// Copyright (c) 2019 SAP SE or an SAP affiliate company. All rights reserved. This file is licensed under the Apache Software License, v. 2 except as noted otherwise in the LICENSE file
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package genericmutator_test

import (
	"context"
	"encoding/json"
	"testing"

	extensionscontroller "github.com/gardener/gardener/extensions/pkg/controller"
	"github.com/gardener/gardener/extensions/pkg/util"
	extensionswebhook "github.com/gardener/gardener/extensions/pkg/webhook"
	"github.com/gardener/gardener/extensions/pkg/webhook/controlplane/genericmutator"
	mockclient "github.com/gardener/gardener/pkg/mock/controller-runtime/client"
	mockcontrolplane "github.com/gardener/gardener/pkg/mock/gardener/extensions/webhook/controlplane"
	mockgenericmutator "github.com/gardener/gardener/pkg/mock/gardener/extensions/webhook/controlplane/genericmutator"

	"github.com/coreos/go-systemd/unit"
	druidv1alpha1 "github.com/gardener/etcd-druid/api/v1alpha1"
	gardencorevalpha1 "github.com/gardener/gardener/pkg/apis/core/v1beta1"
	v1beta1constants "github.com/gardener/gardener/pkg/apis/core/v1beta1/constants"
	extensionsv1alpha1 "github.com/gardener/gardener/pkg/apis/extensions/v1alpha1"
	"github.com/golang/mock/gomock"
	. "github.com/onsi/ginkgo"
	. "github.com/onsi/ginkgo/extensions/table"
	. "github.com/onsi/gomega"
	appsv1 "k8s.io/api/apps/v1"
	corev1 "k8s.io/api/core/v1"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	"k8s.io/apimachinery/pkg/runtime"
	kubeletconfigv1beta1 "k8s.io/kubelet/config/v1beta1"
	"sigs.k8s.io/controller-runtime/pkg/client"
	"sigs.k8s.io/controller-runtime/pkg/log"
	"sigs.k8s.io/controller-runtime/pkg/runtime/inject"
)

const (
	oldServiceContent     = "new kubelet.service content"
	newServiceContent     = "old kubelet.service content"
	mutatedServiceContent = "mutated kubelet.service content"

	oldKubeletConfigData     = "old kubelet config data"
	newKubeletConfigData     = "new kubelet config data"
	mutatedKubeletConfigData = "mutated kubelet config data"

	oldKubernetesGeneralConfigData     = "# Increase the tcp-time-wait buckets pool size to prevent simple DOS attacks\nnet.ipv4.tcp_tw_reuse = 1\n# OLD Settings"
	newKubernetesGeneralConfigData     = "# Increase the tcp-time-wait buckets pool size to prevent simple DOS attacks\nnet.ipv4.tcp_tw_reuse = 1"
	mutatedKubernetesGeneralConfigData = "# Increase the tcp-time-wait buckets pool size to prevent simple DOS attacks\nnet.ipv4.tcp_tw_reuse = 1\n# Provider specific settings"

	encoding                 = "b64"
	cloudproviderconf        = "[Global]\nauth-url: whatever-url/keystone"
	cloudproviderconfEncoded = "W0dsb2JhbF1cbmF1dGgtdXJsOiBodHRwczovL2NsdXN0ZXIuZXUtZGUtMjAwLmNsb3VkLnNhcDo1MDAwL3Yz"
)

const (
	namespace = "test"
)

func TestControlplane(t *testing.T) {
	RegisterFailHandler(Fail)
	RunSpecs(t, "Controlplane Webhook Generic Mutator Suite")
}

var _ = Describe("Mutator", func() {
	var (
		ctrl   *gomock.Controller
		logger = log.Log.WithName("test")

		clusterKey = client.ObjectKey{Name: namespace}
		cluster    = &extensionscontroller.Cluster{
			CloudProfile: &gardencorevalpha1.CloudProfile{
				TypeMeta: metav1.TypeMeta{
					APIVersion: gardencorevalpha1.SchemeGroupVersion.String(),
					Kind:       "CloudProfile",
				},
			},
			Seed: &gardencorevalpha1.Seed{
				TypeMeta: metav1.TypeMeta{
					APIVersion: gardencorevalpha1.SchemeGroupVersion.String(),
					Kind:       "Seed",
				},
			},
			Shoot: &gardencorevalpha1.Shoot{
				TypeMeta: metav1.TypeMeta{
					APIVersion: gardencorevalpha1.SchemeGroupVersion.String(),
					Kind:       "Shoot",
				},
				Spec: gardencorevalpha1.ShootSpec{
					Kubernetes: gardencorevalpha1.Kubernetes{
						Version: "1.13.4",
					},
				},
			},
		}
	)

