test.yml

name: Test Called Workflow

on:
  workflow_call:
    inputs:
      service_account:
        required: true
        type: string
      terraform_test_args:
        required: false
        type: string
      terraform_test_verbose:
        required: false
        type: boolean
        default: false
      terraform_version:
        required: true
        type: string
      working_directory:
        required: false
        type: string
        default: .
      workload_identity_provider:
        required: true
        type: string

      # Uncomment if you have private modules

      # ssh_key:
      #   required: true

    secrets:
      terraform_test_secret_args:
        required: false

# If you use private modules, you'll need this env variable to use
# the same ssh-agent socket value across all jobs & steps.

# env:
#  SSH_AUTH_SOCK: /tmp/ssh_agent.sock

jobs:
  test:
    name: Terraform test
    runs-on: ubuntu-latest

    defaults:
      run:
        working-directory: ${{ inputs.working_directory }}

    steps:

      # Uncomment to enable GitHub Security Lab Action Permissions Monitor

      # - name: Actions permissions monitor
      #   uses: GitHubSecurityLab/actions-permissions/monitor@v1.0.0

      # GitHub - Checkout
      # https://github.com/marketplace/actions/checkout

      - name: Checkout
        uses: actions/checkout@v4.2.2

      # Google Cloud Platform - Authenticate to Google Cloud
      # https://github.com/marketplace/actions/authenticate-to-google-cloud

      - name: Authenticate
        uses: google-github-actions/auth@v2.1.7
        with:
          create_credentials_file: true
          service_account: ${{ inputs.service_account }}
          workload_identity_provider: ${{ inputs.workload_identity_provider }}

      # GitHub - Setup SSH for private module access
      # Uncomment if you have private modules

      # - name: Private module access
      #   run: |
      #     ssh-agent -a $SSH_AUTH_SOCK
      #     mkdir -p ~/.ssh
      #     echo "${{ secrets.ssh_key }}" | tr -d '\r' | ssh-add -
      #     ssh-keyscan github.com >> ~/.ssh/known_hosts

      # HashiCorp - Setup Terraform
      # https://github.com/marketplace/actions/hashicorp-setup-terraform

      - name: Terraform setup
        uses: hashicorp/setup-terraform@v3.1.2
        with:
          terraform_version: ${{ inputs.terraform_version }}

      - name: Terraform format
        run: terraform fmt -check -diff

      - name: Terraform initialize
        run: terraform init

      - name: Terraform validate
        run: terraform validate

      - name: Terraform test
        id: test
        run: |
          terraform test --verbose=${{ inputs.terraform_test_verbose }} -no-color ${{ inputs.terraform_test_args}} ${{ secrets.terraform_test_secret_args }}

      - name: Terraform summary
        run: |
          echo -e '🎯 Terraform test:' >> $GITHUB_STEP_SUMMARY
          echo -e '```hcl' >> $GITHUB_STEP_SUMMARY
          echo -e '${{ steps.test.outputs.stdout }}' >> $GITHUB_STEP_SUMMARY
          echo -e '```' >> $GITHUB_STEP_SUMMARY