#!/usr/bin/env bash
# shellcheck disable=SC1090,SC2154,SC2155,SC2034

# Copyright Istio Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

set -e
set -u
set -o pipefail

source "tests/util/addons.sh"

# @setup profile=none

istioctl install --set profile=demo --set hub="$HUB" --set tag="$TAG" -y
_wait_for_deployment istio-system istiod
_wait_for_deployment istio-system istio-ingressgateway

_deploy_and_wait_for_addons kiali prometheus grafana zipkin

# Setup TLS certificates and ingress access
_set_ingress_environment_variables
INGRESS_DOMAIN="$INGRESS_HOST.nip.io"
INGRESS_URL="$INGRESS_DOMAIN:$SECURE_INGRESS_PORT"

snip_option_1_secure_access_https_1

_verify_like snip_option_1_secure_access_https_2 "$snip_option_1_secure_access_https_2_out"
_verify_like snip_option_1_secure_access_https_3 "$snip_option_1_secure_access_https_3_out"
_verify_like snip_option_1_secure_access_https_4 "$snip_option_1_secure_access_https_4_out"
_verify_like snip_option_1_secure_access_https_5 "$snip_option_1_secure_access_https_5_out"

_wait_for_addon_config_distribution kiali prometheus grafana tracing

function secure_access_kiali() {
  curl -s -o /dev/null -w "%{http_code}" --cacert "$CERT_DIR/ca.crt" "https://kiali.$INGRESS_URL/kiali/"
}

function secure_access_prometheus() {
  curl -s -o /dev/null -w "%{http_code}" --cacert "$CERT_DIR/ca.crt" "https://prometheus.$INGRESS_URL/api/v1/status/config"
}

function secure_access_grafana() {
  curl -s -o /dev/null -w "%{http_code}" --cacert "$CERT_DIR/ca.crt" "https://grafana.$INGRESS_URL"
}

function secure_access_tracing() {
  curl -s -o /dev/null -w "%{http_code}" --cacert "$CERT_DIR/ca.crt" "https://tracing.$INGRESS_URL/zipkin/api/v2/traces"
}

_verify_same secure_access_kiali "200"
_verify_same secure_access_prometheus "200"
_verify_same secure_access_grafana "200"
_verify_same secure_access_tracing "200"

# @cleanup
_verify_same snip_cleanup_1 "$snip_cleanup_1_out"
_verify_same snip_cleanup_2 "$snip_cleanup_2_out"
_verify_same snip_cleanup_3 "$snip_cleanup_3_out"

set +e
_undeploy_addons kiali prometheus grafana zipkin
kubectl delete ns istio-system