From d71f68303266f64a8dd0e08cf753e2cc67a8ae87 Mon Sep 17 00:00:00 2001
From: Matt Reeves <admin@mafyuh.io>
Date: Fri, 14 Feb 2025 00:24:32 -0500
Subject: [PATCH] Update tofu workflow to specify plan output and apply
 changes, and set Flux version to v2.4.0

---
 .forgejo/workflows/tofu.yml | 4 ++--
 terraform/flux/main.tf      | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/tofu.yml b/.forgejo/workflows/tofu.yml
index a459f1d..35c81c5 100644
--- a/.forgejo/workflows/tofu.yml
+++ b/.forgejo/workflows/tofu.yml
@@ -69,7 +69,7 @@ jobs:
         env:
           AWS_ACCESS_KEY_ID: ${{ steps.bitwarden-secrets.outputs.aws_access_key_id }}
           AWS_SECRET_ACCESS_KEY: ${{ steps.bitwarden-secrets.outputs.aws_secret_access_key }}
-        run: tofu plan -no-color
+        run: tofu plan -no-color -parallelism=1 -out=tfplan
 
       - name: Apply the Plan
         if: success()
@@ -77,4 +77,4 @@ jobs:
         env:
           AWS_ACCESS_KEY_ID: ${{ steps.bitwarden-secrets.outputs.aws_access_key_id }}
           AWS_SECRET_ACCESS_KEY: ${{ steps.bitwarden-secrets.outputs.aws_secret_access_key }}
-        run: tofu apply -auto-approve
+        run: tofu apply tfplan -auto-approve
diff --git a/terraform/flux/main.tf b/terraform/flux/main.tf
index 5885325..ef097fd 100644
--- a/terraform/flux/main.tf
+++ b/terraform/flux/main.tf
@@ -17,6 +17,7 @@ provider "flux" {
 
 resource "flux_bootstrap_git" "flux" {
   path               = "kubernetes/cluster/production"
+  version            = "v2.4.0"
 
   lifecycle {
     ignore_changes = all