{"id":48548,"date":"2022-12-18T13:54:24","date_gmt":"2022-12-03T06:11:39","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/"},"modified":"2024-04-29T05:50:23","modified_gmt":"2024-04-28T21:50:23","slug":"%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/","title":{"rendered":"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011"},"content":{"rendered":"

\u7b80\u8981\u6982\u8ff0<\/h1>\n

\u5728GitHub Actions\u4e2d\u8fd0\u884cterraform\uff0c\u80fd\u81ea\u52a8\u5316\u5730\u505a\u5f97\u5f88\u597d\u3002
\n“\u505a\u5f97\u597d”\u7684\u5b9a\u4e49\u662f\u5728\u5c3d\u91cf\u4e0d\u70e6\u6270\u5de5\u7a0b\u5e08\u7684\u60c5\u51b5\u4e0b\uff0c\u5b9e\u73b0\u5404\u79cd\u81ea\u52a8\u5316\u3002<\/p>\n

\u76ee\u6807<\/h1>\n

\u81ea\u52d5\u5316\u842c\u6b72\u3002<\/p>\n

\u6b64\u5916\uff0c\u8fd9\u6b21\u7684\u76ee\u7684\u662f\u5c06\u4ece\u5b9e\u9645\u4e1a\u52a1\u4e2d\u83b7\u5f97\u7684\u4e13\u4e1a\u77e5\u8bc6\u8fdb\u884c\u8f93\u51fa\uff0c\u56e0\u6b64\u5185\u5bb9\u5e76\u975e\u4e2a\u4eba\u76f8\u5173\uff0c\u5e0c\u671b\u56e2\u961f\u53ef\u4ee5\u5171\u540c\u5229\u7528\u3002<\/p>\n

\u9884\u5148\u8c03\u67e5<\/h1>\n

GitHub Actions
\nGitHub Actions\u3068\u3044\u3046\u3082\u306e\u3092\u5229\u7528\u3059\u308b\u3068\u3001Git\u4e0a\u3067\u8272\u3005\u306a\u3053\u3068\u304c\u51fa\u6765\u308b\u3089\u3057\u3044\u3002
\nterraform\u3092\u5b9f\u884c\uff08plan\u3084apply\uff09\u3092\u3059\u308b\u3053\u3068\u3082\u51fa\u6765\u308b\u306e\u3067\u3001\u30ed\u30fc\u30ab\u30eb\u306b\u5b9f\u884c\u74b0\u5883\u3092\u6301\u305f\u306a\u304f\u3066\u826f\u304f\u306a\u308b\u3001\u7d20\u6674\u3089\u3057\u3044\u3002<\/p>\n

\u516c\u5f0f\u306eGitHub\u30db\u30b9\u30c8\u30e9\u30f3\u30ca\u30fc\u3068\u3057\u3066\u4e0b\u8a18\u304c\u63d0\u4f9b\u3055\u308c\u3066\u304a\u308a\uff08\u5b9f\u969b\u306b\u306fAzure\u5185\u3067\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u8d77\u52d5\u3059\u308b\uff09\u3001terraform\u6700\u65b0\u7248\uff08\u591a\u5206\uff09\u4ed6\u69d8\u3005\u306a\u30c4\u30fc\u30eb\u304c\u30d7\u30ec\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f\u3060\u304c\u3001\u305d\u308c\u4ee5\u5916\u306e\u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3057\u305f\u3044\u5834\u5408\u3001\u8ffd\u52a0\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u308b\u3002<\/p>\n

About GitHub-hosted runners<\/p>\n

Terraform\u7528\u30ef\u30fc\u30af\u30d5\u30ed\u30fc
\n\u4e0a\u8a18\u306e\u30e9\u30f3\u30ca\u30fc\u306b\u5bfe\u3057\u3066\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\uff08\u30b8\u30e7\u30d6\u3084\u30b9\u30af\u30ea\u30d7\u30c8\u307f\u305f\u3044\u306a\u3082\u306e\uff09\u3092\u5b9a\u7fa9\u3057\u3001\u5b9f\u969b\u306b\u5b9f\u884c\u3055\u308c\u308b\u5185\u5bb9\u3092\u8a2d\u5b9a\u3059\u308b\u3002
\n\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u306b\u3064\u3044\u3066<\/p>\n

Terraform\u7528Action
\nhashicorp\u304b\u3089\u300csetup-terraform\u300d\u3068\u3044\u3046Action\u304c\u63d0\u4f9b\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u308c\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3067\u7279\u5b9a\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306eterraform\u3092\u4f7f\u3063\u305f\u308a\u3001terraform\u30b3\u30de\u30f3\u30c9\u3092\u7c21\u5358\u306b\u5b9f\u884c\u3057\u305f\u308a\u51fa\u6765\u308b\u3088\u3046\u306b\u306a\u308b\u3002<\/p>\n

setup-terraform<\/p>\n

\u3053\u306eAction\u3067\u300cterraform\u3092\u3069\u3053\u3067\u5b9f\u884c\u3059\u308b\u304b\uff1f\u300d\u306e\u6307\u5b9a\u304c\u53ef\u80fd\u306b\u306a\u3063\u3066\u304a\u308a\u3001\u300cTerraform Cloud\u300d\u304b\u300cGitHub\u30db\u30b9\u30c8\u30e9\u30f3\u30ca\u30fc\u300d\u304b\u3092\u9078\u629e\u51fa\u6765\u308b\u3002
\n\u305f\u3060\u3001\u3069\u3061\u3089\u306e\u5834\u5408\u306b\u305b\u3088\u300c\u5b9f\u884c\u74b0\u5883\u306e\u8d77\u52d5\u300d\u304c\u3042\u308b\u306e\u3067\u3001\u5b9f\u884c\u6642\u9593\u306f\u9577\u304f\u306a\u308b\u3068\u601d\u308f\u308c\u308b\uff08\u3068\u306f\u3044\u3048\u3001\u4ee5\u524dTerraform Cloud\u3092\u8a66\u7528\u3057\u305f\u5834\u5408\u3082\u305d\u3053\u307e\u3067\u6975\u7aef\u306b\u9045\u304f\u306f\u306a\u304b\u3063\u305f\u5370\u8c61\uff09
\n\u3053\u306e\u5b9f\u884c\u6642\u9593\u3084\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u30b9\u30da\u30c3\u30af\u304c\u8a31\u5bb9\u51fa\u6765\u306a\u3044\u5834\u5408\u306f\u3001\u81ea\u524d\u3067\u7528\u610f\u3057\u305f\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306b\u300c\u30e9\u30f3\u30ca\u30fc\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u300d\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f\u300c\u30bb\u30eb\u30d5\u30db\u30b9\u30c8\u30e9\u30f3\u30ca\u30fc\u300d\u3092\u9078\u629e\u3059\u308b\u3053\u3068\u306b\u306a\u308b\u3002<\/p>\n

About self-hosted runners<\/p>\n

\u5b9f\u969b\u306e GitHub Actions \u306e\u52d5\u304d\uff08\u30c7\u30e2\uff09\u306f\u4e0b\u8a18\u3092\u53c2\u7167\uff08\u97f3\u58f0\u51fa\u308b\u305f\u3081\u6ce8\u610f\uff09
\nGitHub & HashiStack\u3067\u59cb\u3081\u308b\u30af\u30e9\u30a6\u30c9\u30a4\u30f3\u30d5\u30e9\u81ea\u52d5\u5316\u5165\u9580\uff0838:01 – GitHub Actions \u306e\u7d39\u4ecb, GitHub \u3067 Terraform \u904b\u7528\u3059\u308b\u30e1\u30ea\u30c3\u30c8\uff09<\/p>\n

\u4eca\u56de\u306f\u3001\u5c0e\u5165\u306e\u624b\u8efd\u3055\u30fb\u904b\u7528\u7ba1\u7406\u30b3\u30b9\u30c8\u306a\u3069\u306e\u9762\u304b\u3089\u3001GitHub\u30db\u30b9\u30c8\u30e9\u30f3\u30ca\u30fc\u3092\u63a1\u7528\u3059\u308b\u3002<\/p>\n

