Try terraform plan

Author: Weastie

.github/workflows/terraform_plan.yaml

@@ -0,0 +1,62 @@
+name: Terraform Plan
+
+on:
+  workflow_call:
+    inputs:
+      tf_token_keeper_path:
+        required: true
+        type: string
+      aws_access_key_id_keeper_path:
+        required: true
+        type: string
+      aws_secret_access_key_keeper_path:
+        required: true
+        type: string
+      tf_dir:
+        required: true
+        type: string
+        default: "."
+      cli_opts:
+        required: false
+        type: string
+        default: " "
+    secrets:
+      KSM_CONFIG:
+        required: true
+
+jobs:
+  terraform_fmt:
+    runs-on: self-hosted
+    container:
+      image: buildpack-deps:bookworm
+    steps:
+      - uses: actions/checkout@v4
+        name: Checkout source code
+      - name: Retrieve secrets from Keeper
+        id: ksecrets
+        uses: Keeper-Security/ksm-action@master
+        with:
+          keeper-secret-config: ${{ secrets.KSM_CONFIG }}
+          secrets: |-
+            ${{ inputs.tf_token_keeper_path }} > env:TF_TOKEN
+            ${{ inputs.aws_access_key_id_keeper_path }} > env:AWS_ACCESS_KEY_ID
+            ${{ inputs.aws_secret_access_key_keeper_path }} > env:AWS_SECRET_ACCESS_KEY
+      - name: Setup Nodejs
+        uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+          check-latest: true
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v3
+        with:
+          cli_config_credentials_token: ${{ env.TF_TOKEN }}
+      - name: Terraform Init
+        run: |
+          cd ${{ inputs.tf_dir }}
+          terraform init
+      - name: Terraform Plan
+        run: |
+          cd ${{ inputs.tf_dir }}
+          terraform plan -lock-timeout=30s
+        env:
+          KEEPER_CREDENTIAL: ${{ secrets.KSM_CONFIG }}