name: s3-provision

on:
  workflow_dispatch:

jobs:
  provision-docs-bucket:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@v4

      - name: Install AWS CLI
        run: |
          sudo apt-get update
          sudo apt-get install -y awscli

      - name: Validate required secrets
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_ACCESS_KEY }}
          S3_ENDPOINT: ${{ secrets.S3_ENDPOINT }}
          S3_REGION: ${{ secrets.S3_REGION }}
          S3_BUCKET_DOCS: ${{ secrets.S3_BUCKET_DOCS }}
        run: |
          test -n "$AWS_ACCESS_KEY_ID"
          test -n "$AWS_SECRET_ACCESS_KEY"
          test -n "$S3_ENDPOINT"
          test -n "$S3_REGION"
          test -n "$S3_BUCKET_DOCS"

      - name: Provision docs bucket (idempotent)
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.S3_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.S3_SECRET_ACCESS_KEY }}
          S3_ENDPOINT: ${{ secrets.S3_ENDPOINT }}
          S3_REGION: ${{ secrets.S3_REGION }}
          S3_BUCKET_DOCS: ${{ secrets.S3_BUCKET_DOCS }}
          S3_ENABLE_VERSIONING: ${{ secrets.S3_ENABLE_VERSIONING }}
          S3_LIFECYCLE_JSON: docs/usage/s3_lifecycle_docs_default.json
          S3_PREFIX_DOCS: docs/
        run: |
          sh docker/scripts/s3_create_docs_bucket.sh
          sh docker/scripts/s3_verify_docs.sh