zzz_run.terraform.pull_requests.yaml

name: Iaas - Terraform CI (for pull requests)

on:
  pull_request:
    types: [opened, synchronize]
    paths:
      # if fixtures are updated
      - fixtures/terraform/**.tf
      - fixtures/terraform/**/.terraform.lock.hcl

      # if workflows are updated
      - .github/workflows/terraform.pull_requests.yaml
      - .github/workflows/zzz_run.terraform.pull_requests.yaml

jobs:
  tf_project_01-lint:
    uses: xunleii/github-actions-grimoire/.github/workflows/terraform.pull_requests.lint.yaml@17cffb9be36c85d3d6b6971d416cef5ff8635913
    with:
      terraform_workdir: fixtures/terraform/project-01
  tf_project_01-plan:
    uses: xunleii/github-actions-grimoire/.github/workflows/terraform.pull_requests.plan.yaml@17cffb9be36c85d3d6b6971d416cef5ff8635913
    with:
      terraform_workdir: fixtures/terraform/project-01
      terraform_vars: |
        var: ...
    secrets:
      terraform_vars: |
        secret: '***'

  tf_project_02-plan:
    uses: xunleii/github-actions-grimoire/.github/workflows/terraform.pull_requests.plan.yaml@17cffb9be36c85d3d6b6971d416cef5ff8635913
    with:
      after_lint: false
      terraform_workdir: fixtures/terraform/project-02
      terraform_vars: |
        var: ...
    secrets:
      terraform_vars: |
        secret: '***'