Set up secrets, integrate tailscale

ChicagoWorldcon · Dec 1, 2023 · 798abdb · 798abdb
1 parent 34a8ccd
commit 798abdb
Showing 1 changed file with 16 additions and 1 deletion.
diff --git a/.github/workflows/pr-plan.yml b/.github/workflows/pr-plan.yml
@@ -26,8 +26,17 @@ jobs:
         role-to-assume: "arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/${{ secrets.AWS_ROLE_NAME }}"
         aws-region: us-west-2
 
+
+    - name: Tailscale
+      uses: tailscale/github-action@v2
+      with:
+        oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
+        oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
+        args: --exit-node=${{ secrets.EXIT_NODE_IP }}
+        tags: tag:chicon,tags:ci
+
     - name: 'Setup Terraform'
-      uses: hashicorp/setup-terraform@v1
+      uses: hashicorp/setup-terraform@v3
       with:
         terraform_version: '1.4.6' # Replace with your desired version
 
@@ -38,4 +47,10 @@ jobs:
     - name: 'Terraform Plan'
       id: plan
       run: terraform plan
+      env:
+        TF_VAR_namecheaptoken: ${{ secrets.NAMECHEAP_TOKEN }}
+        TF_VAR_namecheapuser: ${{ secrets.NAMECHEAP_USER }}
+        TF_VAR_do_token: ${{ secrets.DIGITALOCEAN_TOKEN }}
+        TF_VAR_domain_name: ${{ env.DOMAIN_NAME }}
+        TF_VAR_namecheapip: ${{ env.EXIT_NODE_IP }}
       # If the Terraform plan fails, the workflow will fail and stop executing further steps.