	BeforeEach(func() {
		ctrl = gomock.NewController(GinkgoT())
	})

	AfterEach(func() {
		ctrl.Finish()
	})

	Describe("#Mutate", func() {
		var (
			mutator  extensionswebhook.Mutator
			kcc      *mockcontrolplane.MockKubeletConfigCodec
			ensurer  *mockgenericmutator.MockEnsurer
			us       *mockcontrolplane.MockUnitSerializer
			fcic     *mockcontrolplane.MockFileContentInlineCodec
			old, new runtime.Object
		)

		BeforeEach(func() {
			ensurer = mockgenericmutator.NewMockEnsurer(ctrl)
			kcc = mockcontrolplane.NewMockKubeletConfigCodec(ctrl)
			us = mockcontrolplane.NewMockUnitSerializer(ctrl)
			fcic = mockcontrolplane.NewMockFileContentInlineCodec(ctrl)
			mutator = genericmutator.NewMutator(ensurer, us, kcc, fcic, logger)
			old = nil
			new = nil
		})

		DescribeTable("Should ignore", func(new, old runtime.Object) {
			err := mutator.Mutate(context.TODO(), new, old)
			Expect(err).To(Not(HaveOccurred()))
		},
			Entry(
				"other services than kube-apiserver",
				&corev1.Service{ObjectMeta: metav1.ObjectMeta{Name: "test"}},
				nil,
			),
			Entry(
				"other deployments than kube-apiserver, kube-controller-manager, and kube-scheduler",
				&appsv1.Deployment{ObjectMeta: metav1.ObjectMeta{Name: "test"}},
				nil,
			),
			Entry(
				"other etcds than etcd-main and etcd-events",
				&druidv1alpha1.Etcd{ObjectMeta: metav1.ObjectMeta{Name: "test"}},
				nil,
			),
		)

		DescribeTable("Should ensure", func(ensureFunc func()) {
			ensureFunc()

			err := mutator.Mutate(context.TODO(), new, old)
			Expect(err).To(Not(HaveOccurred()))
		},
			Entry(
				"EnsureKubeAPIServerService with a kube-apiserver service",
				func() {
					new = &corev1.Service{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeAPIServer}}
					ensurer.EXPECT().EnsureKubeAPIServerService(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
			Entry(
				"EnsureKubeAPIServerService with a kube-apiserver service and existing service",
				func() {
					new = &corev1.Service{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeAPIServer}}
					old = new.DeepCopyObject()
					ensurer.EXPECT().EnsureKubeAPIServerService(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
			Entry(
				"EnsureKubeAPIServerDeployment with a kube-apiserver deployment",
				func() {
					new = &appsv1.Deployment{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeAPIServer}}
					ensurer.EXPECT().EnsureKubeAPIServerDeployment(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
			Entry(
				"EnsureKubeAPIServerDeployment with a kube-apiserver deployment and existing deployment",
				func() {
					new = &appsv1.Deployment{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeAPIServer}}
					old = new.DeepCopyObject()
					ensurer.EXPECT().EnsureKubeAPIServerDeployment(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
			Entry(
				"EnsureKubeControllerManagerDeployment with a kube-controller-manager deployment",
				func() {
					new = &appsv1.Deployment{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeControllerManager}}
					ensurer.EXPECT().EnsureKubeControllerManagerDeployment(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
			Entry(
				"EnsureKubeControllerManagerDeployment with a kube-controller-manager deployment and existing deployment",
				func() {
					new = &appsv1.Deployment{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeControllerManager}}
					old = new.DeepCopyObject()
					ensurer.EXPECT().EnsureKubeControllerManagerDeployment(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
			Entry(
				"EnsureKubeSchedulerDeployment with a kube-scheduler deployment",
				func() {
					new = &appsv1.Deployment{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeScheduler}}
					ensurer.EXPECT().EnsureKubeSchedulerDeployment(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
			Entry(
				"EnsureKubeSchedulerDeployment with a kube-scheduler deployment and existing deployment",
				func() {
					new = &appsv1.Deployment{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.DeploymentNameKubeScheduler}}
					old = new.DeepCopyObject()
					ensurer.EXPECT().EnsureKubeSchedulerDeployment(context.TODO(), gomock.Any(), new, old).Return(nil)
				},
			),
		)

