Taskfile.yml

version: '3'

vars:
  TERRAFORM_VERSION: 1.5.0
  AWS_REGION: '{{.AWS_REGION | default "us-west-2"}}'
  ENVIRONMENT: '{{.ENVIRONMENT | default "dev"}}'

env:
  AWS_REGION: '{{.AWS_REGION}}'
  TF_WORKSPACE: '{{.ENVIRONMENT}}'

tasks:
  default:
    cmds:
      - task --list
    silent: true

  check-tools:
    desc: Check if required tools are installed
    cmds:
      - |
        missing_tools=()
        for tool in terraform tflint checkov; do
          if ! command -v $tool >/dev/null 2>&1; then
            missing_tools+=($tool)
          fi
        done
        if [ ${#missing_tools[@]} -ne 0 ]; then
          echo "Missing required tools: ${missing_tools[*]}"
          echo "Please run 'task setup' to install missing tools"
          exit 1
        fi
    silent: true

  init:
    desc: Initialize Terraform working directory
    deps: [check-tools]
    cmds:
      - terraform init
      - tflint --init
      - terraform workspace select {{.ENVIRONMENT}} 2>/dev/null || terraform workspace new {{.ENVIRONMENT}}

  validate:
    desc: Validate Terraform configurations
    deps: [check-tools, init]
    cmds:
      - terraform fmt -check -diff -recursive
      - terraform validate
      - tflint
      - checkov -d .

  plan:
    desc: Create Terraform plan
    deps: [validate]
    cmds:
      - terraform plan -out=tfplan
    env:
      TF_VAR_environment: '{{.ENVIRONMENT}}'

  apply:
    desc: Apply Terraform plan
    cmds:
      - terraform apply tfplan
    preconditions:
      - test -f tfplan

  destroy:
    desc: Destroy infrastructure
    interactive: true
    cmds:
      - echo "Are you sure you want to destroy {{.ENVIRONMENT}} environment? (y/n)"
      - read -r response
      - |
        if [ "$response" = "y" ]; then
          terraform destroy -auto-approve
        else
          echo "Destroy cancelled"
          exit 1
        fi
    env:
      TF_VAR_environment: '{{.ENVIRONMENT}}'

  clean:
    desc: Clean up generated files
    cmds:
      - rm -rf .terraform tfplan
      - find . -type f -name ".terraform.lock.hcl" -delete
      - find . -type f -name "terraform.tfstate*" -delete

  lint:
    desc: Run all linters
    deps: [init]
    cmds:
      - task: lint:tf
      - task: lint:tflint
      - task: lint:checkov

  lint:tf:
    desc: Run terraform fmt
    cmds:
      - terraform fmt -recursive

  lint:tflint:
    desc: Run tflint
    deps: [init]
    cmds:
      - tflint --recursive

  lint:checkov:
    desc: Run checkov
    cmds:
      - checkov -d .

  docs:
    desc: Generate Terraform documentation
    cmds:
      - terraform-docs markdown . > TERRAFORM.md

  test:
    desc: Run tests
    cmds:
      - terratest/run_tests.sh
    sources:
      - "**/*.tf"
      - "test/**/*"
    generates:
      - test/reports/**/*

  setup:
    desc: Install required tools
    cmds:
      - |
        if ! command -v tflint >/dev/null 2>&1; then
          curl -L "$(curl -Ls https://api.github.com/repos/terraform-linters/tflint/releases/latest | grep -o -E "https://.+?_linux_amd64.zip")" -o tflint.zip
          unzip tflint.zip
          sudo mv tflint /usr/local/bin/
          rm tflint.zip
        fi
      - |
        if ! command -v terraform-docs >/dev/null 2>&1; then
          curl -Lo ./terraform-docs.tar.gz https://github.com/terraform-docs/terraform-docs/releases/latest/download/terraform-docs-linux-amd64.tar.gz
          tar -xzf terraform-docs.tar.gz
          sudo mv terraform-docs /usr/local/bin/
          rm terraform-docs.tar.gz
        fi
      - |
        if ! command -v checkov >/dev/null 2>&1; then
          pip3 install checkov
        fi

  pre-commit:
    desc: Run pre-commit checks
    cmds:
      - task: validate
      - task: lint
      - task: docs

  deploy:
    desc: Deploy to specific environment
    cmds:
      - task: init
      - task: plan
      - task: apply
    env:
      TF_VAR_environment: '{{.ENVIRONMENT}}'

  cost-estimate:
    desc: Estimate infrastructure costs
    cmds:
      - infracost breakdown --path .

  security-scan:
    desc: Run security scans
    cmds:
      - task: lint:checkov
      - terraform plan -out=tfplan
      - terraform show -json tfplan | jq '.' > tfplan.json
      - checkov -f tfplan.json
      - rm tfplan.json