terraform/.forgejo/workflows/authentik.yaml
Chris Cowley 30fb9c7d0f
Some checks failed
/ non-lab (push) Has been cancelled
re-add outpost
2025-04-02 17:01:01 +02:00

45 lines
1.6 KiB
YAML

on:
push:
branches:
- 'main'
path:
- '**/authentik/*'
jobs:
authentik":
runs-on: ubuntu
steps:
- uses: actions/checkout@v4
with:
sparse-checkout: |
authentik
- name: Setup OpenTofu
run: |
curl -fsSl https://get.opentofu.org/install-opentofu.sh -o /tmp/install-opentofu.sh
chmod +x /tmp/install-opentofu.sh
/tmp/install-opentofu.sh --install-method deb
rm -f /tmp/install-opentofu.sh
- name: Tofu init
working-directory: ${{ github.workspace }}/authentik"
run: |
export KUBE_CONFIG_PATH="/tmp/kubeconfig"
echo ${{ secrets.KUBE_CONFIG_BASE64 }} | base64 -d > ${KUBE_CONFIG_PATH}
export AUTHENTIK_TOKEN=${{ secrets.AUTHENTIK_TOKEN }}
export AUTHENTIK_URL="https://auth.lab.cowley.tech"
tofu init
- name: Tofu Plan
working-directory: ${{ github.workspace }}/authentik"
run: |
export KUBE_CONFIG_PATH="/tmp/kubeconfig"
echo ${{ secrets.KUBE_CONFIG_BASE64 }} | base64 -d > ${KUBE_CONFIG_PATH}
export AUTHENTIK_TOKEN=${{ secrets.AUTHENTIK_TOKEN }}
export AUTHENTIK_URL="https://auth.lab.cowley.tech"
tofu plan -out tfplan
#- name: Tofu Apply
# working-directory: ${{ github.workspace }}/authentik"
# run: |
# export KUBE_CONFIG_PATH="/tmp/kubeconfig"
# echo ${{ secrets.KUBE_CONFIG_BASE64 }} | base64 -d > ${KUBE_CONFIG_PATH}
# export AUTHENTIK_TOKEN=${{ secrets.AUTHENTIK_TOKEN }}
# export AUTHENTIK_URL="https://auth.lab.cowley.tech"
# tofu apply tfplan