\u30af\u30e9\u30a6\u30c9\u30b5\u30fc\u30d3\u30b9\u306e\u8a8d\u8a3c\u306b\u3064\u3044\u3066
\n\u30af\u30e9\u30a6\u30c9\u30b5\u30fc\u30d3\u30b9\u5074\u306b\u30ea\u30bd\u30fc\u30b9\u3092\u4f5c\u6210\u3059\u308b\u306b\u3042\u305f\u3063\u3066\u306e\u8a8d\u8a3c\u65b9\u5f0f\u3068\u3057\u3066\u8003\u3048\u3089\u308c\u308b\u306e\u304c\u4e3b\u306b\u4e0b\u8a18\uff12\u3064\u3002
\n\u2460\u30b5\u30fc\u30d3\u30b9\u30a2\u30ab\u30a6\u30f3\u30c8\u30ad\u30fc\u8a8d\u8a3c
\n\u2461OIDC\u8a8d\u8a3c
\n\u304a\u624b\u8efd\u306a\u306e\u306f\u2460\u3060\u304c\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u9762\u3092\u8003\u616e\u3059\u308b\u3068\u2461\u304c\u63a8\u5968\u3002<\/p>\n

1. \u521b\u5efa\u5de5\u4f5c\u6d41\u7a0b<\/h1>\n

\u5728\u4f7f\u7528GitHub Actions\u5c06Terraform\u5e94\u7528\u4e8e\u5404\u4e91\u670d\u52a1\u65f6\uff0c\u9700\u8981\u8fdb\u884c\u4ee5\u4e0b\u4e09\u9879\u6784\u5efa\u548c\u8bbe\u7f6e\u3002<\/p>\n

1. GitHub\uff1a\u521b\u5efa\u4ed3\u5e93\u3002
\n2. \u4e91\u670d\u52a1\uff1a\u5728\u901a\u8fc7\u6b65\u9aa41\u521b\u5efa\u7684\u4ed3\u5e93\u4e2d\u8fdb\u884cOIDC\u8eab\u4efd\u9a8c\u8bc1\u7684\u8bbe\u7f6e\u3002
\n3. GitHub\uff1a\u5728GitHub Actions\u4e2d\u8fdb\u884c\u5305\u542bOIDC\u8eab\u4efd\u9a8c\u8bc1\u7684\u5de5\u4f5c\u6d41\u7a0b\u8bbe\u7f6e\u3002<\/p>\n

\u672c\u6b21\uff0c\u5047\u8bbe\u2460\u2461\u5df2\u7ecf\u5b8c\u6210\uff0c\u5c06\u91cd\u70b9\u653e\u5728\u5de5\u4f5c\u6d41\u7a0b\u4e0a\u3002<\/p>\n

1.1. \u5de5\u4f5c\u6d41\u5168\u6587<\/h2>\n

\u5728GitHub\u5b58\u50a8\u5e93\u7684\u6839\u76ee\u5f55\u4e0b\u521b\u5efa\u4ee5\u4e0b\u5185\u5bb9\u3002<\/p>\n

.github\\workflows\\terraform.yml
\nname: ‘Terraform’on:
\npush:
\nbranches:
\n– master
\n– ‘feature\/**’
\npull_request:
\nbranches:
\n– master<\/p>\n

permissions: write-all<\/p>\n

env:
\nterraform_version: ‘1.x.y’ # \u4f7f\u7528\u7684 Terraform \u7248\u672c
\nproject_number: ‘hoge’ # \u7528\u65bc OIDC \u8a8d\u8b49\u7684 workload_identity_pool \u6240\u5728\u7684\u9805\u76ee
\nworkload_identity_pool: ‘hoge’ # \u7528\u65bc OIDC \u8a8d\u8b49\u7684 workload_identity_pool
\nworkload_identity_provider: ‘hoge’ # \u7528\u65bc OIDC \u8a8d\u8b49\u7684 workload_identity_provider
\nservice_account: ‘hoge’ # \u7528\u65bc OIDC \u8a8d\u8b49\u7684 SA
\nreviewer: ‘hoge’ # \u8a2d\u7f6e\u70ba Pull Request \u7684\u5be9\u67e5\u8005
\nGITHUB_TOKEN: ${{ secrets.FOR_RUNNER_NPRD }} # GitHub \u500b\u4eba\u8a2a\u554f\u6b0a\u6756
\njira_org: ‘hoge’<\/p>\n

jobs:
\n# \u7372\u53d6 Terraform \u57f7\u884c\u76ee\u9304
\nset-matrix:
\nname: ‘Set Matrix’<\/p>\n

runs-on: ubuntu-latest<\/p>\n

env:
\nTF_ROOT_DIR: .<\/p>\n

steps:
\n# \u5c07\u5b58\u5132\u5eab\u6aa2\u67e5\u5230 GitHub Actions\u904b\u884c\u5668
\n– name: ‘Checkout’
\nid: ‘checkout’
\nuses: actions\/checkout@v3
\n#with:
\n# fetch-depth: 0<\/p>\n

– name: Find tfstate directories
\nid: find-tfstate-dirs
\nrun: |
\ndirs=$(find ${TF_ROOT_DIR} -type f -name ‘*.tf’ -exec dirname {} \\; | grep -v ‘modules\\|\\.terraform’ | uniq | jq -R -s -c ‘split(“\\n”)[:-1]’)
\ndirs=`echo ${dirs\/\/\\.\\\/\/}` # \u522a\u9664\u76ee\u9304\u8def\u5f91\u4e2d\u7684\u300c.\/\u300d
\necho $dirs # \u7528\u65bc\u9a57\u8b49
\necho “::set-output name=dirs::${dirs}”<\/p>\n

outputs:
\ndirs: ${{ steps.find-tfstate-dirs.outputs.dirs }}<\/p>\n

# \u57f7\u884c Terraform
\nterraform:
\nneeds: set-matrix<\/p>\n

name: ‘Terraform’<\/p>\n

permissions: write-all
\n# permissions:
\n# id-token: write # OIDC \u8a8d\u8b49\u6240\u9700
\n# contents: read # actions\/checkout \u6240\u9700<\/p>\n

runs-on: ubuntu-latest<\/p>\n

# \u5c07 Terraform \u57f7\u884c\u76ee\u9304\u5b58\u5132\u65bc matrix \u8b8a\u91cf\u4e2d
\nstrategy:
\nfail-fast: false
\nmax-parallel: 5
\nmatrix:
\nTF_DIR: ${{ fromJson(needs.set-matrix.outputs.dirs) }}<\/p>\n

env:
\nTF_DIR: ${{ matrix.TF_DIR }}<\/p>\n

defaults:
\nrun:
\nshell: bash
\nworking-directory: ${{ env.TF_DIR }}<\/p>\n

steps:
\n# \u5c07\u5b58\u5132\u5eab\u6aa2\u67e5\u5230 GitHub Actions\u904b\u884c\u5668
\n– name: ‘Checkout’
\nid: ‘checkout’
\nuses: actions\/checkout@v3
\nwith:
\nfetch-depth: 2<\/p>\n

# \u6aa2\u67e5\u66f4\u65b0\u8a18\u9304\u4e26\u9032\u884c\u5dee\u7570\u6aa2\u67e5
\n– name: Get changed files
\nid: changed-files
\nuses: tj-actions\/changed-files@v29.0.0
\nwith:
\nfiles: |
\n${{ env.TF_DIR }}\/*.tf<\/p>\n

# OIDC \u8a8d\u8b49
\n– name: ‘Authenticate to Google Cloud’
\nid: ‘auth’
\nif: steps.changed-files.outputs.any_modified == ‘true’
\nuses: ‘google-github-actions\/auth@v0’
\nwith:
\ntoken_format: ‘access_token’
\nworkload_identity_provider: ‘projects\/${{ env.project_number }}\/locations\/global\/workloadIdentityPools\/${{ env.workload_identity_pool }}\/providers\/${{ env.workload_identity_provider }}’
\nservice_account: ${{ env.service_account }}<\/p>\n

