ci: Add caching for terraform initialization.

Author: jamesiarmes

.github/actions/setup-opentofu/action.yaml

@@ -8,6 +8,13 @@ inputs:
 runs:
   using: composite
   steps:
+    - name: Cache OpenTofu
+      uses: actions/cache@v4
+      with:
+        path: ./tofu/config/${{ inputs.config }}/.terraform
+        key: ${{ runner.os }}-tofu-${{ hashFiles('./tofu/config/${{ inputs.config }}/.terraform.lock.hcl') }}
+        restore-keys: |
+          ${{ runner.os }}-tofu-
     - name: Setup OpenTofu
       uses: opentofu/setup-opentofu@v1
       with:

.github/workflows/launch-tools.yaml

@@ -40,50 +40,6 @@ jobs:
           aws-region: ${{ secrets.AWS_REGION || 'us-west-1' }}
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           role-session-name: GitHub_to_AWS_via_FederatedOIDC
-#      - name: Setup OpenTofu
-#        uses: opentofu/setup-opentofu@v1
-#        with:
-#          tofu_wrapper: false
-#      - name: Display OpenTofu version
-#        run: tofu version
-#      - name: Set optional variables
-#        env:
-#          # For any of these that have a value, the corresponding TF_VAR_*
-#          # environment variable will be set.
-#          APPLY_DATABASE_UPDATES_IMMEDIATELY: ${{ secrets.TF_VAR_APPLY_DATABASE_UPDATES_IMMEDIATELY }}
-#          TF_VAR_CONSUMER_CONTAINER_COUNT: ${{ secrets.TF_VAR_CONSUMER_CONTAINER_COUNT }}
-#          CONSUMER_CPU: ${{ secrets.TF_VAR_CONSUMER_CPU }}
-#          CONSUMER_MEMORY: ${{ secrets.TF_VAR_CONSUMER_MEMORY }}
-#          DATABASE_SKIP_FINAL_SNAPSHOT: ${{ secrets.TF_VAR_DATABASE_SKIP_FINAL_SNAPSHOT }}
-#          DELETION_PROTECTION: ${{ secrets.TF_VAR_DELETION_PROTECTION }}
-#          DEPLOYMENT_ENVIRONMENTS: ${{ secrets.TF_VAR_DEPLOYMENT_ENVIRONMENTS }}
-#          ENVIRONMENT: ${{ secrets.TF_VAR_ENVIRONMENT }}
-#          EXPORT_EXPIRATION: ${{ secrets.TF_VAR_EXPORT_EXPIRATION }}
-#          IMAGE_TAGS_MUTABLE: ${{ secrets.TF_VAR_IMAGE_TAGS_MUTABLE }}
-#          KEY_RECOVERY_PERIOD: ${{ secrets.TF_VAR_KEY_RECOVERY_PERIOD }}
-#          PROGRAM: ${{ secrets.TF_VAR_PROGRAM }}
-#          PROJECT: ${{ secrets.TF_VAR_PROJECT }}
-#          REPOSITORY: ${{ secrets.TF_VAR_REPOSITORY }}
-#        run: |
-#          variables=(
-#            "apply_database_updates_immediately" "consumer_container_count"
-#            "consumer_cpu" "consumer_memory" "database_skip_final_snapshot"
-#            "deletion_protection" "deployment_environments" "environment"
-#            "export_expiration" "image_tags_mutable" "key_recovery_period"
-#            "program" "project" "repository"
-#          )
-#          for var in ${variables[@]}; do
-#            name="$(echo $var | tr '[:lower:]' '[:upper:]')"
-#            if [ -n "${!name}" ]; then
-#              echo "Setting TF_VAR_$var"
-#              echo "TF_VAR_$var=${!name}" >> $GITHUB_ENV
-#            else
-#              echo "$name is not set"
-#            fi
-#          done
-#      - name: Initialize OpenTofu
-#        working-directory: ./tofu/config/service
-#        run: tofu init
       - name: Setup OpenTofu
         uses: ./.github/actions/setup-opentofu
         env:

tofu/config/service/.terraform.lock.hcl

@@ -9,6 +9,12 @@ resource "docker_image" "container" {
       "${local.prefix}:${var.image_tag}",
       "${module.ecr.repository_url}:${var.image_tag}"
     ]
+
+    auth_config {
+      host_name  = data.aws_ecr_authorization_token.token.proxy_endpoint
+      password = data.aws_ecr_authorization_token.token.password
+      user_name = data.aws_ecr_authorization_token.token.user_name
+    }
   }
 
   triggers = {
@@ -28,8 +34,8 @@ resource "docker_registry_image" "container" {
 
   auth_config {
     address  = data.aws_ecr_authorization_token.token.proxy_endpoint
-    username = data.aws_ecr_authorization_token.token.user_name
     password = data.aws_ecr_authorization_token.token.password
+    username = data.aws_ecr_authorization_token.token.user_name
   }
 
   triggers = {

tofu/modules/ephemeral_service/docker.tf

@@ -9,7 +9,7 @@ terraform {
 
     docker = {
       source  = "kreuzwerker/docker"
-      version = "~> 3.6"
+      version = "~> 3.7"
     }
   }
 }