.gitlab-ci.yml

stages:
  - test build
  - validate
  - deploy

cache:
  paths:
    - .terraform

test:
  image: alpine:latest
  stage: test build
  script:
    - "apk update"
    - "apk add yarn zip"
    - "yarn"
    - "yarn test"

build:
  image: alpine:latest
  stage: test build
  script:
    - "apk update"
    - "apk add yarn zip"
    - "yarn --prod"
    - "zip -r key_rotator.zip ./*"
  artifacts:
    paths:
      - key_rotator.zip

validate:
  image:
    name: hashicorp/terraform:light
    entrypoint:
      - '/usr/bin/env'
      - 'PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
  stage: validate
  script:
    - "export AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID"
    - "export AWS_SECRET_ACCESS_KEY=$AWS_SECRET_KEY"
    - "export AWS_DEFAULT_REGION=us-east-1"
    - "terraform init -reconfigure -input=false"
    - "terraform workspace select dev || terraform workspace new dev"
    - "terraform validate -input=false -var gitlab_group_id=$GROUP_ID -var api_key=$API_KEY -var aws_user=$AWS_USER"


deploy:
  image:
    name: hashicorp/terraform:light
    entrypoint:
      - '/usr/bin/env'
      - 'PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
  stage: deploy
  only:
    - master
  script:
    - "export AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID"
    - "export AWS_SECRET_ACCESS_KEY=$AWS_SECRET_KEY"
    - "export AWS_DEFAULT_REGION=us-east-1"
    - "terraform init -reconfigure -input=false"
    - "terraform workspace select dev || terraform workspace new dev"
    - "terraform validate -input=false -var gitlab_group_id=$GROUP_ID -var api_key=$API_KEY -var aws_user=$AWS_USER"
    - "terraform apply -input=false -auto-approve -var gitlab_group_id=$GROUP_ID -var api_key=$API_KEY -var aws_user=$AWS_USER"