Test early eval with remote workspaces

Author: dflook

.github/workflows/test-early-eval.yaml

@@ -7,7 +7,7 @@ permissions:
   contents: read
 
 jobs:
-  plan:
+  s3-backend:
     runs-on: ubuntu-24.04
     name: Plan with early eval
     env:
@@ -19,34 +19,69 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: terraform plan
+      - name: tofu plan
         uses: ./tofu-plan
         with:
-          path: tests/workflows/test-plan/early-eval/tofu
+          path: tests/workflows/test-early-eval/s3
           add_github_comment: false
           variables: |
             passphrase = "tofuqwertyuiopasdfgh"
 
       - name: Create workspace
         uses: ./tofu-new-workspace
         with:
-          path: tests/workflows/test-plan/early-eval/tofu
+          path: tests/workflows/test-early-eval/s3
           workspace: test-workspace
           variables: |
             passphrase = "tofuqwertyuiopasdfgh"
 
       - name: Create workspace again
         uses: ./tofu-new-workspace
         with:
-          path: tests/workflows/test-plan/early-eval/tofu
+          path: tests/workflows/test-early-eval/s3
           workspace: test-workspace
           variables: |
             passphrase = "tofuqwertyuiopasdfgh"
 
       - name: Destroy workspace
         uses: ./tofu-destroy-workspace
         with:
-          path: tests/workflows/test-plan/early-eval/tofu
+          path: tests/workflows/test-early-eval/s3
           workspace: test-workspace
           variables: |
             passphrase = "tofuqwertyuiopasdfgh"
+
+  remote-backend:
+    runs-on: ubuntu-24.04
+    name: Remote plan with early eval
+    env:
+      TERRAFORM_CLOUD_TOKENS: dflook.scalr.io=${{ secrets.SCALR_TOKEN }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: Create workspace
+        uses: ./tofu-new-workspace
+        with:
+          path: tests/workflows/test-early-eval/scalr
+          workspace: ${{ github.head_ref }}-early-eval
+          variables: |
+            passphrase = "tofuqwertyuiopasdfgh"
+
+      - name: Create workspace again
+        uses: ./tofu-new-workspace
+        with:
+          path: tests/workflows/test-early-eval/scalr
+          workspace: ${{ github.head_ref }}-early-eval
+          variables: |
+            passphrase = "tofuqwertyuiopasdfgh"
+
+      - name: Destroy workspace
+        uses: ./tofu-destroy-workspace
+        with:
+          path: tests/workflows/test-early-eval/scalr
+          workspace: ${{ github.head_ref }}-early-eval
+          variables: |
+            passphrase = "tofuqwertyuiopasdfgh"

tests/workflows/test-plan/early-eval/tofu/main.tf renamed to tests/workflows/test-early-eval/s3/main.tf

@@ -0,0 +1,47 @@
+terraform {
+  backend "remote" {
+    hostname = "dflook.scalr.io"
+    organization = "Environment-A"
+
+    workspaces {
+      prefix = "scalr-"
+    }
+  }
+}
+
+provider "aws" {
+  region = "eu-west-2"
+}
+
+variable "module_version" {
+  type = string
+  default = "4.3.0"
+}
+
+variable "passphrase" {
+  type = string
+  sensitive = true
+}
+
+module "s3-bucket" {
+  source  = "terraform-aws-modules/s3-bucket/aws"
+  version = var.module_version
+}
+
+terraform {
+  encryption {
+    key_provider "pbkdf2" "my_passphrase" {
+      passphrase = var.passphrase
+    }
+
+    method "aes_gcm" "my_method" {
+      keys = key_provider.pbkdf2.my_passphrase
+    }
+
+    state {
+      method = method.aes_gcm.my_method
+    }
+  }
+
+  required_version = "1.8.8"
+}