Skip to content

ci: add OpenTofu IaC and integration test workflow#244

Draft
jmeridth wants to merge 1 commit intomainfrom
integration_tests_with_iac
Draft

ci: add OpenTofu IaC and integration test workflow#244
jmeridth wants to merge 1 commit intomainfrom
integration_tests_with_iac

Conversation

@jmeridth
Copy link
Member

@jmeridth jmeridth commented Feb 21, 2026

Split off from #147

What

Add OpenTofu infrastructure-as-code configuration for managing the example-osps-baseline-level-1 test repository, along with a CI workflow that runs tofu plan on PRs touching the iac/ directory.

Why

The integration test infrastructure needs to be version-controlled and validated in CI to prevent drift and catch configuration issues before they're applied.

Notes

  • terraform.tfstate is committed intentionally since this is a simple setup without remote state backend
  • The CI workflow uses GITHUB_TOKEN which has limited permissions — may need a PAT if tofu plan requires broader access
    • we may introduce Octo-STS here so we don't need a PAT but get more permissions.

@trumant is the original author. DCO is throwing a fit about me being the signer, only reason Travis is listed as co-author (he is the original author)

@jmeridth jmeridth self-assigned this Feb 21, 2026
jmeridth added a commit that referenced this pull request Feb 21, 2026
this will be handled in #244

Signed-off-by: jmeridth <jmeridth@gmail.com>
Split off from #147

## What

Add OpenTofu infrastructure-as-code configuration for managing the
example-osps-baseline-level-1 test repository, along with a CI workflow
that runs tofu plan on PRs touching the iac/ directory.

## Why

The integration test infrastructure needs to be version-controlled and
validated in CI to prevent drift and catch configuration issues before
they're applied.

## Notes

- terraform.tfstate is committed intentionally since this is a simple
  setup without remote state backend
- The CI workflow uses GITHUB_TOKEN which has limited permissions — may
  need a PAT if tofu plan requires broader access
  - we may introduce Octo-STS here so we don't need a PAT but get more
    permissions.

about me being the signer

Signed-off-by: jmeridth <jmeridth@gmail.com>
Co-authored-by: Travis Truman <trumant@gmail.com>
@jmeridth jmeridth force-pushed the integration_tests_with_iac branch from 04adaad to f2bbc44 Compare February 21, 2026 18:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant