#!/usr/bin/env bash

set -xeuo pipefail

ROOT=$(cd $(dirname ${BASH_SOURCE[0]}) && pwd)
source ${ROOT}/lib.sh

remote_config=${CONFIG_PATH}
local_config=/tmp/base-config.yaml
bucket_name=${remote_config#s3://}
bucket_name=${bucket_name%%/*}
output_bucket_region=$(aws s3api get-bucket-location --bucket=$bucket_name --query="LocationConstraint" \
  --region=us-west-2 --output=text --no-cli-pager)
aws s3 cp ${remote_config} ${local_config}  --region=$output_bucket_region

o11y_repo=tidbcloud/observability
git_ref="main"
region=$(yq '.region' "${local_config}")
logical_region_name=$(yq '.name' "${local_config}")
env=$(yq '.env' "${local_config}")
vendor=$(yq '.cloudProvider' "${local_config}")
jobId=$(yq '.jobId' "${local_config}")
output=$(yq '.outputPath' "${local_config}")
imageRegistry=$(yq '.jobOptions.o11yRegion.imageRegistry' "${local_config}")
regionalSeverImage=$(yq '.jobOptions.o11yRegion.rsImage' "${local_config}")
dataSeverImage=$(yq '.jobOptions.o11yRegion.dsImage' "${local_config}")
pre_set_agent_role=$(yq '.jobOptions.o11yRegion.preSetAgentRole' "${local_config}")

o11y_eks_remote_output=$(yq '.jobOutput.o11y-eks' "${local_config}")
o11y_eks_local_output=/tmp/o11y-eks-output.yaml
aws s3 cp ${o11y_eks_remote_output} ${o11y_eks_local_output}  --region=$output_bucket_region
cluster=$(yq '.cluster_name' "${o11y_eks_local_output}")
account_id=$(yq -r -ojson '.aws.dataplaneAccounts.0' "${local_config}")
kubeconfig=$(yq '.kubeconfig' "${o11y_eks_local_output}")
mkdir ~/.kube
echo "$kubeconfig" > ~/.kube/config

hosted_zone_name=$(yq '.jobOptions.o11yRegion.dns.hostedZoneName // ""' "${local_config}")
if [ -z "$hosted_zone_name" ]; then
  if [ "$env" == "prod" ]; then
      hosted_zone_name="observability.tidbcloud.com"
  else
      hosted_zone_name="observability-$env.pingcap.cloud"
  fi
fi
echo "hosted_zone_name: $hosted_zone_name"

hosted_zone_id=$(aws --profile $account_id route53 list-hosted-zones \
  --query "HostedZones[?Name=='$hosted_zone_name.'].Id" \
  --output text)
echo "hosted_zone_id: $hosted_zone_id"

remote_iam_config=$(yq '.jobOutput.o11y-basic-iam' "${local_config}")
local_iam_config=/tmp/iam-config.yaml
aws s3 cp ${remote_iam_config} ${local_iam_config}  --region=$output_bucket_region
o11yRoleARN=$(yq '.regionalServer.roleArn' "${local_iam_config}")

diagBucketName=o11y-${env}-shared-${logical_region_name}

oidcValue=$(yq '.cluster_oidc_issuer_url' "${o11y_eks_local_output}" | sed -E 's/^\s*.*:\/\///g')
oidcARN=arn:aws:iam::${account_id}:oidc-provider/${oidcValue}
zone=$(yq '.jobOptions.o11yRegion.zone' "$local_config")
zone_suffix=${zone#$region}

LBOutputs=$(aws --profile $account_id cloudformation describe-stacks \
  --stack-name auto-deploy-${cluster}-ingress \
  --query 'Stacks[0].Outputs' \
  --output json)
certificateARN=$(echo $LBOutputs | jq -r '.[] | select(.OutputKey=="RsCertificateArn") | .OutputValue')
wafACLARN=$(echo $LBOutputs | jq -r '.[] | select(.OutputKey=="RsWebAclArn") | .OutputValue')

endpointServiceID=$(aws --profile $account_id cloudformation describe-stacks \
    --stack-name auto-deploy-${cluster}-vpc-endpoint-service \
    --query 'Stacks[0].Outputs[?OutputKey==`VpcEndpointServiceId`].OutputValue' \
    --output text)

endpointServiceDNSName="prometheus-endpoint-$zone_suffix.$hosted_zone_name"
dataplaneAssumeRole="${env}-${logical_region_name}-dp4o11yrs"

nginxReadIngressClass="nginx-read"
nginxWriteIngressClass="nginx-write"

args=$(cat <<EOF
{
  "regionalServerRoleARN": "$o11yRoleARN",
  "diagBucketName": "$diagBucketName",
  "oidcARN": "$oidcARN",
  "oidcValue": "$oidcValue",
  "zone": "$zone",
  "endpointServiceID": "$endpointServiceID",
  "certificateARN": "$certificateARN",
  "wafACLARN": "$wafACLARN",
  "nginxReadIngressClass": "$nginxReadIngressClass",
  "nginxWriteIngressClass": "$nginxWriteIngressClass",
  "endpointServiceDNSName": "$endpointServiceDNSName",
  "dataplaneAssumeRole" : "$dataplaneAssumeRole",
  "imageRegistry": "$imageRegistry",
  "account": "$account_id",
  "hostedZoneName": "$hosted_zone_name",
  "preSetAgentRole": "$pre_set_agent_role",
  "byoc": true
}
EOF
)
echo "args: $args"

common_params="-f vendor=${vendor} -f region=${region} -f logicalRegionName=${logical_region_name} -f env=${env} -f cluster=${cluster} -f jobId=${jobId}"
# Create pull request by invoking new-region workflow.
gh workflow run new-region-regional-server.yaml --repo ${o11y_repo} --ref ${git_ref} ${common_params} -f args="${args}"
wait_workflow_run_to_merge new-region-regional-server.yaml ${o11y_repo}
if [[ $? -eq 1 ]]; then
    exit 1
fi

gh workflow run regional-server-cd.yaml --repo ${o11y_repo} --ref ${git_ref} -f env=${env} -f region=${logical_region_name} -f vendor=${vendor} -f git-ref=${git_ref} -f aws-role-arn="arn:aws:iam::${account_id}:role/auto-deploy-cli" -f regional-server-image="${regionalSeverImage}" -f data-server-image="${dataSeverImage}"

# Wait services ready
declare -A ss
ss["deploy/regionalserver -n observability"]="false"
ss["deploy/data-server -n observability"]="false"

wait_for_services_ready ss
if [[ $? -eq 1 ]]; then
    echo "Services are not ready"
    exit 1
fi