#!/usr/bin/env bash

remote_config=${CONFIG_PATH}
local_config=/tmp/base-config.yaml

bucket_name=${remote_config#s3://}
bucket_name=${bucket_name%%/*}
output_bucket_region=$(aws s3api get-bucket-location --bucket=$bucket_name --query="LocationConstraint" \
  --region=us-west-2 --output=text --no-cli-pager)
aws s3 cp "${remote_config}" "${local_config}" --region=$output_bucket_region

argocd_repo=tidbcloud/app-delivery
cloud=$(yq '.cloudProvider' "${local_config}")
env=$(yq '.env' "${local_config}")
region=$(yq '.region' "${local_config}")
logicalRegionName=$(yq '.name' "${local_config}")
cluster=$(yq '.k8s.name' "${local_config}")
output=$(yq '.outputPath' "${local_config}")
job_id=$(yq '.jobId' "${local_config}")

declare -A params
params[image_registry]=$(yq '.imageRegistry' "${local_config}")
remote_iam_config=$(yq '.jobOutput.iam' "${local_config}")
local_iam_config=/tmp/iam-config.yaml
aws s3 cp ${remote_iam_config} ${local_iam_config} --region=$output_bucket_region
params[assume_role_name]=$(yq '.clusterController.dataplaneRoleName' "${local_iam_config}")
params[readonly_assume_role_name]=$(yq '.clusterController.readonlyDataplaneRoleName' "${local_iam_config}")
params[irsa_role_arn]=$(yq '.clusterController.roleArn' "${local_iam_config}")
params[global_role_arn]=$(yq '.clusterController.globalRoleArn' "${local_iam_config}")
params[aws_cluster_server_role_arn]=$(yq '.clusterServer.roleArn' "${local_iam_config}")

params[config_change_env]=$(yq '.jobOptions.clusterServer.configChange.env' "${local_config}")
params[config_change_activity_enabled]=$(yq '.jobOptions.clusterServer.configChange.activityEnabled' "${local_config}")
params[config_change_activity_hub_ep]=$(yq '.jobOptions.clusterServer.configChange.activityHubEp' "${local_config}")
params[config_change_activity_source]=$(yq '.jobOptions.clusterServer.configChange.activitySource' "${local_config}")
params[config_change_activity_clinic_ep]=$(yq '.jobOptions.clusterServer.configChange.activityClinicEp' "${local_config}")
params[cluster_proxy_enable_dev_mode]=$(yq '.jobOptions.clusterServer.clusterProxy.enableDevMode' "${local_config}")
params[cluster_proxy_auth0_audience]=$(yq '.jobOptions.clusterServer.clusterProxy.auth0Audience' "${local_config}")
params[cluster_proxy_auth0_domain]=$(yq '.jobOptions.clusterServer.clusterProxy.auth0Domain' "${local_config}")
params[full_manage_hosted_zone_domain]=$(yq '.jobOptions.regionalServer.publicHostedZoneDomain' "${local_config}")
params[full_manage_hosted_zone_id]=$(yq '.jobOptions.regionalServer.publicHostedZoneID' "${local_config}")
params[full_manage_pca_arn]=$(yq '.jobOptions.clusterServer.fullManage.pcaArn' "${local_config}")

params[cluster_proxy_auth0_secret_key]=$(yq ".jobOptions.clusterServer.secrets.clusterProxyAuth0SecretKey // \"${env}-proxy-auth0-client\"" "${local_config}")
params[o11y_auth0_secret]=$(yq ".jobOptions.clusterServer.secrets.o11yAuth0Secret // \"${env}-o11y-auth0-client\"" "${local_config}")
params[config_manager_auth_key]=$(yq ".jobOptions.clusterServer.secrets.configManagerAuthKey // \"${env}-config-manager-account-xregion-auth-key\"" "${local_config}")
params[config_manager_clinic_activity_key]=$(yq ".jobOptions.clusterServer.secrets.configManagerClinicActivityKey // \"${env}-config-manager-clinic-activity-key\"" "${local_config}")

# Convert params to json string
json_string_args="{}"
for key in "${!params[@]}"; do
    json_string_args=$(echo "$json_string_args" | jq --arg key "$key" --arg value "${params[$key]}" '. + {($key): $value}')
done

# Sync application secrets to new region
# The main secret is created in us-west-2, we need to replicate to the new region
# if [[ $region != "us-west-2" ]]; then
#   secret_keys=("cluster_proxy_auth0_secret_key" "o11y_auth0_secret" "config_manager_auth_key" "config_manager_clinic_activity_key")
#   for secret_key in ${secret_keys[@]}; do
#     secret="${params[$secret_key]}"
#     aws secretsmanager replicate-secret-to-regions --secret-id "${secret}" --add-replica-regions Region=${region} --region=us-west-2
#   done
# fi

# Deploy application services by invoking deploy-new-region action in $argocd_repo
common_params="-f cloud=${cloud} -f region=${region} -f env=${env} -f cluster=${cluster} -f jobId=${job_id} -f logicalRegionName=${logicalRegionName}"
export GH_REPO="${argocd_repo}"
gh workflow run deploy-new-region-cluster-controller-crds.yaml ${common_params}
gh workflow run deploy-new-region-cluster-controller.yaml ${common_params} -f args="${json_string_args}"
gh workflow run deploy-new-region-cluster-server.yaml ${common_params} -f imageRegistry="${params[image_registry]}"
gh workflow run deploy-new-region-webhook-server.yaml ${common_params} -f imageRegistry="${params[image_registry]}"
gh workflow run deploy-new-region-cluster-exporter.yaml ${common_params} -f imageRegistry="${params[image_registry]}"
gh workflow run deploy-new-region-cluster-eventrouter.yaml ${common_params}

# Wait services ready
declare -A services
services["cluster-controller"]="false"
services["cluster-control-server"]="false"
services["webhook-server"]="false"
services["infra-exporter"]="false"
services["cluster-eventrouter"]="false"
ns=cluster-service
timeout=${JOB_TIMEOUT:=300} # 5min
interval=${JOB_CHECK_INTERVAL:=10}
start_time=$(date +%s)
echo "Waiting all services ready..."
while [[ $(($(date +%s) - $start_time)) -lt $timeout ]]; do
  all_ready=true
  for svc in "${!services[@]}"; do
    if [[ ${services[$svc]} == "true" ]]; then
      continue
    else
      all_ready=false
    fi
    ready=$(kubectl -n "${ns}" get deploy "${svc}" -ojsonpath='{.status.readyReplicas}' 2>/dev/null)
    if [[ $? -eq 0 ]]; then
      if [[ $ready -ge 1 ]]; then
        services[$svc]="true"
        echo "Service $svc is ready"
      fi
    fi
  done

  if $all_ready; then
    echo "All services ready!"
    exit 0
  else
    sleep "${interval}"
  fi
done
# Report unready services
echo "Following services are unready:"
for svc in "${!services[@]}"; do
  if [[ ${services[$svc]} == "false" ]]; then
    echo $svc
  fi
done
exit 1