package chart

import (
	"context"
	"encoding/base64"
	"fmt"
	"os"
	"reflect"
	"regexp"
	"testing"

	appsv1 "k8s.io/api/apps/v1"
	corev1 "k8s.io/api/core/v1"
	apiextensionsv1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
	"k8s.io/apimachinery/pkg/runtime"
	"k8s.io/apimachinery/pkg/runtime/serializer"
	"k8s.io/client-go/kubernetes/scheme"

	operatorv1 "open-cluster-management.io/api/operator/v1"
)

const (
	defaultRegistry = "quay.io/open-cluster-management"
	defaultVersion  = "latest"
)

var outputDebug = false

var decoder runtime.Decoder
var chartScheme = runtime.NewScheme()

func init() {
	_ = scheme.AddToScheme(chartScheme)
	_ = apiextensionsv1.AddToScheme(chartScheme)
	_ = operatorv1.AddToScheme(chartScheme)

	decoder = serializer.NewCodecFactory(chartScheme).UniversalDeserializer()
}

func TestClusterManagerConfig(t *testing.T) {
	cases := []struct {
		name           string
		namespace      string
		chartConfig    func() *ClusterManagerChartConfig
		expectedObjCnt int
	}{
		{
			name:      "default config",
			namespace: "open-cluster-management",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.NodeSelector = map[string]string{"kubernetes.io/os": "linux"}
				return config
			},
			expectedObjCnt: 5,
		},
		{
			name:      "enable bootstrap token",
			namespace: "multicluster-engine",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.CreateBootstrapToken = true
				return config
			},
			expectedObjCnt: 8,
		},
		{
			name:      "enable bootstrap sa",
			namespace: "multicluster-engine",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.CreateBootstrapSA = true
				return config
			},
			expectedObjCnt: 8,
		},
		{
			name:      "change images config",
			namespace: "ocm",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.Images = ImagesConfig{
					Registry:        "myrepo",
					Tag:             "v9.9.9",
					ImagePullPolicy: corev1.PullAlways,
					ImageCredentials: ImageCredentials{
						CreateImageCredentials: true,
						UserName:               "test",
						Password:               "test",
					},
				}
				return config
			},
			expectedObjCnt: 6,
		},
		{
			name:      "change images config dockerConfigJson",
			namespace: "ocm",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.Images = ImagesConfig{
					Registry:        "myrepo",
					Tag:             "v9.9.9",
					ImagePullPolicy: corev1.PullAlways,
					ImageCredentials: ImageCredentials{
						CreateImageCredentials: true,
						DockerConfigJson:       `{"auths":{"quay.io":{"auth":"YWJjCg=="}}}`,
					},
				}
				return config
			},
			expectedObjCnt: 6,
		},
		{
			name:      "use existing imagePullSecrets",
			namespace: "ocm",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.Images.ImagePullSecrets = []corev1.LocalObjectReference{
					{Name: "my-existing-secret"},
				}
				return config
			},
			expectedObjCnt: 5,
		},
		{
			name:      "create namespace",
			namespace: "multicluster-engine",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.CreateBootstrapToken = true
				config.CreateNamespace = true
				return config
			},
			expectedObjCnt: 9,
		},
		{
			name:      "enable grpc ",
			namespace: "multicluster-engine",
			chartConfig: func() *ClusterManagerChartConfig {
				config := NewDefaultClusterManagerChartConfig()
				config.CreateBootstrapSA = true
				config.ClusterManager.RegistrationConfiguration.RegistrationDrivers = append(
					config.ClusterManager.RegistrationConfiguration.RegistrationDrivers, operatorv1.RegistrationDriverHub{
						AuthType: "grpc",
						GRPC:     &operatorv1.GRPCRegistrationConfig{AutoApprovedIdentities: []string{"user:test"}},
					})

				config.ClusterManager.ServerConfiguration = operatorv1.ServerConfiguration{
					EndpointsExposure: []operatorv1.EndpointExposure{
						{
							Usage:    "",
							Protocol: "grpc",
							GRPC: &operatorv1.Endpoint{
								Type: "hostname",
								Hostname: &operatorv1.HostnameConfig{
									Host: "host.com",
								},
							},
						},
					},
				}
				return config
			},
			expectedObjCnt: 8,
		},
	}

	for _, c := range cases {
		t.Run(c.name, func(t *testing.T) {
			registry := defaultRegistry
			version := defaultVersion
			config := c.chartConfig()

