terraform_build.yaml

name: Run tests and apply terraform changes for current branch

on:
  push:
    branches:
      - dev
      - staging
      - production

jobs:
  build:

    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v2
    - name: Grant Permission
      run: |
        chmod +x ./scripts/*
    - name: Install dependencies
      run: |
        ./scripts/setup
    - name: Deploy production
      if: success() && github.ref == 'refs/heads/production'
      env:
        ENV: production
        AWS_ACCESS_KEY_ID: ${{ secrets.aws_key_production }}
        AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_production }}
        AWS_REGION: ${{ secrets.aws_region_production }}
        CORE_S3_ACCESS_KEY_ID: ${{ secrets.core_s3_access_key_id }}
        CORE_S3_SECRET_ACCESS_KEY: ${{ secrets.core_s3_secret_access_key }}
      run: |
        ./scripts/infra plan -var "s3_access_key_id=${CORE_S3_ACCESS_KEY_ID}" \
                             -var "s3_secret_access_key=${CORE_S3_SECRET_ACCESS_KEY}"
        ./scripts/infra apply
    - name: Deploy staging
      if: success() && github.ref == 'refs/heads/staging'
      env:
        ENV: staging
        AWS_ACCESS_KEY_ID: ${{ secrets.aws_key_staging }}
        AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_staging }}
        AWS_REGION: ${{ secrets.aws_region_staging }}
        CORE_S3_ACCESS_KEY_ID: ${{ secrets.core_s3_access_key_id }}
        CORE_S3_SECRET_ACCESS_KEY: ${{ secrets.core_s3_secret_access_key }}
      run: |
        ./scripts/infra plan -var "s3_access_key_id=${CORE_S3_ACCESS_KEY_ID}" \
                             -var "s3_secret_access_key=${CORE_S3_SECRET_ACCESS_KEY}"
        ./scripts/infra apply
    - name: Deploy dev
      if: success() && github.ref == 'refs/heads/dev'
      env:
        ENV: dev
        AWS_ACCESS_KEY_ID: ${{ secrets.aws_key_dev }}
        AWS_SECRET_ACCESS_KEY: ${{ secrets.aws_secret_dev }}
        AWS_REGION: ${{ secrets.aws_region_dev }}
        CORE_S3_ACCESS_KEY_ID: ${{ secrets.core_s3_access_key_id }}
        CORE_S3_SECRET_ACCESS_KEY: ${{ secrets.core_s3_secret_access_key }}
      run: |
        ./scripts/infra plan -var "s3_access_key_id=${CORE_S3_ACCESS_KEY_ID}" \
                             -var "s3_secret_access_key=${CORE_S3_SECRET_ACCESS_KEY}"
        ./scripts/infra apply