when:
  event: push


.k8s-limits: &k8s-limits
  backend_options:
    kubernetes:
      resources:
        requests:
          memory: 200Mi
          cpu: 100m
        limits:
          memory: 400Mi
          cpu: 200m

matrix:
  ENVIRONMENT:
    - badhouseplants
    - etersoft
steps:
  diff:
    <<: *k8s-limits
    image: ghcr.io/helmfile/helmfile:canary
    secrets: [sops_age_key, kubeconfig_content]
    when:
      - branch:
          exclude:
            - main
    commands:
      - mkdir $HOME/.kube
      - echo "$KUBECONFIG_CONTENT" > $HOME/.kube/config && chmod 0600 $HOME/.kube/config
      - helmfile -e $ENVIRONMENT diff --suppress-secrets
  apply:
    <<: *k8s-limits
    image: ghcr.io/helmfile/helmfile:canary
    secrets: [sops_age_key, kubeconfig_content]
    when:
      - branch:
          include:
            - main
    commands:
      - mkdir $HOME/.kube
      - echo "$KUBECONFIG_CONTENT" > $HOME/.kube/config && chmod 0600 $HOME/.kube/config
      - helmfile -e $ENVIRONMENT apply