			if config.Images.Registry != "" {
				registry = config.Images.Registry
			}
			if config.Images.Tag != "" {
				version = config.Images.Tag
			}

			crdObjs, rawObjs, err := RenderClusterManagerChart(context.Background(), config, c.namespace)
			if err != nil {
				t.Errorf("error rendering chart: %v", err)
			}
			if len(crdObjs) != 1 {
				t.Errorf("expected 1 crd object, got %d", len(crdObjs))
			}
			if len(rawObjs) != c.expectedObjCnt {
				t.Errorf("expected %d objects, got %d", c.expectedObjCnt, len(rawObjs))
			}

			objects := append(crdObjs, rawObjs...) //nolint:gocritic
			// output is for debug
			if outputDebug {
				output(t, c.name, objects)
			}
			for i, o := range objects {
				obj, _, err := decoder.Decode(o, nil, nil)
				if err != nil {
					t.Errorf("error decoding object: %v", err)
				}
				switch object := obj.(type) {
				case *corev1.Namespace:
					if i != 1 {
						t.Errorf("the second object is not namespace")
					}
					if object.Name != c.namespace {
						t.Errorf("expected namespace %s, got %s", c.namespace, object.Name)
					}
				case *appsv1.Deployment:
					if object.Namespace != c.namespace {
						t.Errorf("expected namespace is %s, but got %s", c.namespace, object.Namespace)
					}
					if object.Spec.Template.Spec.Containers[0].Image != fmt.Sprintf("%s/registration-operator:%s", registry, version) {
						t.Errorf("failed to render operator image")
					}
					if !reflect.DeepEqual(object.Spec.Template.Spec.NodeSelector, config.NodeSelector) {
						t.Errorf("failed to render node selector")
					}

				case *apiextensionsv1.CustomResourceDefinition:
					if object.Name != "clustermanagers.operator.open-cluster-management.io" {
						t.Errorf(" got CRD name %s", object.Name)
					}
				case *operatorv1.ClusterManager:
					if object.Spec.PlacementImagePullSpec != fmt.Sprintf("%s/placement:%s", registry, version) ||
						object.Spec.RegistrationImagePullSpec != fmt.Sprintf("%s/registration:%s", registry, version) ||
						object.Spec.WorkImagePullSpec != fmt.Sprintf("%s/work:%s", registry, version) ||
						object.Spec.AddOnManagerImagePullSpec != fmt.Sprintf("%s/addon-manager:%s", registry, version) {
						t.Errorf("failed to render images")
					}
					if config.CreateBootstrapToken {
						if len(object.Spec.RegistrationConfiguration.AutoApproveUsers) == 0 {
							t.Errorf("failed to render auto approve users for bootstrap token")
						}
					}
					if config.CreateBootstrapSA {
						if len(object.Spec.RegistrationConfiguration.AutoApproveUsers) == 0 {
							t.Errorf("failed to render auto approve users for bootstrap sa")
						}
					}
					if !config.CreateBootstrapSA && !config.CreateBootstrapToken {
						if len(object.Spec.RegistrationConfiguration.AutoApproveUsers) != 0 {
							t.Errorf("failed to render auto approve users")
						}
					}
					registrationDrivers := config.ClusterManager.RegistrationConfiguration.RegistrationDrivers
					for _, driver := range registrationDrivers {
						if driver.AuthType == operatorv1.GRPCAuthType {
							if len(config.ClusterManager.ServerConfiguration.EndpointsExposure) == 0 {
								t.Errorf("failed to render serverConfiguration")
							}
						}
					}
				case *corev1.Secret:
					switch object.Name {
					case "open-cluster-management-image-pull-credentials":
						data := object.Data[corev1.DockerConfigJsonKey]
						if len(data) == 0 {
							t.Errorf("failed to get image pull secret")
						}
						if base64.StdEncoding.EncodeToString(data) == "" {
							t.Errorf("failed to render image pull secret")
						}
					case "bootstrap-token-ocmhub":
						data := object.StringData["token-secret"]
						if len(data) != 16 {
							t.Errorf("failed to get token secret")
						}
						re := regexp.MustCompile("^([a-z0-9]{16})$")

						if string(re.Find([]byte(data))) != data {
							t.Errorf("the token secret is invalid")
						}
					}
				}
			}
		})
	}
}

