aro-hcp-dev-what-if.yml

---
name: ARO HCP Integrated DEV Bicep What-If
env:
  DEPLOY_ENV: dev
  DEPLOYMENT_NAME_SUFFIX: "-dev-${GITHUB_RUN_ID}"
  AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
  AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
  AZURE_SUBSCRIPTION_ID: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
  PRINCIPAL_ID: ${{ secrets.GHA_PRINCIPAL_ID }}
on:
  pull_request:
    branches:
      - main
    paths:
      - 'config/config.yaml'
      - 'dev-infrastructure/**/*.bicep'
      - 'dev-infrastructure/**/*.bicepparam'
      - 'dev-infrastructure/Makefile'
      - '.github/workflows/aro-hcp-dev-what-if.yml'

jobs:
  what-if:
    permissions:
      id-token: 'write'
      contents: 'read'
    runs-on: 'ubuntu-latest'
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        with:
          fetch-depth: 1

      - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
        with:
          version: 'v3.13.3'

      - name: 'Install helm diff'
        run: |
          helm plugin install https://github.com/databus23/helm-diff

      - name: "install azure-cli"
        uses: "Azure/ARO-HCP@main"

      - name: 'Az CLI login'
        uses: azure/login@a65d910e8af852a8061c627c456678983e180302 # v2.2.0
        with:
            client-id: ${{ secrets.AZURE_CLIENT_ID }}
            tenant-id: ${{ secrets.AZURE_TENANT_ID }}
            subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}

      - uses: azure/setup-kubectl@3e0aec4d80787158d308d7b364cb1b702e7feb7f # v4.0.0

      - uses: azure/use-kubelogin@76597ae0fcbaace21b05e13a2cbf8daee2c6e820 # v1.2
        with:
          kubelogin-version: 'v0.1.3'

      - name: 'Deployment What If'
        run: |
          cd dev-infrastructure/
          make what-if