## Blocks the pipeline if MR is not approved by any
## of defined gitlab users (ALLOWED_APPROVERS)

mr-approve-check:
  stage: mr-approve-check
  needs: ["clear_code_approved"]
  tags:
    - mr-check
  variables:
    TARGET_BRANCH: main
  script:
    - |
      # Fetch the merge request ID from the environment variable
      # $merge_request_iid variable is set in gitlab webhook payload
      if [[ "$CI_PIPELINE_SOURCE" == "trigger" ]]; then
        MR_ID=${merge_request_iid}
      else
        MR_ID=${CI_MERGE_REQUEST_IID}
      fi

      # Check if MR_ID is set
      if [ -z "$MR_ID" ]; then
        echo "This job is not running in a merge request context."
        exit 0
      fi
      
      # Get the list of approvals for the merge request
      APPROVALS=$(curl --silent -H "PRIVATE-TOKEN: $REMOVE_APPROVE_TOKEN" -H "Content-Type: application/json" "http://gtl01.dev.ruo.payudc.net/api/v4/projects/$CI_PROJECT_ID/merge_requests/$MR_ID/approvals")

      # Define a list of allowed approvers
      ALLOWED_APPROVERS=("alexander.viktorchik" "alexey.babak" "roman.zimin")

      # Check if any of the allowed users have approved the merge request
      APPROVED=false
      for USER in "${ALLOWED_APPROVERS[@]}"; do
        if echo "$APPROVALS" | grep -q "$USER"; then
          APPROVED=true
          echo "Merge request approved by allowed user: $USER."
          break
        fi
      done

      if [ "$APPROVED" = false ]; then
        echo "Merge request not approved by any allowed users. Blocking the merge request."
        exit 1
      fi
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event" && $CI_MERGE_REQUEST_TARGET_BRANCH_NAME == $TARGET_BRANCH'