# \u5b89\u88dd\u6700\u65b0\u7248\u7684 Terraform CLI\uff0c\u4e26\u4f7f\u7528 Terraform Cloud \u7528\u6236 API \u4ee4\u724c\u914d\u7f6e Terraform CLI \u914d\u7f6e\u6587\u4ef6
\n– name: Setup Terraform
\nid: setup
\nif: steps.changed-files.outputs.any_modified == ‘true’
\nuses: hashicorp\/setup-terraform@v2
\nwith:
\nterraform_version: ${{ env.terraform_version }}
\nterraform_wrapper: true<\/p>\n

# \u6aa2\u67e5\u6240\u6709\u7684 Terraform \u914d\u7f6e\u6587\u4ef6\u662f\u5426\u7b26\u5408\u898f\u7bc4\u683c\u5f0f
\n– name: Terraform Format (${{ env.TF_DIR }})
\nid: fmt
\nif: steps.changed-files.outputs.any_modified == ‘true’
\nrun: terraform fmt
\ncontinue-on-error: true<\/p>\n

# \u901a\u904e\u5275\u5efa\u521d\u59cb\u6587\u4ef6\u3001\u52a0\u8f09\u4efb\u4f55\u9060\u7a0b\u72c0\u614b\u3001\u4e0b\u8f09\u6a21\u584a\u7b49\u64cd\u4f5c\uff0c\u521d\u59cb\u5316\u65b0\u7684\u6216\u73fe\u6709\u7684 Terraform \u5de5\u4f5c\u76ee\u9304
\n– name: Terraform Init (${{ env.TF_DIR }})
\nid: init
\nif: steps.changed-files.outputs.any_modified == ‘true’
\nrun: terraform init<\/p>\n

# \u6aa2\u67e5\u6240\u6709\u7684 Terraform \u914d\u7f6e\u6587\u4ef6\u662f\u5426\u7b26\u5408\u898f\u7bc4\u8a9e\u6cd5
\n– name: Terraform Validate (${{ env.TF_DIR }})
\nid: validate
\nif: steps.changed-files.outputs.any_modified == ‘true’
\nrun: terraform validate -no-color<\/p>\n

# \u6aa2\u67e5\u767c\u5e03\u7528\u7684 PR \u662f\u5426\u5df2\u5b58\u5728\uff0c\u4e26\u8a2d\u7f6e PR \u5167\u5bb9
\n– name: Check if pr exists
\nid: check_pr
\nif: ( github.ref != ‘refs\/heads\/master’ && github.event_name == ‘push’ && steps.changed-files.outputs.any_modified == ‘true’ )
\nenv:
\nGH_TOKEN: ${{ env.GITHUB_TOKEN }}
\nrun: |
\nbase_branch=master
\npr_title=${{ github.ref }}
\npr_title=`echo ${pr_title\/\/refs\\\/heads\\\/\/}`
\npr_ticket=`echo ${pr_title\/\/feature\\\/\/}`
\npr_body=`echo “\u3010Ticket\u3011
\nhttps:\/\/docomo-common.atlassian.net\/browse\/${pr_ticket}<\/p>\n

\u3010Changes\u3011
\n${{ github.event.head_commit.message }}”`<\/p>\n

# \u5c0d\u63db\u884c\u7b26\u9032\u884c\u8f49\u7fa9\u8655\u7406
\npr_body=”${pr_body\/\/’%’\/’%25′}”
\npr_body=”${pr_body\/\/$’\\n’\/’%0A’}”
\npr_body=”${pr_body\/\/$’\\r’\/’%0D’}”<\/p>\n

# \u7528\u65bc\u5f8c\u7e8c\u8655\u7406\u7684\u8f38\u51fa
\necho “::set-output name=count::$(gh pr list -S ${pr_title}’ in:title’ -B $base_branch | wc -l)”
\necho “::set-output name=base_branch::$base_branch”
\necho “::set-output name=pr_title::$pr_title”
\necho “::set-output name=pr_body::$pr_body”<\/p>\n

# \u5275\u5efa\u767c\u5e03\u7528\u7684 PR
\n– name: Create release pr
\nif: ( github.ref != ‘refs\/heads\/master’ && github.event_name == ‘push’ && steps.changed-files.outputs.any_modified == ‘true’ && steps.check_pr.outputs.count == 0 )<\/p>\n<\/details>\n

