Hide outdated comments #665

Workflow file for this run

.github/workflows/test-apply.yaml at feb3f4e

	name: Test terraform-apply

	on:
	- pull_request

	jobs:
	auto_approve:
	runs-on: ubuntu-latest
	name: Auto Approve
	env:
	AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
	AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	path: tests/workflows/test-apply/remote
	auto_approve: true

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.my_string }}" != "hello" ]]; then
	echo "::error:: output my_string not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.my_string.actions[0] "${{ steps.output.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "No changes" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_error:
	runs-on: ubuntu-latest
	name: Auto Approve plan error
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Apply
	uses: ./terraform-apply
	id: apply
	continue-on-error: true
	with:
	path: tests/workflows/test-apply/remote
	auto_approve: true

	- name: Check failed to apply
	run: \|
	if [[ "${{ steps.apply.outcome }}" != "failure" ]]; then
	echo "Apply did not fail correctly"
	exit 1
	fi

	if [[ "${{ steps.apply.outputs.failure-reason }}" != "" ]]; then
	echo "::error:: failure-reason not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.apply.outputs.json_plan_path }}" ]]; then
	echo "::error:: json_plan_path should not be set"
	exit 1
	fi

	if [[ -n "${{ steps.apply.outputs.text_plan_path }}" ]]; then
	echo "::error:: text_plan_path should not be set"
	exit 1
	fi

	if [[ -n "${{ steps.apply.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_apply_error:
	runs-on: ubuntu-latest
	name: Auto Approve apply phase error
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
	AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply apply_apply_error
	path: tests/workflows/test-apply/apply-error

	- name: Apply
	uses: ./terraform-apply
	id: apply
	continue-on-error: true
	with:
	label: test-apply apply_apply_error
	path: tests/workflows/test-apply/apply-error

	- name: Check failed to apply
	run: \|
	if [[ "${{ steps.apply.outcome }}" != "failure" ]]; then
	echo "Apply did not fail correctly"
	exit 1
	fi

	if [[ "${{ steps.apply.outputs.failure-reason }}" != "apply-failed" ]]; then
	echo "::error:: failure-reason not set correctly"
	exit 1
	fi

	cat "${{ steps.apply.outputs.json_plan_path }}"
	if [[ $(jq -r .format_version "${{ steps.apply.outputs.json_plan_path }}") != "1.2" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.apply.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.apply.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_no_token:
	runs-on: ubuntu-latest
	name: Apply without token
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Apply
	uses: ./terraform-apply
	id: apply
	continue-on-error: true
	with:
	path: tests/workflows/test-apply/changes

	- name: Check failed to apply
	run: \|
	if [[ "${{ steps.apply.outcome }}" != "failure" ]]; then
	echo "Apply did not fail correctly"
	exit 1
	fi

	if [[ "${{ steps.apply.outputs.failure-reason }}" != "" ]]; then
	echo "::error:: failure-reason not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.apply.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply:
	runs-on: ubuntu-latest
	name: Apply approved changes
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply apply
	path: tests/workflows/test-apply/changes

	- name: Apply
	uses: ./terraform-apply
	id: first-apply
	with:
	label: test-apply apply
	path: tests/workflows/test-apply/changes

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.first-apply.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.output_string.actions[0] "${{ steps.first-apply.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.first-apply.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.first-apply.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	- name: Apply
	uses: ./terraform-apply
	id: second-apply
	with:
	label: test-apply apply
	path: tests/workflows/test-apply/changes

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.second-apply.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ $(jq -r .format_version "${{ steps.second-apply.outputs.json_plan_path }}") != "1.2" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if [[ ! -f '${{ steps.second-apply.outputs.text_plan_path }}' ]]; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.second-apply.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_variables:
	runs-on: ubuntu-latest
	name: Apply approved changes with variables
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply apply_variables
	path: tests/workflows/test-apply/vars
	variables: \|
	my_var="hello"
	complex_input=[
	{
	internal = 2000
	external = 3000
	protocol = "udp"
	},
	{
	internal = 4000
	external = 5000
	protocol = "tcp"
	},
	]
	var_file: tests/workflows/test-apply/test.tfvars

