plan.yaml

name: Create Terraform plan

on: [pull_request]

permissions:
  contents: read
  pull-requests: write

jobs:
  plan:
    runs-on: ubuntu-latest
    name: Create a Terraform plan
    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      TF_VAR_hcloud_token: ${{ secrets.TF_HCLOUD_TOKEN }}
      STATE_BUCKET_NAME: ${{ secrets.TF_STATE_BUCKET_NAME }}
      STATE_BUCKET_KEY: ${{ secrets.TF_STATE_BUCKET_KEY }}
      AWS_ACCESS_KEY_ID: ${{ secrets.TF_STATE_ACCESS_KEY }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.TF_STATE_SECRET_KEY }}
      AWS_CA_BUNDLE: ""
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Terraform plan
        uses: dflook/terraform-plan@v2
        with:
          path: infra
          backend_config: bucket=${{ env.STATE_BUCKET_NAME }} key=${{ env.STATE_BUCKET_KEY }}
        env:
          TERRAFORM_PRE_RUN: |
            # Install prerequisites
            apt update
            apt install -y lsb-release

            # Install latest Packer
            wget -O - https://apt.releases.hashicorp.com/gpg | gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
            echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(grep -oP '(?<=UBUNTU_CODENAME=).*' /etc/os-release || lsb_release -cs) main" | tee /etc/apt/sources.list.d/hashicorp.list
            apt install -y packer
  
            # Install latest Talosctl
            curl -sL https://talos.dev/install | sh