when:
  event: push

.k8s-limits: &k8s-limits
  backend_options:
    kubernetes:
      resources:
        requests:
          memory: 1024Mi
          cpu: 1000m
        limits:
          memory: 1512Mi
          cpu: 1500m

steps:
  diff:
    <<: *k8s-limits
    image: ghcr.io/helmfile/helmfile:canary
    secrets: [sops_age_key, kubeconfig_content]
    when:
      - branch:
          exclude:
            - main
    commands:
      - mkdir $HOME/.kube
      - echo "$KUBECONFIG_CONTENT" > $HOME/.kube/config && chmod 0600 $HOME/.kube/config
      - helmfile diff --suppress-secrets

  apply:
    <<: *k8s-limits
    image: ghcr.io/helmfile/helmfile:canary
    secrets: [sops_age_key, kubeconfig_content]
    when:
      - branch:
          include:
            - main
    commands:
      - mkdir $HOME/.kube
      - echo "$KUBECONFIG_CONTENT" > $HOME/.kube/config && chmod 0600 $HOME/.kube/config
      - helmfile apply