From cadba057d261f20cea2b9644023150918ab13d6a Mon Sep 17 00:00:00 2001
From: pgijsbertsen <117165507+pgijsbertsen@users.noreply.github.com>
Date: Sat, 29 Nov 2025 12:29:13 +0100
Subject: [PATCH 1/2] chore: Return checksum result

---
 .forgejo/workflows/tofu-plan-k8s-wheatley.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml b/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml
index baed17c..0537361 100644
--- a/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml
+++ b/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml
@@ -35,6 +35,7 @@ jobs:
           echo "Downloaded OpenTofu ✅"
           echo "Verifying checksum..."
           printf "%s %s" "${{ env.TOFU_CHECKSUM }}" "${{ env.TOFU_ARCHIVE }}" | sha256sum --check --status
+          echo "Checksum ok ✅"
       working-directory: /tmp
 
 

From 0af3b3a26a749328bf236b4d443daba04b4de89a Mon Sep 17 00:00:00 2001
From: pgijsbertsen <117165507+pgijsbertsen@users.noreply.github.com>
Date: Sat, 29 Nov 2025 12:29:30 +0100
Subject: [PATCH 2/2] fix: Parse tofu env vars in step instead of job

---
 .forgejo/workflows/tofu-plan-k8s-wheatley.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml b/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml
index 0537361..3cfe3e1 100644
--- a/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml
+++ b/.forgejo/workflows/tofu-plan-k8s-wheatley.yaml
@@ -17,8 +17,6 @@ env:
   AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }}
   AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
   AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-  TF_VAR_PROXMOX_API_TOKEN: ${{ secrets.PROXMOX_API_TOKEN }}
-  TF_VAR_PROXMOX_ENDPOINT: ${{ secrets.PROXMOX_ENDPOINT }}
 
 jobs:
   tofu-plan-k8s-wheatley:
@@ -69,6 +67,9 @@ jobs:
 
     - name: OpenTofu Plan
       id: plan
+      env:
+        TF_VAR_PROXMOX_API_TOKEN: ${{ secrets.PROXMOX_API_TOKEN }}
+        TF_VAR_PROXMOX_ENDPOINT: ${{ secrets.PROXMOX_ENDPOINT }}
       run: tofu plan -no-color
       working-directory: ${{ env.TOFU_DIR }}
       continue-on-error: true