CI/CD system for running Terraform and `kubectl`

[FooBarWidget]

We shouldn't run Terraform and kubectl apply by hand. We should have a CI/CD system that does that for us. The CI/CD system should perform a dry run when not run from main, and a real run when run from main.

[mijndert]

Here's a thing I built some time ago, might be helpful in moving this issue along https://github.com/mijndert/terraform/blob/master/.github/workflows/terraform.yml