infra.yaml

name: Terraform Apply on Changes

on:
  push:
    branches:
      - main

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  # zizmor: ignore[secrets-outside-env]
  terraform:
    name: Terraform
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 0
          persist-credentials: false

      - name: Authenticate with Google Cloud
        uses: google-github-actions/auth@v3
        with:
          project_id: "httparchive"
          credentials_json: ${{ secrets.GCP_SA_KEY }}

      - name: Set up Terraform
        uses: hashicorp/setup-terraform@v4

      - name: Initialize Terraform
        run: |
          make tf_init
          make tf_lint

      - name: Apply Terraform
        run: make tf_apply