deploy/cmd/util/common.go

package util

import (
	stderrors "errors"
)

var (
	LogFormat string
	LogLevel  string
)

func ValidateBearerTokenForHTTPSRepoOnly(bearerToken string, isHTTPS bool) error {
	// Bearer token is only valid for HTTPS repositories
	if bearerToken != "" {
		if !isHTTPS {
			err := stderrors.New("--bearer-token is only supported for HTTPS repositories")
			return err
		}
	}
	return nil
}

func ValidateBearerTokenForGitOnly(bearerToken string, repoType string) error {
	// Bearer token is only valid for Git repositories
	if bearerToken != "" && repoType != "git" {
		err := stderrors.New("--bearer-token is only supported for Git repositories")
		return err
	}
	return nil
}

func ValidateBearerTokenAndPasswordCombo(bearerToken string, password string) error {
	// Either the password or the bearer token must be set, but not both
	if bearerToken != "" && password != "" {
		err := stderrors.New("only --bearer-token or --password is allowed, not both")
		return err
	}
	return nil
}

// ValidateInsecureOCIForceHTTP returns an error if --insecure-oci-force-http is set
// on a repo that is not OCI-capable. Only type=oci repos, or type=helm repos with
// --enable-oci, are OCI-capable; --enable-oci is meaningful only for helm repos.
func ValidateInsecureOCIForceHTTP(insecureOCIForceHTTP bool, repoType string, enableOCI bool) error {
	if insecureOCIForceHTTP && repoType != "oci" && (repoType != "helm" || !enableOCI) {
		return stderrors.New("--insecure-oci-force-http requires --type oci or --enable-oci")
	}
	return nil
}