#!/usr/bin/env bash

remote_config=${CONFIG_PATH}
local_config=/tmp/base-config.yaml

bucket_name=${remote_config#s3://}
bucket_name=${bucket_name%%/*}
output_bucket_region=$(aws s3api get-bucket-location --bucket=$bucket_name --query="LocationConstraint" \
  --region=us-west-2 --output=text --no-cli-pager)
aws s3 cp "${remote_config}" "${local_config}" --region=$output_bucket_region

disabled=$(yq '.jobOptions.dpProvider.disabled' "${local_config}")
if [[ $disabled == "true" ]]; then
  echo "job is disabled, exit"
  exit 0
fi

argocd_repo=tidbcloud/app-delivery
region=$(yq '.region' "${local_config}")
logicalRegionName=$(yq '.name' "${local_config}")
zones=$(yq -ocsv '.jobOptions.regionalServer.availabilityZones' "${local_config}") # us-west-2a,us-west-2b,us-west-2c
env=$(yq '.env' "${local_config}")
cloud=$(yq '.cloudProvider' "${local_config}")
cluster=$(yq '.k8s.name' "${local_config}")
jobId=$(yq '.jobId' "${local_config}")
output=$(yq '.outputPath' "${local_config}")
image_registry=$(yq '.imageRegistry' "${local_config}")
infra_api_server_key=$(yq '.jobOptions.dpProvider.secretManager.infraAPIServerKey' "${local_config}")
api_gateway_key=$(yq '.jobOptions.dpProvider.secretManager.apiGatewayKey' "${local_config}")
cluster_proxy_auth0_secret_key=$(yq ".jobOptions.clusterServer.secrets.clusterProxyAuth0SecretKey // \"${env}-proxy-auth0-client\"" "${local_config}")
o11y_auth0_secret=$(yq ".jobOptions.clusterServer.secrets.o11yAuth0Secret // \"${env}-o11y-auth0-client\"" "${local_config}")

remote_iam_config=$(yq '.jobOutput.iam' "${local_config}")
local_iam_config=/tmp/iam-config.yaml
aws s3 cp ${remote_iam_config} ${local_iam_config} --region=$output_bucket_region
aws_irsa_role_arn=$(yq '.dpProvider.roleArn' "${local_iam_config}")
data_plane_role_name=$(yq '.dpProvider.dataplaneRoleName' "${local_iam_config}")

additional_args=$(cat <<EOF
{
  "irsaRoleArn": "${aws_irsa_role_arn}",
  "imageRegistry": "${image_registry}",
  "dataplaneRoleName": "${data_plane_role_name}",
  "infraAPIServerKey": "${infra_api_server_key}",
  "clusterProxyAuth0SecretKey": "${cluster_proxy_auth0_secret_key}",
  "o11yAuth0Secret": "${o11y_auth0_secret}",
  "apiGatewayKey": "${api_gateway_key}"
}
EOF
)
additional_args=$(echo "${additional_args}" | jq -c . | sed -e 's/\"/\\\"/g')
echo "additional args: ${additional_args}"

declare -A services

if [[ $cloud == "aws" ]]; then
  # Deploy dp-eks-provider by invoking deploy-new-region action in $argocd_repo
  common_params="-f region=${region} -f zones=${zones} -f env=${env} -f cluster=${cluster} -f jobId=${jobId} -f logicalRegionName=${logicalRegionName}"
  export GH_REPO="${argocd_repo}"
  gh workflow run deploy-new-region-dp-eks-provider.yaml ${common_params} -f additionalArgs="${additional_args}"

  # Declare the services we need to wait
  # services["dp-eks-infra-provider"]="false"
  services["dp-eks-infra-provider-br"]="false"
  services["dp-eks-infra-provider-cdc"]="false"
else
  echo "unsupported cloud provider $cloud"
  exit 1
fi

# Wait services ready
ns=infra
timeout=${JOB_TIMEOUT:=300} # 5min
interval=${JOB_CHECK_INTERVAL:=10}
start_time=$(date +%s)
echo "Waiting all services ready..."
while [[ $(($(date +%s) - $start_time)) -lt $timeout ]]; do
  all_ready=true
  for svc in "${!services[@]}"; do
    if [[ ${services[$svc]} == "true" ]]; then
      continue
    else
      all_ready=false
    fi
    ready=$(kubectl -n "${ns}" get deploy "${svc}" -ojsonpath='{.status.readyReplicas}' 2>/dev/null)
    if [[ $? -eq 0 ]]; then
      if [[ $ready -ge 1 ]]; then
        services[$svc]="true"
        echo "Service $svc is ready"
      fi
    fi
  done

  if $all_ready; then
    echo "All services ready!"
    exit 0
  else
    sleep "${interval}"
  fi
done
# Report unready services
echo "Following services are unready:"
for svc in "${!services[@]}"; do
  if [[ ${services[$svc]} == "false" ]]; then
    echo $svc
  fi
done
exit 1