ci.yml

name: "🔧 Terraform CI"

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read
  pull-requests: write

jobs:
  terraform-fmt:
    name: "📐 Format Check"
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: ">=1.5.0"

      - name: Terraform Format Check
        run: terraform fmt -check -recursive -diff

  terraform-validate:
    name: "✅ Validate"
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: ">=1.5.0"

      - name: Terraform Init
        run: terraform init -backend=false

      - name: Terraform Validate
        run: terraform validate

  tflint:
    name: "🔍 TFLint"
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup TFLint
        uses: terraform-linters/setup-tflint@v4
        with:
          tflint_version: latest

      - name: Init TFLint
        run: tflint --init
        env:
          GITHUB_TOKEN: ${{ github.token }}

      - name: Run TFLint
        run: tflint --recursive --format compact --minimum-failure-severity=error

  terraform-plan:
    name: "📋 Plan (Validation)"
    runs-on: ubuntu-latest
    needs: [terraform-fmt, terraform-validate]
    if: success()
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: ">=1.5.0"

      - name: Find and Validate Examples
        run: |
          if [ -d "examples" ]; then
            for dir in examples/*/; do
              if [ -f "${dir}main.tf" ] || [ -f "${dir}versions.tf" ]; then
                echo "::group::Validating ${dir}"
                cd "${dir}"
                terraform init -backend=false
                terraform validate
                cd - > /dev/null
                echo "::endgroup::"
              fi
            done
          else
            echo "No examples directory found — validating root module"
            terraform init -backend=false
            terraform validate
          fi