feat: discover and test every module in tf-test workflow

[gberenice]

What

The tf-test reusable workflow assumed a single module at the repository root, so monorepos had to hand-roll their own aqua + init + test steps instead of consuming it.

• Add a discover job that finds every directory containing *.tftest.hcl files and emits them as a JSON array. Both the tests/ subdirectory and module-root layouts collapse to the module directory.
• Fan the test job out across (tf_type x module) with fail-fast: false, so callers stay zero-config as modules are added.
• Relax aws_role_arn and the SPACELIFT_* secrets to optional, since they're consumer-specific and not every repo under test touches AWS or Spacelift. Drop the redundant required: false lines and describe each secret.
• Add job timeouts (5m discover, 30m test).
• Bump masterpointio/github-action-tf-test to v1.1.0, which adds the working_directory input this depends on.

Backwards compatibility

Root-level modules report as . and keep their original job name:

name: 🧪 ${{ matrix.tf }} test${{ matrix.module != '.' && format(' ({0})', matrix.module) || '' }}

Without this, terraform-spacelift-automation's checks would rename from 🧪 tofu test to 🧪 tofu test (.) and break any branch protection rules keyed to those names.

Dependencies

masterpointio/github-action-tf-test#49 — merged and released as v1.1.0, now pinned here.

Testing

Discovery pipeline verified against infra-monorepo-template (returns ["child-modules/random-pet"]) and against an empty repo (returns [], which skips the test job via the if: guard). actionlint, zizmor --persona=pedantic, and yamllint all pass.

Follow-up

infra-monorepo-template switches its hand-rolled test.yaml over to this workflow once it's released.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: c2486edb-bede-40dd-928f-f74bcbb0bd1e

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}