name: Validate

on:
  push:
    branches-ignore:
      - main

jobs:
  validate-node-lables:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: azure/setup-kubectl@v4
      - uses: azure/k8s-set-context@v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate
        run: |
          kubectl apply --server-side --field-manager=t000-n --dry-run=server -f node-labels

  validate-coredns:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v5
      - uses: azure/setup-kubectl@v4
      - uses: azure/k8s-set-context@v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate
        run: |
          kubectl apply -n kube-system -f coredns

  validate-traefik:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate
        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3
        with:
          namespace: kube-system
          lintType: dryrun
          manifests: "traefik/"

  validate-crowdsec:
    runs-on:
      - ubuntu-latest
      - linux_amd64
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
      - uses: azure/setup-kubectl@776406bce94f63e41d621b960d78ee25c8b76ede # v4
      - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4
        with:
          version: "3.15.0"
      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.KUBECONFIG }}
      - name: Validate Helm
        uses: helmfile/helmfile-action@f64d5db9f8660aae0205b5fcfc56577d44acefab # v2.1.0
        with:
          helmfile-args: diff
          helm-plugins: https://github.com/databus23/helm-diff@v3.12.0
          helmfile-workdirectory: "crowdsec"