--- name: tofu plan k8s-wheatley on: workflow_dispatch: workflow_call: pull_request: branches: - main paths: - pve01.wheatley.in/k8s-wheatley/** - .forgejo/workflows/tofu-plan-k8s-wheatley.yaml jobs: tofu-plan-k8s-wheatley: runs-on: docker defaults: run: working-directory: pve01.wheatley.in/k8s-wheatley permissions: pull-requests: write env: AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }} AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} TF_VAR_proxmox_endpoint: ${{ secrets.PROXMOX_ENDPOINT }} TF_VAR_proxmox_api_token: ${{ secrets.PROXMOX_API_TOKEN }} PR_NUMBER: ${{ forge.event.pull_request.number }} steps: - uses: https://github.com/actions/checkout@v4 - uses: https://github.com/opentofu/setup-opentofu@v1 with: tofu_version: 1.11.5 - name: Install deps run: | apt update apt install -y jq - name: OpenTofu Init id: init run: tofu init --upgrade - name: OpenTofu Format id: fmt run: tofu fmt -check - name: OpenTofu Validate id: validate run: tofu validate -no-color - name: OpenTofu Plan id: plan run: tofu plan -no-color continue-on-error: true - name: debug run: echo "${{ toJSON(forge) }}" # - name: Fetch existing comments # id: fetch # run: | # response=$(curl -s \ # -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \ # "${{ forge.server_url }}/api/v1/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments") # # comment_id=$(echo "$response" | jq -r \ # '.[] | select(.body | test("OpenTofu Format and Style")) | .id' | head -n 1) # # if [ -z $comment_id ]; then # echo "Unable to fetch comment." # exit 1 # fi # # echo "comment_id=$comment_id" # # - name: Upsert comment # id: comment # env: # COMMENT_BODY: | # `#### OpenTofu Format and Style 🖌\`${{ steps.fmt.outcome }}\` # #### OpenTofu Initialization ⚙️\`${{ steps.init.outcome }}\` # #### OpenTofu Validation 🤖\`${{ steps.validate.outcome }}\` #
Validation Output # # \`\`\`\n # ${{ steps.validate.outputs.stdout }} # \`\`\` # #
# # #### OpenTofu Plan 📖\`${{ steps.plan.outcome }}\` # #
Show Plan # # \`\`\`\n # ${process.env.PLAN} # \`\`\` # #
# run: | # if [ -n "${{ steps.fetch.outputs.comment_id }}" ] && [ "${{ steps.fetch.outputs.comment_id }}" != "null" ]; then # curl -s -X PATCH \ # -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \ # -H "Content-Type: application/json" \ # "${{ forge.server_url }}/api/v1/repos/${{ forge.repository }}/issues/comments/${{ steps.fetch.outputs.comment_id }}" \ # -d "{\"body\":\"$COMMENT_BODY\"}" # else # curl -s -X POST \ # -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \ # -H "Content-Type: application/json" \ # "${{ forge.server_url }}/api/v1/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments" \ # -d "{\"body\":\"$COMMENT_BODY\"}" # fi