---
name: Deploy

on:
  push:
    branches:
      - master

jobs:
  deploy:
    runs-on: almalinux-8
    container:
      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"

    steps:
      - name: Checkout code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Run Terraform Apply
        env:
          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
        run: |
          make apply