apiVersion: argoproj.io/v1beta1
kind: ArgoCD
metadata:
  name: openshift-gitops
  namespace: openshift-gitops
spec:
  resourceHealthChecks:
    - group: policy.open-cluster-management.io
      kind: CertificatePolicy
      check: |
        hs = {}
        if obj.status == nil or obj.status.compliant == nil then
          hs.status = "Progressing"
          hs.message = "Waiting for the status to be reported"
          return hs
        end
        if obj.status.compliant == "Compliant" then
          hs.status = "Healthy"
          hs.message = "All certificates found comply with the policy"
          return hs
        else
          hs.status = "Degraded"
          hs.message = "At least once certificate does not comply with the policy"
          return hs
        end
    - group: policy.open-cluster-management.io
      kind: ConfigurationPolicy
      check: |
        hs = {}
        if obj.status == nil or obj.status.compliant == nil then
          hs.status = "Progressing"
          hs.message = "Waiting for the status to be reported"
          return hs
        end
        if obj.status.lastEvaluatedGeneration ~= obj.metadata.generation then
          hs.status = "Progressing"
          hs.message = "Waiting for the status to be updated"
          return hs  
        end
        if obj.status.compliant == "Compliant" then
          hs.status = "Healthy"
        else
          hs.status = "Degraded"
        end
        if obj.status.compliancyDetails ~= nil then
          messages = {}
          for i, compliancy in ipairs(obj.status.compliancyDetails) do
            if compliancy.conditions ~= nil then
              for i, condition in ipairs(compliancy.conditions) do
                if condition.message ~= nil and condition.type ~= nil then
                  table.insert(messages, condition.type .. " - " .. condition.message)
                end
              end
            end
          end
          hs.message = table.concat(messages, "; ")
          return hs
        end
        hs.status = "Progressing"
        hs.message = "Waiting for compliance"
        return hs
    - group: policy.open-cluster-management.io
      kind: OperatorPolicy
      check: |
        hs = {}
        if obj.status == nil or obj.status.conditions == nil then
          hs.status = "Progressing"
          hs.message = "Waiting for the status to be reported"
          return hs
        end
        if obj.status.observedGeneration ~= nil and obj.status.observedGeneration ~= obj.metadata.generation then
          hs.status = "Progressing"
          hs.message = "Waiting for the status to be updated"
          return hs  
        end
        for i, condition in ipairs(obj.status.conditions) do
          if condition.type == "Compliant" then
            hs.message = condition.message
            if condition.status == "True" then
              hs.status = "Healthy"
              return hs
            else
              hs.status = "Degraded"
              return hs
            end
          end
        end
        hs.status = "Progressing"
        hs.message = "Waiting for the compliance condition"
        return hs
    - group: policy.open-cluster-management.io
      kind: Policy
      check: |
        hs = {}
        if obj.status == nil or obj.status.compliant == nil then
          hs.status = "Progressing"
          hs.message = "Waiting for the status to be reported"
          return hs
        end
        if obj.status.compliant == "Compliant" then
          hs.status = "Healthy"
        else
          hs.status = "Degraded"
        end
        noncompliants = {}
        if obj.status.status ~= nil then
          -- "root" policy
          for i, entry in ipairs(obj.status.status) do
            if entry.compliant ~= "Compliant" then
              noncompliants[i] = entry.clustername
            end
          end
          if table.getn(noncompliants) == 0 then
            hs.message = "All clusters are compliant"
          else
            hs.message = "NonCompliant clusters: " .. table.concat(noncompliants, ", ")
          end
        elseif obj.status.details ~= nil then
          -- "replicated" policy
          for i, entry in ipairs(obj.status.details) do
            if entry.compliant ~= "Compliant" then
              noncompliants[i] = entry.templateMeta.name
            end
          end
          if table.getn(noncompliants) == 0 then
            hs.message = "All templates are compliant"
          else
            hs.message = "NonCompliant templates: " .. table.concat(noncompliants, ", ")
          end
        end
        return hs