deploy-to-dev.yaml

#
# To manually trigger:
# gh workflow run --ref jadudm/tf-0103 --field environment=dev deploy-to-dev.yaml
# 
name: Deploy to space
on:
  # push:
  #   branches:
  #     - jadudm/tf-0103
  workflow_dispatch:
    inputs:
      environment:
        required: true
        type: string
  workflow_call:
    inputs:
      environment:
        required: true
        type: string

jobs:
  deploy:
    name: apply ( ${{ inputs.environment }} )
    runs-on: ubuntu-latest
    environment: ${{ inputs.environment }}
    env:
        KEY: "terraform.tfstate.${{ inputs.environment }}"
        TF_VAR_cf_user: ${{ secrets.CF_USERNAME }}
        TF_VAR_cf_password: ${{ secrets.CF_PASSWORD }}
        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      
      - name: Install CloudFoundry CLI v8
        run: |
          curl -k -O -L https://github.com/cloudfoundry/cli/releases/download/v8.8.0/cf8-cli-installer_8.8.0_x86-64.deb
          sudo apt-get install --assume-yes ./cf8-cli-installer_8.8.0_x86-64.deb
      
      # This may want to become TF actions
      - name: Install Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: "1.10.3"

      # We use ${{ secret.X }} to reference secrets, and 
      # we use ${{ vars.X }} to access environment variables
      - name: Authenticate against Cloud.gov
        run: |
          cf api api.fr.cloud.gov
          cf auth ${{ secrets.CF_USERNAME }} ${{ secrets.CF_PASSWORD }}
          cf target -o ${{ vars.CF_ORG }} -s ${{ vars.CF_SPACE }}

      # https://stackoverflow.com/questions/14268097/do-i-need-cat-to-write-a-heredoc-to-a-file
      # https://stackoverflow.com/questions/63048738/how-to-declare-variables-for-s3-backend-in-terraform
      - name: Setup TF creds for state bucket
        run: |
          tee ${GITHUB_WORKSPACE}/terraform/${{ inputs.environment }}/backend_${{ inputs.environment }}.config <<EOF
          bucket="${{ secrets.TF_VAR_BUCKET_NAME }}"
          region="${{ secrets.TF_VAR_AWS_DEFAULT_REGION}}"
          access_key="${{ secrets.TF_VAR_AWS_ACCESS_KEY_ID }}"
          secret_key="${{ secrets.TF_VAR_AWS_SECRET_ACCESS_KEY }}"
          endpoints={ s3 = "https://s3-${{ secrets.TF_VAR_AWS_DEFAULT_REGION }}.amazonaws.com/${{ secrets.TF_VAR_BUCKET_NAME }}/" }
          EOF

      # This fails because it relies on the `tfvars` file, which does
      # not exist in CGov. We need to use the S3 backend.
      - name: Run `make dev` (terraform init -> plan -> apply)
        run: |
          pushd ${GITHUB_WORKSPACE}/terraform/${{ inputs.environment }}
          terraform init -backend-config="./backend_${{ inputs.environment }}.config"
          make plan
          make apply
          popd