Ways to trigger Terraform cloud runs from GitHub

https://brendanthompson.com/posts/2021/09/triggering-terraform-cloud-runs-from-github

by BrendanThompson • 5 years ago

5 6 5 years ago

brendanthompson.com

theteapot2• 5 years ago

You can, but do you really need to?

dom_hutton• 5 years ago

As opposed to just running it ad-hoc when a change is made?

People do all sorts of things with terraform, if you need to is down to what you're doing and the context of your problem.

I've even run terraform on a cron like schedule before to ensure configuration of a web service matched what we defined rather than the constant small edits people were making in the console. Eventually the behaviour stopped but no reason not to.

theteapot2• 5 years ago

As opposed to just running it ad-hoc when a change is made?

Yes. I worked at a shop that made a terrible mess (at least IMHO) of things by using Terraform from Jenkins for everything. So build and rollout new Docker image -> `terraform apply` entire infrastructure from Jenkins.

To me use Terraform for Day-0 to build your infrastructure and CI/CD pipeline then occasional updates. CI/CD for the day-to-day, if you can get away with it.

I have read lots of people are doing Terraform from Jenkins. I guess there is a use case, just saying, probably best to think first.

WFHRenaissance• 5 years ago

If everyone is just manually running `terraform init` and `terraform apply` post-PR or pre-PR you never really have a good idea of what the state of your current infra is. Tying it to the CI/CD platform seems logical IMO.

alblue• 5 years ago

Another approach, if you are using terraform directly and running in AWS, is to get GitHub Actions to log on to AWS.

While you can do this by embedding an AWS IAM secret as a GitHub secret, it may lead to the secret escaping. Instead, you can configure AWS to trust GitHub actions, And set up passwordless trust between the two.

I wrote up how to do it here at StackOverflow if you’re interested:

https://stackoverflow.com/a/69243572/130659

Ways to trigger Terraform cloud runs from GitHub

Related Stories