Skip to content

ci(reusable): gate terraform apply behind explicit input #76

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
NWarila merged 1 commit into from
Jun 22, 2026
Merged

ci(reusable): gate terraform apply behind explicit input #76

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 11 additions & 2 deletions .github/workflows/reusable-terraform-deploy.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,8 @@ name: Reusable Terraform Deploy
# 3. Imports any already-existing repository and repository-ruleset resources
# into state before planning. This lets the framework adopt a pre-existing
# fleet without trying to create resources that already exist.
# 4. Runs terraform init/plan/apply against the assembled tree.
# 4. Runs terraform init/plan against the assembled tree; apply only runs when
# the caller explicitly sets `apply: true`.
#
# S3 layout convention
# --------------------
Expand Down Expand Up @@ -102,6 +103,14 @@ on:
required: false
type: boolean
default: false
apply:
description: |
When true, apply the real-state Terraform plan. Leave false to produce
and upload a real-state plan without changing managed resources.
Ignored when plan_only is true.
required: false
type: boolean
default: false
secrets:
aws_role_arn:
description: ARN of the AWS role to assume via OIDC.
Expand Down Expand Up @@ -484,7 +493,7 @@ jobs:
retention-days: 90

- name: Terraform apply
if: ${{ !inputs.plan_only }}
if: ${{ inputs.apply && !inputs.plan_only }}
working-directory: framework/terraform
run: terraform apply -auto-approve tfplan

Expand Down
Loading