#!/usr/bin/env bash

# Copyright 2026 The Kubernetes Authors.

#

# Licensed under the Apache License, Version 2.0 (the "License");

# you may not use this file except in compliance with the License.

# You may obtain a copy of the License at

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

# distributed under the License is distributed on an "AS IS" BASIS,

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

# See the License for the specific language governing permissions and

# limitations under the License.

set -o errexit

set -o nounset

set -o pipefail

fail() {

echo "ERROR: $1. Fix with:" >&2

echo " bazel run @io_k8s_repo_infra//hack:update-bazel" >&2

exit 1

}

if [[ -z "${TEST_WORKSPACE:-}" ]]; then

echo "This script must be run inside bazel test" >&2

exit 1

fi

tmpfiles=$TEST_TMPDIR/files

mkdir -p "$tmpfiles"

rm -f bazel-*

cp -aL "." "$tmpfiles"

rm -rf "$tmpfiles/external"

buildifier=$(realpath "$1")

gazelle=$(realpath "$2")

kazel=$(realpath "$3")

(

cd "$tmpfiles"

# Set up GOROOT for go commands that gazelle might call

# We can locate go relative to the gazelle runfiles or path,

# but actually Gazelle binary in rules_go usually has a built-in config.

# We'll see if it needs it.

# Run gazelle fix to update BUILD files

"$gazelle" fix --external=external

# Run kazel to update rules

"$kazel" --cfg-path=./.kazelcfg.json

# Run buildifier to format BUILD files

find . \

-name BUILD -o -name BUILD.bazel -o -name '*.bzl' -type f \

\( -not -path '*/vendor/*' -prune \) \

-exec "$buildifier" '{}' +

)

# Avoid diff -N so we handle empty files correctly

diff=$(diff -upr \

-x ".git" \

-x "bazel-*" \

-x "_output" \

-x "external" \

"." "$tmpfiles" 2>/dev/null || true)

if [[ -n "${diff}" ]]; then

echo "${diff}" >&2

echo >&2

fail "bazel rules out of date"

fi

echo "SUCCESS: bazel rules up-to-date"