tofu.yaml

name: tofu
on:
  push:
    branches:
      - "main"
  schedule:
    - cron: "0 4 * * *"
concurrency:
  group: ${{ github.workflow }}
jobs:
  linode:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: opentofu/setup-opentofu@v1
      - env:
          LINODE_TOKEN: ${{ secrets.LINODE_TOKEN }}
          PG_CONN_STR: ${{ secrets.PG_CONN_STR }}
          TF_VAR_bitwarden_token: ${{ secrets.BITWARDEN_TOKEN }}
          TF_VAR_github_token: ${{ secrets.PAT }}
        run: |
          tofu -chdir=./terraform/linode init -upgrade
      - env:
          LINODE_TOKEN: ${{ secrets.LINODE_TOKEN }}
          PG_CONN_STR: ${{ secrets.PG_CONN_STR }}
        run: |
          tofu -chdir=./terraform/linode \
            apply -auto-approve -input=false -lock=true -no-color \
              -var=kubeconfig=lke.yaml
  oci:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: opentofu/setup-opentofu@v1
      - env:
          PG_CONN_STR: ${{ secrets.PG_CONN_STR }}
          TF_VAR_fingerprint: ${{ secrets.OCI_FINGERPRINT }}
          TF_VAR_private_key: ${{ secrets.OCI_PEM_PRV }}
          TF_VAR_ssh_public_keys: ${{ secrets.SSH_PUB_KEY }}
          TF_VAR_tenancy_ocid: ${{ secrets.OCI_TENANCY_OCID }}
          TF_VAR_user_ocid: ${{ secrets.OCI_USER_OCID }}
        run: |
          tofu -chdir=./terraform/oci init -upgrade
      - env:
          PG_CONN_STR: ${{ secrets.PG_CONN_STR }}
          TF_VAR_fingerprint: ${{ secrets.OCI_FINGERPRINT }}
          TF_VAR_private_key: ${{ secrets.OCI_PEM_PRV }}
          TF_VAR_ssh_public_keys: ${{ secrets.SSH_PUB_KEY }}
          TF_VAR_tenancy_ocid: ${{ secrets.OCI_TENANCY_OCID }}
          TF_VAR_user_ocid: ${{ secrets.OCI_USER_OCID }}
        run: |
          tofu -chdir=./terraform/oci \
            apply -auto-approve -input=false -lock=true -no-color