name: Deploy

on:
  push:
    branches:
      - master

jobs:
  deploy:
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    runs-on: almalinux-8
    container:
      image: git.query.consul/unkin/almalinux8-runnerdnd:latest
      options: --privileged

    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Download Build Artifacts
        uses: actions/download-artifact@v3
        with:
          name: plans
          path: /workspace/unkin/terraform-nomad/plans

      - name: Install Packages
        run: |
          dnf install terraform terragrunt vault jq -y

      - name: Run Terraform Apply
        env:
          VAULT_ROLEID: ${{ secrets.TERRAFORM_NOMAD_VAULT_ROLEID }}
        run: |
          make apply