#!/usr/bin/env bash
set -xeuo pipefail

ROOT=$(cd $(dirname "${BASH_SOURCE[0]}") && pwd)
source "$ROOT/lib.sh"

remote_config=${CONFIG_PATH}
local_config=/tmp/base-config.yaml
download_blob "${remote_config}" "${local_config}"

remote_iam_config=$(yq '.jobOutput.iam' "${local_config}")
local_iam_config=/tmp/iam-config.yaml
download_blob "${remote_iam_config}" "${local_iam_config}"

remote_regional_resource=$(yq '.jobOutput.regional-resource' "${local_config}")
local_regional_resource=/tmp/regional-resource.yaml
download_blob "${remote_regional_resource}" "${local_regional_resource}"

argocd_repo=tidbcloud/app-delivery
region=$(yq '.region' "${local_config}")
logical_region_name=$(yq '.name' "${local_config}")
env=$(yq '.env' "${local_config}")
cloud=$(yq '.cloudProvider' "${local_config}")
cluster=$(yq '.k8s.name' "${local_config}")
job_id=$(yq '.jobId' "${local_config}")
output=$(yq '.outputPath' "${local_config}")

# regional hosted zone name, eg: southeastasia.prod.azure.tidbcloud.com
dns_zone=$(yq '.controlplaneDnsZone.name' "${local_regional_resource}")

# new fields for azure
# cert-manager managed identity client id
cert_manager_client_id=$(yq '.certManager.clientId' "${local_iam_config}")
# azure controlplane subscription id
controlplane_subscription_id=$(yq '.azure.controlplaneSubscriptionId' "${local_config}")
# hosted zone resource group
hosted_zone_resource_group=$(yq '.k8s.name' "${local_config}")

additional_args=$(cat <<EOF
{
  "dnsZone": "${dns_zone}",
  "controlplaneSubscriptionID": "${controlplane_subscription_id}",
  "hostedZoneResourceGroup": "${hosted_zone_resource_group}", 
  "certManagerClientID": "${cert_manager_client_id}"
}
EOF
)

echo "additional_args: ${additional_args}"

# Deploy application services by invoking deploy-new-region action in $argocd_repo
common_params="-f cloud=${cloud} -f region=${region} -f env=${env} -f cluster=${cluster} -f jobId=${job_id} -f logicalRegionName=${logical_region_name}"
export GH_REPO="${argocd_repo}"
gh workflow run deploy-new-region-cert-manager.yaml ${common_params} -f certManagerClientID="${cert_manager_client_id}"
gh workflow run deploy-new-region-issuers.yaml ${common_params} -f additionalArgs="${additional_args}"

# Wait services ready
declare -A services
services["deploy/cert-manager"]="false"
namespace="cert-manager"
wait_for_services_ready services namespace