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	label: test-apply apply_variables
	path: tests/workflows/test-apply/vars
	variables: \|
	my_var="hello"
	complex_input=[
	{
	internal = 2000
	external = 3000
	protocol = "udp"
	},
	{
	internal = 4000
	external = 5000
	protocol = "tcp"
	},
	]
	var_file: tests/workflows/test-apply/test.tfvars

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ "${{ steps.output.outputs.from_var }}" != "hello" ]]; then
	echo "::error:: output from_var not set correctly"
	exit 1
	fi

	if [[ "${{ steps.output.outputs.from_varfile }}" != "monkey" ]]; then
	echo "::error:: output from_varfile not set correctly"
	exit 1
	fi

	if [[ "${{ steps.output.outputs.complex_output }}" != "2000:3000:udp,4000:5000:tcp" ]]; then
	echo "::error:: output complex_output not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.output_string.actions[0] "${{ steps.output.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	backend_config_12:
	runs-on: ubuntu-latest
	name: backend_config terraform 12
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
	AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply backend_config_12 backend_config_file
	path: tests/workflows/test-apply/backend_config_12
	backend_config_file: tests/workflows/test-apply/backend_config_12/backend_config

	- name: Apply
	uses: ./terraform-apply
	id: backend_config_file_12
	with:
	label: test-apply backend_config_12 backend_config_file
	path: tests/workflows/test-apply/backend_config_12
	backend_config_file: tests/workflows/test-apply/backend_config_12/backend_config

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.backend_config_file_12.outputs.test }}" != "hello" ]]; then
	echo "::error:: output from backend_config file not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.test.actions[0] "${{ steps.backend_config_file_12.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "No changes" '${{ steps.backend_config_file_12.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.backend_config_file_12.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply backend_config_12 backend_config
	path: tests/workflows/test-apply/backend_config_12
	backend_config: \|
	bucket=terraform-github-actions
	key=backend_config
	region=eu-west-2

	- name: Apply
	uses: ./terraform-apply
	id: backend_config_12
	with:
	label: test-apply backend_config_12 backend_config
	path: tests/workflows/test-apply/backend_config_12
	backend_config: \|
	bucket=terraform-github-actions
	key=backend_config
	region=eu-west-2

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.backend_config_12.outputs.test }}" != "hello" ]]; then
	echo "::error:: Output from backend_config not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.test.actions[0] "${{ steps.backend_config_12.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "No changes" '${{ steps.backend_config_file_12.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.backend_config_12.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	backend_config_13:
	runs-on: ubuntu-latest
	name: backend_config terraform 13
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
	AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply backend_config_12 backend_config_file
	path: tests/workflows/test-apply/backend_config_13
	backend_config_file: tests/workflows/test-apply/backend_config_13/backend_config

	- name: Apply
	uses: ./terraform-apply
	id: backend_config_file_13
	with:
	label: test-apply backend_config_12 backend_config_file
	path: tests/workflows/test-apply/backend_config_13
	backend_config_file: tests/workflows/test-apply/backend_config_13/backend_config

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.backend_config_file_13.outputs.test }}" != "hello" ]]; then
	echo "::error:: output from backend_config file not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.test.actions[0] "${{ steps.backend_config_file_13.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "No changes" '${{ steps.backend_config_file_13.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.backend_config_file_13.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply backend_config_12 backend_config
	path: tests/workflows/test-apply/backend_config_13
	backend_config: \|
	bucket=terraform-github-actions
	key=backend_config_13
	region=eu-west-2

	- name: Apply
	uses: ./terraform-apply
	id: backend_config_13
	with:
	label: test-apply backend_config_12 backend_config
	path: tests/workflows/test-apply/backend_config_13
	backend_config: \|
	bucket=terraform-github-actions
	key=backend_config_13
	region=eu-west-2

