/*
Copyright 2021 The Dapr Authors
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
    http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package kubernetes

import (
	"context"
	"fmt"
	"os"
	"path/filepath"
	"strings"
	"time"

	helm "helm.sh/helm/v3/pkg/action"
	"helm.sh/helm/v3/pkg/chart"
	"helm.sh/helm/v3/pkg/chart/loader"
	"helm.sh/helm/v3/pkg/cli"
	v1 "k8s.io/api/core/v1"
	meta_v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	"k8s.io/cli-runtime/pkg/genericclioptions"
	"k8s.io/helm/pkg/strvals"

	"github.com/dapr/cli/pkg/print"
	cli_ver "github.com/dapr/cli/pkg/version"
	"github.com/dapr/cli/utils"
	"github.com/dapr/dapr/pkg/client/clientset/versioned"
)

const (
	daprReleaseName      = "dapr"
	dashboardReleaseName = "dapr-dashboard"
	latestVersion        = "latest"
	bitnamiStableVersion = "17.14.5"

	// dev mode constants.
	thirdPartyDevNamespace   = "default"
	zipkinChartName          = "zipkin"
	redisChartName           = "redis"
	zipkinReleaseName        = "dapr-dev-zipkin"
	redisReleaseName         = "dapr-dev-redis"
	redisVersion             = "6.2.11"
	bitnamiHelmRepo          = "https://charts.bitnami.com/bitnami"
	daprHelmRepo             = "https://dapr.github.io/helm-charts"
	zipkinHelmRepo           = "https://openzipkin.github.io/zipkin"
	stateStoreComponentName  = "statestore"
	pubsubComponentName      = "pubsub"
	zipkingConfigurationName = "appconfig"
)

type InitConfiguration struct {
	Version                   string
	DashboardVersion          string
	Namespace                 string
	EnableMTLS                bool
	EnableHA                  bool
	EnableDev                 bool
	Args                      []string
	Wait                      bool
	Timeout                   uint
	ImageRegistryURI          string
	ImageVariant              string
	RootCertificateFilePath   string
	IssuerCertificateFilePath string
	IssuerPrivateKeyFilePath  string
}

// Init deploys the Dapr operator using the supplied runtime version.
func Init(config InitConfiguration) error {
	helmRepoDapr := utils.GetEnv("DAPR_HELM_REPO_URL", daprHelmRepo)
	err := installWithConsole(daprReleaseName, config.Version, helmRepoDapr, "Dapr control plane", config)
	if err != nil {
		return err
	}

	for _, dashboardClusterRole := range []string{"dashboard-reader", "dapr-dashboard"} {
		// Detect Dapr Dashboard using a cluster-level resource (not dependent on namespace).
		_, err = utils.RunCmdAndWait("kubectl", "describe", "clusterrole", dashboardClusterRole)
		if err == nil {
			// No need to install Dashboard since it is already present.
			// Charts for versions < 1.11 contain Dashboard already.
			return nil
		}
	}

	err = installWithConsole(dashboardReleaseName, config.DashboardVersion, helmRepoDapr, "Dapr dashboard", config)
	if err != nil {
		return err
	}

	if config.EnableDev {
		redisChartVals := []string{
			"image.tag=" + redisVersion,
			"replica.replicaCount=0",
		}

		err = installThirdPartyWithConsole(redisReleaseName, redisChartName, bitnamiStableVersion, bitnamiHelmRepo, "Dapr Redis", redisChartVals, config)
		if err != nil {
			return err
		}

		err = installThirdPartyWithConsole(zipkinReleaseName, zipkinChartName, latestVersion, zipkinHelmRepo, "Dapr Zipkin", []string{}, config)
		if err != nil {
			return err
		}

		err = initDevConfigs()
		if err != nil {
			return err
		}
	}
	return nil
}

func installThirdPartyWithConsole(releaseName, chartName, releaseVersion, helmRepo string, prettyName string, chartValues []string, config InitConfiguration) error {
	installSpinning := print.Spinner(os.Stdout, "Deploying the "+prettyName+" with "+releaseVersion+" version to your cluster...")
	defer installSpinning(print.Failure)

