#!/bin/sh
set -eu

root=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
task="$root/catalog/maidn-node-static-image.yaml"

contains() {
  grep -qF -- "$1" "$task"
}

for value in \
  'apiVersion: tekton.dev/v1' \
  'kind: Task' \
  'name: maidn-node-static-image' \
  'emptyDir: {}' \
  'forgejo-git-credentials' \
  'forgejo-registry-credentials' \
  'case "$REPOSITORY_URL" in https://git.pingu.pw/*.git)' \
  'case "$REVISION" in [A-Za-z0-9]*)' \
  'case "$OUTPUT_DIRECTORY" in' \
  'case "$BUILD_CONFIGURATION" in' \
  'GIT_ASKPASS=/work/askpass' \
  'runAsNonRoot: true' \
  'allowPrivilegeEscalation: false' \
  'drop: [ALL]' \
  'type: RuntimeDefault' \
  'npm install --ignore-scripts --no-audit --no-fund --package-lock=false' \
  'memory: 256Mi' \
  'memory: 512Mi' \
  'tar -C /work/layer -cf /work/layer.tar www' \
  '--base=$(params.base-image)' \
  '--new_tag=$(params.image):$(params.revision)'; do
  contains "$value"
done

for param in url revision image output-directory build-configuration base-image; do
  contains "name: $param"
done

! grep -qiE 'kaniko|privileged: true' "$task"