terraform-apply.yml

name: Terraform Apply

on:
  workflow_call:
    inputs:
      working-directory:
        type: string
        required: false
        default: tf
      apply-command:
        type: string
        required: false
        default: |
          terraform init
          terraform apply -auto-approve
    secrets:
      aws-id:
        required: true
      aws-secret:
        required: true
      git-read-key:
        required: true

jobs:
  apply:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.aws-id }}
          aws-secret-access-key: ${{ secrets.aws-secret }}
          aws-region: eu-central-1

      - name: Install SSH key
        uses: webfactory/ssh-agent@v0.5.4
        with:
          ssh-private-key: ${{ secrets.git-read-key }}

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v2

      - name: Terraform Init & Apply
        run: |
          aws s3 ls
          aws sts get-caller-identity
          ${{ inputs.apply-command }}
        working-directory: ${{ inputs.working-directory }}