H-2693: Implement fact gathering in the worker/coordinator agents of the research action #9590

	name: HASH Terraform Plan

	on:
	workflow_dispatch:
	inputs:
	env:
	type: choice
	options: ["prod"]
	description: "Environment to plan"
	required: true
	default: "prod"

	pull_request:
	merge_group:

	env:
	VAULT_ADDR: ${{ secrets.VAULT_ADDR }}

	jobs:
	matrix-eval:
	name: Prepare environments to be planned
	runs-on: ubuntu-latest
	outputs:
	matrix: ${{ steps.set-matrix.outputs.matrix }}
	steps:
	- name: Set matrix
	id: set-matrix
	env:
	ENV: ${{ github.event.inputs.env }}
	run: \|
	# We only have a single environment, so that's all we need to plan
	# TODO: use the `env` input to determine which environments to plan
	echo "matrix=[\"prod\"]" >> $GITHUB_OUTPUT

	terraform:
	runs-on: ubuntu-latest
	# The following permissions are required for the Vault step used in the
	# Terraform composite action.
	permissions:
	id-token: write
	contents: read
	needs:
	- matrix-eval
	strategy:
	matrix:
	env: ${{ fromJson(needs.matrix-eval.outputs.matrix) }}
	steps:
	- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

	- name: Prepare SSH key
	run: \|
	echo "${{ secrets.BASTION_SSH_KEY }}" > h-hash-prod-usea1-bastionkey.pem

	- uses: ./.github/actions/terraform-exec
	with:
	vault-address: ${{ env.VAULT_ADDR }}
	working-directory: infra/terraform/hash
	command: plan
	env: ${{ matrix.env }}

Provide feedback