func TestKlusterletConfig(t *testing.T) {
	cases := []struct {
		name           string
		namespace      string
		chartConfig    func() *KlusterletChartConfig
		expectedObjCnt int
	}{
		{
			name:      "default config",
			namespace: "open-cluster-management",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.NodeSelector = map[string]string{"kubernetes.io/os": "linux"}
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				return config
			},
			expectedObjCnt: 5,
		},
		{
			name:      "use bootstrapHubKubeConfig",
			namespace: "open-cluster-management",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				config.BootstrapHubKubeConfig = "kubeconfig"
				return config
			},
			expectedObjCnt: 7,
		},
		{
			name:      "use multiHubBootstrapHubKubeConfigs",
			namespace: "open-cluster-management",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				config.Klusterlet.ClusterName = "multiHubCluster-agent"
				config.MultiHubBootstrapHubKubeConfigs = []BootStrapKubeConfig{
					{Name: "bootStrap1", KubeConfig: "kubeconfig1"},
					{Name: "bootStrap2", KubeConfig: "kubeconfig2"},
				}
				return config
			},
			expectedObjCnt: 8,
		},

		{
			name:      "change images config",
			namespace: "ocm",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Images = ImagesConfig{
					Registry:        "myrepo",
					Tag:             "v9.9.9",
					ImagePullPolicy: corev1.PullAlways,
					ImageCredentials: ImageCredentials{
						CreateImageCredentials: true,
						UserName:               "test",
						Password:               "test",
					},
				}
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				return config
			},
			expectedObjCnt: 6,
		},
		{
			name:      "hosted mode without bootstrap",
			namespace: "ocm",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.Name = "klusterlet2"
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingletonHosted
				return config
			},
			expectedObjCnt: 1,
		},
		{
			name:      "hosted mode with bootstrap",
			namespace: "ocm",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.Name = "klusterlet2"
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingletonHosted
				config.BootstrapHubKubeConfig = "kubeconfig"
				return config
			},
			expectedObjCnt: 3,
		},
		{
			name:      "noOperator",
			namespace: "ocm",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.NoOperator = true
				config.Klusterlet.Name = "klusterlet2"
				config.Klusterlet.Namespace = "open-cluster-management-test"
				config.Klusterlet.ClusterName = "testCluster"
				return config
			},
			expectedObjCnt: 1,
		},
		{
			name:      "noOperator with priority cluster",
			namespace: "ocm",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.NoOperator = true
				config.Klusterlet.Name = "klusterlet2"
				config.Klusterlet.Namespace = "open-cluster-management-test"
				config.Klusterlet.ClusterName = "testCluster"
				config.PriorityClassName = "klusterlet-critical"
				return config
			},
			expectedObjCnt: 1,
		},
		{
			name:      "noOperator with image pull secret",
			namespace: "ocm",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.NoOperator = true
				config.Klusterlet.Name = "klusterlet2"
				config.Klusterlet.Namespace = "open-cluster-management-test"
				config.Klusterlet.ClusterName = "testCluster"
				config.PriorityClassName = "klusterlet-critical"
				config.Images = ImagesConfig{
					ImageCredentials: ImageCredentials{
						CreateImageCredentials: true,
						UserName:               "test",
						Password:               "test",
					},
				}
				return config
			},

			expectedObjCnt: 2,
		},
		{
			name:      "create namespace",
			namespace: "open-cluster-management",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				config.CreateNamespace = true
				return config
			},
			expectedObjCnt: 6,
		},
		{
			name:      "create namespace with bootstrap secret",
			namespace: "open-cluster-management",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				config.CreateNamespace = true
				config.BootstrapHubKubeConfig = "kubeconfig"

				return config
			},
			expectedObjCnt: 8,
		},
		{
			name:      "create namespace with bootstrap secret and release.Namespace is the agent namespace",
			namespace: "open-cluster-management-agent",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				config.CreateNamespace = true
				config.BootstrapHubKubeConfig = "kubeconfig"
				return config
			},
			expectedObjCnt: 7,
		},
		{
			name:      "create namespace with bootstrap secret and grpc config",
			namespace: "open-cluster-management-agent",
			chartConfig: func() *KlusterletChartConfig {
				config := NewDefaultKlusterletChartConfig()
				config.Klusterlet.ClusterName = "testCluster"
				config.Klusterlet.Mode = operatorv1.InstallModeSingleton
				config.CreateNamespace = true
				config.BootstrapHubKubeConfig = "kubeconfig"
				config.GRPCConfig = "grpcconfig"
				return config
			},
			expectedObjCnt: 7,
		},
	}

