refactor: reorganize repo into module-01 remote-state and module-02 ci-cd-oidc

Author: erndweinmanuel-cloud

.github/workflows/terraform.yml

@@ -2,30 +2,28 @@ name: terraform-oidc
 
 on:
   push:
-    branches: ["main"]
+    paths:
+      - "infra/workload/01-local-state/**"
+      - ".github/workflows/terraform.yml"
   workflow_dispatch:
 
 permissions:
   id-token: write
   contents: read
 
 env:
-  TF_IN_AUTOMATION: true
-  TF_INPUT: false
+  TF_WORKING_DIR: infra/workload/01-local-state
+  ARM_USE_OIDC: "true"
+  ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
+  ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
+  ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
 
 jobs:
   plan:
-    name: plan
     runs-on: ubuntu-latest
     defaults:
       run:
-        working-directory: infra/workload/01-local-state
-        shell: bash
-    env:
-      ARM_USE_OIDC: true
-      ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
-      ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
-      ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
+        working-directory: ${{ env.TF_WORKING_DIR }}
 
     steps:
       - name: Checkout
@@ -41,7 +39,7 @@ jobs:
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@v3
         with:
-          terraform_version: 1.14.2
+          terraform_version: 1.6.6
 
       - name: Terraform fmt (check)
         run: terraform fmt -check -recursive
@@ -53,28 +51,34 @@ jobs:
         run: terraform validate
 
       - name: Terraform plan
-        run: terraform plan -input=false -no-color
+        run: terraform plan -no-color -out=tfplan
+
+      - name: Upload plan artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: tfplan
+          path: ${{ env.TF_WORKING_DIR }}/tfplan
 
   apply:
-    name: apply
     runs-on: ubuntu-latest
     needs: plan
     if: github.event_name == 'workflow_dispatch'
     environment: apply
+
     defaults:
       run:
-        working-directory: infra/workload/01-local-state
-        shell: bash
-    env:
-      ARM_USE_OIDC: true
-      ARM_CLIENT_ID: ${{ vars.AZURE_CLIENT_ID }}
-      ARM_TENANT_ID: ${{ vars.AZURE_TENANT_ID }}
-      ARM_SUBSCRIPTION_ID: ${{ vars.AZURE_SUBSCRIPTION_ID }}
+        working-directory: ${{ env.TF_WORKING_DIR }}
 
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Download plan artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: tfplan
+          path: ${{ env.TF_WORKING_DIR }}
+
       - name: Azure Login (OIDC)
         uses: azure/login@v2
         with:
@@ -85,10 +89,10 @@ jobs:
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@v3
         with:
-          terraform_version: 1.14.2
+          terraform_version: 1.6.6
 
       - name: Terraform init
         run: terraform init -input=false
 
       - name: Terraform apply
-        run: terraform apply -auto-approve -input=false -no-color
+        run: terraform apply -auto-approve tfplan

.gitignore

@@ -5,4 +5,6 @@ crash.log
 crash.*.log
 
 terraform.tfvars
-*.auto.tfvars
+*.auto.tfvars
+
+federated-credential.json