---
name: Tofu Apply pve01.wheatley.in templates
on:
  workflow_call:
  push:
    branches:
      - main
    paths:
      - pve01.wheatley.in/templates/**

jobs:
  tofu-apply-templates:
    runs-on: docker
    defaults:
      run:
        working-directory: pve01.wheatley.in/templates
    permissions:
      pull-requests: write
    env:
      AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }}
      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
      TF_VAR_proxmox_endpoint: ${{ secrets.PROXMOX_ENDPOINT }}
      TF_VAR_proxmox_api_token: ${{ secrets.PROXMOX_API_TOKEN }}
    steps:
      - uses: https://github.com/actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
      - uses: https://github.com/opentofu/setup-opentofu@9d84900f3238fab8cd84ce47d658d25dd008be2f # v1
        with:
          tofu_version: 1.11.5

      - name: Install deps
        run: |
          apt update
          apt install -y jq

      - name: OpenTofu Init
        id: init
        run: tofu init --upgrade

      - name: OpenTofu Format
        id: fmt
        run: tofu fmt -check

      - name: OpenTofu Validate
        id: validate
        run: tofu validate -no-color

      - name: OpenTofu Plan
        id: plan
        run: tofu plan -no-color
        continue-on-error: true

      - name: OpenTofu Apply
        id: apply
        run: tofu apply -auto-approve -no-color
        continue-on-error: true

      - name: Get merged PR
        id: pr
        run: |
          pr_number=$(curl -s \
            -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
            "${{ forge.api_url }}/repos/${{ forge.repository }}/commits/${{ forge.sha }}/pull" \
            | jq -r '.number // empty')

          echo "${pr_number}"

      - name: Add comment
        id: comment
        if: always()
        env:
          PR_NUMBER: ${{ steps.pr.outputs.stdout }}
          COMMENT_BODY: |
            ### ${{forge.workflow}}
            #### ${{ steps.fmt.outcome == 'success' && '✅' || '❌' }} OpenTofu Format and Style 🖌
            #### ${{ steps.init.outcome == 'success' && '✅' || '❌' }} OpenTofu Initialization ⚙️
            #### ${{ steps.validate.outcome == 'success' && '✅' || '❌' }} OpenTofu Validation 🤖
            <details><summary>Validation Output</summary>

            ```
            ${{ steps.validate.outputs.stdout }}
            ```

            </details>

            #### ${{ steps.apply.outcome == 'success' && '✅' || '❌' }} OpenTofu Apply 🚀

            <details><summary>Show Apply</summary>

            ```
            ${{ steps.apply.outputs.stdout }}
            ```

            </details>
        run: |
          payload=$(jq -Rs --arg body "$COMMENT_BODY" '{body: $body}' <<< "$COMMENT_BODY")

          existing_comment=$(curl -s \
            -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
            "${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments")
          comment_id=$(echo "$existing_comment" | jq -r \
            '.[] | select(.body | test("${{ forge.workflow }}")) | .id' | head -n 1)


          if [ -n "${comment_id}" ] && [ "${comment_id}" != "null" ]; then
            echo "Found comment with id ${comment_id}, updating..." && \
            curl -s -X PATCH \
              -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
              -H "Content-Type: application/json" \
              "${{ forge.api_url }}/repos/${{ forge.repository }}/issues/comments/${comment_id}" \
              -d "$payload"
          else
            echo "Creating new comment on PR $PR_NUMBER..." && \
            curl -s -X POST \
              -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
              -H "Content-Type: application/json" \
              "${{ forge.api_url }}/repos/${{ forge.repository }}/issues/$PR_NUMBER/comments" \
              -d "$payload"
          fi