terraform-plan-02.yaml

---
name: terraform-plan-02-minimal-gcp-tf-bootstrap

permissions:
  id-token: write      # for fetching the OIDC token
  contents: read       # for actions/checkout
  pull-requests: write # For dflook comments on PR

on:
  workflow_dispatch:
  pull_request:
    branches:
      - "master"
    paths:
      - "examples/02-minimal-gcp-tf-bootstrap/**"
      - "modules/**"
      - ".github/workflows/**02.yaml"

jobs:
  tf-plan:
    runs-on: ubuntu-latest
    name: 02-minimal-gcp-tf-bootstrap - terraform plan
    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

      - id: 'auth'
        name: 'Authenticate to Google Cloud'
        uses: 'google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f' # v2
        with:
          workload_identity_provider: ${{ secrets.WORKLOAD_IDENTITY_PROVIDER }}
          service_account: 'github-actions@pipetail-terraform.iam.gserviceaccount.com'

      - name: Terraform plan
        uses: dflook/terraform-plan@ef228c1f24b8a8e3e9f96e0e98a7e7f0c5d27e12 # v1
        with:
          path: examples/02-minimal-gcp-tf-bootstrap