---
name: Build

on:
  pull_request:

jobs:
  build:
    runs-on: almalinux-8
    container:
      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"

    steps:
      - name: Checkout code
        uses: actions/checkout@v3
        with:
          fetch-depth: 0

      - name: Fetch master branch
        run: |
          git fetch origin master:master

      - name: Show changed files
        run: |
          git diff --name-only master

      - name: Run Terraform Plan
        env:
          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
          TERRAFORM_VERSION: "1.15.0"
        run: |
          curl -fsSL -o /tmp/terraform.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/terraform.zip /tmp/ && install -m0755 /tmp/terraform /usr/local/bin/terraform && rm -f /tmp/terraform.zip /tmp/terraform /tmp/LICENSE.txt
          make plan