image-pull.yaml

---
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Image Pull

on:
  pull_request:
    branches: ["main"]
    paths:
      - "kubernetes/main/**"
      - "kubernetes/repositories/**"

concurrency:
  group: ${{ github.ref }}-${{ github.workflow }}
  cancel-in-progress: true

jobs:
  setup:
    name: Image Pull - Setup
    runs-on: ubuntu-latest
    outputs:
      any_changed: ${{ steps.changed-files.outputs.any_changed }}
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

      - name: Get Changed Files
        id: changed-files
        uses: tj-actions/changed-files@dcc7a0cba800f454d79fff4b993e8c3555bcc0a8 # v45
        with:
          files: kubernetes/main/**

  extract:
    if: ${{ needs.setup.outputs.any_changed == 'true' }}
    name: Image Pull - Extract Images
    needs: setup
    runs-on: ubuntu-latest
    strategy:
      matrix:
        branches: ["default", "pull"]
      fail-fast: false
    outputs:
      default: ${{ steps.images.outputs.default }}
      pull: ${{ steps.images.outputs.pull }}
    steps:
      - name: Checkout
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
        with:
          ref: "${{ matrix.branches == 'default' && github.event.repository.default_branch || '' }}"

      - name: Gather Images
        uses: docker://ghcr.io/allenporter/flux-local:v7.2.0@sha256:892796649505f52f9ad0c4247416b3b161e0f4f49e55a1a73626c98d3def978c
        with:
          args: >-
            get cluster
            --all-namespaces
            --path /github/workspace/kubernetes/main/cluster/config
            --enable-images
            --only-images
            --output json
            --output-file images.json

      - name: Output Images
        id: images
        run: |
          echo "${{ matrix.branches }}=$(jq --compact-output '.' images.json)" >> "${GITHUB_OUTPUT}"

          {
            echo '## Branch ${{ matrix.branches }} images'
            echo '```json'
            jq '.' images.json
            echo '```'
          } >> "${GITHUB_STEP_SUMMARY}"

  compare:
    if: ${{ needs.setup.outputs.any_changed == 'true' && needs.extract.outputs.default != needs.extract.outputs.pull }}
    name: Image Pull - Compare Images
    runs-on: ubuntu-latest
    needs: ["setup", "extract"]
    outputs:
      images: ${{ steps.compare.outputs.images }}
    steps:
      - name: Compare Images
        id: compare
        run: |
          images=$(jq --compact-output --null-input \
              --argjson f1 '${{ needs.extract.outputs.default }}' \
              --argjson f2 '${{ needs.extract.outputs.pull }}' \
              '$f2 - $f1' \
          )
          echo "images=${images}" >> "${GITHUB_OUTPUT}"

          {
            echo '## New images to Pull'
            echo '```json'
            echo "${images}" | jq
            echo '```'
          } >> "${GITHUB_STEP_SUMMARY}"

  pull:
    if: ${{ needs.setup.outputs.any_changed == 'true' && needs.compare.outputs.images != '[]' }}
    name: Image Pull - Pull Images
    runs-on: k8s-homelab-runner
    needs: ["setup", "compare"]
    strategy:
      matrix:
        images: ${{ fromJSON(needs.compare.outputs.images) }}
      max-parallel: 4
      fail-fast: false
    steps:
      - name: Install talosctl
        run: curl -fsSL https://talos.dev/install | sh

      - name: Pull Image
        run: talosctl -n "${NODE_IP}" image pull ${{ matrix.images }}

  status:
    if: ${{ always() }}
    name: Image Pull - Success
    needs: pull
    runs-on: ubuntu-latest
    steps:
      - name: Any jobs failed?
        if: ${{ contains(needs.*.result, 'failure') }}
        run: exit 1

      - name: All jobs passed or skipped?
        if: ${{ !(contains(needs.*.result, 'failure')) }}
        run: echo "All jobs passed or skipped" && echo "${{ toJSON(needs.*.result) }}"