plan.yaml

name: Plan Changes

on:
  pull_request:
    branches:
      - master

permissions:
  contents: read
  pull-requests: write

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  stacks:
    runs-on: ubuntu-latest
    outputs:
      stacks: ${{ steps.stacks.outputs.matrix }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup NodeJS
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: yarn
          cache-dependency-path: yarn.lock

      - name: Generate Terraform Bindings
        run: |
          npx --yes cdktf-cli get

      - name: Install NPM Dependencies
        run: |
          rm -rf node_modules/
          yarn install --frozen-lockfile --production

      - name: Load .env File Contents
        env:
          ENV_FILE_CONTENTS: ${{ secrets.ENV_FILE_CONTENTS }}
        run: |
          echo "${ENV_FILE_CONTENTS}" | tee .env

      - id: stacks
        name: Get Stacks
        run: |
          echo "matrix={stack: $(npx --yes ts-node main.ts)}" >> $GITHUB_OUTPUT

  plan:
    runs-on: ubuntu-latest
    needs: stacks
    strategy:
      matrix: ${{ fromJSON(needs.stacks.outputs.stacks) }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup NodeJS
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: yarn
          cache-dependency-path: yarn.lock

      - name: Generate Terraform Bindings
        run: |
          npx --yes cdktf-cli get

      - name: Install NPM Dependencies
        run: |
          rm -rf node_modules/
          yarn install --frozen-lockfile --production

      - name: Load .env File Contents
        env:
          ENV_FILE_CONTENTS: ${{ secrets.ENV_FILE_CONTENTS }}
        run: |
          echo "${ENV_FILE_CONTENTS}" | tee .env

      - name: Run Terraform CDK
        uses: hashicorp/terraform-cdk-action@v5
        with:
          mode: plan-only
          githubToken: ${{ secrets.GITHUB_TOKEN }}
          stackName: ${{ matrix.stack }}
          updateComment: 'false'