\u4e0b\u9762\u662f\u5173\u4e8e\u8981\u70b9\u7684\u89e3\u91ca\u3002<\/p>\n

1.2. \u8bbe\u7f6e\u53d8\u91cf<\/h2>\n
env<\/span>:<\/span>\r\n  terraform_version<\/span>:<\/span> '<\/span>1.x.y'<\/span> # \u4f7f\u7528\u3059\u308b terraform \u306e\u30d0\u30fc\u30b8\u30e7\u30f3<\/span>\r\n  project_number<\/span>:<\/span> '<\/span>hoge'<\/span> # OIDC\u8a8d\u8a3c\u306b\u4f7f\u7528\u3059\u308b workload_identity_pool \u304c\u5b58\u5728\u3059\u308b Project<\/span>\r\n  workload_identity_pool<\/span>:<\/span> '<\/span>hoge'<\/span>  # OIDC\u8a8d\u8a3c\u306b\u4f7f\u7528\u3059\u308b workload_identity_pool<\/span>\r\n  workload_identity_provider<\/span>:<\/span> '<\/span>hoge'<\/span> # OIDC\u8a8d\u8a3c\u306b\u4f7f\u7528\u3059\u308b workload_identity_provider<\/span>\r\n  service_account<\/span>:<\/span> '<\/span>hoge'<\/span> # OIDC\u8a8d\u8a3c\u306b\u4f7f\u7528\u3059\u308bSA<\/span>\r\n  reviewer<\/span>:<\/span> '<\/span>hoge'<\/span> # Pull Request \u306b\u8a2d\u5b9a\u3059\u308b\u30ec\u30d3\u30e5\u30ef\u30fc<\/span>\r\n  GITHUB_TOKEN<\/span>:<\/span> ${{ secrets.FOR_RUNNER_NPRD }}<\/span> # GitHub Personal Access Token<\/span>\r\n<\/code><\/pre>\n
\u5173\u4e8e\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u8003\u8bc4\u8bba\u3002
\n\u201cGITHUB_TOKEN\u201d\u662f\u6307\u5b9a\u4e3aGitHub\u7684Secret\u6240\u6ce8\u518c\u7684\u5185\u5bb9\u3002
\n\u8fd9\u662f\u7528\u4e8e\u521b\u5efa\u62c9\u53d6\u8bf7\u6c42\u548c\u5728\u62c9\u53d6\u8bf7\u6c42\u4e2d\u6dfb\u52a0\u8bc4\u8bba\u6240\u5fc5\u9700\u7684\u3002<\/p>\n
1.3. \u83b7\u53d6 Terraform \u6267\u884c\u76ee\u5f55<\/h2>\n
  set-matrix<\/span>:<\/span>\r\n    name<\/span>:<\/span> '<\/span>Set<\/span> Matrix'<\/span>\r\n\r\n    runs-on<\/span>:<\/span> ubuntu-latest<\/span>\r\n\r\n    env<\/span>:<\/span>\r\n      TF_ROOT_DIR<\/span>:<\/span> .<\/span>\r\n\r\n    steps<\/span>:<\/span>\r\n      # Checkout the repository to the GitHub Actions runner<\/span>\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Checkout'<\/span>\r\n        id<\/span>:<\/span> '<\/span>checkout'<\/span>\r\n        uses<\/span>:<\/span> actions\/checkout@v3<\/span>\r\n        #with:<\/span>\r\n        #  fetch-depth: 0<\/span>\r\n\r\n      -<\/span> name<\/span>:<\/span> Find tfstate dirs<\/span>\r\n        id<\/span>:<\/span> find-tfstate-dirs<\/span>\r\n        run<\/span>:<\/span> |<\/span>\r\n          dirs=$(find ${TF_ROOT_DIR} -type f -name '*.tf' -exec dirname {} \\; | grep -v 'modules\\|\\.terraform' | uniq | jq -R -s -c 'split(\"\\n\")[:-1]')<\/span>\r\n          dirs=`echo ${dirs\/\/\\.\\\/\/}` # \u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30d1\u30b9\u306e\u300c.\/\u300d\u3092\u524a\u9664<\/span>\r\n          echo $dirs # \u78ba\u8a8d\u7528<\/span>\r\n          echo \"::set-output name=dirs::${dirs}\"<\/span>\r\n\r\n    outputs<\/span>:<\/span>\r\n      dirs<\/span>:<\/span> ${{ steps.find-tfstate-dirs.outputs.dirs }}<\/span>\r\n<\/code><\/pre>\n
\u5728\u521b\u5efa Terraform \u4ee3\u7801\u65f6\uff0c\u5173\u4e8e\u5982\u4f55\u8fdb\u884c\u76ee\u5f55\u7ed3\u6784\u7684\u95ee\u9898\u4f3c\u4e4e\u603b\u662f\u4f1a\u56f0\u6270\u7740\u4eba\u4eec\u3002
\n\u5b98\u65b9\u7684\u6700\u4f73\u5b9e\u8df5\u5e76\u4e0d\u4e00\u5b9a\u9002\u7528\u4e8e\u5b9e\u9645\u60c5\u51b5\uff0c\u800c\u516c\u53f8\u6587\u5316\u548c\u4e2a\u4eba\u559c\u597d\u4e5f\u53ef\u80fd\u8d77\u5230\u5f88\u5927\u7684\u4f5c\u7528\u3002
\n\u56e0\u6b64\uff0c\u53ef\u4ee5\u83b7\u53d6\u5b58\u5728 tf \u6587\u4ef6\u7684\u76ee\u5f55\u5217\u8868\uff0c\u5e76\u5c06\u5b83\u4eec\u5168\u90e8\u89c6\u4e3a\u201cTerraform \u6267\u884c\u76ee\u5f55\u201d\u3002
\n\u901a\u8fc7\u8f93\u51fa\u83b7\u53d6\u7684\u76ee\u5f55\u5217\u8868\uff0c\u53ef\u5728\u540e\u7eed\u7684\u4efb\u52a1\u4e2d\u4f7f\u7528\u3002
\n\uff08\u5173\u4e8e\u4e3a\u4ec0\u4e48\u8981\u5206\u5f00\u4efb\u52a1\u4f1a\u5728\u4e0b\u6587\u4e2d\u89e3\u91ca\uff09<\/p>\n
1.4. \u4f7f\u7528 Terraform \u7684\u6267\u884c\u76ee\u5f55\u6765\u5b9a\u4e49\u77e9\u9635\u3002<\/h2>\n
    strategy<\/span>:<\/span>\r\n      fail-fast<\/span>:<\/span> false<\/span>\r\n      max-parallel<\/span>:<\/span> 5<\/span>\r\n      matrix<\/span>:<\/span>\r\n        TF_DIR<\/span>:<\/span> ${{ fromJson(needs.set-matrix.outputs.dirs) }}<\/span>\r\n\r\n    env<\/span>:<\/span>\r\n      TF_DIR<\/span>:<\/span> ${{ matrix.TF_DIR }}<\/span>\r\n<\/code><\/pre>\n
\u5982\u679c\u5c06\u524d\u4e00\u4e2aJob\u4e2d\u6307\u5b9a\u7684Terraform\u6267\u884c\u76ee\u5f55\u5b9a\u4e49\u4e3a\u4e0a\u8ff0\u7684\u77e9\u9635\u53d8\u91cf\uff0c\u90a3\u4e48\u53ef\u4ee5\u5e76\u884c\u6267\u884cJob\u7684\u4e2a\u6570\u4e0e\u77e9\u9635\u7684\u5143\u7d20\u6570\u91cf\u76f8\u7b49\u3002
\n\u7531\u4e8e\u8fd9\u4e2a\u77e9\u9635\u662f\u5728Job\u7ea7\u522b\u4e0a\u5b9a\u4e49\u7684\u53d8\u91cf\uff0c\u56e0\u6b64\u5982\u679c\u60f3\u8981\u52a8\u6001\u6307\u5b9a\uff0c\u5c31\u9700\u8981\u901a\u8fc7\u524d\u4e00\u4e2aJob\u4e2d\u52a8\u6001\u5b9a\u4e49\u7684\u53d8\u91cf\u901a\u8fc7\u8f93\u51fa\u6765\u4f20\u9012\u3002
\n\uff08\u5982\u679c\u53ea\u9700\u8981\u9759\u6001\u5730\u6307\u5b9a\u591a\u4e2a\u76ee\u5f55\uff0c\u5219\u524d\u4e00\u4e2aJob\u662f\u4e0d\u5fc5\u8981\u7684\uff09<\/p>\n
\u4f7f\u7528\u77e9\u9635\u6765\u7ba1\u7406\u5de5\u4f5c<\/p>\n
1.5. \u4ee3\u7801\u5dee\u5f02\u68c0\u67e5<\/h2>\n
    steps<\/span>:<\/span>\r\n      # Checkout the repository to the GitHub Actions runner<\/span>\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Checkout'<\/span>\r\n        id<\/span>:<\/span> '<\/span>checkout'<\/span>\r\n        uses<\/span>:<\/span> actions\/checkout@v3<\/span>\r\n        with<\/span>:<\/span>\r\n          fetch-depth<\/span>:<\/span> 2<\/span>\r\n\r\n      # \u66f4\u65b0\u5c65\u6b74\u3092\u6bd4\u8f03\u3057\u3001\u5dee\u5206\u30c1\u30a7\u30c3\u30af<\/span>\r\n      -<\/span> name<\/span>:<\/span> Get changed files<\/span>\r\n        id<\/span>:<\/span> changed-files<\/span>\r\n        uses<\/span>:<\/span> tj-actions\/changed-files@v29.0.0<\/span>\r\n        with<\/span>:<\/span>\r\n          files<\/span>:<\/span> |<\/span>\r\n            ${{ env.TF_DIR }}\/*.tf<\/span>\r\n<\/code><\/pre>\n