		DescribeTable("EnsureETCD", func(new, old *druidv1alpha1.Etcd) {
			client := mockclient.NewMockClient(ctrl)
			client.EXPECT().Get(context.TODO(), clusterKey, &extensionsv1alpha1.Cluster{}).DoAndReturn(clientGet(clusterObject(cluster)))

			ensurer.EXPECT().EnsureETCD(context.TODO(), gomock.Any(), new, old).Return(nil).Do(func(ctx context.Context, ectx genericmutator.EnsurerContext, new, old *druidv1alpha1.Etcd) {
				_, err := ectx.GetCluster(ctx)
				if err != nil {
					logger.Error(err, "failed to get cluster object")
				}
			})

			err := mutator.(inject.Client).InjectClient(client)
			Expect(err).To(Not(HaveOccurred()))

			// Call Mutate method and check the result
			err = mutator.Mutate(context.TODO(), new, old)
			Expect(err).To(Not(HaveOccurred()))
		},
			Entry(
				"with a etcd-main",
				&druidv1alpha1.Etcd{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.ETCDMain, Namespace: namespace}},
				nil,
			),
			Entry(
				"with a etcd-main and existing druid",
				&druidv1alpha1.Etcd{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.ETCDMain, Namespace: namespace}},
				&druidv1alpha1.Etcd{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.ETCDMain, Namespace: namespace}},
			),
			Entry(
				"with a etcd-events",
				&druidv1alpha1.Etcd{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.ETCDEvents, Namespace: namespace}},
				nil,
			),
			Entry(
				"with a etcd-events and existing druid",
				&druidv1alpha1.Etcd{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.ETCDEvents, Namespace: namespace}},
				&druidv1alpha1.Etcd{ObjectMeta: metav1.ObjectMeta{Name: v1beta1constants.ETCDEvents, Namespace: namespace}},
			),
		)

		// DescribeTable("should invoke appropriate ensurer methods with OperatingSystemConfig", func() {
		It("should invoke appropriate ensurer methods with OperatingSystemConfig", func() {

			var (
				newOSC = &extensionsv1alpha1.OperatingSystemConfig{
					ObjectMeta: metav1.ObjectMeta{Name: "test", Namespace: "test"},
					Spec: extensionsv1alpha1.OperatingSystemConfigSpec{
						Purpose: extensionsv1alpha1.OperatingSystemConfigPurposeReconcile,
						Units: []extensionsv1alpha1.Unit{
							{
								Name:    v1beta1constants.OperatingSystemConfigUnitNameKubeletService,
								Content: util.StringPtr(newServiceContent),
							},
						},
						Files: []extensionsv1alpha1.File{
							{
								Path: v1beta1constants.OperatingSystemConfigFilePathKubeletConfig,
								Content: extensionsv1alpha1.FileContent{
									Inline: &extensionsv1alpha1.FileContentInline{
										Data: newKubeletConfigData,
									},
								},
							},
							{
								Path: v1beta1constants.OperatingSystemConfigFilePathKernelSettings,
								Content: extensionsv1alpha1.FileContent{
									Inline: &extensionsv1alpha1.FileContentInline{
										Data: newKubernetesGeneralConfigData,
									},
								},
							},
						},
					},
				}
				oldUnitOptions = []*unit.UnitOption{
					{
						Section: "Service",
						Name:    "Foo",
						Value:   "old",
					},
				}
				newUnitOptions = []*unit.UnitOption{
					{
						Section: "Service",
						Name:    "Foo",
						Value:   "bar",
					},
				}
				mutatedUnitOptions = []*unit.UnitOption{
					{
						Section: "Service",
						Name:    "Foo",
						Value:   "baz",
					},
				}
				oldKubeletConfig = &kubeletconfigv1beta1.KubeletConfiguration{
					FeatureGates: map[string]bool{
						"Old": true,
					},
				}
				newKubeletConfig = &kubeletconfigv1beta1.KubeletConfiguration{
					FeatureGates: map[string]bool{
						"Foo": true,
						"Bar": true,
					},
				}
				mutatedKubeletConfig = &kubeletconfigv1beta1.KubeletConfiguration{
					FeatureGates: map[string]bool{
						"Foo": true,
					},
				}
				additionalUnit = extensionsv1alpha1.Unit{Name: "custom-mtu.service"}
				additionalFile = extensionsv1alpha1.File{Path: "/test/path"}
			)

