clan-infra/targets/admins/tf.sh

#!/usr/bin/env bash
set -euo pipefail

rm -f .terraform.lock.hcl
if grep -q .sops terraform.tfstate; then
  sops -i -d terraform.tfstate
  if [[ -f secrets.auto.tfvars.sops.json ]]; then
    sops -d secrets.auto.tfvars.sops.json > secrets.auto.tfvars.json
  fi
fi
cleanup() {
  rm -f secrets.auto.tfvars.json
  sops -i -e terraform.tfstate
}

trap "cleanup" EXIT
terraform init
terraform "$@"