unkin-agent
0105cd5573
Build / build (pull_request) Failing after 13m48s
dnf install reads metadata for every enabled repo and downloads the vendored terraform RPM on every pipeline run. Fetch the pinned upstream zip from the artifactapi hashicorp-releases remote instead, matching the vault pattern in terraform-vault and terraform-artifactapi. - Replace dnf install terraform with a pinned curl of the terraform 1.15.0 zip (same version as the vendored RPM) from the artifactapi hashicorp-releases remote, extracted to /usr/local/bin.
35 lines
1.1 KiB
YAML
35 lines
1.1 KiB
YAML
---
|
|
name: Build
|
|
|
|
on:
|
|
pull_request:
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: almalinux-8
|
|
container:
|
|
image: git.unkin.net/unkin/almalinux9-actionsdind:latest
|
|
options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Fetch master branch
|
|
run: |
|
|
git fetch origin master:master
|
|
|
|
- name: Show changed files
|
|
run: |
|
|
git diff --name-only master
|
|
|
|
- name: Run Terraform Plan
|
|
env:
|
|
VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
|
|
TERRAFORM_VERSION: "1.15.0"
|
|
run: |
|
|
curl -fsSL -o /tmp/terraform.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/terraform.zip /tmp/ && install -m0755 /tmp/terraform /usr/local/bin/terraform && rm -f /tmp/terraform.zip /tmp/terraform /tmp/LICENSE.txt
|
|
make plan
|