Skip to content

chore: update EC2 runner release to 20260914.987 #174

chore: update EC2 runner release to 20260914.987

chore: update EC2 runner release to 20260914.987 #174

name: Terraform Validate
on:
pull_request:
branches: [main]
push:
branches: [main]
jobs:
terraform-validate:
name: Terraform Validate
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
with:
fetch-depth: 0
- name: Setup Terraform
uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
with:
terraform_version: "1.15.8"
# The uploader test passes an expression to terraform console via stdin.
terraform_wrapper: false
- name: Validate release tooling
run: |
release_tag="v$(tr -d '[:space:]' < VERSION)"
release_notes="$(mktemp)"
trap 'rm -f "$release_notes"' EXIT
shellcheck scripts/*.sh
bash scripts/test-release-tools.sh
bash scripts/validate-release.sh "$release_tag"
bash scripts/build-release-notes.sh "$release_tag" "$release_notes" HEAD
test -s "$release_notes"
- name: Terraform Format Check
run: terraform fmt -check -recursive
- name: Check Fargate parity contract
run: bash scripts/check-parity-contract.sh
- name: Terraform Init
run: terraform init -backend=false
- name: Terraform Validate
run: terraform validate
- name: Terraform Test
run: terraform test
- name: Test rendered metrics uploader
run: bash scripts/test-metrics-audit-sync.sh
- name: Validate submodules
run: |
for module_dir in modules/*/; do
if [ -f "${module_dir}/versions.tf" ]; then
terraform -chdir="$module_dir" init -backend=false
terraform -chdir="$module_dir" validate
terraform -chdir="$module_dir" test
fi
done
- name: Validate Examples
run: |
for example_dir in examples/*/; do
if [ -d "$example_dir" ] && [ -f "$example_dir/main.tf" ]; then
echo "Validating example: $example_dir"
cd "$example_dir"
terraform init -backend=false
terraform validate
cd - > /dev/null
fi
done
- name: Test restricted runner CA and proxy passthrough
run: bash scripts/test-restricted-runner-settings.sh
- name: Test firewall config errors
run: bash scripts/test-firewall-config-errors.sh