Try a different CI setup

.github/workflows/cd.yml

@@ -1,14 +1,9 @@
 name: Continuous Delivery
 on:
-  workflow_run:
-    # Note: if you use multiple workflows here only one will be required
-    # to trigger the deployment.
-    workflows: ["Elixir"]
+  push:
     branches:
       - master
       - cloud
-    types:
-      - completed
 
 # Cancel old workflow runs if new code is pushed
 concurrency:
@@ -16,11 +11,21 @@ concurrency:
   cancel-in-progress: false
 
 jobs:
+  elixir:
+    uses: ./.github/workflows/elixir.yml
+  rust:
+    uses: ./.github/workflows/rust.yml
+  terraform:
+    uses: ./.github/workflows/terraform.yml
   deploy:
     runs-on: ubuntu-latest
     # if: ${{ github.event.workflow_run.conclusion == 'success' }}
     permissions:
       contents: write
+    needs:
+      - elixir
+      - rust
+      - terraform
     env:
       TF_CLOUD_ORGANIZATION: "firezone"
       TF_API_TOKEN: "${{ secrets.TF_API_TOKEN }}"

.github/workflows/elixir.yml

@@ -4,10 +4,11 @@ on:
     paths:
       - "elixir/**"
       - ".github/workflows/elixir.yml"
-  push:
-    branches:
-      - master
-      - cloud
+  workflow_call:
+    inputs:
+      config-path:
+        required: true
+        type: string
 
 # Cancel old workflow runs if new code is pushed
 concurrency:

.github/workflows/pre_commit.yml

@@ -1,8 +1,7 @@
 name: Codespell
 on:
   pull_request:
-  # TODO: Enable this for PRs against `cloud` when chaos settles
-  # pull_request:
+
   push:
     branches:
       - cloud

.github/workflows/rust.yml

@@ -1,13 +1,13 @@
-name: Rust CI
+name: Rust
 on:
   pull_request:
     paths:
-      - 'rust/**'
-  push:
-    branches:
-      - master
-    paths:
-      - 'rust/**'
+      - "rust/**"
+  workflow_call:
+    inputs:
+      config-path:
+        required: true
+        type: string
 
 # Cancel old workflow runs if new code is pushed
 concurrency: