terraform.yml

name: 'Validate Terraform'

on:
  push:
    branches:
    - main
  pull_request:

jobs:
  validate:
    name: Validate Terraform
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v2
    - uses: hashicorp/setup-terraform@v1
      with:
        terraform_version: 1.0.1

    - name: Install Zero
      id: install_zero
      run: |
        mkdir ${GITHUB_WORKSPACE}/bin
        cd ${GITHUB_WORKSPACE}/bin
        LATEST_ZERO_DOWNLOAD_URL=$(curl --silent "https://api.github.com/repos/commitdev/zero/releases/latest" | jq -r ".assets | .[]  | select(.name | contains(\"Linux_x86_64\")) | .browser_download_url")
        ZERO_BINARY_FILE_NAME=$(curl --silent "https://api.github.com/repos/commitdev/zero/releases/latest" | jq -r ".assets | .[]  | select(.name | contains(\"Linux_x86_64\")) | .name")
        curl -OJL $LATEST_ZERO_DOWNLOAD_URL
        tar -xvf "./${ZERO_BINARY_FILE_NAME}"
        ./zero version
        echo "${GITHUB_WORKSPACE}/bin" >> $GITHUB_PATH
    - name: Copy test project structure
      id: copy_test_dir
      run: |
        cp -r ${GITHUB_WORKSPACE}/tests/fixtures/test-project/ ${GITHUB_WORKSPACE}/temp-project
    - name: zero create
      id: zero_create
      run: |
        cd ${GITHUB_WORKSPACE}/temp-project
        zero create
    - name: Set validation targets
      id: set_validation_targets
      run: |
        INFRA_DIR=${GITHUB_WORKSPACE}/temp-project/infrastructure

        ## Defining test targets per line, last line ends with double quote
        echo "${INFRA_DIR}/terraform/bootstrap/remote-state
        ${INFRA_DIR}/terraform/bootstrap/secrets
        ${INFRA_DIR}/terraform/environments/stage
        ${INFRA_DIR}/terraform/environments/prod
        ${INFRA_DIR}/kubernetes/terraform/environments/stage
        ${INFRA_DIR}/kubernetes/terraform/environments/prod" > ${GITHUB_WORKSPACE}/validation-targets.conf
    - name: Terraform Init
      id: terraform_init
      run: |
        for dir in $(cat ${GITHUB_WORKSPACE}/validation-targets.conf); do
          echo "Linting ${dir}"
          cd $dir
          terraform init -backend=false
        done
    - name: Terraform Validate
      id: terraform_validate
      run: |
        for dir in $(cat ${GITHUB_WORKSPACE}/validation-targets.conf); do
          echo "Validating ${dir}"
          cd $dir
          terraform validate -no-color
        done