ci: add terraform support

Signed-off-by: Ales Verbic <averbic@applause.com>

Author: verbotenj

.github/workflows/run-terraform.yml

@@ -0,0 +1,39 @@
+name: run-terraform
+
+on:
+  workflow_dispatch:
+    inputs:
+      arguments:
+        description: 'Terraform CLI arguments'
+        required: true
+        default: 'apply -auto-approve'
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  terraform:
+    name: terraform
+    runs-on: ubuntu-latest
+    env:
+      CLOUDFLARE_API_KEY: ${{ secrets.CLOUDFLARE_API_KEY }}
+      CLOUDFLARE_EMAIL: ${{ secrets.CLOUDFLARE_EMAIL }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      TF_IN_AUTOMATION: true
+
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 https://github.com/actions/checkout/releases/tag/v5.0.0
+      - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2 https://github.com/hashicorp/setup-terraform/releases/tag/v3.1.2
+        with:
+          terraform_version: "1.11.4"
+          terraform_wrapper: false
+      - name: Create backend.tf and env.auto.tfvars
+        run: |
+          printf '%s' '${{ secrets.BACKEND_TF }}' | base64 -d > backend.tf
+          printf '%s' '${{ secrets.ENV_AUTO_TFVARS }}' | base64 -d > env.auto.tfvars
+      - name: Terraform Init
+        run: terraform init -input=false
+      - name: Terraform + Custom Inputs
+        run: terraform ${{ inputs.arguments }} -input=false

.github/workflows/test-terraform.yml

@@ -0,0 +1,39 @@
+name: run-terraform
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches:
+      - main
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  terraform:
+    name: terraform
+    runs-on: ubuntu-latest
+    env:
+      CLOUDFLARE_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
+      CLOUDFLARE_API_KEY: ${{ secrets.CLOUDFLARE_API_KEY }}
+      CLOUDFLARE_EMAIL: ${{ secrets.CLOUDFLARE_EMAIL }}
+      CLOUDFLARE_ZONE_ID: ${{ vars.CLOUDFLARE_ZONE_ID }}
+      CLOUDFLARE_ZONE_NAME: ${{ vars.CLOUDFLARE_ZONE_NAME }}
+      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      TF_IN_AUTOMATION: true
+
+    steps:
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 https://github.com/actions/checkout/releases/tag/v5.0.0
+      - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2 https://github.com/hashicorp/setup-terraform/releases/tag/v3.1.2
+        with:
+          terraform_version: "1.11.4"
+          terraform_wrapper: false
+      - name: Create backend.tf and env.auto.tfvars
+        run: |
+          printf '%s' '${{ secrets.BACKEND_TF }}' | base64 -d > backend.tf
+      - name: Terraform Init
+        run: terraform init -input=false
+      - name: Terraform Plan
+        run: terraform plan -input=false