reviewdog.yml

name: reviewdog
on:
  pull_request:
    paths:
    - '**.tf'
    - '**.tfvars'

jobs:  
  terraformPlanArgocd:
    env:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      ZONE_ID: ${{ secrets.ZONE_ID }}

    name: runner / argocd
    runs-on: ubuntu-latest
    needs: tflint

    steps:
      - name: Clone repo
        uses: actions/checkout@master

      - name: Install Terraform
        run: |
          brew install tfenv
          tfenv install ${TERRAFORM_VERSION}
      - name: Terraform plan argocd
        working-directory: ./examples/argocd
        run: |
          tfenv use ${TERRAFORM_VERSION}
          terraform init --upgrade
          terraform plan -var 'cluster_name=swiss-army-github-ci'
  terraformPlanArgocdWithApplications:
    env:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      ZONE_ID: ${{ secrets.ZONE_ID }}

    name: runner / argocd-with-applications
    runs-on: ubuntu-latest
    needs: tflint

    steps:
      - name: Clone repo
        uses: actions/checkout@master

      - name: Install Terraform
        run: |
          brew install tfenv
          tfenv install ${TERRAFORM_VERSION}
      - name: Terraform plan argocd-with-applications
        working-directory: ./examples/argocd-with-applications
        run: |
          tfenv use ${TERRAFORM_VERSION}
          terraform init --upgrade
          terraform plan -var "zone_id=${ZONE_ID}" -var 'cluster_name=swiss-army-github-ci'
  terraformPlanCommon:
    env:
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      ZONE_ID: ${{ secrets.ZONE_ID }}

    name: runner / common
    runs-on: ubuntu-latest
    needs: tflint

    steps:
      - name: Clone repo
        uses: actions/checkout@master

      - name: Install Terraform
        run: |
          brew install tfenv
          tfenv install ${TERRAFORM_VERSION}
      - name: Terraform plan common example
        working-directory: ./examples/common
        run: |
          tfenv use ${TERRAFORM_VERSION}
          terraform init --upgrade
          terraform plan -var "zone_id=${ZONE_ID}" -var 'cluster_name=swiss-army-github-ci'
  infracost:
    runs-on: ubuntu-latest
    needs: [terraformPlanCommon, terraformPlanArgocdWithApplications, terraformPlanArgocd]
    name: Show infracost diff
    steps:
    - name: Check out repository
      uses: actions/checkout@v2
    - name: Run infracost diff common
      continue-on-error: true
      uses: infracost/infracost-gh-action@master # Use a specific version instead of master if locking is preferred
      env:
        INFRACOST_API_KEY: ${{ secrets.INFRACOST_API_KEY }}
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Do not change
        ZONE_ID: ${{ secrets.ZONE_ID }}
        # See the cloud credentials section for the options
        AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
        AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      with:
        entrypoint: /scripts/ci/diff.sh # Do not change
        path: ./examples/common
        terraform_plan_flags: -var "zone_id=${ZONE_ID}" -var 'cluster_name=swiss-army-github-ci'

    - name: Run infracost diff argocd
      continue-on-error: true
      uses: infracost/infracost-gh-action@master # Use a specific version instead of master if locking is preferred
      env:
        INFRACOST_API_KEY: ${{ secrets.INFRACOST_API_KEY }}
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Do not change
        # See the cloud credentials section for the options
        AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
        AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      with:
        entrypoint: /scripts/ci/diff.sh # Do not change
        path: ./examples/argocd
        terraform_plan_flags: -var 'cluster_name=swiss-army-github-ci'

    - name: Run infracost diff acgocd-with-applications
      continue-on-error: true
      uses: infracost/infracost-gh-action@master # Use a specific version instead of master if locking is preferred
      env:
        INFRACOST_API_KEY: ${{ secrets.INFRACOST_API_KEY }}
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Do not change
        ZONE_ID: ${{ secrets.ZONE_ID }}
        # See the cloud credentials section for the options
        AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
        AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      with:
        entrypoint: /scripts/ci/diff.sh # Do not change
        path: ./examples/argocd-with-applications
        terraform_plan_flags: -var "zone_id=${ZONE_ID}" -var 'cluster_name=swiss-army-github-ci'