\u7531\u4e8e\u53ea\u60f3\u5728\u4ee3\u7801\u53d1\u751f\u66f4\u6539\u7684\u5730\u65b9\u6267\u884cterraform\uff0c\u6240\u4ee5\u60f3\u8981\u8fdb\u884c\u5dee\u5f02\u68c0\u67e5\u3002
\n\u867d\u7136\u6574\u4e2a\u76ee\u5f55\u6279\u91cf\u5347\u7ea7\u4e5f\u53ef\u4ee5\u7528\u4e8e\u6f02\u79fb\u68c0\u67e5\uff0c\u4f46\u6267\u884c\u65f6\u95f4\u53ef\u80fd\u4f1a\u56e0\u4ee3\u7801\u89c4\u6a21\u800c\u53d8\u957f\u3002
\n\u5982\u679c\u60f3\u8981\u8fdb\u884c\u6f02\u79fb\u68c0\u67e5\uff0c\u6211\u8ba4\u4e3a\u6700\u597d\u53e6\u5916\u5b9a\u4e49\u4e00\u4e2a\u5de5\u4f5c\u6d41\u7a0b\u6216\u4f7f\u7528\u5176\u4ed6\u65b9\u6cd5\u3002<\/p>\n
1.6. OpenID Connect \u8ba4\u8bc1<\/h2>\n
      # OIDC \u8a8d\u8a3c<\/span>\r\n      -<\/span> name<\/span>:<\/span> '<\/span>Authenticate<\/span> to<\/span> Google<\/span> Cloud'<\/span>\r\n        id<\/span>:<\/span> '<\/span>auth'<\/span>\r\n        if<\/span>:<\/span> steps.changed-files.outputs.any_modified == 'true'<\/span>\r\n        uses<\/span>:<\/span> '<\/span>google-github-actions\/auth@v0'<\/span>\r\n        with<\/span>:<\/span>\r\n          token_format<\/span>:<\/span> '<\/span>access_token'<\/span>\r\n          workload_identity_provider<\/span>:<\/span> '<\/span>projects\/${{<\/span> env.project_number<\/span> }}\/locations\/global\/workloadIdentityPools\/${{<\/span> env.workload_identity_pool<\/span> }}\/providers\/${{<\/span> env.workload_identity_provider<\/span> }}'<\/span>\r\n          service_account<\/span>:<\/span> ${{ env.service_account }}<\/span>\r\n<\/code><\/pre>\n
\u53ea\u9700\u4e00\u79cd\u9009\u9879\u6765\u7528\u4e2d\u6587\u7ffb\u8bd1\u4ee5\u4e0b\u5185\u5bb9\uff1a
\n\u6b63\u5728\u4f7f\u7528OIDC\u8ba4\u8bc1GCP\u3002
\n\u5982\u679c\u4f7f\u7528\u5176\u4ed6\u4e91\u670d\u52a1\uff0c\u53ea\u9700\u66f4\u6539\u201cuses\u201d\u53c2\u6570\u5373\u53ef\u3002
\n\u867d\u7136\u4e0d\u540c\u4e91\u670d\u52a1\u53ef\u80fd\u4f1a\u6709\u4e0d\u540c\u7684\u53d8\u91cf\u6307\u5b9a\u65b9\u5f0f\uff0c\u4f46\u8fd9\u6b21\u53ea\u5728GCP\u4e0a\u8fdb\u884c\u4e86\u786e\u8ba4\u3002<\/p>\n
\u53e6\u5916\uff0c\u5728\u300c\u5982\u679c\u300d\u6761\u4ef6\u4e0b\uff0c\u6839\u636e\u4e4b\u524d\u8fdb\u884c\u7684\u5dee\u5206\u68c0\u67e5\u7684\u7ed3\u679c\uff0c\u5224\u65ad\u662f\u5426\u6267\u884c\u8be5\u6b65\u9aa4\u3002<\/p>\n
1.7. \u8bbe\u7f6eTerraform\u3002<\/h2>\n
      # Install the latest version of Terraform CLI and configure the Terraform CLI configuration file with a Terraform Cloud user API token<\/span>\r\n      -<\/span> name<\/span>:<\/span> Setup Terraform<\/span>\r\n        id<\/span>:<\/span> setup<\/span>\r\n        if<\/span>:<\/span> steps.changed-files.outputs.any_modified == 'true'<\/span>\r\n        uses<\/span>:<\/span> hashicorp\/setup-terraform@v2<\/span>\r\n        with<\/span>:<\/span>\r\n          terraform_version<\/span>:<\/span> ${{ env.terraform_version }}<\/span>\r\n          terraform_wrapper<\/span>:<\/span> true<\/span>\r\n<\/code><\/pre>\n
\u5728\u4e4b\u524d\u7684\u8c03\u67e5\u4e2d\u5df2\u7ecf\u63d0\u5230\uff0c\u4f7f\u7528HashiCorp\u63d0\u4f9b\u7684Action\u201csetup-terraform\u201d\uff0c\u5bf9terraform\u8fdb\u884c\u7248\u672c\u6307\u5b9a\u3002
\n\u867d\u7136\u5b98\u65b9\u7684GitHub\u4e3b\u673a\u8fd0\u884c\u7a0b\u5e8f\u4e2d\u9884\u88c5\u4e86terraform\uff0c\u4f46\u7531\u4e8e\u5b83\u53ef\u80fd\u662f\u6700\u65b0\u7248\u672c\uff0c\u56e0\u6b64\u6839\u636e\u6267\u884c\u7684\u65f6\u673a\uff0cterraform\u7684\u7248\u672c\u53ef\u80fd\u4f1a\u6709\u6240\u4e0d\u540c\u3002
\n\u901a\u5e38\uff0c\u5728\u7f16\u5199\u4ee3\u7801\u65f6\uff0c\u6211\u4eec\u4f1a\u6307\u5b9a\u6216\u56fa\u5b9aterraform\u7684\u7248\u672c\uff0c\u56e0\u6b64\u6211\u8ba4\u4e3a\u5e94\u660e\u786e\u6307\u5b9a\u548c\u4f7f\u7528\u6267\u884c\u73af\u5883\u7684\u7248\u672c\u3002<\/p>\n
1.8. \u4f7f\u7528 terraform fmt & init & validate<\/h2>\n
      # Checks that all Terraform configuration files adhere to a canonical format<\/span>\r\n      -<\/span> name<\/span>:<\/span> Terraform Format (${{ env.TF_DIR }})<\/span>\r\n        id<\/span>:<\/span> fmt<\/span>\r\n        if<\/span>:<\/span> steps.changed-files.outputs.any_modified == 'true'<\/span>\r\n        run<\/span>:<\/span> terraform fmt<\/span>\r\n        continue-on-error<\/span>:<\/span> true<\/span>\r\n\r\n      # Initialize a new or existing Terraform working directory by creating initial files, loading any remote state, downloading modules, etc.<\/span>\r\n      -<\/span> name<\/span>:<\/span> Terraform Init (${{ env.TF_DIR }})<\/span>\r\n        id<\/span>:<\/span> init<\/span>\r\n        if<\/span>:<\/span> steps.changed-files.outputs.any_modified == 'true'<\/span>\r\n        run<\/span>:<\/span> terraform init<\/span>\r\n\r\n      # Checks that all Terraform configuration files adhere to a canonical syntax<\/span>\r\n      -<\/span> name<\/span>:<\/span> Terraform Validate (${{ env.TF_DIR }})<\/span>\r\n        id<\/span>:<\/span> validate<\/span>\r\n        if<\/span>:<\/span> steps.changed-files.outputs.any_modified == 'true'<\/span>\r\n        run<\/span>:<\/span> terraform validate -no-color<\/span>\r\n<\/code><\/pre>\n
terraform\u8ba1\u5212\u4e4b\u524d\u8fdb\u884c\u4ee3\u7801\u68c0\u67e5\u3002\u6b64\u5916\uff0c\u5982\u679cfmt\u5b58\u5728\u5dee\u5f02\uff08\u683c\u5f0f\u4fee\u6b63\uff09\uff0c\u8fd4\u56de\u4ee3\u7801\u4e3a3\uff0cGitHub Actions\u4f1a\u505c\u6b62\u5e76\u6807\u8bb0\u4e3a\u9519\u8bef\uff0c\u56e0\u6b64\u6211\u4eec\u6dfb\u52a0”continue-on-error: true”\u4ee5\u5728\u51fa\u9519\u65f6\u7ee7\u7eed\u6267\u884c\u3002<\/p>\n
1.9. \u521b\u5efaPull Request<\/h2>\n