	// releaseVersion of chart will always be latest version.
	err := installThirdParty(releaseName, chartName, releaseVersion, helmRepo, chartValues, config)
	if err != nil {
		return err
	}
	installSpinning(print.Success)

	return nil
}

func installWithConsole(releaseName, releaseVersion, helmRepo string, prettyName string, config InitConfiguration) error {
	installSpinning := print.Spinner(os.Stdout, "Deploying the "+prettyName+" with "+releaseVersion+" version to your cluster...")
	defer installSpinning(print.Failure)

	err := install(releaseName, releaseVersion, helmRepo, config)
	if err != nil {
		return err
	}
	installSpinning(print.Success)

	return nil
}

func createNamespace(namespace string) error {
	_, client, err := GetKubeConfigClient()
	if err != nil {
		return fmt.Errorf("can't connect to a Kubernetes cluster: %w", err)
	}

	ns := &v1.Namespace{
		ObjectMeta: meta_v1.ObjectMeta{
			Name: namespace,
		},
	}
	// try to create the namespace if it doesn't exist. ok to ignore error.
	client.CoreV1().Namespaces().Create(context.TODO(), ns, meta_v1.CreateOptions{})
	return nil
}

func helmConfig(namespace string) (*helm.Configuration, error) {
	ac := helm.Configuration{}
	flags := &genericclioptions.ConfigFlags{
		Namespace: &namespace,
	}
	err := ac.Init(flags, namespace, "secret", debugLogf)
	return &ac, err
}

func getVersion(releaseName string, version string) (string, error) {
	actualVersion := version
	if version == latestVersion {
		var err error
		if releaseName == daprReleaseName {
			actualVersion, err = cli_ver.GetDaprVersion()
		} else if releaseName == dashboardReleaseName {
			actualVersion, err = cli_ver.GetDashboardVersion()
		} else {
			return "", fmt.Errorf("cannot get latest version for unknown chart: %s", releaseName)
		}
		if err != nil {
			return "", fmt.Errorf("cannot get the latest release version: %w", err)
		}
		actualVersion = strings.TrimPrefix(actualVersion, "v")
	}
	return actualVersion, nil
}

func createTempDir() (string, error) {
	dir, err := os.MkdirTemp("", "dapr")
	if err != nil {
		return "", fmt.Errorf("error creating temp dir: %w", err)
	}
	return dir, nil
}

func locateChartFile(dirPath string) (string, error) {
	files, err := os.ReadDir(dirPath)
	if err != nil {
		return "", err
	}
	return filepath.Join(dirPath, files[0].Name()), nil
}

func getHelmChart(version, releaseName, helmRepo string, config *helm.Configuration) (*chart.Chart, error) {
	pull := helm.NewPullWithOpts(helm.WithConfig(config))
	pull.RepoURL = helmRepo
	pull.Username = utils.GetEnv("DAPR_HELM_REPO_USERNAME", "")
	pull.Password = utils.GetEnv("DAPR_HELM_REPO_PASSWORD", "")

	pull.Settings = &cli.EnvSettings{}

	if version != latestVersion && (releaseName == daprReleaseName || releaseName == dashboardReleaseName || releaseName == redisChartName) {
		pull.Version = chartVersion(version)
	}

	dir, err := createTempDir()
	if err != nil {
		return nil, err
	}
	defer os.RemoveAll(dir)

	pull.DestDir = dir

	_, err = pull.Run(releaseName)
	if err != nil {
		return nil, err
	}

	chartPath, err := locateChartFile(dir)
	if err != nil {
		return nil, err
	}
	return loader.Load(chartPath)
}

func daprChartValues(config InitConfiguration, version string) (map[string]interface{}, error) {
	chartVals := map[string]interface{}{}
	err := utils.ValidateImageVariant(config.ImageVariant)
	if err != nil {
		return nil, err
	}
	helmVals := []string{
		fmt.Sprintf("global.ha.enabled=%t", config.EnableHA),
		fmt.Sprintf("global.mtls.enabled=%t", config.EnableMTLS),
		"global.tag=" + utils.GetVariantVersion(version, config.ImageVariant),
	}
	if len(config.ImageRegistryURI) != 0 {
		helmVals = append(helmVals, "global.registry="+config.ImageRegistryURI)
	}
	helmVals = append(helmVals, config.Args...)

