_NUMBER=$(jq -r -e '.modernisation_platform_account_id' <<< $ENVIRONMENT_MANAGEMENT)
echo "::add-mask::$ACCOUNT_NUMBER"
echo ACCOUNT_NUMBER=$ACCOUNT_NUMBER >> $GITHUB_ENV
- name: Configure AWS Credentials
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
with:
role-to-assume: "arn:aws:iam::${{ env.ACCOUNT_NUMBER }}:role/github-actions"
role-session-name: githubactionsrolesession
aws-region: ${{ env.AWS_REGION }}
- name: Load and Configure Terraform
uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
with:
terraform_version: ~> 1.0
terraform_wrapper: false
- name: Terraform apply - modernisation-platform pipelines
run: |
echo "Terraform apply - ${TF_ENV}"
bash scripts/terraform-init.sh modernisation-platform
terraform -chdir="modernisation-platform" workspace select "core-shared-services-${TF_ENV}"
bash scripts/terraform-apply.sh modernisation-platform
env:
TF_ENV: production