argocd-diff.yml

name: ArgoCD Diff

on:
  pull_request:
    branches:
      - main

jobs:
  argocd-diff:
    name: Generate ArgoCD Diff
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: tailscale/github-action@v2
        with:
          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
          tags: tag:ghactions
          # renovate: datasource=github-releases depName=tailscale/tailscale
          version: 1.60.1

      - uses: arduino/setup-task@v1
        with:
          version: 3.x
          repo-token: ${{ secrets.GITHUB_TOKEN }}

      - uses: clowdhaus/argo-cd-action@main
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          # renovate: datasource=github-releases depName=argoproj/argo-cd
          version: 2.10.2
          command: version
          options: --grpc-web --auth-token ${{ secrets.ARGOCD_TOKEN }} --server argocd.tailnet-4d89.ts.net

      - run: task apps:overlays:diff-pr-all -- --grpc-web --revision ${{ github.event.pull_request.head.sha }}
        env:
          ARGOCD_SERVER: argocd.tailnet-4d89.ts.net
          ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_TOKEN }}
          outputFile: "${{ github.workspace }}/.local/diff-pr-all.md"

      - name: Post diff in comment
        uses: mshick/add-pr-comment@v2
        with:
          message-id: argocd-diff
          message-path: "${{ github.workspace }}/.local/diff-pr-all.md"