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.backend_config_13.outputs.test }}" != "hello" ]]; then
	echo "::error:: Output from backend_config not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.test.actions[0] "${{ steps.backend_config_13.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "No changes" '${{ steps.backend_config_13.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.backend_config_13.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_label:
	runs-on: ubuntu-latest
	name: Apply approved with a variable and label
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	path: tests/workflows/test-apply/vars
	label: test-apply apply_label
	variables: my_var="world"
	var_file: tests/workflows/test-apply/test.tfvars

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	path: tests/workflows/test-apply/vars
	label: test-apply apply_label
	variables: my_var="world"
	var_file: tests/workflows/test-apply/test.tfvars

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.output_string.actions[0] "${{ steps.output.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_no_changes:
	runs-on: ubuntu-latest
	name: Apply when there are no planned changes
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
	AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	path: tests/workflows/test-apply/remote

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.my_string }}" != "hello" ]]; then
	echo "::error:: output my_string not set correctly"
	exit 1
	fi

	cat "${{ steps.output.outputs.json_plan_path }}"
	if [[ $(jq -r .format_version "${{ steps.output.outputs.json_plan_path }}") != "0.1" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "No changes" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_no_plan:
	runs-on: ubuntu-latest
	name: Apply when there is no approved plan
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Apply
	uses: ./terraform-apply
	id: apply
	continue-on-error: true
	with:
	path: tests/workflows/test-apply/no_plan

	- name: Check failed to apply
	run: \|
	if [[ "${{ steps.apply.outcome }}" != "failure" ]]; then
	echo "Apply did not fail correctly"
	exit 1
	fi

	cat "${{ steps.apply.outputs.json_plan_path }}"
	if [[ $(jq -r .format_version "${{ steps.apply.outputs.json_plan_path }}") != "1.2" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.apply.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_user_token:
	runs-on: ubuntu-latest
	name: Apply using a personal access token
	env:
	GITHUB_TOKEN: ${{ secrets.USER_GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply apply_user_token
	path: tests/workflows/test-apply/changes

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	label: test-apply apply_user_token
	path: tests/workflows/test-apply/changes

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.output_string.actions[0] "${{ steps.output.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_fine_grained_pat:
	runs-on: ubuntu-latest
	name: Apply using a fine grained personal access token
	env:
	GITHUB_TOKEN: ${{ secrets.FINE_PAT_GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply apply_fine_grained_pat
	path: tests/workflows/test-apply/changes

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	label: test-apply apply_fine_grained_pat
	path: tests/workflows/test-apply/changes

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.output_string.actions[0] "${{ steps.output.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_terraform_actions_github_token:
	runs-on: ubuntu-latest
	name: Apply using a token in TERRAFORM_ACTIONS_GITHUB_TOKEN
	env:
	GITHUB_TOKEN: No
	TERRAFORM_ACTIONS_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply apply_terraform_actions_github_token
	path: tests/workflows/test-apply/changes

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	label: test-apply apply_terraform_actions_github_token
	path: tests/workflows/test-apply/changes

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.output_string.actions[0] "${{ steps.output.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "Terraform will perform the following actions" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_vars:
	runs-on: ubuntu-latest
	name: Apply approved changes with deprecated vars
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	path: tests/workflows/test-apply/deprecated_var
	var: my_var=hello
	var_file: tests/workflows/test-apply/test.tfvars

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	path: tests/workflows/test-apply/deprecated_var
	var: my_var=hello
	var_file: tests/workflows/test-apply/test.tfvars

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi
	if [[ "${{ steps.output.outputs.from_var }}" != "this should be overridden" ]]; then
	echo "::error:: output from_var not set correctly"
	exit 1
	fi
	if [[ "${{ steps.output.outputs.from_varfile }}" != "monkey" ]]; then
	echo "::error:: output from_varfile not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	apply_refresh:
	runs-on: ubuntu-latest
	name: Apply changes are refresh
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan 1
	uses: ./terraform-plan
	with:
	label: test-apply apply_refresh 1
	path: tests/workflows/test-apply/refresh_15
	variables: len=10

