-
-
Notifications
You must be signed in to change notification settings - Fork 0
/
.gitlab-ci.yml.example
78 lines (69 loc) · 1.24 KB
/
.gitlab-ci.yml.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
image:
name: hashicorp/terraform:1.4.6
entrypoint: [""]
variables:
AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
AWS_DEFAULT_REGION: ${AWS_DEFAULT_REGION}
stages:
- fmt
- validate
- tflint
- tfsec
- plan
- apply
cache:
paths:
- ${TF_ROOT}/.terraform
fmt:
stage: fmt
script:
- terraform fmt -check -recursive
validate:
stage: validate
script:
- cd ${TF_ROOT}
- terraform validate
dependencies:
- fmt
tflint:
stage: tflint
image:
name: wata727/tflint:0.29.1
entrypoint:
- "/usr/bin/env"
- "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
script:
- tflint
dependencies:
- validate
tfsec:
stage: tfsec
image:
name: aquasec/tfsec:v1.28
entrypoint: [""]
script:
- tfsec .
dependencies:
- tflint
plan:
stage: plan
script:
- terraform init -input=false
- terraform plan -input=false -out=terraform.tfplan
artifacts:
name: plan_output
paths:
- ./terraform.tfplan
dependencies:
- tfsec
apply:
stage: apply
script:
- terraform init -input=false
- terraform apply -input=false terraform.tfplan
when: manual
only:
- main
dependencies:
- plan