when:
  - event: push
    branch: main

steps:
  - name: apply
    image: git.unkin.net/unkin/almalinux9-opentofu:20260606
    environment:
      VAULT_AUTH_METHOD: kubernetes
    commands:
      - dnf install vault -y
      - make plan
      - make apply
    backend_options:
      kubernetes:
        serviceAccountName: terraform-artifactapi
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2