flux-diff.yaml

---
name: "Flux Diff"

on:
  pull_request:
    branches:
      - main
    paths:
      - kubernetes/**

concurrency:
  group: ${{ github.ref }}-${{ github.workflow }}
  cancel-in-progress: true

jobs:
  changed-files:
    name: Get Changed Files
    runs-on: ubuntu-latest
    outputs:
      matrix: ${{ steps.changed-files.outputs.all_changed_and_modified_files }}
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          fetch-depth: 0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@bab30c2299617f6615ec02a68b9a40d10bd21366 # v45
        with:
          files: kubernetes/**
          dir_names: true
          dir_names_max_depth: 2
          json: true
          quotepath: false
          escape_json: false

      - name: List all changed files
        run: echo "${{ steps.changed-files.outputs.all_changed_and_modified_files }}"

  flux-diff:
    name: Flux Diff
    runs-on: ubuntu-latest
    needs:
      - changed-files
    permissions:
      pull-requests: write
    if: ${{ needs.changed-files.outputs.matrix != '[]' }}
    strategy:
      matrix:
        paths:
          - kubernetes
        resources:
          - helmrelease
          - kustomization
      max-parallel: 4
      fail-fast: false
    steps:
      - name: Generate Token
        uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1
        if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
        id: app-token
        with:
          app-id: "${{ secrets.BOT_APP_ID }}"
          private-key: "${{ secrets.BOT_APP_PRIVATE_KEY }}"

      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

      - name: Install Flux
        uses: fluxcd/flux2/action@main
        with:
          version: "latest"

      - name: Setup yq
        uses: frenck/action-setup-yq@c4b5be8b4a215c536a41d436757d9feb92836d4f # v1

      - name: Diff Resources
        uses: allenporter/flux-local/action/diff@2e44db0a138ad1fb071b146d332e5d2cc0a1f170 # 6.1.0
        id: diff
        with:
          sources: home-ops-kubernetes
          path: "${{ matrix.paths }}"
          resource: "${{ matrix.resources }}"

      - name: Add comment
        if: ${{ steps.diff.outputs.diff != '' && github.event.pull_request.head.repo.full_name == github.repository }}
        uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
        with:
          repo-token: "${{ steps.app-token.outputs.token }}"
          message-id: "${{ github.event.pull_request.number }}/${{ matrix.paths }}/${{ matrix.resources }}"
          message-failure: Diff was not successful
          message: |
            ```diff
            ${{ steps.diff.outputs.diff }}
            ```

  flux-diff-success:
    needs:
      - flux-diff
    if: ${{ always() }}
    name: Flux Diff successful
    runs-on: ubuntu-latest
    steps:
      - name: Check matrix status
        if: >-
          ${{
               contains(needs.*.result, 'failure')
            || contains(needs.*.result, 'cancelled')
          }}
        run: exit 1