DAT-16244 DevOps :: Spacelift replacement of Terraform Cloud

.github/workflows/generate.yml

@@ -26,15 +26,19 @@ jobs:
           path: commands.json
 
   create-action-repo:
+    env:
+      TF_VAR_BOT_TOKEN: ${{ secrets.GHA_GENERATOR_ADMIN_TOKEN }}
+      TF_TOKEN_spacelift_io: ${{ secrets.SPACELIFT_API_KEY }}
+
     runs-on: ubuntu-latest
     needs: [ create-command-list ]
     steps:
       - uses: actions/checkout@v3
 
-      - name: Setup Terraform
-        uses: hashicorp/setup-terraform@v2
-        with:
-          cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}
+      - name: Install spacectl
+        uses: spacelift-io/setup-spacectl@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - uses: actions/download-artifact@v3
         with:
@@ -53,25 +57,36 @@ jobs:
         id: validate
         run: terraform validate -no-color
 
-      - name: Terraform Plan
-        id: plan
-        run: terraform plan -no-color
-        continue-on-error: true
+      - name: Preview infrastructure
         env:
-          TF_VAR_BOT_TOKEN: ${{ secrets.GHA_GENERATOR_ADMIN_TOKEN }}
+          SPACELIFT_API_KEY_ENDPOINT: ${{ secrets.SPACELIFT_API_KEY_ENDPOINT }}
+          SPACELIFT_API_KEY_ID: ${{ secrets.SPACELIFT_API_KEY_ID }}
+          SPACELIFT_API_KEY_SECRET: ${{ secrets.SPACELIFT_API_KEY_SECRET }}
+        run: spacectl stack local-preview --id liquibase-github-actions --disregard-gitignore=true
 
-      - name: Terraform Plan Status
-        if: steps.plan.outcome == 'failure'
-        run: exit 1
+      - name: Commit and push commands.json changes
+        continue-on-error: true
+        run: |
+          git config --global user.name "liquibot"
+          git config --global user.email "[email protected]"
+          git add --force commands.json
+          git commit -m "Update commands.json" -a
+          git push
 
-      - name: Terraform Apply
-        run: terraform apply -auto-approve
+      - name: Deploy infrastructure
+        if: github.ref == 'refs/heads/main'
         env:
-          TF_VAR_BOT_TOKEN: ${{ secrets.GHA_GENERATOR_ADMIN_TOKEN }}
+          SPACELIFT_API_KEY_ENDPOINT: ${{ secrets.SPACELIFT_API_KEY_ENDPOINT }}
+          SPACELIFT_API_KEY_ID: ${{ secrets.SPACELIFT_API_KEY_ID }}
+          SPACELIFT_API_KEY_SECRET: ${{ secrets.SPACELIFT_API_KEY_SECRET }}
+        run: |
+          spacectl stack set-current-commit --id liquibase-github-actions --sha ${{ github.sha }}
+          spacectl stack deploy --id liquibase-github-actions --auto-confirm 
 
   generate-action:
     runs-on: ubuntu-latest
     needs: [ create-command-list, create-action-repo ]
+    if: github.ref == 'refs/heads/main'
     strategy:
       matrix:
         commands: ${{ fromJSON(needs.create-command-list.outputs.matrix) }}
@@ -98,7 +113,7 @@ jobs:
         run: ./scripts/push-to-repository.sh "${{ matrix.commands }}" $LIQUIBASE_VERSION
         env:
           BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
-          
+
   output-action:
     runs-on: ubuntu-latest
     needs: [ generate-action ]

.gitignore

@@ -5,4 +5,5 @@ liquibase_libs
 .terraform
 commands.json
 action
-.fleet
+.fleet
+.terraform.lock.hcl

commands.json

@@ -0,0 +1 @@
+["calculate-checksum","changelog-sync","changelog-sync-sql","changelog-sync-to-tag","changelog-sync-to-tag-sql","checks bulk-set","checks copy","checks create","checks customize","checks delete","checks disable","checks enable","checks reset","checks run","checks show","clear-checksums","connect","db-doc","diff","diff-changelog","drop-all","execute-sql","flow","flow validate","future-rollback-count-sql","future-rollback-from-tag-sql","future-rollback-sql","generate-changelog","history","init copy","init project","init start-h2","list-locks","mark-next-changeset-ran","mark-next-changeset-ran-sql","release-locks","rollback","rollback-count","rollback-count-sql","rollback-one-changeset","rollback-one-changeset-sql","rollback-one-update","rollback-one-update-sql","rollback-sql","rollback-to-date","rollback-to-date-sql","set-contexts","set-labels","snapshot","snapshot-reference","status","tag","tag-exists","unexpected-changesets","update","update-count","update-count-sql","update-one-changeset","update-one-changeset-sql","update-sql","update-testing-rollback","update-to-tag","update-to-tag-sql","validate"]

main.tf

@@ -1,10 +1,4 @@
 terraform {
-  cloud {
-    organization = "liquibase"
-    workspaces {
-      name = "liquibase-github-actions"
-    }
-  }
   required_providers {
     github = {
       source  = "integrations/github"
@@ -23,12 +17,12 @@ locals {
 }
 
 resource "github_repository" "liquibase-github-actions" {
-  for_each = toset(local.commands)
-  name            = replace(each.key, " ", "-")
-  description     = "Official GitHub Action to run Liquibase ${title(replace(each.key, "-", " "))}"
-  visibility      = "public"
-  has_downloads   = false
-  has_issues      = false
-  has_projects    = false
-  has_wiki        = false
+  for_each      = toset(local.commands)
+  name          = replace(each.key, " ", "-")
+  description   = "Official GitHub Action to run Liquibase ${title(replace(each.key, "-", " "))}"
+  visibility    = "public"
+  has_downloads = false
+  has_issues    = false
+  has_projects  = false
+  has_wiki      = false
 }