.gitlab-ci.yml

default:
  image: registry.gitlab.com/gitlab-org/terraform-images/stable:latest

variables:
  SCRIPTS_ROOT: ${CI_PROJECT_DIR}/scripts
  ANSIBLE_ROOT: ${CI_PROJECT_DIR}/ansible
  TF_ROOT: ${CI_PROJECT_DIR}/terraform
  TF_ADDRESS: ${CI_API_V4_URL}/projects/${CI_PROJECT_ID}/terraform/state/${TF_STATE_NAME}
  TF_STATE_NAME: ${ENVIRONMENT}-update
  TF_CACHE_KEY: default

before_script:
  - cd ${TF_ROOT}
  - export TF_VAR_SCW_ACCESS_KEY=${TF_VAR_SCW_ACCESS_KEY}
  - export TF_VAR_SCW_SECRET_KEY=${TF_VAR_SCW_SECRET_KEY}
  - export TF_VAR_SCW_PROJECT_ID=${TF_VAR_SCW_PROJECT_ID}
  - export TF_VAR_ENVIRONMENT=${ENVIRONMENT}

stages:
  - prepare
  - validate
  - build
  - deploy
  - destroy

ssh_key:
  stage: prepare
  script:
    - ssh-keygen -b 2048 -t rsa -f /tmp/sshkey -q -N ""
    - chmod +x ${SCRIPTS_ROOT}/ssh-key.sh
    - ${SCRIPTS_ROOT}/ssh-key.sh

init:
  stage: prepare
  script:
    - gitlab-terraform init

validate:
  stage: validate
  script:
    - gitlab-terraform validate

plan:
  stage: build
  script:
    - gitlab-terraform plan
    - gitlab-terraform plan-json
  artifacts:
    name: plan
    paths:
      - ${TF_ROOT}/plan.cache
    reports:
      terraform: ${TF_ROOT}/plan.json

apply:
  stage: deploy
  environment:
    name: ${ENVIRONMENT}
  script:
    - gitlab-terraform apply
  dependencies:
    - plan

ansible:
  stage: deploy
  script:
    - ansible-playbook -i ${ANSIBLE_ROOT}/tasks/update.yaml

destroy:
  stage: destroy
  environment:
    name: ${ENVIRONMENT}
  script:
    - gitlab-terraform destroy