	- name: Apply 1
	uses: ./terraform-apply
	with:
	label: test-apply apply_refresh 1
	path: tests/workflows/test-apply/refresh_15
	variables: len=10

	- name: Plan 2
	uses: ./terraform-plan
	id: plan
	with:
	label: test-apply apply_refresh 2
	path: tests/workflows/test-apply/refresh_15
	variables: len=20

	- name: Verify outputs
	run: \|
	echo "changes=${{ steps.plan.outputs.changes }}"

	if [[ "${{ steps.plan.outputs.changes }}" != "true" ]]; then
	echo "::error:: output changes not set correctly"
	exit 1
	fi

	if [[ ${{ steps.plan.outputs.to_add }} -ne 1 ]]; then
	echo "::error:: to_add not set correctly"
	exit 1
	fi

	if [[ ${{ steps.plan.outputs.to_change }} -ne 0 ]]; then
	echo "::error:: to_change not set correctly"
	exit 1
	fi

	if [[ ${{ steps.plan.outputs.to_destroy }} -ne 1 ]]; then
	echo "::error:: to_destroy not set correctly"
	exit 1
	fi

	- name: Test output expressions
	if: steps.plan.outputs.to_add != 1 \|\| steps.plan.outputs.to_change != 0 \|\| steps.plan.outputs.to_destroy != 1
	run: \|
	echo "if expression should not have evaluated true"
	exit 1

	- name: Apply 2
	uses: ./terraform-apply
	id: output
	with:
	label: test-apply apply_refresh 2
	path: tests/workflows/test-apply/refresh_15
	variables: len=20

	apply_with_pre_run:
	runs-on: ubuntu-latest
	name: Apply with pre-run script
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	TERRAFORM_PRE_RUN: \|
	echo "testing command 1"
	echo "testing command 2"
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply apply_with_pre_run
	path: tests/workflows/test-apply/changes

	- name: Apply
	uses: ./terraform-apply
	id: output
	with:
	label: test-apply apply_with_pre_run
	path: tests/workflows/test-apply/changes

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output_string not set correctly"
	exit 1
	fi

	warnings_hash:
	runs-on: ubuntu-latest
	name: Apply with inconsistent warnings
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply warnings_hash
	path: tests/workflows/test-apply/warnings

	- name: Create warning
	run: \|
	mv tests/workflows/test-apply/warnings/warning.tfn tests/workflows/test-apply/warnings/warning.tf

	- name: Apply
	uses: ./terraform-apply
	with:
	label: test-apply warnings_hash
	path: tests/workflows/test-apply/warnings

	warnings_text:
	runs-on: ubuntu-latest
	name: Apply with inconsistent warnings (plan text)
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: dflook/terraform-plan@v1.22.2
	with:
	label: test-apply warnings_text
	path: tests/workflows/test-apply/warnings

	- name: Create warning
	run: \|
	mv tests/workflows/test-apply/warnings/warning.tfn tests/workflows/test-apply/warnings/warning.tf

	- name: Apply
	uses: ./terraform-apply
	with:
	label: test-apply warnings_text
	path: tests/workflows/test-apply/warnings

	long_plan:
	runs-on: ubuntu-latest
	name: Apply a plan that doesn't fit in a comment
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply long_plan
	path: tests/workflows/test-apply/long_plan

	- name: Apply
	uses: ./terraform-apply
	with:
	label: test-apply long_plan
	path: tests/workflows/test-apply/long_plan

	long_plan_changes:
	runs-on: ubuntu-latest
	name: Don't apply a changed plan that doesn't fit in a comment
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	label: test-apply long_plan_changes
	path: tests/workflows/test-apply/long_plan

	- name: Apply
	uses: ./terraform-apply
	id: apply
	continue-on-error: true
	with:
	label: test-apply long_plan_changes
	path: tests/workflows/test-apply/long_plan
	variables: \|
	length = 2

