---
name: Tofu Plan pve01.wheatley.in templates
on:
  workflow_dispatch:
  workflow_call:
  pull_request:
    branches:
      - main
    paths:
      - pve01.wheatley.in/templates/**
      - .forgejo/workflows/**-templates.yaml

jobs:
  tofu-plan-templates:
    runs-on: docker
    defaults:
      run:
        working-directory: pve01.wheatley.in/templates
    permissions:
      pull-requests: write
    env:
      AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }}
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      TF_VAR_proxmox_endpoint: ${{ secrets.PROXMOX_ENDPOINT }}
      TF_VAR_proxmox_api_token: ${{ secrets.PROXMOX_API_TOKEN }}
      PR_NUMBER: ${{ forge.event.pull_request.number }}
    steps:
      - uses: https://github.com/actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
      - uses: https://github.com/opentofu/setup-opentofu@9d84900f3238fab8cd84ce47d658d25dd008be2f # v1
        with:
          tofu_version: 1.11.5

      - name: Install deps
        run: |
          apt update
          apt install -y jq

      - name: OpenTofu Init
        id: init
        run: tofu init --upgrade

      - name: OpenTofu Format
        id: fmt
        run: tofu fmt -check

      - name: OpenTofu Validate
        id: validate
        run: tofu validate -no-color

      - name: OpenTofu Plan
        id: plan
        run: tofu plan -no-color
        continue-on-error: true

      - name: Add comment
        id: comment
        if: always()
        env:
          COMMENT_BODY: |
            ### ${{forge.workflow}}
            #### ${{ steps.fmt.outcome == 'success' && '✅' || '❌' }} OpenTofu Format and Style 🖌
            #### ${{ steps.init.outcome == 'success' && '✅' || '❌' }} OpenTofu Initialization ⚙️
            #### ${{ steps.validate.outcome == 'success' && '✅' || '❌' }} OpenTofu Validation 🤖
            <details><summary>Validation Output</summary>

            ```
            ${{ steps.validate.outputs.stdout }}
            ```

            </details>

            #### ${{ steps.plan.outcome == 'success' && '✅' || '❌' }} OpenTofu Plan 📖

            <details><summary>Show Plan</summary>

            ```
            PLAN_PLACEHOLDER
            ```

            </details>
        run: |
          filtered_plan=$(echo "${{ steps.plan.outputs.stdout }}" | grep -vE '^\s*(module\.|data\.|resource\.).+: (Reading\.\.\.|Read complete after|Refreshing state)' | sed '/./,$!d')
          COMMENT_BODY="${COMMENT_BODY//'PLAN_PLACEHOLDER'/$filtered_plan}"
          payload=$(jq -Rs --arg body "$COMMENT_BODY" '{body: $body}' <<< "$COMMENT_BODY")

          existing_comment=$(curl -s \
            -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
            "${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments")
          comment_id=$(echo "$existing_comment" | jq -r \
            '.[] | select(.body | test("${{ forge.workflow }}")) | .id' | head -n 1)


          if [ -n "${comment_id}" ] && [ "${comment_id}" != "null" ]; then
            echo "Found comment with id ${comment_id}, updating..." && \
            curl -s -X PATCH \
              -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
              -H "Content-Type: application/json" \
              "${{ forge.api_url }}/repos/${{ forge.repository }}/issues/comments/${comment_id}" \
              -d "$payload"
          else
            echo "Creating new comment..." && \
            curl -s -X POST \
              -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
              -H "Content-Type: application/json" \
              "${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments" \
              -d "$payload"
          fi