GitOps برای زیرساخت: Terraform و Git Workflow

infra/
├── modules/
│   ├── network/
│   ├── vm/
│   └── firewall/
├── environments/
│   ├── dev/
│   ├── staging/
│   └── production/
└── .github/workflows/
    └── terraform.yml

terraform {
  backend "s3" {
    bucket         = "company-terraform-state"
    key            = "production/network/terraform.tfstate"
    region         = "eu-west-1"
    dynamodb_table = "terraform-state-lock"
    encrypt        = true
  }
}

name: Terraform
on:
  pull_request:
    paths: ['infra/**']

jobs:
  terraform:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: hashicorp/setup-terraform@v3
      - name: Terraform Plan
        run: terraform plan -out=tfplan