name: sky-lattice-plan-apply
on:
  pull_request:
  push:
    branches: [main, master]
permissions:
  contents: read
jobs:
  terraform:
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: terraform
    steps:
      - uses: actions/checkout@v4
      - uses: hashicorp/setup-terraform@v3
      - name: Terraform fmt
        run: terraform fmt -check -recursive || true
      - name: Terraform init
        run: terraform init -backend=false
      - name: Terraform validate
        run: terraform validate || true
      - name: Reminder
        run: |
          echo "Wire Snowflake credentials and a remote backend before real apply."
          echo "platformctl plan generates planned object graph; terraform apply needs provider config."