	if config.RootCertificateFilePath != "" && config.IssuerCertificateFilePath != "" && config.IssuerPrivateKeyFilePath != "" {
		rootCertBytes, issuerCertBytes, issuerKeyBytes, err := parseCertificateFiles(
			config.RootCertificateFilePath,
			config.IssuerCertificateFilePath,
			config.IssuerPrivateKeyFilePath,
		)
		if err != nil {
			return nil, err
		}
		helmVals = append(helmVals, "dapr_sentry.tls.root.certPEM="+string(rootCertBytes),
			"dapr_sentry.tls.issuer.certPEM="+string(issuerCertBytes),
			"dapr_sentry.tls.issuer.keyPEM="+string(issuerKeyBytes),
		)
	}

	for _, v := range helmVals {
		if err := strvals.ParseInto(v, chartVals); err != nil {
			return nil, err
		}
	}
	return chartVals, nil
}

func install(releaseName, releaseVersion, helmRepo string, config InitConfiguration) error {
	err := createNamespace(config.Namespace)
	if err != nil {
		return err
	}

	helmConf, err := helmConfig(config.Namespace)
	if err != nil {
		return err
	}

	daprChart, err := getHelmChart(releaseVersion, releaseName, helmRepo, helmConf)
	if err != nil {
		return err
	}

	version, err := getVersion(releaseName, releaseVersion)
	if err != nil {
		return err
	}

	if releaseName == daprReleaseName {
		err = applyCRDs("v" + version)
		if err != nil {
			return err
		}
	}

	installClient := helm.NewInstall(helmConf)
	installClient.ReleaseName = releaseName
	installClient.Namespace = config.Namespace
	installClient.Wait = config.Wait
	installClient.Timeout = time.Duration(config.Timeout) * time.Second //nolint:gosec

	values, err := daprChartValues(config, version)
	if err != nil {
		return err
	}

	if _, err = installClient.Run(daprChart, values); err != nil {
		return err
	}

	return nil
}

func installThirdParty(releaseName, chartName, releaseVersion, helmRepo string, chartVals []string, config InitConfiguration) error {
	helmConf, err := helmConfig(thirdPartyDevNamespace)
	if err != nil {
		return err
	}

	helmChart, err := getHelmChart(releaseVersion, chartName, helmRepo, helmConf)
	if err != nil {
		return err
	}

	installClient := helm.NewInstall(helmConf)
	installClient.ReleaseName = releaseName
	installClient.Namespace = thirdPartyDevNamespace
	installClient.Wait = config.Wait
	installClient.Timeout = time.Duration(config.Timeout) * time.Second //nolint:gosec

	values := map[string]interface{}{}

	for _, val := range chartVals {
		if err = strvals.ParseInto(val, values); err != nil {
			return err
		}
	}

	if _, err = installClient.Run(helmChart, values); err != nil {
		return err
	}

	return nil
}

func debugLogf(format string, v ...interface{}) {
}

func confirmExist(cfg *helm.Configuration, releaseName string) (bool, error) {
	client := helm.NewGet(cfg)
	release, err := client.Run(releaseName)

	if release == nil {
		return false, nil
	}

	if err != nil {
		return false, err
	}

	return true, nil
}

func checkAndOverWriteFile(filePath string, b []byte) error {
	_, err := os.Stat(filePath)
	if os.IsNotExist(err) {
		// #nosec G306
		if err = os.WriteFile(filePath, b, 0o644); err != nil {
			return err
		}
	}
	return nil
}

func isComponentPresent(client versioned.Interface, namespace string, componentName string) (bool, error) {
	c, err := getComponent(client, namespace, componentName)
	if err != nil {
		return false, err
	}
	return c.Name == componentName, err
}

func isConfigurationPresent(client versioned.Interface, namespace string, configurationName string) (bool, error) {
	c, err := getDaprConfiguration(client, namespace, configurationName)
	if err != nil {
		return false, err
	}
	return c.Name == configurationName, nil
}

func initDevConfigs() error {
	redisStatestore := `
apiVersion: dapr.io/v1alpha1
kind: Component
metadata:
  name: statestore
spec:
  type: state.redis
  version: v1
  metadata:
  # These settings will work out of the box if you use helm install
  # bitnami/redis.  If you have your own setup, replace
  # redis-master:6379 with your own Redis master address, and the
  # Redis password with your own Secret's name. For more information,
  # see https://docs.dapr.io/operations/components/component-secrets .
  - name: redisHost
    value: dapr-dev-redis-master:6379
  - name: redisPassword
    secretKeyRef:
      name: dapr-dev-redis
      key: redis-password
auth:
  secretStore: kubernetes
`

