Task 6: Application Deployment via Jenkins Pipeline #25

	name: Terraform Deployment

	on:
	pull_request:
	branches:
	- main
	push:
	branches:
	- main

	permissions:
	id-token: write
	contents: read

	jobs:
	terraform-check:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v3

	- name: Terraform Format Check
	run: terraform fmt -check

	terraform-plan:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v3

	- name: Configure AWS credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/GithubActionsRole
	aws-region: ${{ secrets.AWS_REGION }}
	audience: sts.amazonaws.com

	- name: Clear Terraform cache
	run: rm -rf .terraform

	- name: Terraform Init
	run: terraform init

	- name: Terraform Plan
	run: terraform plan -var="private_key=${{ secrets.AWS_EC2_PRIVATE_KEY }}"

	terraform-apply:
	runs-on: ubuntu-latest
	needs: terraform-plan
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Terraform
	uses: hashicorp/setup-terraform@v3

	- name: Configure AWS credentials
	uses: aws-actions/configure-aws-credentials@v4
	with:
	role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/GithubActionsRole
	aws-region: ${{ secrets.AWS_REGION }}
	audience: sts.amazonaws.com

	- name: Clear Terraform cache
	run: rm -rf .terraform

	- name: Terraform Init
	run: terraform init

	- name: Terraform Apply
	run: terraform apply -auto-approve -var="private_key=${{ secrets.AWS_EC2_PRIVATE_KEY }}"

Provide feedback