non-production.yml

name: Non-Production

on:
  workflow_dispatch:
  push:
    branches:
      - main

# For reusable workflows, the permissions setting for id-token should be set to write at the
# caller workflow level or in the specific job that calls the reusable workflow.

permissions:
  id-token: write
  contents: read

jobs:
  global:
    name: Global
    uses: ./.github/workflows/plan-and-apply.yml
    if: github.actor != 'osinfra-sa'
    with:
      checkout_ref: ${{ github.ref }}
      environment: non-production
      github_environment: "Non-Production: Global"
      service_account: plt-lz-testing-github@ptl-lz-terraform-tf05-nonprod.iam.gserviceaccount.com
      terraform_plan_args: -var-file=tfvars/non-production.tfvars
      terraform_state_bucket: plt-lz-testing-3bfe-nonprod
      terraform_version: ${{ vars.TERRAFORM_VERSION }}
      terraform_workspace: global-non-production
      working_directory: tests/plan-and-apply
      workload_identity_provider: projects/992372365053/locations/global/workloadIdentityPools/github-actions/providers/github-actions-oidc
    secrets:
      gpg_passphrase: ${{ secrets.GPG_PASSPHRASE }}
      infracost_api_key: ${{ secrets.INFRACOST_API_KEY }}