haflidif/Terraform Plan - Azure
Runs terraform plan with Azure Remote Backend, and uploads plan as workflow artifact
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Jun 2, 2025
- License
- GPL 3.0
Pinned Snippet
uses: haflidif/terraform-azure-plan@a31f71f2ba9f80c06af98e345721dfdba19d9afa # v1.2.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | (Optional) Path to the Terraform configuration files, defaults to the current working directory | no | . |
| artifact_retention_days | (Optional) The number of days to retain the plan artifact. Defaults to `5`. | no | 5 |
| plan_mode | (Optional) The mode to run the plan in. Valid options are `deploy` or `destroy`. Defaults to `deploy`. | no | deploy |
| tf_version | (Optional) The version of Terraform to use. Defaults to the latest version. | no | latest |
| tf_var_file | (Optional) The variable file to use. Defaults to `terraform.tfvars`. | no | terraform.tfvars |
| tf_state_file | (Optional) The state file to use. Defaults to `terraform.tfstate`. | no | terraform.tfstate |
| az_resource_group | (Required) The name of the Azure Resource Group to use for the remote backend. | yes | — |
| az_storage_account_name | (Required) The name of the Azure Storage Account to use for the remote backend. | yes | — |
| az_storage_container_name | (Required) The name of the Azure Storage Container to use for the remote backend. | yes | — |
| arm_client_id | (Required) The client ID of the `Azure Service Principal` or `User Assigned Managed Identity` to use for authentication. | yes | — |
| arm_use_oidc | (Optional) Whether to use OIDC for authentication. Defaults to `false`. | no | false |
| arm_use_azuread | (Optional) Whether to use Azure AD for authentication towards Azure Remote Backend Storage Account and Containers. Requires RBAC permissions `Storage Blob Data Owner` or `Storage Blob Data Contributor` on the Storage Account/Container for the identity being used. Defaults to `false`. | no | false |
| arm_client_secret | (Conditionally required) The client secret of the Azure Service Principal to use for authentication. Required if `arm_client_id` is a Service Principal with Client Secret | no | "" |
| arm_tenant_id | (Required) The tenant ID of the Azure Service Principal to use for authentication. | yes | — |
| arm_subscription_id | (Required) The subscription ID of the Azure Service Principal to use for authentication. | yes | — |
| github_token | (Required) The GitHub token to use for posting comments on pull requests, please specify a valid GitHub token. | yes | — |
Outputs
no outputs