devtools/.github/workflows/flux-diff.yml

---
name: "Flux Diff"

on:
  pull_request:
    paths: ["kubernetes/**", "templates/kubernetes/**", ".github/workflows/flux-diff.yml"]

jobs:
  flux-diff:
    name: Flux Diff
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: read
      pull-requests: write
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0

      - name: Setup flate
        uses: home-operations/flate/action@bf3405a189626478b0aa6ec98dc4d6f7d419df17 # v0.4.12
        with:
          base: "origin/${{ github.event.pull_request.base.ref }}"
          cache: true

      - name: Diff Resources
        id: diff
        run: |
          flate diff all --path ./kubernetes --allow-missing-secrets -o github > diff.txt
          {
            echo 'diff<<DIFF_EOF'
            cat diff.txt
            echo 'DIFF_EOF'
          } >> "${GITHUB_OUTPUT}"

      - if: ${{ steps.diff.outputs.diff != '' }}
        name: Add comment
        uses: immich-app/devtools/actions/sticky-comment@0135acd12ad9f3369b94a2aa3c0ae8c835a4e926 # sticky-comment-action-v1.0.0
        with:
          id: "flux-diff"
          body: |
            ```diff
            ${{ steps.diff.outputs.diff }}
            ```