Skip to content

Bump hashicorp/google from 6.8.0 to 6.10.0 (#197) #165

Bump hashicorp/google from 6.8.0 to 6.10.0 (#197)

Bump hashicorp/google from 6.8.0 to 6.10.0 (#197) #165

name: Non-Production
on:
workflow_dispatch:
push:
branches:
- main
paths-ignore:
- "**.md"
# For reusable workflows, the permissions setting for id-token should be set to write at the
# caller workflow level or in the specific job that calls the reusable workflow.
permissions:
id-token: write
jobs:
main:
name: "Main"
uses: osinfra-io/github-terraform-gcp-called-workflows/.github/workflows/[email protected]
if: github.actor != 'osinfra-sa'
with:
checkout_ref: ${{ github.ref }}
environment: non-production
github_environment: "Non-Production: Main"
service_account: plt-lz-audit-github@ptl-lz-terraform-tf05-nonprod.iam.gserviceaccount.com
terraform_plan_args: -var-file=tfvars/non-production.tfvars
terraform_state_bucket: plt-lz-audit-3bfe-nonprod
terraform_version: ${{ vars.TERRAFORM_VERSION }}
terraform_workspace: main-non-production
workload_identity_provider: projects/992372365053/locations/global/workloadIdentityPools/github-actions/providers/github-actions-oidc
secrets:
gpg_passphrase: ${{ secrets.GPG_PASSPHRASE }}
infracost_api_key: ${{ secrets.INFRACOST_API_KEY }}
terraform_plan_secret_args: >-
-var=datadog_api_key=${{ secrets.DATADOG_API_KEY }}
-var=datadog_app_key=${{ secrets.DATADOG_APP_KEY }}