#!/usr/bin/env bash
# Regenerates renovate/k8s/configmap.yaml from renovate/renovate.json.
#
# renovate/renovate.json is the single source of truth: the CronJob, the Compose
# file and the renovate-run workflow all mount that exact file. A ConfigMap cannot
# read a file from the repository, so the same bytes are inlined here as a literal
# block. This script keeps the copy honest:
#
#   .gitea/workflows/sync-renovate-configmap.sh          # rewrite in place
#   .gitea/workflows/sync-renovate-configmap.sh --check  # fail if out of date
#
# renovate-ci runs the --check form on every PR and push, so a config change that
# forgets to regenerate the ConfigMap cannot be merged.
set -euo pipefail

here="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
repo="$(git -C "$here" rev-parse --show-toplevel)"

src="$repo/renovate/renovate.json"
dst="$repo/renovate/k8s/configmap.yaml"
[ -f "$src" ] || {
  echo "missing $src" >&2
  exit 1
}

render() {
  cat <<'HEADER'
# GENERATED FILE - do not edit by hand.
# Source: renovate/renovate.json
# Regenerate: .gitea/workflows/sync-renovate-configmap.sh
# Verify:     .gitea/workflows/sync-renovate-configmap.sh --check
apiVersion: v1
kind: ConfigMap
metadata:
  name: renovate-config
  namespace: renovate
data:
  renovate.json: |
HEADER
  sed 's/^/    /' "$src"
}

if [ "${1:-}" = "--check" ]; then
  if ! diff -u "$dst" <(render) >/dev/null 2>&1; then
    echo "ERROR: $dst is out of sync with renovate/renovate.json"
    echo "Run: .gitea/workflows/sync-renovate-configmap.sh"
    diff -u "$dst" <(render) || true
    exit 1
  fi
  echo "renovate/k8s/configmap.yaml is in sync with renovate/renovate.json"
  exit 0
fi

render >"$dst"
echo "wrote $dst"