name: Terraform Plan

on:
  pull_request:
    branches: [main]

jobs:
  plan:
    name: Terraform Plan - BCN01-LAB
    runs-on: self-hosted
    permissions:
      pull-requests: write

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Configure git SSH
        run: git config --global url."git@github.mpi-internal.com:".insteadOf "https://github.mpi-internal.com/"

      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          terraform_version: 1.5.0

      - name: Terraform Init
        working-directory: sites/BCN01-LAB
        run: terraform init
        env:
          AWS_ACCESS_KEY_ID:     ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_REGION:            us-east-1

      - name: Terraform Plan
        id: plan
        working-directory: sites/BCN01-LAB
        run: terraform plan -no-color 2>&1 | tee plan_output.txt
        env:
          AWS_ACCESS_KEY_ID:           ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY:       ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_REGION:                  us-east-1
          MERAKI_DASHBOARD_API_KEY:    ${{ secrets.MERAKI_DASHBOARD_API_KEY }}
          TF_VAR_radius_secret:        ${{ secrets.RADIUS_SECRET }}

      - name: Comentar Plan en el PR
        uses: actions/github-script@v7
        if: always()
        with:
          script: |
            const fs = require('fs');
            const plan = fs.readFileSync('sites/BCN01-LAB/plan_output.txt', 'utf8');
            const truncated = plan.length > 60000 ? plan.substring(0, 60000) + '\n...(truncado)' : plan;
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: `## Terraform Plan - BCN01-LAB\n\`\`\`\n${truncated}\n\`\`\``
            });