fgt-tf-activepassive-new-vcn.yml

name: '[FGT] TF - Active-Passive - New-VCN'

env:
  TFPath: FortiGate/Active-Passive/New-VCN/terraform/
  ZIPfile: tf-fgt-active-passive-newvcn.zip

on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths:
      - 'FortiGate/Active-Passive/New-VCN/terraform/*.tf'
      - 'FortiGate/Active-Passive/New-VCN/terraform/*.tpl'
      - 'FortiGate/Active-Passive/New-VCN/terraform/*.hcl'

jobs:
  OCI-FGT-TF-Active-Passive:
    name: 'Terraform FortiGate Active-Passive'
    runs-on: ubuntu-latest
    env:
      TF_VAR_tenancy_ocid: "${{ secrets.TENANCY_OCID }}"
      TF_VAR_compartment_ocid: "${{ secrets.COMPARTMENT_OCID }}"
      TF_VAR_user_ocid: "${{ secrets.USER_OCID }}"
      TF_VAR_region: "${{ secrets.REGION }}"
      TF_VAR_fingerprint: "${{ secrets.FINGERPRINT }}"
      TF_VAR_private_key_path: ~/.oci/oci_api_key.pem
      
    steps:
    - name: "Checkout"
      uses: actions/checkout@v4

    - name: "Setup Terraform"
      uses: hashicorp/setup-terraform@v3

    - name: Configure OCI credentials
      run: |
        mkdir -p ~/.oci
        echo "${{ secrets.OCI_PEM_KEY }}" > ~/.oci/oci_api_key.pem
        chmod 600 ~/.oci/oci_api_key.pem

    - name: "Terraform Init"
      id: init
      run: terraform init
      working-directory: ${{ env.TFPath }}

    - name: "Terraform Validation"
      id: validate
      run: terraform validate
      working-directory: ${{ env.TFPath }}

    - name: "Terraform Format"
      id: format
      run: terraform fmt -check -diff
      working-directory: ${{ env.TFPath }}

    - name: "Terraform Plan"
      id: plan
      run: terraform plan -out plan.tfplan
      working-directory: ${{ env.TFPath }}

    - name: "Terraform Show"
      id: show
      run: terraform show -json plan.tfplan
      working-directory: ${{ env.TFPath }}

    - name: "Save Plan JSON"
      run: echo '${{ steps.show.outputs.stdout }}' > plan.json # Do not change

    - name: Package and convert templates
      uses: azure/powershell@v1
      with:
        inlineScript: |
          Compress-Archive -Path "./FortiGate/Active-Passive/New-VCN/*" -DestinationPath "./${{ env.ZIPfile }}"
        azPSVersion: "latest"

    - name: upload-templates-zip
      uses: svenstaro/upload-release-action@v2
      with:
        repo_token: ${{secrets.GITHUB_TOKEN}}
        file: ./${{ env.ZIPfile }}
        asset_name: ${{ env.ZIPfile }}
        tag: fgtactivepassive
        overwrite: true
        body: "OCI FortiGate Active-Passive"