name: Talos Platform Deploy

on:
  push:
    branches: [ "main" ]
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest
    container: catthehacker/ubuntu:act-latest
    steps:
      - uses: actions/checkout@v4

      - name: Prepare Kubernetes Access (Talos)
        run: |
          echo "${{ secrets.KUBECONFIG_TALOS }}" > ./talos_kubeconfig
          chmod 600 ./talos_kubeconfig
          test -s ./talos_kubeconfig || { echo "KUBECONFIG_TALOS ist leer oder fehlt"; exit 1; }

      - name: Terraform Deploy
        env:
          TF_VAR_longhorn_basic_auth: ${{ secrets.LONGHORN_BASIC_AUTH }}
        run: |
          terraform init
          terraform apply -auto-approve