plan-root.yml

name: Plan (root)

on:
  pull_request:
    branches: [main]
    paths:
      - "workspaces/root/**"
      - "modules/**"

env:
  TF_VERSION: "1.14.8"

permissions:
  contents: read
  id-token: write

jobs:
  plan:
    name: Plan (root)
    runs-on: ubuntu-latest
    env:
      TF_TOKEN_app_terraform_io: ${{ secrets.TF_API_TOKEN }}
    steps:
      - uses: actions/checkout@v4
      - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
        with:
          role-to-assume: ${{ vars.ROOT_OIDC_ROLE_ARN }}
          aws-region: ${{ vars.AWS_REGION }}
      - uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: ${{ env.TF_VERSION }}
          terraform_wrapper: false
      - run: terraform -chdir=workspaces/root init
      - run: terraform -chdir=workspaces/root plan -no-color