name: Runtime Ingress Drill

on:
  workflow_dispatch:
    inputs:
      caddy_image:
        description: Digest-pinned Caddy image
        required: true
        type: string
      load_balancer_image:
        description: Digest-pinned HAProxy image
        required: true
        type: string
      probe_image:
        description: Digest-pinned amd64 GovOPlaN API image
        required: true
        type: string

jobs:
  managed-ingress:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          path: govoplan
      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
        with:
          python-version: "3.12"
      - name: Authenticate runtime image pull
        env:
          REGISTRY_USERNAME: ${{ secrets.GOVOPLAN_REGISTRY_USERNAME }}
          REGISTRY_TOKEN: ${{ secrets.GOVOPLAN_REGISTRY_TOKEN }}
        run: echo "$REGISTRY_TOKEN" | docker login git.add-ideas.de --username "$REGISTRY_USERNAME" --password-stdin
      - name: Exercise the managed ingress boundary
        working-directory: govoplan
        env:
          CADDY_IMAGE: ${{ inputs.caddy_image }}
          LOAD_BALANCER_IMAGE: ${{ inputs.load_balancer_image }}
          PROBE_IMAGE: ${{ inputs.probe_image }}
        run: >-
          python tools/checks/managed-ingress-drill.py
          --caddy-image "$CADDY_IMAGE"
          --load-balancer-image "$LOAD_BALANCER_IMAGE"
          --probe-image "$PROBE_IMAGE"