name: Validate login GitOps repo

on:
  push:
  pull_request:

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Install tools
        run: |
          apt-get update
          apt-get install -y bash curl ca-certificates git python3 python3-yaml
          curl -sL https://github.com/yannh/kubeconform/releases/latest/download/kubeconform-linux-amd64.tar.gz \
            | tar xz -C /usr/local/bin
          curl -fsSL "https://dl.k8s.io/release/$(curl -fsSL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" \
            -o /usr/local/bin/kubectl
          chmod +x /usr/local/bin/kubectl

      - name: Validate repo
        run: scripts/ci/validate

      - name: Apply bootstrap ApplicationSets
        env:
          KUBECONFIG_B64: ${{ secrets.KUBECONFIG_B64 }}
        run: scripts/ci/apply-bootstrap