      # \u30ea\u30ea\u30fc\u30b9\u7528PR\u304c\u65e2\u306b\u5b58\u5728\u3059\u308b\u304b\u3069\u3046\u304b\u3092\u30c1\u30a7\u30c3\u30af\u3001\u53ca\u3073 PR \u5185\u5bb9\u8a2d\u5b9a<\/span>\r\n      -<\/span> name<\/span>:<\/span> Check if pr exists<\/span>\r\n        id<\/span>:<\/span> check_pr<\/span>\r\n        if<\/span>:<\/span> ( github.ref != 'refs\/heads\/master' && github.event_name == 'push' && steps.changed-files.outputs.any_modified == 'true' )<\/span>\r\n        env<\/span>:<\/span>\r\n          GH_TOKEN<\/span>:<\/span> ${{ env.GITHUB_TOKEN }}<\/span>\r\n        run<\/span>:<\/span> |<\/span>\r\n          base_branch=master<\/span>\r\n          pr_title=${{ github.ref }}<\/span>\r\n          pr_title=`echo ${pr_title\/\/refs\\\/heads\\\/\/}`<\/span>\r\n          pr_ticket=`echo ${pr_title\/\/feature\\\/\/}`<\/span>\r\n          pr_body=`echo \"\u3010\u30c1\u30b1\u30c3\u30c8\u3011<\/span>\r\n          https:\/\/${jira_org}.atlassian.net\/browse\/${pr_ticket}<\/span>\r\n          \r\n          \u3010\u5909\u66f4\u5185\u5bb9\u3011<\/span>\r\n          ${{ github.event.head_commit.message }}\"`<\/span>\r\n\r\n          # \u6539\u884c\u30a8\u30b9\u30b1\u30fc\u30d7\u51e6\u7406<\/span>\r\n          pr_body=\"${pr_body\/\/'%'\/'%25'}\"<\/span>\r\n          pr_body=\"${pr_body\/\/$'\\n'\/'%0A'}\"<\/span>\r\n          pr_body=\"${pr_body\/\/$'\\r'\/'%0D'}\" <\/span>\r\n\r\n          # \u5f8c\u7d9a\u51e6\u7406\u306b\u53d7\u3051\u6e21\u3059\u305f\u3081 Output<\/span>\r\n          echo \"::set-output name=count::$(gh pr list -S ${pr_title}' in:title' -B $base_branch | wc -l)\"<\/span>\r\n          echo \"::set-output name=base_branch::$base_branch\"<\/span>\r\n          echo \"::set-output name=pr_title::$pr_title\"<\/span>\r\n          echo \"::set-output name=pr_body::$pr_body\"<\/span>\r\n\r\n      # \u30ea\u30ea\u30fc\u30b9\u7528PR\u3092\u4f5c\u6210<\/span>\r\n      -<\/span> name<\/span>:<\/span> Create release pr<\/span>\r\n        if<\/span>:<\/span> ( github.ref != 'refs\/heads\/master' && github.event_name == 'push' && steps.changed-files.outputs.any_modified == 'true' && steps.check_pr.outputs.count == 0 )<\/span>\r\n        env<\/span>:<\/span>\r\n          GH_TOKEN<\/span>:<\/span> ${{ env.GITHUB_TOKEN }}<\/span>\r\n        run<\/span>:<\/span> |<\/span>\r\n          gh pr create -B ${{ steps.check_pr.outputs.base_branch }} -t ${{ steps.check_pr.outputs.pr_title }} -b \"${{ steps.check_pr.outputs.pr_body }}\" --reviewer ${{ env.reviewer }}<\/span>\r\n<\/code><\/pre>\n
\u5728\u5c06\u7279\u6027\u5206\u652f\u63a8\u9001\u5230\u7279\u6027\u5206\u652f\u65f6\uff0c\u81ea\u52a8\u521b\u5efa\u4e00\u4e2a\u7528\u6765\u5c06\u4ee3\u7801\u5408\u5e76\u5230\u4e3b\u5206\u652f\u7684\u62c9\u53d6\u8bf7\u6c42\u3002\u5728\u521b\u5efa\u4e4b\u524d\uff0c\u5148\u68c0\u67e5\u8be5\u7279\u6027\u5206\u652f\u7684\u62c9\u53d6\u8bf7\u6c42\u662f\u5426\u5df2\u7ecf\u5b58\u5728\u3002<\/p>\n
\u6211\u6267\u884cPull Request\u7684\u64b0\u5199\u7b49\u64cd\u4f5c\uff0c\u4f7f\u5f97\u63d0\u4ea4\u65f6\u7684\u63d0\u4ea4\u4fe1\u606f\u4ee5”\u53d8\u66f4\u5185\u5bb9”\u7684\u5f62\u5f0f\u663e\u793a\u5728\u6b63\u6587\u4e2d\u3002<\/p>\n
\u56e0\u4e3a\u8fd9\u662f\u6700\u80fd\u770b\u5230\u53ef\u89c6\u5316\u5f71\u54cd\u7684\u90e8\u5206\uff0c\u6240\u4ee5\u6211\u60f3\u8981\u7ec6\u81f4\u5730\u5904\u7406\u3002
\n\u4f8b\u5982\uff0c\u5c06terraform graph\u7684\u7ed3\u679c\u7c98\u8d34\u5230PR\u8bc4\u8bba\u4e2d\uff08\u5c3d\u7ba1\u4e2a\u4eba\u89c9\u5f97terraform graph\u672c\u8eab\u5f88\u96be\u770b\u61c2…\uff09\u3002<\/p>\n
1.10. \u89c4\u5212 Terraform<\/h2>\n
\u5c3d\u7ba1\u6458\u5f55\u5185\u5bb9\u6709\u4e9b\u957f\uff0c\u4f46\u8fd9\u91cc\u662f\u4e00\u5957\u7684\uff0c\u6240\u4ee5…\u3002<\/p>\n
      # Generates an execution plan for Terraform<\/span>\r\n      -<\/span> name<\/span>:<\/span> Terraform Plan (${{ env.TF_DIR }})<\/span>\r\n        id<\/span>:<\/span> plan<\/span>\r\n        if<\/span>:<\/span> steps.changed-files.outputs.any_modified == 'true'<\/span>\r\n        run<\/span>:<\/span> terraform plan -no-color -input=false<\/span>\r\n        continue-on-error<\/span>:<\/span> true<\/span>\r\n\r\n      # Pull Request\/\u30b3\u30fc\u30c9\u5dee\u5206\u6709\u308a\/Plan\u306b\u3066\u5909\u66f4\u6709\u308a\u3000\u306e\u5834\u5408\u3001\u30b3\u30e1\u30f3\u30c8\u3092\u8ffd\u8a18\u3059\u308b<\/span>\r\n      -<\/span> name<\/span>:<\/span> Adding Pull Request Comment<\/span>\r\n        uses<\/span>:<\/span> actions\/github-script@v6<\/span>\r\n        if<\/span>:<\/span> ( github.event_name == 'pull_request' && steps.changed-files.outputs.any_modified == 'true' && !contains(steps.plan.outputs.stdout, 'No changes.') )<\/span>\r\n        env<\/span>:<\/span>\r\n          PLAN<\/span>:<\/span> \"<\/span>terraform<\/span>\\n<\/span>${{<\/span> steps.plan.outputs.stdout<\/span> }}\"<\/span>\r\n        with<\/span>:<\/span>\r\n          github-token<\/span>:<\/span> ${{ env.GITHUB_TOKEN }}<\/span>\r\n          script<\/span>:<\/span> |<\/span>\r\n            const output = `#### Terraform Format and Style ?\\`${{ steps.fmt.outcome }}\\`<\/span>\r\n            #### Terraform Initialization \u2699\ufe0f\\`${{ steps.init.outcome }}\\`<\/span>\r\n            #### Terraform Validation ?\\`${{ steps.validate.outcome }}\\`<\/span>\r\n            #### Terraform Plan ?\\`${{ steps.plan.outcome }}\\`<\/span>\r\n\r\n            <details><summary>Show Plan<\/summary><\/span>\r\n\r\n            \\`\\`\\`terraform\\n<\/span>\r\n            ${process.env.PLAN}<\/span>\r\n            \\`\\`\\`<\/span>\r\n\r\n            <\/details><\/span>\r\n\r\n            *Pusher: @${{ github.actor }}, Action: \\`${{ github.event_name }}\\`*`;<\/span>\r\n\r\n            github.rest.issues.createComment({<\/span>\r\n              issue_number: context.issue.number,<\/span>\r\n              owner: context.repo.owner,<\/span>\r\n              repo: context.repo.repo,<\/span>\r\n              body: output<\/span>\r\n            })<\/span>\r\n\r\n      # Pull Request\/\u30b3\u30fc\u30c9\u5dee\u5206\u6709\u308a\/Plan\u306b\u3066\u5909\u66f4\u6709\u308a\u3000\u306e\u5834\u5408\u3001\u30b3\u30e1\u30f3\u30c8\u3092\u8ffd\u8a18\u3059\u308b<\/span>\r\n      -<\/span> name<\/span>:<\/span> Adding Pull Request Comment <\/span>2<\/span>\r\n        uses<\/span>:<\/span> actions\/github-script@v6<\/span>\r\n        if<\/span>:<\/span> ( github.event_name == 'pull_request' && steps.changed-files.outputs.any_modified == 'true' && !contains(steps.plan.outputs.stdout, 'No changes.') )<\/span>\r\n        env<\/span>:<\/span>\r\n          