In our team, we currently manually deploy our Terraform code (namely, the SUSE Registry at registry.suse.com) from our own PCs. This is error prone, as it would be very easy to override something by mistake. I want to create the appropriate .gitlab-ci.yml file that will:

• Deploy a new test registry when we open a new merge request.
• Show the Terraform plan before deploying to production.
• Deploy the changes to production ONLY with manual intervention, after having the chance to review the plan.
• Destroy the test registry after the merge request gets merged and its branch deleted.