	for _, c := range cases {
		t.Run(c.name, func(t *testing.T) {
			registry := defaultRegistry
			version := defaultVersion
			config := c.chartConfig()
			if config.Images.Registry != "" {
				registry = config.Images.Registry
			}
			if config.Images.Tag != "" {
				version = config.Images.Tag
			}

			crdObjs, rawObjs, err := RenderKlusterletChart(context.Background(), config, c.namespace)
			if err != nil {
				t.Errorf("error rendering chart: %v", err)
			}

			if len(crdObjs) != 1 {
				t.Errorf("expected 1 crd object, got %d", len(crdObjs))
			}
			if len(rawObjs) != c.expectedObjCnt {
				t.Errorf("expected %d objects, got %d", c.expectedObjCnt, len(rawObjs))
			}

			objects := append(crdObjs, rawObjs...) //nolint:gocritic
			// output is for debug
			if outputDebug {
				output(t, c.name, objects)
			}

			for _, o := range objects {
				obj, _, err := decoder.Decode(o, nil, nil)
				if err != nil {
					t.Errorf("error decoding object: %v", err)
				}
				switch object := obj.(type) {
				case *corev1.Namespace:
					if object.Name != c.namespace {
						if config.Klusterlet.Mode == operatorv1.InstallModeSingletonHosted ||
							config.Klusterlet.Mode == operatorv1.InstallModeHosted {
							if object.Name != config.Klusterlet.Name {
								t.Errorf(" expected namespace %s, got %s", config.Klusterlet.Name, object.Name)
							}
						} else {
							if config.Klusterlet.Namespace == "" && object.Name != "open-cluster-management-agent" {
								t.Errorf(" expected namespace open-cluster-management-agent, got %s", object.Name)
							}
							if config.Klusterlet.Namespace != "" && object.Name != config.Klusterlet.Name {
								t.Errorf(" expected %s, got %s", config.Klusterlet.Namespace, object.Name)
							}
						}
					}
				case *appsv1.Deployment:
					if object.Namespace != c.namespace {
						t.Errorf("expected namespace is %s, but got %s", c.namespace, object.Namespace)
					}
					if object.Spec.Template.Spec.Containers[0].Image != fmt.Sprintf("%s/registration-operator:%s", registry, version) {
						t.Errorf("failed to render operator image")
					}

					if !reflect.DeepEqual(object.Spec.Template.Spec.NodeSelector, config.NodeSelector) {
						t.Errorf("failed to render node selector")
					}
				case *apiextensionsv1.CustomResourceDefinition:
					if object.Name != "klusterlets.operator.open-cluster-management.io" {
						t.Errorf(" got CRD name %s", object.Name)
					}
				case *operatorv1.Klusterlet:
					if object.Spec.RegistrationImagePullSpec != fmt.Sprintf("%s/registration:%s", registry, version) ||
						object.Spec.WorkImagePullSpec != fmt.Sprintf("%s/work:%s", registry, version) ||
						object.Spec.ImagePullSpec != fmt.Sprintf("%s/registration-operator:%s", registry, version) {
						t.Errorf("failed to render images")
					}

					if object.Spec.ClusterName != config.Klusterlet.ClusterName {
						t.Errorf(" expected %s, got %s", config.Klusterlet.ClusterName, object.Spec.ClusterName)
					}
					if object.Spec.PriorityClassName != config.PriorityClassName {
						t.Errorf(" expected %s, got %s", config.PriorityClassName, object.Spec.PriorityClassName)
					}
					if object.Spec.ResourceRequirement != nil && object.Spec.ResourceRequirement.Type == "" {
						t.Errorf(" expected resource requirement type, got invalid type")
					}
					switch config.Klusterlet.Mode {
					case "", operatorv1.InstallModeSingleton, operatorv1.InstallModeDefault:
						if config.Klusterlet.Mode == "" && object.Spec.DeployOption.Mode != operatorv1.InstallModeSingleton {
							t.Errorf(" expected Singleton, got %s", object.Spec.DeployOption.Mode)
						}
						if config.Klusterlet.Mode != "" && object.Spec.DeployOption.Mode != config.Klusterlet.Mode {
							t.Errorf(" expected %s, got %s", config.Klusterlet.Mode, object.Spec.DeployOption.Mode)
						}
						if config.Klusterlet.Name == "" && object.Name != "klusterlet" {
							t.Errorf(" expected klusterlet, got %s", object.Name)
						}
						if config.Klusterlet.Name != "" && object.Name != config.Klusterlet.Name {
							t.Errorf(" expected %s, got %s", config.Klusterlet.Name, object.Name)
						}
						if config.Klusterlet.Namespace == "" && object.Spec.Namespace != "open-cluster-management-agent" {
							t.Errorf(" expected open-cluster-management-agent, got %s", object.Spec.Namespace)
						}
						if config.Klusterlet.Namespace != "" && object.Spec.Namespace != config.Klusterlet.Namespace {
							t.Errorf(" expected %s, got %s", config.Klusterlet.Namespace, object.Spec.Namespace)
						}