PLAN<\/span>:<\/span> \"<\/span>terraform<\/span>\\n<\/span>${{<\/span> steps.plan.outputs.stdout<\/span> }}\"<\/span>\r\n        with<\/span>:<\/span>\r\n          github-token<\/span>:<\/span> ${{ env.GITHUB_TOKEN }}<\/span>\r\n          script<\/span>:<\/span> |<\/span>\r\n            const output = `\\n#### Terraform Format and Style ? \\`${{ steps.fmt.outcome }}\\`\\n<\/span>\r\n            #### Terraform Initialization \u2699\ufe0f \\`${{ steps.init.outcome }}\\`\\n<\/span>\r\n            #### Terraform Validation ? \\`${{ steps.validate.outcome }}\\`\\n<\/span>\r\n            #### Terraform Plan ? \\`${{ steps.plan.outcome }}\\`\\n<\/span>\r\n\r\n            <details><summary>Show Plan<\/summary><\/span>\r\n\r\n            \\`\\`\\`terraform\\n<\/span>\r\n            ${process.env.PLAN}<\/span>\r\n            \\`\\`\\`<\/span>\r\n\r\n            <\/details><\/span>\r\n\r\n            *Pusher: @${{ github.actor }}, Action: \\`${{ github.event_name }}\\`*`;<\/span>\r\n\r\n            await core.summary<\/span>\r\n              .addHeading('Terraform plan report')<\/span>\r\n              .addRaw(output)<\/span>\r\n              .write()<\/span>\r\n<\/code><\/pre>\n
\u8fd0\u884c terraform plan\uff0c\u5e76\u5c06\u7ed3\u679c\u53d1\u8868\u5728\u62c9\u53d6\u8bf7\u6c42\u7684\u8bc4\u8bba\u4e2d\u3002
\n\u4f7f\u7528\u201cif\u201d\u6761\u4ef6\uff0c\u53ef\u4ee5\u8be6\u7ec6\u6307\u5b9a\u8fd0\u884c\u6761\u4ef6\uff0c\u5982\u679c plan \u7ed3\u679c\u4e3a\u201cNo changes.\u201d\uff0c\u5219\u4e0d\u53d1\u8868\u8bc4\u8bba\u7b49\u7b49\u3002
\n\u56e0\u4e3a\u5728\u4e00\u4e2a\u62c9\u53d6\u8bf7\u6c42\u4e2d\u53ef\u4ee5\u5e76\u884c\u8fd0\u884c\u591a\u4e2a terraform \u6267\u884c\u6587\u4ef6\u5939\uff0c\u6240\u4ee5\u5f53\u53ea\u8fdb\u884c\u4e86\u4ee3\u7801\u91cd\u6784\u6216\u4ee3\u7801\u5185\u90e8\u7684\u6ce8\u91ca\u4fee\u6b63\u7b49\u64cd\u4f5c\u65f6\uff0c\u867d\u7136\u4e0d\u4f1a\u5bf9\u5b9e\u9645\u8d44\u6e90\u4ea7\u751f\u5f71\u54cd\uff0c\u4f46\u53ef\u80fd\u4f1a\u5bfc\u81f4\u5927\u91cf\u7684\u62c9\u53d6\u8bf7\u6c42\u8bc4\u8bba\u88ab\u6295\u7a3f\u3002
\n\u8fd9\u4f1a\u5f71\u54cd\u53ef\u8bfb\u6027\uff0c\u6240\u4ee5\u53ea\u6709\u5728\u5b9e\u9645\u8d44\u6e90\u53d1\u751f\u66f4\u6539\u65f6\u624d\u53d1\u8868\u8bc4\u8bba\u3002<\/p>\n
1.11. \u5e94\u7528terraform<\/h2>\n
      # Plan \u306b\u5931\u6557\u3057\u3066\u3044\u305f\u3089\u3001Apply\u306e\u5b9f\u884c\u306f\u3057\u306a\u3044<\/span>\r\n      -<\/span> name<\/span>:<\/span> Terraform Plan Status<\/span>\r\n        if<\/span>:<\/span> steps.plan.outcome == 'failure'<\/span>\r\n        run<\/span>:<\/span> exit <\/span>1<\/span>\r\n\r\n      # master\u30d6\u30e9\u30f3\u30c1\/push\uff08merge\uff09\/Plan\u306b\u3066\u5909\u66f4\u6709\u308a\u3000\u306e\u5834\u5408\u3001Apply\u3092\u5b9f\u884c\u3059\u308b<\/span>\r\n      -<\/span> name<\/span>:<\/span> Terraform Apply (${{ env.TF_DIR }})<\/span>\r\n        id<\/span>:<\/span> apply<\/span>\r\n        if<\/span>:<\/span> ( github.ref == 'refs\/heads\/master' && github.event_name == 'push' && steps.changed-files.outputs.any_modified == 'true' && !contains(steps.plan.outputs.stdout, 'No changes.') )<\/span>\r\n        run<\/span>:<\/span> terraform apply -auto-approve -input=false<\/span>\r\n<\/code><\/pre>\n
\u5982\u679c\u5728\u4e4b\u524d\u7684 plan \u7ed3\u679c\u4e2d\u51fa\u73b0\u9519\u8bef\uff0c\u6700\u540e\u5c06\u4e0d\u4f1a\u6267\u884c terraform apply\uff0c\u5e76\u6dfb\u52a0\u7c7b\u4f3c break \u7684\u5904\u7406\u673a\u5236\u3002<\/p>\n
2. \u63d0\u793a\u548c\u56f0\u96be\u7684\u4e1c\u897f h\u00e9 de<\/h1>\n
2.1.\u5173\u4e8e\u79d8\u5bc6<\/h2>\n
GitHub \u5185\u7684 Secret\uff08\u7c7b\u4f3c\u4e8eGCP\u7684SecretManager\u6216AWS\u7684Parameter Store\uff09\u9700\u8981\u5728\u6bcf\u4e2a\u5b58\u50a8\u5e93\u4e2d\u8bbe\u7f6e\u4e2a\u4eba\u8bbf\u95ee\u4ee4\u724c\uff08\u4ee5\u4e0b\u7b80\u79f0PAT\uff09\uff0c\u5982\u679c\u5b58\u50a8\u5e93\u6570\u91cf\u8f83\u591a\u6216\u9700\u8981\u66f4\u6539\u548c\u66f4\u65b0PAT\uff0c\u53ef\u80fd\u4f1a\u6709\u4e9b\u9ebb\u70e6\u3002\u636e\u8bf4\u53ef\u4ee5\u6ce8\u518c\u7ec4\u7ec7\u7ea7\u522b\u7684Secret\uff0c\u53ef\u4ee5\u4ece\u591a\u4e2a\u5b58\u50a8\u5e93\u4e2d\u4f7f\u7528\uff0c\u4f46\u6743\u9650\u65b9\u9762\u8fd8\u672a\u786e\u8ba4\u80fd\u5426\u5b9e\u73b0\u3002<\/p>\n
\u5c06\u6765\u4e5f\u5e0c\u671b\u8003\u8651\u4f7f\u7528 HashiCorp \u7684 Vault\uff0c\u5e76\u4e14 HashiCorp \u8fd8\u63d0\u4f9b\u4e86\u7528\u4e8e Vault \u7684 Action\u3002<\/p>\n
\u54c8\u5e0c\u8c37\u4ed3\u5e93\/\u4fdd\u9669\u5e93\u64cd\u4f5c<\/p>\n
2.2. \u5173\u4e8ePull Request\u7684\u521b\u5efa\u8005<\/h2>\n
\u5047\u8bbe\u6211\u4eec\u662f\u7531\u5171\u540c\u7684\u7528\u6237\u6765\u521b\u5efaPull Request\uff0c\u4f46\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\u65e0\u6cd5\u786e\u5b9a\u201cPull Request \u521b\u5efa\u8005\uff08\u4ee3\u7801\u4fee\u6b63\u8005\uff09\u201d\u3002
\n\u5982\u679c\u4e3a\u8bc4\u5ba1\u8005\u6307\u5b9a\u4e86\u56e2\u961f\u6216\u4ece\u56e2\u961f\u4e2d\u8fdb\u884c\u968f\u673a\u5206\u914d\uff0c\u90a3\u4e48\u6709\u65f6\u5019Pull Request\u7684\u521b\u5efa\u8005\u4e5f\u4f1a\u88ab\u5206\u914d\u4e3a\u8bc4\u5ba1\u8005\u3002<\/p>\n
2.3. \u5173\u4e8e\u5206\u652f\u540d\u79f0<\/h2>\n
\u5047\u8bbe\u4f7f\u7528Jira\u5e76\u8054\u5408\u4f7f\u7528Pull Request\uff0c\u5728Pull Request\u4e2d\u5c06\u5206\u652f\u540d\u79f0\u81ea\u52a8\u63d2\u5165Jira\u7968\u636e\u7684URL\u3002
\n\u6362\u53e5\u8bdd\u8bf4\uff0c\u5047\u8bbe”Jira\u7968\u636e\u53f7=\u5206\u652f\u540d\u79f0”\uff0c\u56e0\u6b64\u4e0d\u8003\u8651\u4e3a\u4e00\u4e2a\u7968\u636e\u521b\u5efa\u591a\u4e2a\u5206\u652f\u3002
\n\u4e0d\u8fc7\uff0c\u7531\u4e8e\u8fd9\u90e8\u5206\u53ef\u4ee5\u901a\u8fc7\u811a\u672c\u8f7b\u677e\u5904\u7406\uff0c\u6240\u4ee5\u6211\u5e0c\u671b\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u8fdb\u884c\u6539\u8fdb\u3002<\/p>\n
2.4. \u5173\u4e8e GitHub \u7684\u4e2a\u4eba\u8bbf\u95ee\u4ee4\u724c<\/h2>\n
\u9ed8\u8ba4\u7684\u4e2a\u4eba\u8bbf\u95ee\u4ee4\u724c\u6ca1\u6709\u6267\u884c\u5de5\u4f5c\u6d41\u7684\u6743\u9650\uff0c\u9700\u8981\u4fee\u6539\u8303\u56f4\uff08\u6dfb\u52a0\u5de5\u4f5c\u6d41\u6743\u9650\uff09\u3002