			oldOSC := newOSC.DeepCopy()
			oldOSC.Spec.Units[0].Content = util.StringPtr(oldServiceContent)
			oldOSC.Spec.Files[0].Content.Inline.Data = oldKubeletConfigData
			oldOSC.Spec.Files[1].Content.Inline.Data = oldKubernetesGeneralConfigData

			// Create mock ensurer
			ensurer.EXPECT().EnsureKubeletServiceUnitOptions(context.TODO(), gomock.Any(), newUnitOptions, oldUnitOptions).Return(mutatedUnitOptions, nil)
			ensurer.EXPECT().EnsureKubeletConfiguration(context.TODO(), gomock.Any(), newKubeletConfig, oldKubeletConfig).DoAndReturn(
				func(ctx context.Context, ectx genericmutator.EnsurerContext, kubeletConfig, newKubeletConfig *kubeletconfigv1beta1.KubeletConfiguration) error {
					*kubeletConfig = *mutatedKubeletConfig
					return nil
				},
			)
			ensurer.EXPECT().EnsureKubernetesGeneralConfiguration(context.TODO(), gomock.Any(), util.StringPtr(newKubernetesGeneralConfigData), util.StringPtr(oldKubernetesGeneralConfigData)).DoAndReturn(
				func(ctx context.Context, ectx genericmutator.EnsurerContext, data, newData *string) error {
					*data = mutatedKubernetesGeneralConfigData
					return nil
				},
			)
			ensurer.EXPECT().EnsureAdditionalUnits(context.TODO(), gomock.Any(), &newOSC.Spec.Units, &oldOSC.Spec.Units).DoAndReturn(
				func(ctx context.Context, ectx genericmutator.EnsurerContext, oscUnits, oldOSCUnits *[]extensionsv1alpha1.Unit) error {
					*oscUnits = append(*oscUnits, additionalUnit)
					return nil
				})
			ensurer.EXPECT().EnsureAdditionalFiles(context.TODO(), gomock.Any(), &newOSC.Spec.Files, &oldOSC.Spec.Files).DoAndReturn(
				func(ctx context.Context, ectx genericmutator.EnsurerContext, oscFiles, oldOSCFiles *[]extensionsv1alpha1.File) error {
					*oscFiles = append(*oscFiles, additionalFile)
					return nil
				})

			ensurer.EXPECT().ShouldProvisionKubeletCloudProviderConfig(context.TODO(), gomock.Any()).Return(true)
			ensurer.EXPECT().EnsureKubeletCloudProviderConfig(context.TODO(), gomock.Any(), gomock.Any(), newOSC.Namespace).DoAndReturn(
				func(ctx context.Context, ectx genericmutator.EnsurerContext, data *string, _ string) error {
					*data = cloudproviderconf
					return nil
				},
			)

			us.EXPECT().Deserialize(newServiceContent).Return(newUnitOptions, nil)
			us.EXPECT().Deserialize(oldServiceContent).Return(oldUnitOptions, nil)
			us.EXPECT().Serialize(mutatedUnitOptions).Return(mutatedServiceContent, nil)

			kcc.EXPECT().Decode(&extensionsv1alpha1.FileContentInline{Data: newKubeletConfigData}).Return(newKubeletConfig, nil)
			kcc.EXPECT().Decode(&extensionsv1alpha1.FileContentInline{Data: oldKubeletConfigData}).Return(oldKubeletConfig, nil)
			kcc.EXPECT().Encode(mutatedKubeletConfig, "").Return(&extensionsv1alpha1.FileContentInline{Data: mutatedKubeletConfigData}, nil)

