stackql.yml

name: Demo of stackql GitHub Actions

on:
  push:
    branches: 
    - main
  workflow_dispatch:

jobs:
  stackql-actions-demo:
    name: stackql actions demo
    runs-on: ubuntu-latest
    env:
      GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS }}
      GOOGLE_PROJECT: ${{ vars.GOOGLE_PROJECT }}
      GOOGLE_ZONE: ${{ vars.GOOGLE_ZONE }}

    steps:
      - uses: actions/checkout@v3
        name: checkout repo
        with:
          fetch-depth: 0

      - name: setup StackQL
        uses: stackql/setup-stackql@v2.2.3
        with:
          use_wrapper: true

      - name: pull Google docs
        shell: bash
        run: |
          stackql exec "REGISTRY PULL google"

      - name: dry run StackQL query
        shell: bash
        run: |
          stackql exec \
          -i ./stackql/scripts/deploy-instances/deploy-instances.iql \
          --iqldata ./stackql/data/vars.jsonnet \
          --var GOOGLE_PROJECT=${{ env.GOOGLE_PROJECT }},GOOGLE_ZONE=${{ env.GOOGLE_ZONE }} \
          --output text -H --dryrun

      - name: initial check for instances using stackql-assert
        id: check_instances_initial
        uses: stackql/stackql-assert@v2.2.3
        with:
          test_query_file_path: './stackql/scripts/check-instances/check-instances.iql'
          data_file_path: './stackql/data/vars.jsonnet'
          vars: GOOGLE_PROJECT=${{ env.GOOGLE_PROJECT }},GOOGLE_ZONE=${{ env.GOOGLE_ZONE }}
          expected_rows: 4
        continue-on-error: true

      - name: deploy instances using stackql-exec
        if: steps.check_instances_initial.outcome == 'failure'  # Run if the initial check failed
        id: deploy_instances
        uses: stackql/stackql-exec@v2.2.3
        with:
          query_file_path: './stackql/scripts/deploy-instances/deploy-instances.iql'
          data_file_path: './stackql/data/vars.jsonnet'
          is_command: 'true'
          vars: GOOGLE_PROJECT=${{ env.GOOGLE_PROJECT }},GOOGLE_ZONE=${{ env.GOOGLE_ZONE }}

      - name: check if we have 4 instances using stackql-assert
        if: steps.check_instances_initial.outcome == 'failure' && steps.deploy_instances.outcome == 'success'
        uses: stackql/stackql-assert@v2.2.3
        with:
          test_query_file_path: './stackql/scripts/check-instances/check-instances.iql'
          data_file_path: './stackql/data/vars.jsonnet'
          vars: GOOGLE_PROJECT=${{ env.GOOGLE_PROJECT }},GOOGLE_ZONE=${{ env.GOOGLE_ZONE }}
          expected_rows: 4
      
      - name: stop running instances using stackql-exec
        uses: stackql/stackql-exec@v2.2.3
        with:
          query_file_path: './stackql/scripts/stop-instances/stop-instances.iql'
          is_command: 'true'

      - name: "[CLEANUP] delete instances using stackql-exec"
        uses: stackql/stackql-exec@v2.2.3
        with:
          query_file_path: './stackql/scripts/delete-instances/delete-instances.iql'
          is_command: 'true'
          data_file_path: './stackql/data/vars.jsonnet'
          vars: GOOGLE_PROJECT=${{ env.GOOGLE_PROJECT }},GOOGLE_ZONE=${{ env.GOOGLE_ZONE }}          

  stackql-actions-with-terraform-demo:
    name: stackql actions with terraform demo
    runs-on: ubuntu-latest
    env:
      GOOGLE_CREDENTIALS: ${{ secrets.GOOGLE_CREDENTIALS }}
      GOOGLE_PROJECT: ${{ vars.GOOGLE_PROJECT }}
      GOOGLE_ZONE: ${{ vars.GOOGLE_ZONE }}

    steps:
      - uses: actions/checkout@v3
        name: checkout repo
        with:
          fetch-depth: 0

      - name: setup StackQL
        uses: stackql/setup-stackql@v2.2.3
        with:
          use_wrapper: true

      - name: pull Google docs
        shell: bash
        run: |
          stackql exec "REGISTRY PULL google"

      - uses: hashicorp/setup-terraform@v2

      - name: Terraform Init
        id: init
        run: cd terraform; terraform init

      - name: Terraform Validate
        env:
          TF_VAR_google_credentials: ${{ secrets.GOOGLE_CREDENTIALS }}      
        id: validate
        run: cd terraform; terraform validate -no-color

      - name: Terraform Plan
        env:
          TF_VAR_google_credentials: ${{ secrets.GOOGLE_CREDENTIALS }}      
        id: plan
        run: cd terraform; terraform plan -no-color -var-file=stackql-demo.tfvars

      - name: Terraform Apply
        env:
          TF_VAR_google_credentials: ${{ secrets.GOOGLE_CREDENTIALS }}      
        id: apply
        run: cd terraform; terraform apply -no-color -var-file=stackql-demo.tfvars -auto-approve

      - name: check terraform deployment using stackql-assert - should pass
        uses: stackql/stackql-assert@v2.2.3
        with:
          test_query_file_path: './stackql/scripts/check-terraform-instances/check-terraform-instances.iql'
          expected_rows: 3

      - name: run a compliance check using stackql-assert - should fail
        uses: stackql/stackql-assert@v2.2.3
        with:
          test_query_file_path: './stackql/scripts/run-compliance-checks/run-compliance-checks.iql'
          expected_rows: 0

      - name: "[CLEANUP] delete instances and bucket using stackql-exec"
        if: failure()
        uses: stackql/stackql-exec@v2.2.3
        with:
          query_file_path: './stackql/scripts/terraform-cleanup/terraform-cleanup.iql'