apply_terraform.yml

name: Apply terraform

on: 
  workflow_call:
    secrets:
      PROD_CP_GCP_PROJECT_ID:
        required: true
      DEV_CP_GCP_PROJECT_ID:
        required: true
      DEVOPS_ACCESS_REPO_TOKEN:
        required: true
      PROD_CP_GCP_SVC_GITHUB_RUNNER_KEY_FILE:
        required: true
      DEV_CP_GCP_SVC_GITHUB_RUNNER_KEY_FILE:
        required: true
    inputs:
      TEST:
        type: boolean
        default: false
        required: false
        description: 'A flag to determine whether to apply testing envionment.'
    outputs:
      TEST_ENDPOINT:
        value: ${{ jobs.apply_terraform.outputs.TEST_ENDPOINT }}
        description: "The endpoint that used for integration test."

jobs:
  apply_terraform:
    if: ${{ github.actor != 'dependabot[bot]' }}
    runs-on: ubuntu-latest
    outputs:
      TEST_ENDPOINT: ${{ steps.terraform_output.outputs.test_endpoint }}
    steps:
      - uses: actions/checkout@main

      - name: Export environments
        run: |
          if [[ ${{ inputs.TEST }} == true ]]; then
            REPOSITORY="test-${GITHUB_REPOSITORY##*/}"
          else
            REPOSITORY=${GITHUB_REPOSITORY##*/}
          fi

          if [[ "$REF" =~ ^[0-9]+.[0-9]+.[0-9]+$ || $GITHUB_REF_NAME == "master" ]]; then
            GCP_ENV=production
            GCP_PROJECT_ID=${{ secrets.PROD_CP_GCP_PROJECT_ID }}
            INFRA_BRANCH=master
          else
            GCP_ENV=develop
            GCP_PROJECT_ID=${{ secrets.DEV_CP_GCP_PROJECT_ID }}
            INFRA_BRANCH=develop
          fi

          echo "node version: `node -v`"

          cat <<- EOF >> ${GITHUB_ENV}
          REPOSITORY=${REPOSITORY}
          GCP_ENV=${GCP_ENV}
          GCP_PROJECT_ID=${GCP_PROJECT_ID}
          INFRA_BRANCH=${INFRA_BRANCH}
          INFRA_REPO=CoolBitX-Technology/cp-platform-infrastructure
          INFRA_DIR=${GITHUB_WORKSPACE}/_infra
          EOF

      - name: Checkout infra
        uses: actions/checkout@main
        with:
          repository: ${{ env.INFRA_REPO }}
          path: ${{ env.INFRA_DIR }}
          ref: ${{ env.INFRA_BRANCH }}
          token: ${{ secrets.DEVOPS_ACCESS_REPO_TOKEN }}

      - name: Authenticate gcloud
        if: ${{ env.GCP_ENV == 'production' }}
        uses: google-github-actions/auth@v2
        with:
          credentials_json: ${{ secrets.PROD_CP_GCP_SVC_GITHUB_RUNNER_KEY_FILE }}

      - name: Authenticate gcloud
        if: ${{ env.GCP_ENV == 'develop' }}
        uses: google-github-actions/auth@v2
        with:
          credentials_json: ${{ secrets.DEV_CP_GCP_SVC_GITHUB_RUNNER_KEY_FILE }}

      - name: Setup gcloud
        uses: google-github-actions/setup-gcloud@v2

      - uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: 1.9.5
          terraform_wrapper: false

      - name: Terraform init
        working-directory: ${{ env.INFRA_DIR }}/terraform
        run: |
          terraform init -backend-config=bucket=${GCP_PROJECT_ID}-terraform-state

      - name: Terraform apply
        working-directory: ${{ env.INFRA_DIR }}/terraform
        run: |
          terraform apply -auto-approve -var=env=${GCP_ENV} -var=testing=${{ inputs.TEST }} -target=module.${REPOSITORY}

      - name: Terraform output
        id: terraform_output
        working-directory: ${{ env.INFRA_DIR }}/terraform
        run: |
          test_endpoint=$(terraform output -raw ${REPOSITORY}-endpoint)

          echo "test_endpoint=$test_endpoint" >> "$GITHUB_OUTPUT"
        if: ${{ inputs.TEST }}