terraform-plan-04.yaml

---
name: terraform-plan-04-aws-wireguard-vpn

permissions:
  id-token: write      # for fetching the OIDC token
  contents: read       # for actions/checkout
  pull-requests: write # For dflook comments on PR

on:
  workflow_dispatch:
  pull_request:
    branches:
      - "master"
    paths:
      - "examples/04-aws-wireguard-vpn/**"
      - "modules/wireguard-ec2"
      - ".github/workflows/**04.yaml"

jobs:
  tf-plan:
    runs-on: ubuntu-latest
    name: 04-aws-wireguard-vpn - terraform plan
    env:
      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

    steps:
      - name: Checkout
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@010d0da01d0b5a38af31e9c3470dbfdabdecca3a # v4
        with:
          role-to-assume: ${{ secrets.OIDC_ROLE_ARN }}
          role-session-name: GithubActionsTerraform
          aws-region: eu-west-1

      - name: Terraform plan
        uses: dflook/terraform-plan@34813b801c6b0146d07073e0c1bd82f7e6784f16 # v1
        with:
          path: examples/04-aws-wireguard-vpn