apply.yaml

name: Apply Changes

on:
  push:
    branches:
      - master

permissions:
  contents: read
  pull-requests: write
  issues: read

concurrency:
  group: ${{ github.workflow }}
  cancel-in-progress: false

jobs:
  apply:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup NodeJS
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: yarn
          cache-dependency-path: yarn.lock

      - name: Generate Terraform Bindings
        run: |
          npx --yes cdktf-cli get

      - name: Install NPM Dependencies
        run: |
          rm -rf node_modules/
          yarn install --frozen-lockfile --production

      - name: Load .env File Contents
        env:
          ENV_FILE_CONTENTS: ${{ secrets.ENV_FILE_CONTENTS }}
        run: |
          echo "${ENV_FILE_CONTENTS}" | tee .env

      - name: Run Terraform CDK
        uses: hashicorp/terraform-cdk-action@v5
        with:
          mode: auto-approve-apply
          githubToken: ${{ secrets.GITHUB_TOKEN }}
          stackName: '*'
          updateComment: 'false'