forked from hashicorp/terraform-github-actions
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request hashicorp#22 from hashicorp/apply
Implement apply action
- Loading branch information
Showing
10 changed files
with
161 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
FROM hashicorp/terraform:0.12.0 | ||
|
||
LABEL "com.github.actions.name"="terraform apply" | ||
LABEL "com.github.actions.description"="Run Terraform Apply" | ||
LABEL "com.github.actions.icon"="play-circle" | ||
LABEL "com.github.actions.color"="purple" | ||
|
||
LABEL "repository"="https://github.com/hashicorp/terraform-github-actions" | ||
LABEL "homepage"="http://github.com/hashicorp/terraform-github-actions" | ||
LABEL "maintainer"="HashiCorp Terraform Team <terraform@hashicorp.com>" | ||
|
||
RUN apk --no-cache add jq curl | ||
|
||
COPY entrypoint.sh /entrypoint.sh | ||
ENTRYPOINT ["/entrypoint.sh"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,4 @@ | ||
# Terraform Apply Action | ||
Runs `terraform apply` and comments back on the pull request with the apply output. | ||
|
||
See [https://www.terraform.io/docs/github-actions/actions/apply.html](https://www.terraform.io/docs/github-actions/actions/apply.html). |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,76 @@ | ||
#!/bin/sh | ||
|
||
# wrap takes some output and wraps it in a collapsible markdown section if | ||
# it's over $TF_ACTION_WRAP_LINES long. | ||
wrap() { | ||
if [[ $(echo "$1" | wc -l) -gt ${TF_ACTION_WRAP_LINES:-20} ]]; then | ||
echo " | ||
<details><summary>Show Output</summary> | ||
\`\`\` | ||
$1 | ||
\`\`\` | ||
</details> | ||
" | ||
else | ||
echo " | ||
\`\`\` | ||
$1 | ||
\`\`\` | ||
" | ||
fi | ||
} | ||
|
||
set -e | ||
|
||
cd "${TF_ACTION_WORKING_DIR:-.}" | ||
|
||
if [[ ! -z "$TF_ACTION_TFE_TOKEN" ]]; then | ||
cat > ~/.terraformrc << EOF | ||
credentials "${TF_ACTION_TFE_HOSTNAME:-app.terraform.io}" { | ||
token = "$TF_ACTION_TFE_TOKEN" | ||
} | ||
EOF | ||
fi | ||
|
||
if [[ ! -z "$TF_ACTION_WORKSPACE" ]] && [[ "$TF_ACTION_WORKSPACE" != "default" ]]; then | ||
terraform workspace select "$TF_ACTION_WORKSPACE" | ||
fi | ||
|
||
set +e | ||
OUTPUT=$(sh -c "TF_IN_AUTOMATION=true terraform apply -no-color -auto-approve -input=false $*" 2>&1) | ||
SUCCESS=$? | ||
echo "$OUTPUT" | ||
set -e | ||
|
||
# If PR_DATA is null, then this is not a pull request event and so there's | ||
# no where to comment. | ||
PR_DATA=$(cat /github/workflow/event.json | jq -r .pull_request) | ||
if [ "$TF_ACTION_COMMENT" = "1" ] || [ "$TF_ACTION_COMMENT" = "false" ] || [ "$PR_DATA" = "null" ]; then | ||
exit $SUCCESS | ||
fi | ||
|
||
# Build the comment we'll post to the PR. | ||
COMMENT="" | ||
if [ $SUCCESS -ne 0 ]; then | ||
OUTPUT=$(wrap "$OUTPUT") | ||
COMMENT="#### \`terraform apply\` Failed | ||
$OUTPUT | ||
*Workflow: \`$GITHUB_WORKFLOW\`, Action: \`$GITHUB_ACTION\`*" | ||
else | ||
# Call wrap to optionally wrap our output in a collapsible markdown section. | ||
OUTPUT=$(wrap "$OUTPUT") | ||
COMMENT="#### \`terraform apply\` Success | ||
$OUTPUT | ||
*Workflow: \`$GITHUB_WORKFLOW\`, Action: \`$GITHUB_ACTION\`*" | ||
fi | ||
|
||
# Post the comment. | ||
PAYLOAD=$(echo '{}' | jq --arg body "$COMMENT" '.body = $body') | ||
COMMENTS_URL=$(cat /github/workflow/event.json | jq -r .pull_request.comments_url) | ||
curl -s -S -H "Authorization: token $GITHUB_TOKEN" --header "Content-Type: application/json" --data "$PAYLOAD" "$COMMENTS_URL" > /dev/null | ||
|
||
exit $SUCCESS |
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
FROM alpine:latest | ||
|
||
LABEL "com.github.actions.name"="base branch filter" | ||
LABEL "com.github.actions.description"="Filters pull request events based on their base branch." | ||
LABEL "com.github.actions.icon"="filter" | ||
LABEL "com.github.actions.color"="purple" | ||
|
||
LABEL "repository"="https://github.com/hashicorp/terraform-github-actions" | ||
LABEL "homepage"="http://github.com/hashicorp/terraform-github-actions" | ||
LABEL "maintainer"="HashiCorp Terraform Team <terraform@hashicorp.com>" | ||
|
||
RUN apk --no-cache add jq | ||
|
||
COPY entrypoint.sh /entrypoint.sh | ||
ENTRYPOINT ["/entrypoint.sh"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,32 @@ | ||
# Base Branch Filter | ||
Filters pull request events depending on the base branch | ||
The base branch is the branch that the pull request will be merged into. | ||
|
||
To use, set `args` to a regular expression that | ||
will be matched against the destination branch. | ||
|
||
Note: This action only works on pull request events. | ||
|
||
## Example | ||
Filter on pull requests that have been merged into `master`: | ||
```hcl | ||
workflow "example" { | ||
resolves = "base-branch-filter" | ||
# Must be used on pull_request events. | ||
on = "pull_request" | ||
} | ||
# First we use another filter to filter to only merged events. | ||
action "merged-prs-filter" { | ||
uses = "actions/bin/filter@master" | ||
args = "merged true" | ||
} | ||
# Then we use this filter to ensure the branch matches "master". | ||
action "base-branch-filter" { | ||
uses = "hashicorp/terraform-github-actions/base-branc-filter@master" | ||
# We set args to our regex. | ||
args = "^master$" | ||
needs = "merged-prs-filter" | ||
} | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,11 @@ | ||
#!/bin/sh | ||
|
||
set -e | ||
|
||
regex="$*" | ||
base_branch=$(jq -r .pull_request.base.ref "$GITHUB_EVENT_PATH") | ||
|
||
if "$actual" | grep -q "$regex"; then | ||
echo "base branch \"$base_branch\" does not match \"$regex\"" | ||
exit 78 | ||
fi |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters