offboarding_pr.yaml

name: Offboard APIs checks

on:
  pull_request:
    branches:
      - offboard
    paths-ignore:
      - '**/README.md'
  workflow_dispatch:

jobs:
  offboard-services-configs-review:
    name: Check offloading Kong configs
    runs-on: ubuntu-latest
    strategy:
      matrix:
        folders: 
          - catch-all
        env: 
          - dev
    env:
      DECK_SERVICE_TAG: ${{ matrix.folders }}
    steps:
      - name: Set environment-specific variables
        run: |
          # Convert env to uppercase for secret names
          ENV_UPPER=$(echo "${{ matrix.env }}" | tr '[:lower:]' '[:upper:]')
          
          # Use the environment context to get secrets
          echo "ADMIN_API_URL=${{ secrets[format('{0}_ADMIN_API_URL', matrix.env)] }}" >> $GITHUB_ENV
          echo "ADMIN_API_AUTH_HEADER=${{ secrets[format('{0}_ADMIN_API_AUTH_HEADER', matrix.env)] }}" >> $GITHUB_ENV
      - name: Checkout branch
        uses: actions/checkout@v3
      - name: Install Deck
        run: |
          curl -sL https://github.com/Kong/deck/releases/download/v${{ env.DECK_VERSION }}/deck_${{ env.DECK_VERSION }}_linux_amd64.tar.gz -o deck.tar.gz
          tar -xf deck.tar.gz -C /tmp
          sudo cp /tmp/deck /usr/local/bin/
      - name: Check Control plane is reachable
        run: |
          deck gateway ping \
            --headers "${{ env.ADMIN_API_AUTH_HEADER }}" \
            --kong-addr "${{ env.ADMIN_API_URL }}" \
      - name: Review Kong entities associated to $DECK_SERVICE_TAG-svc tag
        run: |
          deck gateway dump \
            --headers "${{ env.ADMIN_API_AUTH_HEADER }}" \
            --kong-addr "${{ env.ADMIN_API_URL }}" \
            --select-tag $DECK_SERVICE_TAG-svc \
            --output-file -