kustomization-sync.yaml

---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: "Flux Kustomization Sync"

on:
  workflow_dispatch:
  push:
    branches: ["main"]
    paths: ["kubernetes/utility/**"]

jobs:
  sync:
    name: Flux Kustomization Sync
    runs-on: [home-ops-runner]
    strategy:
      matrix:
         cluster: ["utility"]
    steps:
      - name: Configure 1password
        uses: 1password/load-secrets-action/configure@v2
        with:
          service-account-token: ${{ secrets.ONEPASS_SA_TOKEN }}

      - name: Get Secrets
        uses: 1password/load-secrets-action@v2
        with:
          export-env: true
        env:
          KUBECONFIG_BASE64: op://Kubernetes/kubernetes/KUBECONFIG_BASE64

      - name: Generate Token
        uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ secrets.BOT_APP_ID }}
          private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}

      - name: Checkout
        uses: actions/checkout@v4
        with:
          token: ${{ steps.app-token.outputs.token }}

      - name: Setup Homebrew
        uses: Homebrew/actions/setup-homebrew@master

      - name: Setup Workflow Tools
        run: brew install fluxcd/tap/flux

      - name: Write kubeconfig
        id: kubeconfig
        uses: timheuer/base64-to-file@v1
        with:
          encodedString: ${{ env.KUBECONFIG_BASE64 }}
          fileName: kubeconfig

      - name: Sync Kustomization
        env:
          KUBECONFIG: ${{ steps.kubeconfig.outputs.filePath }}
        shell: bash
        run: |
          flux \
              --context ${{ matrix.cluster }} \
              --namespace flux-system \
              reconcile ks cluster-apps cluster-repos cluster-shared \
              --with-source