darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2025-12-14 01:02:09 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix drift

Browse Source
This commit is contained in:
Kenneth Kehl
2025-06-18 10:06:16 -07:00
parent 088c4f1017
commit a359bdd930
1 changed files with 72 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

122
.github/workflows/drift.yml vendored
View File

@@ -44,58 +44,80 @@ jobs:
exit $exit_code exit $exit_code
fi fi
# check_demo_drift: check_demo_drift:
# runs-on: ubuntu-latest runs-on: ubuntu-latest
# name: Check for drift of demo terraform configuration name: Check for drift of demo terraform configuration
# environment: demo environment: demo
# steps: steps:
# - name: Checkout - name: Checkout
# uses: actions/checkout@v4 uses: actions/checkout@v4
# with: with:
# ref: 'production' ref: 'production'
# # Looks like we need to install Terraform ourselves now! # Looks like we need to install Terraform ourselves now!
# # https://github.com/actions/runner-images/issues/10796#issuecomment-2417064348 # https://github.com/actions/runner-images/issues/10796#issuecomment-2417064348
# - name: Setup Terraform - name: Setup Terraform
# uses: hashicorp/setup-terraform@v3 uses: hashicorp/setup-terraform@v3
# with: with:
# terraform_version: "^1.7.5" terraform_version: "^1.7.5"
# terraform_wrapper: false terraform_wrapper: false
# - name: Check for drift - name: Check for drift
# uses: dflook/terraform-check@v1 env:
# env: AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }}
# AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }} AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }}
# AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }} TF_VAR_cf_user: ${{ secrets.CLOUDGOV_USERNAME }}
# TF_VAR_cf_user: ${{ secrets.CLOUDGOV_USERNAME }} TF_VAR_cf_password: ${{ secrets.CLOUDGOV_PASSWORD }}
# TF_VAR_cf_password: ${{ secrets.CLOUDGOV_PASSWORD }} run: |
# with: cd terraform/demo
# path: terraform/demo terraform init
terraform plan -detailed-exitcode
exit_code=$?
if [ $exit_code -eq 0 ]; then
echo "No changes detected. Intrastructure is up-to-date."
elif [ $exit_code -eq 2 ]; then
echo "Changes detected. Infrastructure drift found."
exit 1
else
echo "Error running terraform plan."
exit $exit_code
fi
# check_prod_drift: check_prod_drift:
# runs-on: ubuntu-latest runs-on: ubuntu-latest
# name: Check for drift of production terraform configuration name: Check for drift of production terraform configuration
# environment: production environment: production
# steps: steps:
# - name: Checkout - name: Checkout
# uses: actions/checkout@v4 uses: actions/checkout@v4
# with: with:
# ref: 'production' ref: 'production'
# # Looks like we need to install Terraform ourselves now! # Looks like we need to install Terraform ourselves now!
# # https://github.com/actions/runner-images/issues/10796#issuecomment-2417064348 # https://github.com/actions/runner-images/issues/10796#issuecomment-2417064348
# - name: Setup Terraform - name: Setup Terraform
# uses: hashicorp/setup-terraform@v3 uses: hashicorp/setup-terraform@v3
# with: with:
# terraform_version: "^1.7.5" terraform_version: "^1.7.5"
# terraform_wrapper: false terraform_wrapper: false
# - name: Check for drift - name: Check for drift
# uses: dflook/terraform-check@v1 env:
# env: AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }}
# AWS_ACCESS_KEY_ID: ${{ secrets.TERRAFORM_STATE_ACCESS_KEY }} AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }}
# AWS_SECRET_ACCESS_KEY: ${{ secrets.TERRAFORM_STATE_SECRET_ACCESS_KEY }} TF_VAR_cf_user: ${{ secrets.CLOUDGOV_USERNAME }}
# TF_VAR_cf_user: ${{ secrets.CLOUDGOV_USERNAME }} TF_VAR_cf_password: ${{ secrets.CLOUDGOV_PASSWORD }}
# TF_VAR_cf_password: ${{ secrets.CLOUDGOV_PASSWORD }} run: |
# with: cd terraform/production
# path: terraform/production terraform init
terraform plan -detailed-exitcode
exit_code=$?
if [ $exit_code -eq 0 ]; then
echo "No changes detected. Intrastructure is up-to-date."
elif [ $exit_code -eq 2 ]; then
echo "Changes detected. Infrastructure drift found."
exit 1
else
echo "Error running terraform plan."
exit $exit_code
fi