flux-diff.yaml

---
name: "Flux Diff"

on:
  pull_request:
    branches: ["main"]
    paths:
      - "cluster/core/**.yml"
      - "cluster/apps/**.yml"
      - "cluster/core/**.yaml"
      - "cluster/apps/**.yaml"


jobs:
  flux-diff:
    name: Flux Diff
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
    strategy:
      matrix:
        path: ["cluster/flux"]
        resource: ["helmrelease", "kustomization"]
    steps:
      - name: Generate Token
        uses: tibdex/github-app-token@v1
        id: generate-token
        with:
          app_id: "${{ secrets.BOT_APP_ID }}"
          private_key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

      - name: Diff Resources
        uses: allenporter/flux-local/action/diff@3.1.1
        id: diff
        with:
          path: "${{ matrix.path }}"
          resource: "${{ matrix.resource }}"

      - if: ${{ steps.diff.outputs.diff != '' }}
        name: Add comment
        uses: mshick/add-pr-comment@v2.8.1
        with:
          repo-token: "${{ steps.generate-token.outputs.token }}"
          message-id: "${{ github.event.pull_request.number }}/${{ matrix.path }}/${{ matrix.resource }}"
          message-failure: Diff was not successful
          message: |
            ```diff
            ${{ steps.diff.outputs.diff }}
            ```