From 1c3ce4ebaf899dda0fcb2162e8420eea93446b0d Mon Sep 17 00:00:00 2001
From: Lukas M <lukas.mrtvy@gmail.com>
Date: Wed, 21 Aug 2024 13:35:57 +0200
Subject: [PATCH] chore: enable tailscale in reusable workflow for helmfile
 deployment (#123)

---
 .github/workflows/deploy_helmfile.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/deploy_helmfile.yaml b/.github/workflows/deploy_helmfile.yaml
index 8ba107e..289661e 100644
--- a/.github/workflows/deploy_helmfile.yaml
+++ b/.github/workflows/deploy_helmfile.yaml
@@ -58,6 +58,10 @@ on:
         required: false
         type: string
         default: apply --suppress-secrets
+      enableVpn:
+        description: Enable VPN connection
+        required: false
+        default: true
 
     secrets:
       awsAccessKeyId:
@@ -176,6 +180,14 @@ jobs:
       - name: setup kubeconfig
         run: aws eks update-kubeconfig --name ${{ inputs.eksClusterName }} $OPTIONAL_PARAMS
 
+      - name: Tailscale VPN
+        uses: tailscale/github-action@v2
+        if: inputs.enableVpn
+        with:
+          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
+          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
+          tags: tag:ci
+
       - name: helmfile ${{ inputs.helmfileCommand }}
         run: |
           export $(echo ${{ inputs.envVariables }})