# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1

# This job runs a docker task using a container stored in a private registry
# configured with credentials helper authentication. The registry.hcl job should
# be running and healthy before running this job.

variable "registry_address" {
  type        = string
  description = "The HTTP address of the local registry"
  default     = "localhost"
}

variable "registry_port" {
  type        = number
  description = "The HTTP port of the local registry"
  default     = "7511"
}

job "auth_static" {
  type = "batch"

  constraint {
    attribute = "${attr.kernel.name}"
    value     = "linux"
  }

  group "helper" {
    reschedule {
      attempts  = 0
      unlimited = false
    }

    network {
      mode = "host"
    }

    task "echo" {
      driver = "docker"

      config {
        image = "${var.registry_address}:${var.registry_port}/docker.io/library/bash_auth_helper:private"
        args  = ["echo", "The credentials helper auth test is OK!"]

        # usename and password come from [docker-credential-]test.sh found on
        # $PATH as specified by "helper=test.sh" in plugin config
      }

      resources {
        cpu    = 100
        memory = 64
      }
    }
  }
}