			fcic.EXPECT().Decode(&extensionsv1alpha1.FileContentInline{Data: newKubernetesGeneralConfigData}).Return([]byte(newKubernetesGeneralConfigData), nil)
			fcic.EXPECT().Decode(&extensionsv1alpha1.FileContentInline{Data: oldKubernetesGeneralConfigData}).Return([]byte(oldKubernetesGeneralConfigData), nil)
			fcic.EXPECT().Encode([]byte(mutatedKubernetesGeneralConfigData), "").Return(&extensionsv1alpha1.FileContentInline{Data: mutatedKubernetesGeneralConfigData}, nil)
			fcic.EXPECT().Encode([]byte(cloudproviderconf), encoding).Return(&extensionsv1alpha1.FileContentInline{Data: cloudproviderconfEncoded, Encoding: encoding}, nil)

			// Call Mutate method and check the result
			err := mutator.Mutate(context.TODO(), newOSC, oldOSC)
			Expect(err).To(Not(HaveOccurred()))
			checkOperatingSystemConfig(newOSC)
		},
		)
	})
})

func checkOperatingSystemConfig(osc *extensionsv1alpha1.OperatingSystemConfig) {
	kubeletUnit := extensionswebhook.UnitWithName(osc.Spec.Units, v1beta1constants.OperatingSystemConfigUnitNameKubeletService)
	Expect(kubeletUnit).To(Not(BeNil()))
	Expect(kubeletUnit.Content).To(Equal(util.StringPtr(mutatedServiceContent)))

	customMTU := extensionswebhook.UnitWithName(osc.Spec.Units, "custom-mtu.service")
	Expect(customMTU).To(Not(BeNil()))

	customFile := extensionswebhook.FileWithPath(osc.Spec.Files, "/test/path")
	Expect(customFile).To(Not(BeNil()))

	kubeletFile := extensionswebhook.FileWithPath(osc.Spec.Files, v1beta1constants.OperatingSystemConfigFilePathKubeletConfig)
	Expect(kubeletFile).To(Not(BeNil()))
	Expect(kubeletFile.Content.Inline).To(Equal(&extensionsv1alpha1.FileContentInline{Data: mutatedKubeletConfigData}))

	general := extensionswebhook.FileWithPath(osc.Spec.Files, v1beta1constants.OperatingSystemConfigFilePathKernelSettings)
	Expect(general).To(Not(BeNil()))
	Expect(general.Content.Inline).To(Equal(&extensionsv1alpha1.FileContentInline{Data: mutatedKubernetesGeneralConfigData}))

	cloudProvider := extensionswebhook.FileWithPath(osc.Spec.Files, genericmutator.CloudProviderConfigPath)
	Expect(cloudProvider).To(Not(BeNil()))
	Expect(cloudProvider.Path).To(Equal(genericmutator.CloudProviderConfigPath))
	Expect(cloudProvider.Permissions).To(Equal(util.Int32Ptr(0644)))
	Expect(cloudProvider.Content.Inline).To(Equal(&extensionsv1alpha1.FileContentInline{Data: cloudproviderconfEncoded, Encoding: encoding}))
}

func clientGet(result runtime.Object) interface{} {
	return func(ctx context.Context, key client.ObjectKey, obj runtime.Object) error {
		switch obj.(type) {
		case *extensionsv1alpha1.Cluster:
			*obj.(*extensionsv1alpha1.Cluster) = *result.(*extensionsv1alpha1.Cluster)
		}
		return nil
	}
}

func clusterObject(cluster *extensionscontroller.Cluster) *extensionsv1alpha1.Cluster {
	return &extensionsv1alpha1.Cluster{
		Spec: extensionsv1alpha1.ClusterSpec{
			CloudProfile: runtime.RawExtension{
				Raw: encode(cluster.CloudProfile),
			},
			Seed: runtime.RawExtension{
				Raw: encode(cluster.Seed),
			},
			Shoot: runtime.RawExtension{
				Raw: encode(cluster.Shoot),
			},
		},
	}
}

func encode(obj runtime.Object) []byte {
	data, _ := json.Marshal(obj)
	return data
}