#!/bin/sh
set -eu
cd "$(dirname "$0")/.."
helm lint chart --set app.security.existingCsrfSecret=true --set authProxy.enabled=true
rendered=$(helm template kubernetes-dashboard chart --namespace kubernetes-dashboard \
  --set app.security.existingCsrfSecret=true \
  --set authProxy.enabled=true)
if printf '%s\n' "$rendered" | grep -Eq '^kind:[[:space:]]*Secret[[:space:]]*$'; then
  echo 'External-CSRF mode must not render a Secret' >&2
  exit 1
fi
printf '%s\n' "$rendered" | grep -Fq 'name: kubernetes-dashboard-auth-proxy'
printf '%s\n' "$rendered" | grep -Fq 'name: kubernetes-dashboard-api'
printf '%s\n' "$rendered" | grep -Fq 'name: kubernetes-dashboard-kong-proxy'
printf '%s\n' "$rendered" | grep -Fq 'name: admin-user'
helm lint chart
helm template kubernetes-dashboard chart --namespace kubernetes-dashboard > /dev/null