\n\u6b64\u5916\uff0c\u5728\u521b\u5efa\u62c9\u53d6\u8bf7\u6c42\u65f6\uff0c\u9700\u8981[‘read\uff1aorg’\uff0c’read\uff1adiscussion’]\u7684\u8303\u56f4\u624d\u80fd\u6307\u5b9a\u5ba1\u6838\u8005\u7ec4\u3002
\n\uff08\u5982\u679c\u5ba1\u6838\u8005\u4e0d\u662f\u7ec4\u6216\u8005\u4e0d\u9700\u8981\u6307\u5b9a\u5ba1\u6838\u8005\uff0c\u5219\u4e0d\u9700\u8981\u4e0a\u8ff0\u6743\u9650\u3002\uff09<\/p>\n
\u4ee5\u4e0b\u662f\u4e00\u4e2a\u5728\u8303\u56f4\u4e0d\u8db3\u7684\u60c5\u51b5\u4e0b\u51fa\u73b0\u7684\u9519\u8bef\u3002<\/p>\n
Run gh pr <\/span>create -B<\/span> master -t<\/span> feature\/gitac-test -b<\/span> \"\"<\/span> --reviewer<\/span> hoge\/hoge\r\nWarning: 1 uncommitted change\r\nGraphQL: Your token has not been granted the required scopes to execute this query. The 'id'<\/span> field requires one of the following scopes: [<\/span>'read:org'<\/span>, 'read:discussion'<\/span>]<\/span>, but your token has only been granted the: [<\/span>'repo'<\/span>, 'workflow'<\/span>]<\/span> scopes. Please modify your token's scopes at: https:\/\/github.com\/settings\/tokens.,  Your token has not been granted the required scopes to execute this query. The '<\/span>slug' field requires one of the following scopes: ['<\/span>read<\/span>:org', '<\/span>read<\/span>:discussion'], but your token has only been granted the: ['<\/span>repo', '<\/span>workflow'] scopes. Please modify your token'<\/span>s scopes at: https:\/\/github.com\/settings\/tokens. \r\nError: Process completed with exit <\/span>code 1.\r\n<\/code><\/pre>\n
3.\u603b\u7ed3<\/h1>\n
\u8fd9\u6b21\u6211\u5c1d\u8bd5\u5199\u4e86\u4e00\u4e9b\u6211\u5728\u5de5\u4f5c\u4e2d\u7ecf\u5386\u8fc7\u7684\u4e8b\u60c5\uff0c\u800c\u4e0d\u662f\u4ee5\u5f80\u5199\u7684\u79c1\u4eba\u5185\u5bb9\u3002\u6211\u5c3d\u91cf\u907f\u514d\u5177\u4f53\u63cf\u8ff0\uff0c\u4f46\u5982\u679c\u6709\u4ec0\u4e48\u5730\u65b9\u8fd8\u662f\u900f\u9732\u51fa\u6765\u4e86\u7684\u8bdd\uff0c\u8bf7\u5728\u8bc4\u8bba\u4e2d discreetly \u63d0\u9192\u6211\uff0c\u8c22\u8c22\u3002<\/p>\n
\u7531\u4e8e\u5b83\u6d89\u53ca\u5230\u6211\u4e2a\u4eba\u975e\u5e38\u559c\u6b22\u7684\u9886\u57df\u5982\u81ea\u52a8\u5316\u3001\u4f18\u5316\u548c\u7ba1\u7406\u670d\u52a1\u7684\u5229\u7528\uff0c\u8fd9\u4e2a\u5185\u5bb9\u65e0\u8bba\u662f\u5728\u5de5\u4f5c\u4e2d\u8fd8\u662f\u611f\u5230\u975e\u5e38\u6709\u4e50\u8da3\u3002\u6211\u5e0c\u671b\u5728\u672a\u6765\u7684\u5de5\u4f5c\u4e2d\u80fd\u591f\u7ee7\u7eed\u5e94\u7528\u8fd9\u4e9b\u77e5\u8bc6\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u7b80\u8981\u6982\u8ff0 \u5728GitHub Actions\u4e2d\u8fd0\u884cterraform\uff0c\u80fd\u81ea\u52a8\u5316\u5730\u505a\u5f97\u5f88\u597d\u3002 “\u505a\u5f97\u597d& […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-48548","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u3010githubactions\u3011\u5229\u7528-github-actions-\u6765\u4f18\u96c5\u5730\u6267\u884c-terraform\u3010terraform\u3011\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011\" \/>\n<meta property=\"og:description\" content=\"\u7b80\u8981\u6982\u8ff0 \u5728GitHub Actions\u4e2d\u8fd0\u884cterraform\uff0c\u80fd\u81ea\u52a8\u5316\u5730\u505a\u5f97\u5f88\u597d\u3002 “\u505a\u5f97\u597d& […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u3010githubactions\u3011\u5229\u7528-github-actions-\u6765\u4f18\u96c5\u5730\u6267\u884c-terraform\u3010terraform\u3011\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-03T06:11:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-28T21:50:23+00:00\" \/>\n<meta name=\"author\" content=\"\u97f5, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u97f5, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/\",\"name\":\"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2022-12-03T06:11:39+00:00\",\"dateModified\":\"2024-04-28T21:50:23+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\",\"name\":\"\u97f5, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"caption\":\"\u97f5, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u3010githubactions\u3011\u5229\u7528-github-actions-\u6765\u4f18\u96c5\u5730\u6267\u884c-terraform\u3010terraform\u3011\/","og_locale":"zh_CN","og_type":"article","og_title":"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011","og_description":"\u7b80\u8981\u6982\u8ff0 \u5728GitHub Actions\u4e2d\u8fd0\u884cterraform\uff0c\u80fd\u81ea\u52a8\u5316\u5730\u505a\u5f97\u5f88\u597d\u3002 “\u505a\u5f97\u597d& […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u3010githubactions\u3011\u5229\u7528-github-actions-\u6765\u4f18\u96c5\u5730\u6267\u884c-terraform\u3010terraform\u3011\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2022-12-03T06:11:39+00:00","article_modified_time":"2024-04-28T21:50:23+00:00","author":"\u97f5, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u97f5, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"9 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/","name":"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2022-12-03T06:11:39+00:00","dateModified":"2024-04-28T21:50:23+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u3010GitHubActions\u3011\u5229\u7528 GitHub Actions \u6765\u4f18\u96c5\u5730\u6267\u884c terraform\u3010terraform\u3011"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e","name":"\u97f5, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","caption":"\u97f5, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90githubactions%e3%80%91%e5%88%a9%e7%94%a8-github-actions-%e6%9d%a5%e4%bc%98%e9%9b%85%e5%9c%b0%e6%89%a7%e8%a1%8c-terraform%e3%80%90terraform%e3%80%91\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=48548"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48548\/revisions"}],"predecessor-version":[{"id":83428,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/48548\/revisions\/83428"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=48548"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=48548"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=48548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}