infrastructure/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml

---
name: tofu plan k8s-wheatley
on:
  workflow_dispatch:
  workflow_call:
  pull_request:
    branches:
      - main
    # paths:
    #   - pve01.wheatley.in/k8s-whealtey/**

jobs:
  tofu-plan-k8s-wheatley:
    runs-on: docker
    steps:
    - uses: actions/checkout@v4
    - uses: opentofu/setup-opentofu@v1

    - name: Setup apt repository
      run: |
        echo "deb http://deb.debian.org/debian bookworm main contrib non-free non-free-firmware" | tee -a /etc/apt/sources.list
        apt update

    - name: Setup Wireguard
      run: |
        apt-cache policy
        echo "Installing Wireguard..."
        apt install resolvconf
        apt install wireguard
        echo "Installing Wireguard ✅"
        echo "Configuring Wireguard..."
        echo "${{ secrets.WG_CONFIG }}" > /tmp/wg0.conf
        chmod 600 wg0.conf
        echo "Configuring Wireguard ✅"
        echo "Starting Wireguard..."
        wg-quick up /tmp/wg0.conf
        echo "Started Wireguard ✅"

    - name: OpenTofu fmt
      id: fmt
      run: tofu fmt -check
      continue-on-error: true

    - name: OpenTofu Init
      id: init
      run: tofu init

    - name: OpenTofu Validate
      id: validate
      run: tofu validate -no-color

    - name: OpenTofu Plan
      id: plan
      run: tofu plan -no-color
      continue-on-error: true