infrastructure/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml

---
name: tofu plan k8s-wheatley
on:
  workflow_dispatch:
  workflow_call:
  pull_request:
    branches:
      - main
    paths:
      - pve01.wheatley.in/k8s-wheatley/**
      - .forgejo/workflows/tofu-plan-k8s-wheatley.yaml

jobs:
  tofu-plan-k8s-wheatley:
    runs-on: docker
    defaults:
      run:
        working-directory: pve01.wheatley.in/k8s-wheatley
    permissions:
      pull-requests: write
    env:
      AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }}
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      TF_VAR_proxmox_endpoint: ${{ secrets.PROXMOX_ENDPOINT }}
      TF_VAR_proxmox_api_token: ${{ secrets.PROXMOX_API_TOKEN }}
      PR_NUMBER: ${{ forge.event.pull_request.number }}
    steps:
      - uses: https://github.com/actions/checkout@v4
      - uses: https://github.com/opentofu/setup-opentofu@v1
        with:
          tofu_version: 1.11.5

      - name: Install deps
        run: |
          apt update
          apt install -y jq

      - name: OpenTofu Init
        id: init
        run: tofu init --upgrade

      - name: OpenTofu Format
        id: fmt
        run: tofu fmt -check

      - name: OpenTofu Validate
        id: validate
        run: tofu validate -no-color

      - name: OpenTofu Plan
        id: plan
        run: tofu plan -no-color
        continue-on-error: true

      - name: debug
        run:
          cat <<'EOF'
          ${{ toJSON(forge) }}
          EOF

      # - name: Fetch existing comments
      #   id: fetch
      #   run: |
      #     response=$(curl -s \
      #       -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
      #       "${{ forge.server_url }}/api/v1/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments")
      #
      #     comment_id=$(echo "$response" | jq -r \
      #       '.[] | select(.body | test("OpenTofu Format and Style")) | .id' | head -n 1)
      #
      #     if [ -z $comment_id ]; then
      #         echo "Unable to fetch comment."
      #         exit 1
      #     fi
      #
      #     echo "comment_id=$comment_id"
      #
      # - name: Upsert comment
      #   id: comment
      #   env:
      #     COMMENT_BODY: |
      #       `#### OpenTofu Format and Style 🖌\`${{ steps.fmt.outcome }}\`
      #       #### OpenTofu Initialization ⚙️\`${{ steps.init.outcome }}\`
      #       #### OpenTofu Validation 🤖\`${{ steps.validate.outcome }}\`
      #       <details><summary>Validation Output</summary>
      #
      #       \`\`\`\n
      #       ${{ steps.validate.outputs.stdout }}
      #       \`\`\`
      #
      #       </details>
      #
      #       #### OpenTofu Plan 📖\`${{ steps.plan.outcome }}\`
      #
      #       <details><summary>Show Plan</summary>
      #
      #       \`\`\`\n
      #       ${process.env.PLAN}
      #       \`\`\`
      #
      #       </details>
      #   run: |
      #     if [ -n "${{ steps.fetch.outputs.comment_id }}" ] && [ "${{ steps.fetch.outputs.comment_id }}" != "null" ]; then
      #       curl -s -X PATCH \
      #         -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
      #         -H "Content-Type: application/json" \
      #         "${{ forge.server_url }}/api/v1/repos/${{ forge.repository }}/issues/comments/${{ steps.fetch.outputs.comment_id }}" \
      #         -d "{\"body\":\"$COMMENT_BODY\"}"
      #     else
      #       curl -s -X POST \
      #         -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
      #         -H "Content-Type: application/json" \
      #         "${{ forge.server_url }}/api/v1/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments" \
      #         -d "{\"body\":\"$COMMENT_BODY\"}"
      #     fi