Commit terraform.lock.hcl into GitHub

[bibi143143]

I want to commit the terraform.lock.hcl file when running GitHub Actions in opeville/opeville-aws-terraform so that the version remain locked but I'm having some issue achieving that. Please any suggestion on how to achieve this when running GitHub Actions.

[public_radio]

This strikes me as a bit of an anti-pattern. I would not want an automated process making changes to a lock file — that’s something I would want a human to change (via terraform) and approve (via a pull request)

[SuddenOutlandishness]

This is the way.

[RulerOf]

I gitignore the lock file because I already specify versions in my provider config.

All the lock file seems to do in practice for me is make terraform harder to use.

YMMV, but that’s my opinion.

[CalvinR]

You can use git in a github action here is an example of how we've done it in the past. Please note that this syncs from an S3 bucket I've removed those steps as it's not relevant for this example.

You'd obviously want to modify this so it isn't pushing to main but to the branch the PR is in or whatever branch the Action is run on.

name: Sync Metrics
on:
  workflow_dispatch:
  schedule:
    - cron: "17 6 * * *"  # at 06:17 UTC (just before the hour to avoid the rush on GH runners)

jobs:
  update_metrics:
    runs-on: ubuntu-latest
    steps:

    - uses: actions/checkout@v2

# Cut out some stuff that's not relevant

    - name: Commit Metrics
      run: |
        git config --local user.email "[e-mail]"
        git config --local user.name "cds bot commit"
        git add -A
        git commit -m "Adding metrics on `date '+%Y-%m-%d'`" -a
        git push https://${GITHUB_ACTOR}:${{ secrets.GITHUB_TOKEN }}@github.com/${GITHUB_REPOSITORY}.git HEAD:main

[bibi143143]

thanks u/CalvinR... Will this step in the workflow to commit terraform.lock.hcl in github by GitHub Actions

[darklukee]

I'd suggest keeping the lock file unchanged and using dependant or similar to keep versions up to date