// Copyright 2019 PingCAP, Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// See the License for the specific language governing permissions and
// limitations under the License.

package tests

import (
	"context"
	"encoding/base64"
	"fmt"
	"time"

	podutil "github.com/pingcap/tidb-operator/tests/e2e/util/pod"

	v1 "k8s.io/api/core/v1"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	utilversion "k8s.io/apimachinery/pkg/util/version"
	"k8s.io/apimachinery/pkg/util/wait"
	"k8s.io/kubernetes/test/e2e/framework/log"
)

func (oa *OperatorActions) setCabundleFromApiServer(info *OperatorConfig) error {

	serverVersion, err := oa.kubeCli.Discovery().ServerVersion()
	if err != nil {
		return fmt.Errorf("failed to get api server version")
	}
	sv := utilversion.MustParseSemantic(serverVersion.GitVersion)
	log.Logf("ServerVersion: %v", serverVersion.String())

	if sv.LessThan(utilversion.MustParseSemantic("v1.13.0")) && len(info.Cabundle) < 1 {
		namespace := "kube-system"
		name := "extension-apiserver-authentication"
		cm, err := oa.kubeCli.CoreV1().ConfigMaps(namespace).Get(context.TODO(), name, metav1.GetOptions{})
		if err != nil {
			return err
		}
		content, existed := cm.Data["client-ca-file"]
		if !existed {
			return fmt.Errorf("failed to get caBundle from configmap[%s/%s]", namespace, name)
		}
		info.Cabundle = base64.StdEncoding.EncodeToString([]byte(content))
		return nil
	}
	return nil
}

func (oa *OperatorActions) WaitAdmissionWebhookReady(info *OperatorConfig, timeout, pollInterval time.Duration) error {
	var lastErr, err error
	err = wait.PollImmediate(pollInterval, timeout, func() (done bool, err error) {
		deploymentName := "tidb-admission-webhook"
		deploymentID := fmt.Sprintf("%s/%s", info.Namespace, deploymentName)

		deployment, err := oa.kubeCli.AppsV1().Deployments(info.Namespace).Get(context.TODO(), deploymentName, metav1.GetOptions{})
		if err != nil {
			lastErr = fmt.Errorf("failed to get deployment %q: %v", deploymentID, err)
			return false, nil
		}

		containers := podutil.ListContainerFromPod(deployment.Spec.Template.Spec, func(container v1.Container) bool {
			if container.Name != "admission-webhook" {
				return false
			}
			if container.Image != info.Image {
				return false
			}
			return true
		})
		if len(containers) == 0 {
			lastErr = fmt.Errorf("failed to find container for deployment %q", deploymentID)
			return false, nil
		}

		if deployment.Status.UpdatedReplicas != *deployment.Spec.Replicas {
			lastErr = fmt.Errorf("not all replication are updated for deployement %q, ready: %d, spec: %d",
				deploymentID, deployment.Status.ReadyReplicas, *deployment.Spec.Replicas)
			return false, nil
		}

		if deployment.Status.ReadyReplicas != *deployment.Spec.Replicas {
			lastErr = fmt.Errorf("not all replication are ready for deployment %q, ready: %d, spec: %d",
				deploymentID, deployment.Status.ReadyReplicas, *deployment.Spec.Replicas)
			return false, nil
		}

		return true, nil
	})

	if err == wait.ErrWaitTimeout {
		return lastErr
	}
	return err
}