56 lines
2.2 KiB
YAML
56 lines
2.2 KiB
YAML
on:
|
|
push:
|
|
branches:
|
|
- 'main'
|
|
#path:
|
|
# - '**/authentik/*.tf
|
|
|
|
jobs:
|
|
authentik:
|
|
runs-on: docker
|
|
#container:
|
|
# image: ghcr.io/opentofu/opentofu:1.7.2
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
sparse-checkout: |
|
|
authentik
|
|
#- uses: https://code.lab.cowley.tech/homelab/forgejo-opentofu-runner@main
|
|
- name: Setup OpenTofu
|
|
run: |
|
|
curl -fsSl https://get.opentofu.org/install-opentofu.sh -o /tmp/install-opentofu.sh
|
|
chmod +x /tmp/install-opentofu.sh
|
|
/tmp/install-opentofu.sh --install-method deb
|
|
rm -f /tmp/install-opentofu.sh
|
|
- name: Tofu init
|
|
working-directory: ${{ github.workspace }}/authentik
|
|
run: |
|
|
export KUBE_CONFIG_PATH="/tmp/kubeconfig"
|
|
echo ${{ secrets.KUBE_CONFIG_BASE64 }} | base64 -d > ${KUBE_CONFIG_PATH}
|
|
export B2_APPLICATION_KEY_ID=${{ secrets.B2_APPLICATION_KEY_ID }}
|
|
export B2_APPLICATION_KEY=${{ secrets.B2_APPLICATION_KEY }}
|
|
tofu init
|
|
- name: Tofu Plan
|
|
working-directory: ${{ github.workspace }}/authentik
|
|
run: |
|
|
export KUBE_CONFIG_PATH="/tmp/kubeconfig"
|
|
echo ${{ secrets.KUBE_CONFIG_BASE64 }} | base64 -d > ${KUBE_CONFIG_PATH}
|
|
export B2_APPLICATION_KEY_ID=${{ secrets.B2_APPLICATION_KEY_ID }}
|
|
export B2_APPLICATION_KEY=${{ secrets.B2_APPLICATION_KEY }}
|
|
export AUTHENTIK_TOKEN=${{ secrets.AUTHENTIK_TOKEN }}
|
|
- export AUTHENTIK_URL="https://auth.lab.cowley.tech"
|
|
tofu plan -out tfplan
|
|
#- uses: https://code.forgejo.org/forgejo/upload-artifact@v4
|
|
# with:
|
|
# name: plan
|
|
# path: ${{ github.workspace }}/authentik/tfplan
|
|
- name: Tofu Apply
|
|
working-directory: ${{ github.workspace }}/authentik
|
|
run: |
|
|
export KUBE_CONFIG_PATH="/tmp/kubeconfig"
|
|
echo ${{ secrets.KUBE_CONFIG_BASE64 }} | base64 -d > ${KUBE_CONFIG_PATH}
|
|
export B2_APPLICATION_KEY_ID=${{ secrets.B2_APPLICATION_KEY_ID }}
|
|
export B2_APPLICATION_KEY=${{ secrets.B2_APPLICATION_KEY }}
|
|
export AUTHENTIK_TOKEN=${{ secrets.AUTHENTIK_TOKEN }}
|
|
- export AUTHENTIK_URL="https://auth.lab.cowley.tech"
|
|
ls -la
|