name: Inspect ArgoCD Application (read-only)

# One-off diagnostic to see the live medical-chatbot-app Application's inline
# helm values before writing a script that edits them (adding secret.jwtSecret
# alongside the existing secret.grafanaAdminPassword). Read-only: only calls
# GET on the ArgoCD API, never PUT or sync.

on:
  workflow_dispatch: {}

jobs:
  inspect:
    runs-on: ubuntu-latest
    permissions:
      contents: read
    steps:
      - uses: actions/checkout@v4
      - name: Inspect live Application
        env:
          ARGOCD_PRACTICE_URL: ${{ secrets.ARGOCD_PRACTICE_URL }}
          ARGOCD_PRACTICE_PASSWORD: ${{ secrets.ARGOCD_PRACTICE_PASSWORD }}
        run: python3 .github/scripts/inspect_argocd_app.py