when:
  - event: pull_request

steps:
  - name: plan
    image: git.unkin.net/unkin/almalinux9-opentofu:20260606
    environment:
      VAULT_AUTH_METHOD: kubernetes
    commands:
      - dnf install vault -y
      - make plan
    backend_options:
      kubernetes:
        serviceAccountName: terraform-git
        resources:
          requests:
            memory: 512Mi
            cpu: 1
          limits:
            memory: 2Gi
            cpu: 2