name: Constellation verify
description: "Verify a Constellation cluster."

inputs:
  osImage:
    description: "The OS image used in the cluster."
    required: true
  cloudProvider:
    description: "The cloud provider used in the cluster."
    required: true

runs:
  using: "composite"
  steps:
    - name: Clear current measurements
      shell: bash
      run: |
        yq -i 'del(.provider.${{ inputs.cloudProvider }}.measurements)' constellation-conf.yaml

    - name: Expand version path
      id: expand-version
      uses: ./.github/actions/shortname
      with:
        shortname: ${{ inputs.osImage }}

    - name: Fetch & write measurements
      shell: bash
      run: |
        ref=${{ steps.expand-version.outputs.ref }}
        stream=${{ steps.expand-version.outputs.stream }}
        version=${{ steps.expand-version.outputs.version }}
        verPath="ref/${ref}/stream/${stream}/${version}"
        MEASUREMENTS=$(curl -fsSL https://cdn.confidential.cloud/constellation/v1/${verPath}/image/csp/${{ inputs.cloudProvider }}/measurements.json | jq '.measurements' -r)
        for key in $(echo $MEASUREMENTS | jq 'keys[]' -r); do
            echo Updating $key to $(echo $MEASUREMENTS | jq ".\"$key\"" -r)
            yq -i ".provider.${{ inputs.cloudProvider }}.measurements.[$key] = $(echo $MEASUREMENTS | jq ".\"$key\"")" constellation-conf.yaml
        done
        yq -i '.provider.${{ inputs.cloudProvider }}.measurements |= array_to_map' constellation-conf.yaml
        cat constellation-conf.yaml

    - name: Constellation verify
      shell: bash
      run: constellation verify --cluster-id $(jq -r ".clusterID" constellation-id.json) --force