	- name: Check failed to apply
	run: \|
	if [[ "${{ steps.apply.outcome }}" != "failure" ]]; then
	echo "Apply did not fail correctly"
	exit 1
	fi

	if [[ "${{ steps.apply.outputs.failure-reason }}" != "plan-changed" ]]; then
	echo "::error:: failure-reason not set correctly"
	exit 1
	fi

	partial_backend_fingerprint:
	runs-on: ubuntu-latest
	name: Get comment using partial fingerprint
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
	AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: dflook/terraform-plan@v1.31.0
	with:
	path: tests/workflows/test-apply/partial_backend
	backend_config_file: tests/workflows/test-apply/partial_backend/backend_config
	backend_config: key=${{ github.run_id }}${{ github.run_attempt }}

	- name: Apply
	uses: ./terraform-apply
	with:
	path: tests/workflows/test-apply/partial_backend
	backend_config_file: tests/workflows/test-apply/partial_backend/backend_config
	backend_config: key=${{ github.run_id }}${{ github.run_attempt }}

	destroy_mode:
	runs-on: ubuntu-latest
	name: Generate and apply a destroy mode plan
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Apply
	uses: ./terraform-apply
	with:
	path: tests/workflows/test-apply/destroy_mode
	auto_approve: true

	- name: Plan destroy
	uses: ./terraform-plan
	with:
	path: tests/workflows/test-apply/destroy_mode
	destroy: true

	- name: Apply destroy
	uses: ./terraform-apply
	with:
	path: tests/workflows/test-apply/destroy_mode
	destroy: true

	destroy_mode_label:
	runs-on: ubuntu-latest
	name: Generate and apply a destroy mode plan with a label
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Apply
	uses: ./terraform-apply
	with:
	path: tests/workflows/test-apply/destroy_mode
	auto_approve: true

	- name: Plan destroy
	uses: ./terraform-plan
	with:
	label: test-apply destroy_mode_label
	path: tests/workflows/test-apply/destroy_mode
	destroy: true

	- name: Apply destroy
	uses: ./terraform-apply
	with:
	label: test-apply destroy_mode_label
	path: tests/workflows/test-apply/destroy_mode
	destroy: true

	apply_opentofu:
	runs-on: ubuntu-latest
	name: Apply OpenTofu
	env:
	GITHUB_TOKEN: ${{ secrets.USER_GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	env:
	OPENTOFU_VERSION: "1.6.0-alpha3"
	with:
	label: test-apply apply_opentofu
	path: tests/workflows/test-apply/changes

	- name: Apply
	uses: ./terraform-apply
	env:
	OPENTOFU_VERSION: "1.6.0-alpha3"
	id: output
	with:
	label: test-apply apply_opentofu
	path: tests/workflows/test-apply/changes

	- name: Verify outputs
	run: \|
	if [[ "${{ steps.output.outputs.output_string }}" != "the_string" ]]; then
	echo "::error:: output s not set correctly"
	exit 1
	fi

	if [[ $(jq -r .output_changes.output_string.actions[0] "${{ steps.output.outputs.json_plan_path }}") != "create" ]]; then
	echo "::error:: json_plan_path not set correctly"
	exit 1
	fi

	if ! grep -q "OpenTofu will perform the following actions" '${{ steps.output.outputs.text_plan_path }}'; then
	echo "::error:: text_plan_path not set correctly"
	exit 1
	fi

	if [[ -n "${{ steps.output.outputs.run_id }}" ]]; then
	echo "::error:: run_id should not be set"
	exit 1
	fi

	long_outputs:
	runs-on: ubuntu-latest
	name: Apply a plan with long outputs
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	path: tests/workflows/test-apply/long_outputs

	- name: Apply
	uses: ./terraform-apply
	with:
	path: tests/workflows/test-apply/long_outputs

	outputs:
	runs-on: ubuntu-latest
	name: Apply a plan with outputs
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Plan
	uses: ./terraform-plan
	with:
	path: tests/workflows/test-apply/outputs

	- name: Apply
	uses: ./terraform-apply
	with:
	path: tests/workflows/test-apply/outputs

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Hide outdated comments #665

Workflow file

Hide outdated comments #665

Jobs

Run details

Workflow file for this run