Run Terraform #95
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Run Terraform | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| vm_sku: | |
| description: 'Virtual Machine SKU' | |
| required: true | |
| default: 'Standard_NV6ads_A10_v5' | |
| num_instances: | |
| description: 'Number of Instances' | |
| required: true | |
| default: '1' | |
| max_bid: | |
| description: 'Maximum spot bid amount' | |
| required: true | |
| default: '0.24' | |
| allowed_ip: | |
| description: 'Your IP address' | |
| required: true | |
| default: '192.168.50.1' | |
| disk_size: | |
| description: 'VM Disk Size (GB)' | |
| required: true | |
| default: '64' | |
| resource_group: | |
| description: 'Resource Group Name' | |
| required: true | |
| default: 'demo-rg' | |
| jobs: | |
| run-terraform: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v3 | |
| - name: Install Azure CLI | |
| uses: elstudio/action-install-azure-cli@v1 | |
| - name: Public IP | |
| id: ip | |
| uses: haythem/[email protected] | |
| - name: Azure Login | |
| uses: azure/login@v1 | |
| with: | |
| creds: ${{ secrets.AZURE_CREDENTIALS }} | |
| - name: Manage Firewalls | |
| run: | | |
| chmod +x access-helper.sh | |
| bash access-helper.sh add $RUNNER_IP $RESOURCE_GROUP | |
| shell: bash | |
| env: | |
| RUNNER_IP: ${{ steps.ip.outputs.ipv4 }} | |
| RESOURCE_GROUP: ${{ github.event.inputs.resource_group }} | |
| - name: Terraform fmt | |
| run: | | |
| docker run --platform linux/amd64 \ | |
| -e ARM_CLIENT_ID=${{ secrets.ARM_CLIENT_ID }} \ | |
| -e ARM_CLIENT_SECRET=${{ secrets.ARM_CLIENT_SECRET }} \ | |
| -e ARM_SUBSCRIPTION_ID=${{ secrets.ARM_SUBSCRIPTION_ID }} \ | |
| -e ARM_TENANT_ID=${{ secrets.ARM_TENANT_ID }} \ | |
| -v $(pwd):/terraform -w /terraform \ | |
| hashicorp/terraform fmt | |
| continue-on-error: false | |
| shell: bash | |
| - name: Terraform Init | |
| run: | | |
| docker run --platform linux/amd64 \ | |
| -e ARM_CLIENT_ID=${{ secrets.ARM_CLIENT_ID }} \ | |
| -e ARM_CLIENT_SECRET=${{ secrets.ARM_CLIENT_SECRET }} \ | |
| -e ARM_SUBSCRIPTION_ID=${{ secrets.ARM_SUBSCRIPTION_ID }} \ | |
| -e ARM_TENANT_ID=${{ secrets.ARM_TENANT_ID }} \ | |
| -v $(pwd):/terraform -w /terraform \ | |
| hashicorp/terraform init --upgrade | |
| continue-on-error: false | |
| shell: bash | |
| - name: Terraform Validate | |
| run: | | |
| docker run --platform linux/amd64 \ | |
| -e ARM_CLIENT_ID=${{ secrets.ARM_CLIENT_ID }} \ | |
| -e ARM_CLIENT_SECRET=${{ secrets.ARM_CLIENT_SECRET }} \ | |
| -e ARM_SUBSCRIPTION_ID=${{ secrets.ARM_SUBSCRIPTION_ID }} \ | |
| -e ARM_TENANT_ID=${{ secrets.ARM_TENANT_ID }} \ | |
| -v $(pwd):/terraform -w /terraform \ | |
| hashicorp/terraform validate -no-color | |
| continue-on-error: false | |
| shell: bash | |
| - name: Terraform Plan | |
| run: | | |
| docker run --platform linux/amd64 \ | |
| -e ARM_CLIENT_ID=${{ secrets.ARM_CLIENT_ID }} \ | |
| -e ARM_CLIENT_SECRET=${{ secrets.ARM_CLIENT_SECRET }} \ | |
| -e ARM_SUBSCRIPTION_ID=${{ secrets.ARM_SUBSCRIPTION_ID }} \ | |
| -e ARM_TENANT_ID=${{ secrets.ARM_TENANT_ID }} \ | |
| -v $(pwd):/terraform -w /terraform \ | |
| hashicorp/terraform plan -no-color -lock=false -out terraform.plan \ | |
| -var="resource_group=$RESOURCE_GROUP" \ | |
| -var="vm_sku=$VM_SKU" \ | |
| -var="vm_instances=$NUM_INSTANCES" \ | |
| -var="max_bid_price=$MAX_BID" \ | |
| -var='allowed_ips=["${{github.event.inputs.allowed_ip}}", "${{ steps.ip.outputs.ipv4 }}"]' | |
| continue-on-error: false | |
| shell: bash | |
| env: | |
| VM_SKU: ${{ github.event.inputs.vm_sku }} | |
| DISK_SIZE: ${{ github.event.inputs.disk_size }} | |
| NUM_INSTANCES: ${{ github.event.inputs.num_instances }} | |
| MAX_BID: ${{ github.event.inputs.max_bid }} | |
| ALLOWED_IPS: ${{ github.event.inputs.allowed_ip }} | |
| RUNNER_IP: ${{ steps.ip.outputs.ipv4 }} | |
| RESOURCE_GROUP: ${{ github.event.inputs.resource_group }} | |
| - name: Terraform Apply | |
| id: apply | |
| run: | | |
| docker run --platform linux/amd64 \ | |
| -e ARM_CLIENT_ID=${{ secrets.ARM_CLIENT_ID }} \ | |
| -e ARM_CLIENT_SECRET=${{ secrets.ARM_CLIENT_SECRET }} \ | |
| -e ARM_SUBSCRIPTION_ID=${{ secrets.ARM_SUBSCRIPTION_ID }} \ | |
| -e ARM_TENANT_ID=${{ secrets.ARM_TENANT_ID }} \ | |
| -v $(pwd):/terraform -w /terraform \ | |
| hashicorp/terraform apply -no-color -auto-approve -input=false \ | |
| -var="resource_group=$RESOURCE_GROUP" \ | |
| -var="vm_sku=$VM_SKU" \ | |
| -var="vm_instances=$NUM_INSTANCES" \ | |
| -var="max_bid_price=$MAX_BID" \ | |
| -var='allowed_ips=["${{github.event.inputs.allowed_ip}}", "${{ steps.ip.outputs.ipv4 }}"]' | |
| continue-on-error: false | |
| shell: bash | |
| env: | |
| VM_SKU: ${{ github.event.inputs.vm_sku }} | |
| DISK_SIZE: ${{ github.event.inputs.disk_size }} | |
| NUM_INSTANCES: ${{ github.event.inputs.num_instances }} | |
| MAX_BID: ${{ github.event.inputs.max_bid }} | |
| ALLOWED_IPS: ${{ github.event.inputs.allowed_ip }} | |
| RUNNER_IP: ${{ steps.ip.outputs.ipv4 }} | |
| RESOURCE_GROUP: ${{ github.event.inputs.resource_group }} |