feat: add build job
Build / build (pull_request) Successful in 2m17s

- add build job that runs `make plan`
- enable provider caching
- enable creating client.crt/client.key
- trap EXIT to cleanup temp directory
This commit is contained in:
2025-10-17 10:29:55 +11:00
parent 3f386b4e21
commit bc048d05fc
128 changed files with 773 additions and 491 deletions
+9 -1
View File
@@ -11,7 +11,15 @@ define vault_env
export PUPPET_CERT_PUB=$$(vault kv get -field=public_key kv/service/puppet/certificates/terraform) && \
export PUPPET_CERT_PRIV=$$(vault kv get -field=private_key kv/service/puppet/certificates/terraform) && \
export TG_QUEUE_EXCLUDE_DIR="templates/base" && \
export $$(vault read -format=json kv/data/service/terraform/incus | jq -r '.data.data | to_entries[] | "\(.key)=\(.value)"')
export TG_PROVIDER_CACHE=1 && \
export TG_TF_PATH=terraform && \
eval "$$(vault read -format=json kv/data/service/terraform/incus \
| jq -r '.data.data | to_entries[] | "export \(.key)=\(.value|@sh)"')" && \
export INCUS_CONFIG_DIR=$$(mktemp -d) && \
trap "rm -rf $$INCUS_CONFIG_DIR" EXIT && \
mkdir -p $$INCUS_CONFIG_DIR && \
printf '%s\n' "$$INCUS_CLIENT_CRT" > $$INCUS_CONFIG_DIR/client.crt && \
printf '%s\n' "$$INCUS_CLIENT_KEY" > $$INCUS_CONFIG_DIR/client.key
endef
clean: