version: 0.1
component: command
timeoutInSeconds: 900
shell: bash
failImmediatelyOnError: true

env:
  variables:
    APP_NAMESPACE: kagent-demo
    DEPLOYMENT_NAME: payment-service
    CONTAINER_NAME: payment-service
    IMAGE_PULL_SECRET: ocir-secret
    WAIT_TIMEOUT: 300s

steps:
  - type: Command
    name: Restore valid imagePullSecret
    command: |
      case "${DEPLOYMENT_NAME}" in
        order-service|payment-service|inventory-service)
          echo "Target deployment is valid: ${DEPLOYMENT_NAME}"
          ;;
        *)
          echo "Invalid DEPLOYMENT_NAME=${DEPLOYMENT_NAME}"
          echo "Allowed values: order-service, payment-service, inventory-service"
          exit 1
          ;;
      esac

      if [ -z "${CONTAINER_NAME}" ]; then
        CONTAINER_NAME="${DEPLOYMENT_NAME}"
      fi

      echo "APP_NAMESPACE=${APP_NAMESPACE}"
      echo "DEPLOYMENT_NAME=${DEPLOYMENT_NAME}"
      echo "CONTAINER_NAME=${CONTAINER_NAME}"
      echo "IMAGE_PULL_SECRET=${IMAGE_PULL_SECRET}"

      kubectl patch deployment "${DEPLOYMENT_NAME}" -n "${APP_NAMESPACE}" \
        --type merge \
        -p "{
          \"spec\": {
            \"template\": {
              \"spec\": {
                \"imagePullSecrets\": [
                  {\"name\": \"${IMAGE_PULL_SECRET}\"}
                ],
                \"containers\": [
                  {
                    \"name\": \"${CONTAINER_NAME}\",
                    \"imagePullPolicy\": \"IfNotPresent\"
                  }
                ]
              }
            }
          }
        }"

      kubectl rollout restart deployment/"${DEPLOYMENT_NAME}" -n "${APP_NAMESPACE}"
      kubectl rollout status deployment/"${DEPLOYMENT_NAME}" -n "${APP_NAMESPACE}" --timeout="${WAIT_TIMEOUT}"

  - type: Command
    name: Verify restored image pull
    command: |
      kubectl get deployment "${DEPLOYMENT_NAME}" -n "${APP_NAMESPACE}" -o jsonpath='{.spec.template.spec.imagePullSecrets}{"\n"}'
      kubectl get pods -n "${APP_NAMESPACE}" -o wide