pipeline.yml

name: Terraform
on:
  push:
    branches: [main]
  pull_request:
    types: [opened, reopened, synchronize]
    branches: [main]
  release:
    types: [published]

env:
  DEFAULT_REGION: us-east-1
  AWS_ACCESS_KEY_ID: localstack
  AWS_SECRET_ACCESS_KEY: localstack

jobs:
  check-format:
    runs-on: ubuntu-latest
    container: hashicorp/terraform
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Terraform Format Check
        run: terraform fmt -check -recursive -diff

  discover-examples:
    outputs:
      matrix: ${{ steps.set-matrix.outputs.matrix }}
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Set validation matrix
        id: set-matrix
        run: |
          # Find all subdirectories in examples folder and convert to JSON array
          DIRS=$(find examples -maxdepth 1 -mindepth 1 -type d | sort)
          MATRIX=$(echo "$DIRS" | jq -R . | jq -s . | tr -d '\n')
          echo "matrix=${MATRIX}" >> $GITHUB_OUTPUT

  validations:
    needs: discover-examples
    runs-on: ubuntu-latest
    container: hashicorp/terraform
    strategy:
      matrix:
        dir: ${{ fromJson(needs.discover-examples.outputs.matrix) }}
    services:
      localstack:
        image: localstack/localstack
        env:
          SERVICES: apigateway,cloudformation,cloudwatch,dynamodb,es,firehose,iam,kinesis,lambda,route53,redshift,s3,secretsmanager,ses,sns,sqs,ssm,stepfunctions,sts
        ports:
          - 4566:4566
    steps:
      - name: Checkout repository
        uses: actions/checkout@v6
      - name: Terraform Init
        run: terraform init -upgrade
        working-directory: ${{ matrix.dir }}
      - name: Terraform Validate
        run: terraform validate
        working-directory: ${{ matrix.dir }}
      - name: Terraform Plan (Mock)
        run: terraform plan
        working-directory: ${{ matrix.dir }}