					case operatorv1.InstallModeSingletonHosted, operatorv1.InstallModeHosted:
						if object.Spec.DeployOption.Mode != config.Klusterlet.Mode {
							t.Errorf(" expected %s, got %s", config.Klusterlet.Mode, object.Spec.DeployOption.Mode)
						}
						if config.Klusterlet.Name == "" &&
							object.Name != fmt.Sprintf("klusterlet-%s", object.Spec.ClusterName) {
							t.Errorf(" expected %s, got %s",
								fmt.Sprintf("klusterlet-%s", object.Spec.ClusterName), object.Name)
						}
						if config.Klusterlet.Name != "" && object.Name != config.Klusterlet.Name {
							t.Errorf(" expected %s, got %s", config.Klusterlet.Name, object.Name)
						}
						if config.Klusterlet.Namespace == "" &&
							object.Spec.Namespace != fmt.Sprintf("open-cluster-management-%s", object.Spec.ClusterName) {
							t.Errorf(" expected %s, got %s",
								fmt.Sprintf("open-cluster-management-%s", object.Spec.ClusterName), object.Spec.Namespace)
						}
						if config.Klusterlet.Namespace != "" && object.Spec.Namespace != config.Klusterlet.Namespace {
							t.Errorf(" expected %s, got %s", config.Klusterlet.Namespace, object.Spec.Namespace)
						}
					}
				case *corev1.Secret:
					switch object.Name {
					case "open-cluster-management-image-pull-credentials":
						if object.Namespace != c.namespace {
							t.Errorf(" expected namespace %s, got %s", c.namespace, object.Namespace)
						}
						data := object.Data[corev1.DockerConfigJsonKey]
						if len(data) == 0 {
							t.Errorf("failed to get image pull secret")
						}
						if base64.StdEncoding.EncodeToString(data) == "" {
							t.Errorf("failed to render image pull secret")
						}
					case "bootstrap-hub-kubeconfig", "external-managed-kubeconfig":
						if config.Klusterlet.Mode == operatorv1.InstallModeSingletonHosted ||
							config.Klusterlet.Mode == operatorv1.InstallModeHosted {
							if object.Namespace != config.Klusterlet.Name {
								t.Errorf(" expected namespace %s, got %s", config.Klusterlet.Name, object.Namespace)
							}
						} else {
							if config.Klusterlet.Namespace == "" && object.Namespace != "open-cluster-management-agent" {
								t.Errorf(" expected namespace open-cluster-management-agent, got %s", object.Namespace)
							}
							if config.Klusterlet.Namespace != "" && object.Namespace != config.Klusterlet.Namespace {
								t.Errorf(" expected %s, got %s", config.Klusterlet.Namespace, object.Namespace)
							}
						}
						data := object.Data["kubeconfig"]
						if base64.StdEncoding.EncodeToString(data) == "" {
							t.Errorf("failed to render kubeconfig")
						}

						if config.GRPCConfig != "" {
							grpcConfig := object.Data["config.yaml"]
							if base64.StdEncoding.EncodeToString(grpcConfig) == "" {
								t.Errorf("failed to render grpc config")
							}
						}
					}
				}
			}
		})
	}
}

func output(t *testing.T, name string, objects [][]byte) {
	tmpDir, err := os.MkdirTemp("./", "tmp-"+name+"-")
	if err != nil {
		t.Fatalf("failed to create temp %v", err)
	}

	for i, o := range objects {
		err = os.WriteFile(fmt.Sprintf("%v/%v.yaml", tmpDir, i), o, 0600)
		if err != nil {
			t.Fatalf("failed to Marshal object.%v", err)
		}
	}
}