update deployment workflow

FaithKovi · Jul 30, 2024 · b41ea5a · b41ea5a
1 parent 6bf199c
commit b41ea5a
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -33,16 +33,17 @@ jobs:
       - name: Set up Terraform
         uses: hashicorp/setup-terraform@v3
 
-      - name: Deploy infrastructure with Terraform 
+      - name: Decrypt tfvars file, Initialize and Deploy infrastructure with Terraform 
         run: |
           cd terraform
+          gpg --quiet --batch --yes --decrypt --passphrase="$SECRET_PASSPHRASE" --output variables.tfvars variables.tfvars.gpg
           terraform init
           terraform apply -auto-approve -var-file="terraform/variables.tfvars"
         env:
           AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
           AWS_REGION: ${{ secrets.AWS_REGION }}
-
+          SECRET_PASSPHRASE: ${{ secrets.SECRET_PASSPHRASE }}