name: Terraform Validate

on:
  pull_request:
    branches:
      - main
    paths:
      - "terraform/iac/**"
      - .github/workflows/terraform-iac-validate.yaml
    types:
      - opened
      - synchronize
      - reopened
jobs:
  terraform-validate:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v2

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v1
        with:
          terraform_version: 1.9.6

      - name: Setup Sectool
        uses: a13labs/setup-sectool@v1

      - name: Terraform Init
        env:
          VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
        run: |
          cd terraform/iac
          sectool exec terraform init

      - name: Terraform Plan
        env:
          VAULT_MASTER_PASSWORD: ${{ secrets.VAULT_MASTER_PASSWORD }}
        run: |
          cd terraform/iac
          sectool exec -n terraform plan -out=tfplan

      - name: Show Terraform Plan
        run: |
          cd terraform/iac
          terraform show tfplan