TF-via-PR/tests/fail_build_artifact_missing/main.tf at dae962699aac075e4a320fb33ab906cab3d245f3 · OP5dev/TF-via-PR · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
# Test case demonstrating build artifact issue (#517)
# This replicates the scenario where data.archive_file generates a zip
# during plan, but the zip is missing during apply because only the
# tfplan file is uploaded/downloaded between workflow runs.
#
# To test this scenario (simulating separate plan/apply jobs):
# 1. Run: terraform init
# 2. Run: terraform plan -out=tfplan
#    (This creates build/bundle.zip via data.archive_file)
# 3. Simulate artifact transfer: rm -rf build/
# 4. Run: terraform apply tfplan
#    (This FAILS because bundle.zip no longer exists)
#
# The new `build-artifacts` input solves this by allowing users to
# specify files/directories to upload alongside the tfplan file.
#
# Example workflow usage with build-artifacts:
#   - uses: op5dev/tf-via-pr@v13
#     with:
#       command: plan
#       build-artifacts: build/bundle.zip
#       # Or for multiple files/directories:
#       # build-artifacts: |
#       #   build/bundle.zip
#       #   dist/

terraform {
  required_providers {
    archive = {
      source  = "hashicorp/archive"
      version = "~> 2.0"
    }
    null = {
      source  = "hashicorp/null"
      version = "~> 3.0"
    }
  }
}

# Archive inline content - creates zip during plan phase
data "archive_file" "bundle" {
  type        = "zip"
  output_path = "${path.module}/build/bundle.zip"

  source {
    content  = "exports.handler = async (event) => { return { statusCode: 200 }; };"
    filename = "index.js"
  }

  source {
    content  = jsonencode({ name = "lambda-function", version = "1.0.0" })
    filename = "package.json"
  }
}

# Simulates deploying the archive (e.g., to S3, Lambda, etc.)
# This will fail during apply if the zip file doesn't exist
resource "null_resource" "deploy" {
  triggers = {
    archive_hash = data.archive_file.bundle.output_base64sha256
  }

  provisioner "local-exec" {
    command = <<-EOT
      if [ -f "${data.archive_file.bundle.output_path}" ]; then
        echo "SUCCESS: Archive found at ${data.archive_file.bundle.output_path}"
        echo "Archive size: $(wc -c < "${data.archive_file.bundle.output_path}") bytes"
        echo "Archive hash: ${data.archive_file.bundle.output_base64sha256}"
      else
        echo "ERROR: Archive missing at ${data.archive_file.bundle.output_path}"
        echo ""
        echo "This failure occurs when:"
        echo "  1. 'terraform plan' runs in one workflow job (creates the zip)"
        echo "  2. Only the tfplan file is transferred to another job"
        echo "  3. 'terraform apply tfplan' runs but the zip is missing"
        echo ""
        echo "Solution: Use 'build-artifacts' input to transfer the zip file"
        exit 1
      fi
    EOT
  }
}

output "archive_path" {
  value       = data.archive_file.bundle.output_path
  description = "Path to the generated archive file"
}

output "archive_size" {
  value       = data.archive_file.bundle.output_size
  description = "Size of the archive in bytes"
}