"""keycloak — parity port of recipe-maintainer's health_check.py (Phase 2 P2).

SOURCE: references/recipe-maintainer/recipe-info/keycloak/tests/health_check.py

The original asserted HTTP 200 from `https://keycloak.<DOMAIN_SUFFIX>/realms/master`. The cc-ci port
preserves the assertion shape, adapted to the ephemeral per-run domain via the `live_app` fixture.
Runs in the custom tier against the shared post-install live deployment.
"""

from __future__ import annotations

import os
import sys

sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "..", "runner"))
from harness import http as harness_http  # noqa: E402


def test_keycloak_master_realm_returns_200(live_app):
    """Parity with recipe-info/keycloak/tests/health_check.py: HTTP 200 from /realms/master."""
    url = f"https://{live_app}/realms/master"
    status, _ = harness_http.retry_http_get(url, expect_status=200, max_wait=60, interval=3)
    assert status == 200, f"keycloak at {url} returned HTTP {status} (expected 200)"
