chore(oci/postgres-init): update 16.6 ➼ c1d3a84 #29368

	---
	name: "Flux Diff"

	on:
	pull_request:
	branches: ["main"]
	paths: ["kube/**.yaml"]

	jobs:
	flux-diff:
	name: Flux Diff
	runs-on: ubuntu-latest
	permissions:
	pull-requests: write
	strategy:
	matrix:
	path: ["kube"]
	resource: ["helmrelease", "kustomization"]
	steps:
	- name: "Generate Short Lived OAuth App Token (ghs_*)"
	uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
	id: oauth-token
	with:
	app-id: "${{ secrets.BOT_APP_ID }}" # $BOT_APP_ID is found in GitHub App main settings page
	private-key: "${{ secrets.BOT_JWT_PRIVATE_KEY }}" # $BOT_JWT_PRIVATE_KEY is generated in GitHub App main settings page, uses the X.509 private key format

	- name: Setup Flux
	uses: fluxcd/flux2/action@534684601ec8888beb0cc4f51117b59e97606c4d # v2.2.3
	with:
	version: "2.2.3"

	- name: Diff Resources
	uses: allenporter/flux-local/action/diff@1c5568b09bdd941ec029312fd44aeffb194ef766 # 5.5.1
	#uses: allenporter/flux-local/action/diff@flux-build
	id: diff
	with:
	sources: "flux-system"
	path: "${{ matrix.path }}"
	resource: "${{ matrix.resource }}"
	debug: true

	- if: ${{ steps.diff.outputs.diff != '' }}
	name: Add comment
	uses: mshick/add-pr-comment@b8f338c590a895d50bcbfa6c5859251edc8952fc # v2.8.2
	with:
	repo-token: "${{ steps.oauth-token.outputs.token }}"
	message-id: "${{ github.event.pull_request.number }}/${{ matrix.path }}/${{ matrix.resource }}"
	message-failure: Diff was not successful
	message: \|
	```diff
	${{ steps.diff.outputs.diff }}
	```

Provide feedback