{{- /* Evaluated outside of the Secret so the guards also run with an existing Secret. */ -}}
{{- $assertions := include "gitea.config.assertions" . -}}
{{- if not .Values.secrets.config.existingSecret.enabled -}}
---
apiVersion: v1
kind: Secret
metadata:
  {{- with (include "gitea.secret.config.annotations" .) }}
  annotations:
    {{- . | nindent 4 }}
  {{- end }}
  labels:
    {{- include "gitea.secret.config.labels" . | nindent 4 }}
  name: {{ include "gitea.secret.config.name" . }}
  namespace: {{ .Values.namespace | default .Release.Namespace }}
type: Opaque
stringData:
{{ (.Files.Glob "scripts/init-containers/config/*.sh").AsConfig | indent 2 }}
  assertions: |
    {{- $assertions | nindent 4 }}
{{- end }}

{{- define "gitea.config.assertions" -}}

  {{- /*assert that only one PG dep is enabled */ -}}
  {{- if and (.Values.postgresql.enabled) (index .Values "postgresql-ha" "enabled") -}}
    {{- fail "Only one of postgresql or postgresql-ha can be enabled at the same time." -}}
  {{- end }}

  {{- /* multiple replicas assertions */ -}}
  {{- if gt (.Values.deployment.replicas | int) 1 -}}
    {{- if .Values.gitea.config.cron -}}
      {{- if .Values.gitea.config.cron.GIT_GC_REPOS -}}
        {{- if eq .Values.gitea.config.cron.GIT_GC_REPOS.ENABLED true -}}
          {{ fail "Invoking the garbage collector via CRON is not yet supported when running with multiple replicas. Please set 'gitea.config.cron.GIT_GC_REPOS.enabled = false'." }}
        {{- end }}
      {{- end }}
    {{- end }}

    {{- if eq (first .Values.persistence.new.accessModes) "ReadWriteOnce" -}}
      {{- fail "When using multiple replicas, a RWX file system is required and persistence.new.accessModes[0] must be set to ReadWriteMany." -}}
    {{- end }}
    {{- if .Values.gitea.config.indexer -}}
      {{- if eq .Values.gitea.config.indexer.ISSUE_INDEXER_TYPE "bleve" -}}
        {{- fail "When using multiple replicas, the issue indexer (gitea.config.indexer.ISSUE_INDEXER_TYPE) must be set to a HA-ready provider such as 'meilisearch', 'elasticsearch' or 'db' (if the DB is HA-ready)." -}}
      {{- end }}
      {{- if .Values.gitea.config.indexer.REPO_INDEXER_TYPE -}}
        {{- if eq .Values.gitea.config.indexer.REPO_INDEXER_TYPE "bleve" -}}
          {{- if .Values.gitea.config.indexer.REPO_INDEXER_ENABLED -}}
            {{- if eq .Values.gitea.config.indexer.REPO_INDEXER_ENABLED true -}}
              {{- fail "When using multiple replicas, the repo indexer (gitea.config.indexer.REPO_INDEXER_TYPE) must be set to 'meilisearch' or 'elasticsearch' or disabled." -}}
            {{- end }}
          {{- end }}
        {{- end }}
      {{- end }}
    {{- end }}

  {{- end }}
{{- end }}