name: Lint kubernetes manifests

on:
  workflow_call:
    secrets:
      kube-config:
        required: true

jobs:
  lint-manifests:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Get list of files
        run: |
          echo "manifests<<EOF" >> $GITHUB_OUTPUT
          python kubernetes/scripts/lint_manifests.py find >> $GITHUB_OUTPUT
          echo "EOF" >> $GITHUB_OUTPUT
        id: manifest-files

      - uses: azure/setup-kubectl@v4.0.1

      - name: Authenticate with Kubernetes
        uses: azure/k8s-set-context@v4
        with:
          method: kubeconfig
          kubeconfig: ${{ secrets.kube-config }}

      - uses: jb3/k8s-lint@master
        with:
          lintType: dryrun
          manifests: |
            ${{ steps.manifest-files.outputs.manifests }}