Update .gitlab-ci.yml

.gitlab-ci.yml

 # This file is a template, and might need editing before it works on your project.
-# To contribute improvements to CI/CD templates, please follow the Development guide at:
-# https://docs.gitlab.com/ee/development/cicd/templates.html
-# This specific template is located at:
-# https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Terraform.gitlab-ci.yml
-
-#include:
- # - template: Terraform/Base.gitlab-ci.yml  # https://gitlab.com/gitlab-org/gitlab/blob/master/lib/gitlab/ci/templates/Terraform/Base.latest.gitlab-ci.yml
-
+# Official image for Hashicorp's Terraform. It uses light image which is Alpine
+# based as it is much lighter.
+#
+# Entrypoint is also needed as image by default set `terraform` binary as an
+# entrypoint.
+image:
+  name: hashicorp/terraform:light
+  entrypoint:
+    - '/usr/bin/env'
+    - 'PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
+
+# Default output file for Terraform plan
 variables:
-  TF_VAR_ACCESS_KEY: ${AWS_ACCESS_KEY_ID}
-  TF_VAR_SECRET_KEY: ${AWS_SECRET_ACCESS_KEY}
-  TF_VAR_AWS_REGION: ${AWS_DEFAULT_REGION}
+  PLAN: plan.tfplan
+
+cache:
+  paths:
+    - .terraform
 
+before_script:
+  - terraform --version
+  - terraform init
 
 stages:
-  - install
+  - validate
   - build
-  - plan
-  - apply
-  - destroy
-
-.common:
-    image:
-      name: hashicorp/terraform:0.14.2
-
-install:
-  tags:
-    - rr
-  stage: install
-  script:
-    -curl -o terraform.zip https://releases.hashicorp.com/terraform/0.12.2/terraform_0.12.2_linux_amd64.zip
-    - 
-  only:
-    - master
+  - test
+  - deploy
 
-build:
-  tags:
-    - rr
-  stage: build
+validate:
+  stage: validate
   script:
-    - terraform --version
-    - terraform init
-  only:
-    - master
-
-
+    - terraform validate
 
 plan:
-  tags:
-    - rr
-  stage: plan
+  stage: build
   script:
-    - terraform plan
-  only:
-    - master
-
+    - terraform plan -out=$PLAN
+  artifacts:
+    name: plan
+    paths:
+      - $PLAN
+
+# Separate apply job for manual launching Terraform as it can be destructive
+# action.
 apply:
-  tags:
-    - rr
-  stage: apply
+  stage: deploy
+  environment:
+    name: production
   script:
-    - terraform apply
+    - terraform apply -input=false $PLAN
   dependencies:
-    - build
+    - plan
   when: manual
   only:
     - master
-
-
-destroy:
-  tags:
-    - rr
-  stage: destroy
-  script:
-    - echo "Destroying resources"
-    - terraform destroy
-  dependencies:
-    - apply
-  when: manual
-  only:
-    refs:
-      - master
-