	redisPubsub := `
apiVersion: dapr.io/v1alpha1
kind: Component
metadata:
  name: pubsub
spec:
  type: pubsub.redis
  version: v1
  metadata:
  # These settings will work out of the box if you use helm install
  # bitnami/redis.  If you have your own setup, replace
  # redis-master:6379 with your own Redis master address, and the
  # Redis password with your own Secret's name. For more information,
  # see https://docs.dapr.io/operations/components/component-secrets .
  - name: redisHost
    value: dapr-dev-redis-master:6379
  - name: redisPassword
    secretKeyRef:
      name: dapr-dev-redis
      key: redis-password
auth:
  secretStore: kubernetes
`

	// This config needs to be named as appconfig, as it is used in later steps in `dapr run -f . -k`. See `pkg/kubernetes/run.go`.
	zipkinConfig := `
apiVersion: dapr.io/v1alpha1
kind: Configuration
metadata:
  name: appconfig
spec:
  tracing:
    samplingRate: "1"
    zipkin:
      endpointAddress: "http://dapr-dev-zipkin.default.svc.cluster.local:9411/api/v2/spans"
`
	tempDirPath, err := createTempDir()
	defer os.RemoveAll(tempDirPath)
	if err != nil {
		return err
	}
	client, err := DaprClient()
	if err != nil {
		return err
	}
	present, err := isComponentPresent(client, thirdPartyDevNamespace, stateStoreComponentName)
	if present || err != nil {
		if err != nil {
			print.WarningStatusEvent(os.Stderr, "Error listing components, skipping default dev component creation.")
		} else {
			print.WarningStatusEvent(os.Stderr, "Component with name %q already present in namespace %q. Skipping component creation.", stateStoreComponentName, thirdPartyDevNamespace)
		}
		return err
	}

	redisPath := filepath.Join(tempDirPath, "redis-statestore.yaml")
	err = checkAndOverWriteFile(redisPath, []byte(redisStatestore))
	if err != nil {
		return err
	}
	print.InfoStatusEvent(os.Stdout, "Applying %q component to Kubernetes %q namespace.", stateStoreComponentName, thirdPartyDevNamespace)
	_, err = utils.RunCmdAndWait("kubectl", "apply", "-f", redisPath)
	if err != nil {
		return err
	}

	present, err = isComponentPresent(client, thirdPartyDevNamespace, pubsubComponentName)
	if present || err != nil {
		if err != nil {
			print.WarningStatusEvent(os.Stderr, "Error listing components, skipping default dev component creation.")
		} else {
			print.WarningStatusEvent(os.Stderr, "Component with name %q already present in namespace %q. Skipping component creation.", pubsubComponentName, thirdPartyDevNamespace)
		}
		return err
	}
	redisPath = filepath.Join(tempDirPath, "redis-pubsub.yaml")
	err = checkAndOverWriteFile(redisPath, []byte(redisPubsub))
	if err != nil {
		return err
	}
	print.InfoStatusEvent(os.Stdout, "Applying %q component to Kubernetes %q namespace.", pubsubComponentName, thirdPartyDevNamespace)
	_, err = utils.RunCmdAndWait("kubectl", "apply", "-f", redisPath)
	if err != nil {
		return err
	}

	present, err = isConfigurationPresent(client, thirdPartyDevNamespace, zipkingConfigurationName)
	if present || err != nil {
		if err != nil {
			print.WarningStatusEvent(os.Stderr, "Error listing configurations, skipping default dev configuration creation.")
		} else {
			print.WarningStatusEvent(os.Stderr, "Configuration with name %q already present in namespace %q. Skipping configuration creation.", zipkingConfigurationName, thirdPartyDevNamespace)
		}
		return err
	}
	zipkinPath := filepath.Join(tempDirPath, "zipkin-config.yaml")
	err = checkAndOverWriteFile(zipkinPath, []byte(zipkinConfig))
	if err != nil {
		return err
	}
	print.InfoStatusEvent(os.Stdout, "Applying %q zipkin configuration to Kubernetes %q namespace.", zipkingConfigurationName, thirdPartyDevNamespace)
	_, err = utils.RunCmdAndWait("kubectl", "apply", "-f", zipkinPath)
	if err != nil {
		return err
	}

	return nil
}