Plan on pr

.github/workflows/apply.yml

@@ -0,0 +1,24 @@
+name: Apply Terraform
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  terraform-validate:
+    uses: ./.github/workflows/validate.yml
+  terraform-apply:
+    runs-on: ubuntu-latest
+    needs: terraform-validate
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v2
+      - name: Terraform Apply
+        uses: dflook/terraform-apply@61432ffb5b94226bdfc9cd68a1702a2c40e0db8b
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}

.github/workflows/plan.yml

@@ -0,0 +1,22 @@
+name: Plan Terraform
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  terraform-plan:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: actions/checkout@v2
+      - name: Terraform Plan
+        uses: dflook/terraform-plan@a6967bcc161f0df654b5df2f1f00eca83a4cbad9
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}

.github/workflows/validate.yml

@@ -1,9 +1,7 @@
 name: Validate Terraform
 
 on:
-  push:
-    branches:
-      - main
+  workflow_call:
   pull_request:
     branches:
       - main
@@ -12,6 +10,6 @@ jobs:
   terraform-validate:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
-    - name: terraform-validate
-      uses: dflook/terraform-validate@v1.46.1
+      - uses: actions/checkout@v2
+      - name: terraform-validate
+        uses: dflook/terraform-validate@5e22e449923d40905db0b3ca67ebc5787e8b2dee

CODEOWNERS

@@ -0,0 +1 @@
+*.* @renatodellosso

main.tf

@@ -315,7 +315,7 @@ resource "cloudflare_dns_record" "www-cname" {
 resource "cloudflare_dns_record" "status-cname" {
   zone_id = var.cloudflare-zone-id
   name    = "status"
-  content = aws_lb.gearbox-load-balancer.dns_name
+  content = "app.pulsetic.com"
   type    = "CNAME"
   ttl     = 1
 }