Ecs runners #6

Summary
Jobs
- build
Run details
- Workflow file

Workflow file for this run

.github/workflows/terraform_plan.yaml at de32ed7

	# This is a basic workflow to help you get started with Actions
	name: Terraform Plan

	# Controls when the workflow will run
	on:
	pull_request:
	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	# A workflow run is made up of one or more jobs that can run sequentially or in parallel
	jobs:
	# This workflow contains a single job called "build"
	build:
	# The type of runner that the job will run on
	runs-on: [ automation-repos ]
	env:
	AWS_SECRET_ACCESS_KEY: "${{ secrets.AWS_SECRET_ACCESS_KEY }}"
	AWS_ACCESS_KEY_ID: "${{ vars.AWS_ACCESS_KEY_ID }}"
	AWS_SESSION_TOKEN: "${{ secrets.AWS_SESSION_TOKEN }}"
	GITHUB_TOKEN: "${{ secrets.GH_TOKEN }}"


	# Steps represent a sequence of tasks that will be executed as part of the job
	steps:
	# Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
	- uses: CSVD/gh-actions-checkout@v3
	with:
	github-server-url: https://github.e.it.census.gov
	ref: ${{ github.head_ref }}
	token: ${{ secrets.GH_TOKEN }}


	- uses: CSVD/gh-actions-setup-node@v3
	with:
	node-version: 16

	- uses: CSVD/gh-actions-setup-terraform@v2
	with:
	terraform_version: ${{ vars.terraform_version }}

	- name: Set output
	id: vars
	run: echo ::set-output name=short_ref::${GITHUB_REF#refs/*/}

	- name: Terraform Format
	id: fmt
	run: \|
	terraform fmt
	if ! git diff-index --quiet HEAD; then
	git config --global user.name '${{ vars.REPO_OWNER }}'
	git config --global user.email '${{ vars.REPO_OWNER_EMAIL }}'
	git commit -am "Autoformatting TF Code"
	git push
	echo "auto_format=true" >> $GITHUB_ENV
	fi

	- name: Autoformat Halt
	if: env.auto_format == 'true'
	run: exit 0

	- name: Terraform Init
	id: init
	run: terraform init -upgrade

	- name: Terraform Validate
	id: validate
	run: terraform validate -no-color

	- name: Terraform Plan
	id: plan
	if: github.event_name == 'pull_request'
	run: terraform plan -no-color -out=${{ vars.plan_cache }}/${{ github.sha }}
	continue-on-error: true

	- name: Terraform Plan
	if: github.event_name != 'pull_request'
	run: terraform plan -no-color
	continue-on-error: true

	- name: Terraform Show plan
	if: github.event_name == 'pull_request'
	run: echo ::set-output name=terraform_plan::$(terraform show ${{ vars.plan_cache }}/${{ github.sha }})

	- name: Post Terraform Plan to PR
	uses: CSVD/gh-actions-github-script@v6
	if: github.event_name == 'pull_request'
	env:
	PLAN: "terraform\n${{ env.terraform_plan }}"
	with:
	github-token: ${{ secrets.GH_TOKEN }}
	script: \|
	const output = `#### Terraform Format and Style 🖌\`${{ steps.fmt.outcome }}\`
	#### Terraform Initialization ⚙️\`${{ steps.init.outcome }}\`
	#### Terraform Validation 🤖\`${{ steps.validate.outcome }}\`
	<details><summary>Validation Output</summary>

	\`\`\`\n
	${{ steps.validate.outputs.stdout }}
	\`\`\`

	</details>

	#### Terraform Plan 📖\`${{ steps.plan.outcome }}\`

	<details><summary>Show Plan</summary>

	\`\`\`\n
	${process.env.PLAN}
	\`\`\`

	</details>

	Pusher: @${{ github.actor }}, Action: \`${{ github.event_name }}\`, Workflow: \`${{ github.workflow }}\``;

	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: output
	})