atmos/.github/workflows/native-ci.yml at 3adfafd25a861a51849be083d7fd68c8ed816734 · cloudposse/atmos · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
name: Native CI

on:
  pull_request:
    types: [opened, synchronize, reopened]
  workflow_dispatch:

permissions:
  contents: read
  pull-requests: write
  security-events: write
  statuses: write

env:
  ATMOS_NATIVE_CI_WORKDIR: tests/fixtures/scenarios/native-ci-e2e
  ATMOS_VERSION_CHECK_ENABLED: "false"

jobs:
  terraform-plan:
    name: "[native ci] terraform plan"
    runs-on: ubuntu-latest
    timeout-minutes: 20

    services:
      floci:
        image: floci/floci@sha256:c88ec20bf221630dd195d38a14eeb0ac52ddfa72c37ebb3c8aa17f63ae27c5f2 # 1.5.23
        ports:
          - 4566:4566

    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Set up Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
        with:
          go-version-file: "go.mod"

      - name: Build Atmos
        run: |
          make build-linux
          echo "${{ github.workspace }}/build" >> "$GITHUB_PATH"

      - name: Restore Atmos native CI cache
        uses: ./actions/cache
        env:
          ATMOS_CHDIR: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}

      - name: Validate native CI fixture
        working-directory: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}
        run: atmos validate stacks

      - name: Mirror Terraform providers
        working-directory: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}
        run: atmos terraform cache mirror bucket -s test --platform=linux_amd64 --format=json

      - name: Terraform plan
        id: terraform-plan
        working-directory: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}
        env:
          ATMOS_CI_GITHUB_TOKEN: ${{ github.token }}
          GITHUB_TOKEN: ${{ github.token }}
        run: atmos terraform plan bucket -s test

  terraform-apply:
    name: "[native ci] terraform apply"
    needs: terraform-plan
    runs-on: ubuntu-latest
    timeout-minutes: 20

    services:
      floci:
        image: floci/floci@sha256:c88ec20bf221630dd195d38a14eeb0ac52ddfa72c37ebb3c8aa17f63ae27c5f2 # 1.5.23
        ports:
          - 4566:4566

    steps:
      - name: Check out code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Set up Go
        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
        with:
          go-version-file: "go.mod"

      - name: Build Atmos
        run: |
          make build-linux
          echo "${{ github.workspace }}/build" >> "$GITHUB_PATH"

      - name: Restore Atmos native CI cache
        uses: ./actions/cache
        env:
          ATMOS_CHDIR: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}

      - name: Validate native CI fixture
        working-directory: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}
        run: atmos validate stacks

      - name: Mirror Terraform providers
        working-directory: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}
        run: atmos terraform cache mirror bucket -s test --platform=linux_amd64 --format=json

      - name: Terraform apply
        id: terraform-apply
        working-directory: ${{ env.ATMOS_NATIVE_CI_WORKDIR }}
        env:
          ATMOS_CI_GITHUB_TOKEN: ${{ github.token }}
          GITHUB_TOKEN: ${{ github.token }}
        run: atmos terraform apply bucket -s test -auto-approve