Fix ci and add sa name tp the job

.woodpecker/helmfile.yaml

@@ -5,30 +5,10 @@ matrix:
   include:
     - NAME: badhouseplants
       ENV: badhouseplants
-steps:
-  test:
-    image: ghcr.io/helmfile/helmfile:latest
-    commands:
-      - kubectl get all -A
-    backend_options:
-      kubernetes:
-        serviceAccountName: woodpecker-ci
-        resources:
-          requests:
-            memory: 500Mi
-            cpu: 200m
-          limits:
-            memory: 500Mi
-            cpu: 200m
-  build:
-    image: ghcr.io/helmfile/helmfile:latest
-    commands:
-      - mkdir ~/.kube
-      - echo $K8S_CONFIG | base64 -d > ~/.kube/config
-      - helmfile -e "${ENV}" diff
+.opts: &opts
   secrets:
-      - k8s_config
     - sops_age_key
+  image: ghcr.io/helmfile/helmfile:latest
   backend_options:
     kubernetes:
       serviceAccountName: woodpecker-ci
@@ -39,3 +19,20 @@ steps:
         limits:
           memory: 500Mi
           cpu: 200m
+steps:
+  diff:
+    !!merge <<: *opts
+    when:
+      - branch:
+          exclude:
+            - main
+    commands:
+      - helmfile -e "${ENV}" diff
+  diff:
+    !!merge <<: *opts
+    when:
+      - branch:
+          include:
+            - main
+    commands:
+      - helmfile -e "${ENV}" apply