add apply workflows
All checks were successful
Tofu Plan k8s-wheatley / tofu-plan-k8s-wheatley (pull_request) Successful in 30s
Tofu Plan pve01.wheatley.in templates / tofu-plan-templates (pull_request) Successful in 28s

This commit is contained in:
Peter 2026-02-18 22:54:04 +01:00
parent 754ab6fc26
commit bfa6978ebe
Signed by: Peter
SSH key fingerprint: SHA256:B5tYaxBExaDm74r1px9iVeZ6F/ZDiyiy9SbBqfZYrvg
2 changed files with 218 additions and 0 deletions

View file

@ -0,0 +1,109 @@
---
name: Tofu Apply k8s-wheatley
on:
workflow_call:
push:
branches:
- main
paths:
- pve01.wheatley.in/k8s-wheatley/**
jobs:
tofu-apply-k8s-wheatley:
runs-on: docker
defaults:
run:
working-directory: pve01.wheatley.in/k8s-wheatley
permissions:
pull-requests: write
env:
AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }}
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
TF_VAR_proxmox_endpoint: ${{ secrets.PROXMOX_ENDPOINT }}
TF_VAR_proxmox_api_token: ${{ secrets.PROXMOX_API_TOKEN }}
PR_NUMBER: ${{ forge.event.pull_request.number }}
steps:
- uses: https://github.com/actions/checkout@v4
- uses: https://github.com/opentofu/setup-opentofu@v1
with:
tofu_version: 1.11.5
- name: Install deps
run: |
apt update
apt install -y jq
- name: OpenTofu Init
id: init
run: tofu init --upgrade
- name: OpenTofu Format
id: fmt
run: tofu fmt -check
- name: OpenTofu Validate
id: validate
run: tofu validate -no-color
- name: OpenTofu Plan
id: plan
run: tofu plan -no-color
continue-on-error: true
- name: OpenTofu Apply
id: apply
run: tofu apply -auto-approve -no-color
continue-on-error: true
- name: Add comment
id: comment
if: always()
env:
COMMENT_BODY: |
### ${{forge.workflow}}
#### ${{ steps.fmt.outcome == 'success' && '✅' || '❌' }} OpenTofu Format and Style 🖌
#### ${{ steps.init.outcome == 'success' && '✅' || '❌' }} OpenTofu Initialization ⚙️
#### ${{ steps.validate.outcome == 'success' && '✅' || '❌' }} OpenTofu Validation 🤖
<details><summary>Validation Output</summary>
```
${{ steps.validate.outputs.stdout }}
```
</details>
#### ${{ steps.apply.outcome == 'success' && '✅' || '❌' }} OpenTofu Apply 🚀
<details><summary>Show Apply</summary>
```
${{ steps.apply.outputs.stdout }}
```
</details>
run: |
payload=$(jq -Rs --arg body "$COMMENT_BODY" '{body: $body}' <<< "$COMMENT_BODY")
existing_comment=$(curl -s \
-H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
"${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments")
comment_id=$(echo "$existing_comment" | jq -r \
'.[] | select(.body | test("${{ forge.workflow }}")) | .id' | head -n 1)
if [ -n "${comment_id}" ] && [ "${comment_id}" != "null" ]; then
echo "Found comment with id ${comment_id}, updating..." && \
curl -s -X PATCH \
-H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
-H "Content-Type: application/json" \
"${{ forge.api_url }}/repos/${{ forge.repository }}/issues/comments/${comment_id}" \
-d "$payload"
else
echo "Creating new comment..." && \
curl -s -X POST \
-H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
-H "Content-Type: application/json" \
"${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments" \
-d "$payload"
fi

View file

@ -0,0 +1,109 @@
---
name: Tofu Apply pve01.wheatley.in templates
on:
workflow_call:
push:
branches:
- main
paths:
- pve01.wheatley.in/templates/**
jobs:
tofu-apply-templates:
runs-on: docker
defaults:
run:
working-directory: pve01.wheatley.in/templates
permissions:
pull-requests: write
env:
AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }}
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
TF_VAR_proxmox_endpoint: ${{ secrets.PROXMOX_ENDPOINT }}
TF_VAR_proxmox_api_token: ${{ secrets.PROXMOX_API_TOKEN }}
PR_NUMBER: ${{ forge.event.pull_request.number }}
steps:
- uses: https://github.com/actions/checkout@v4
- uses: https://github.com/opentofu/setup-opentofu@v1
with:
tofu_version: 1.11.5
- name: Install deps
run: |
apt update
apt install -y jq
- name: OpenTofu Init
id: init
run: tofu init --upgrade
- name: OpenTofu Format
id: fmt
run: tofu fmt -check
- name: OpenTofu Validate
id: validate
run: tofu validate -no-color
- name: OpenTofu Plan
id: plan
run: tofu plan -no-color
continue-on-error: true
- name: OpenTofu Apply
id: apply
run: tofu apply -auto-approve -no-color
continue-on-error: true
- name: Add comment
id: comment
if: always()
env:
COMMENT_BODY: |
### ${{forge.workflow}}
#### ${{ steps.fmt.outcome == 'success' && '✅' || '❌' }} OpenTofu Format and Style 🖌
#### ${{ steps.init.outcome == 'success' && '✅' || '❌' }} OpenTofu Initialization ⚙️
#### ${{ steps.validate.outcome == 'success' && '✅' || '❌' }} OpenTofu Validation 🤖
<details><summary>Validation Output</summary>
```
${{ steps.validate.outputs.stdout }}
```
</details>
#### ${{ steps.apply.outcome == 'success' && '✅' || '❌' }} OpenTofu Apply 🚀
<details><summary>Show Apply</summary>
```
${{ steps.apply.outputs.stdout }}
```
</details>
run: |
payload=$(jq -Rs --arg body "$COMMENT_BODY" '{body: $body}' <<< "$COMMENT_BODY")
existing_comment=$(curl -s \
-H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
"${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments")
comment_id=$(echo "$existing_comment" | jq -r \
'.[] | select(.body | test("${{ forge.workflow }}")) | .id' | head -n 1)
if [ -n "${comment_id}" ] && [ "${comment_id}" != "null" ]; then
echo "Found comment with id ${comment_id}, updating..." && \
curl -s -X PATCH \
-H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
-H "Content-Type: application/json" \
"${{ forge.api_url }}/repos/${{ forge.repository }}/issues/comments/${comment_id}" \
-d "$payload"
else
echo "Creating new comment..." && \
curl -s -X POST \
-H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
-H "Content-Type: application/json" \
"${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments" \
-d "$payload"
fi