#!/bin/bash
# Tier-1 dispatch for fip_controller component operations.
# Delegates to generated run-{op}.sh scripts when present (manifest-plan workflow),
# or falls back to inline _do_{op} functions for direct invocation.
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$SCRIPT_DIR"

[ -f "${SCRIPT_DIR}/env-fip_controller" ]  && source "${SCRIPT_DIR}/env-fip_controller"
[ -f "${SCRIPT_DIR}/_credentials.env" ]    && source "${SCRIPT_DIR}/_credentials.env"
[ -f "${SCRIPT_DIR}/fip_controller-lib.sh" ] && source "${SCRIPT_DIR}/fip_controller-lib.sh"

FIP_CONTROLLER_NAME="${FIP_CONTROLLER_NAME:-fip-controller}"
FIP_CONTROLLER_NAMESPACE="${FIP_CONTROLLER_NAMESPACE:-kube-system}"

CMD_TSK="${CMD_TSK:-${1:-install}}"

_kubectl() {
  if command -v kubectl >/dev/null 2>&1; then
    command kubectl "$@"
  elif command -v k0s >/dev/null 2>&1; then
    k0s kubectl "$@"
  else
    echo "ERROR: no kubectl or k0s binary found" >&2; exit 127
  fi
}

_require_env() {
  local var="$1"
  if [ -z "${!var:-}" ]; then
    echo "ERROR: required variable $var is not set" >&2; exit 1
  fi
}

_wait_for_pod() {
  local timeout="${1:-120}"
  _kubectl wait pod \
    --namespace "$FIP_CONTROLLER_NAMESPACE" \
    --selector "app.kubernetes.io/name=${FIP_CONTROLLER_NAME}" \
    --for=condition=Ready \
    --timeout="${timeout}s"
}

_do_create_credentials() {
  _require_env HCLOUD_TOKEN
  _kubectl create secret generic "${FIP_CONTROLLER_NAME}-secret" \
    --namespace "$FIP_CONTROLLER_NAMESPACE" \
    --from-literal=HCLOUD_TOKEN="$HCLOUD_TOKEN" \
    --dry-run=client -o yaml | _kubectl apply -f -
}

_do_delete_credentials() {
  _kubectl delete secret "${FIP_CONTROLLER_NAME}-secret" \
    --namespace "$FIP_CONTROLLER_NAMESPACE" --ignore-not-found
}

_do_install() {
  _do_create_credentials
  for manifest in serviceaccount.yaml clusterrole.yaml clusterrolebinding.yaml \
                  configmap.yaml daemonset.yaml deployment.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl apply -f "$path"
  done
  echo "Waiting for ${FIP_CONTROLLER_NAME} pod to be ready..."
  _wait_for_pod 120
  echo "${FIP_CONTROLLER_NAME} installed in namespace ${FIP_CONTROLLER_NAMESPACE}"
}

_do_update() {
  _do_create_credentials
  _kubectl apply -f "$SCRIPT_DIR/manifests/configmap.yaml"
  _kubectl rollout restart \
    "deployment/${FIP_CONTROLLER_NAME}" \
    --namespace "$FIP_CONTROLLER_NAMESPACE"
  _wait_for_pod 120
  echo "${FIP_CONTROLLER_NAME} updated"
}

_do_delete() {
  for manifest in deployment.yaml daemonset.yaml configmap.yaml \
                  clusterrolebinding.yaml clusterrole.yaml serviceaccount.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl delete -f "$path" --ignore-not-found
  done
  _do_delete_credentials
  echo "${FIP_CONTROLLER_NAME} deleted"
}

_do_restart() {
  _kubectl rollout restart \
    "deployment/${FIP_CONTROLLER_NAME}" \
    --namespace "$FIP_CONTROLLER_NAMESPACE"
  _wait_for_pod 120
  echo "${FIP_CONTROLLER_NAME} restarted"
}

_do_health() {
  local pod
  pod=$(_kubectl get pod \
    --namespace "$FIP_CONTROLLER_NAMESPACE" \
    --selector "app.kubernetes.io/name=${FIP_CONTROLLER_NAME}" \
    -o jsonpath='{.items[0].metadata.name}' 2>/dev/null)
  if [ -z "$pod" ]; then
    echo "UNHEALTHY: no pod found for ${FIP_CONTROLLER_NAME}" >&2; exit 1
  fi
  if _kubectl exec --namespace "$FIP_CONTROLLER_NAMESPACE" "$pod" -- \
      wget -qO- http://localhost:8080/healthz >/dev/null 2>&1; then
    echo "HEALTHY: ${FIP_CONTROLLER_NAME} responding on :8080/healthz"
  else
    echo "UNHEALTHY: ${FIP_CONTROLLER_NAME} did not respond on :8080/healthz" >&2; exit 1
  fi
}

case "$CMD_TSK" in
  install)
    [ -f "$SCRIPT_DIR/run-init.sh" ]    && exec bash "$SCRIPT_DIR/run-init.sh"
    _do_install ;;
  update)
    [ -f "$SCRIPT_DIR/run-update.sh" ]  && exec bash "$SCRIPT_DIR/run-update.sh"
    _do_update ;;
  delete)
    [ -f "$SCRIPT_DIR/run-delete.sh" ]  && exec bash "$SCRIPT_DIR/run-delete.sh"
    _do_delete ;;
  restart)
    [ -f "$SCRIPT_DIR/run-restart.sh" ] && exec bash "$SCRIPT_DIR/run-restart.sh"
    _do_restart ;;
  health)
    _do_health ;;
  create-credentials)
    _do_create_credentials ;;
  *)
    echo "ERROR: unknown CMD_TSK='${CMD_TSK}'. Valid: install|update|delete|restart|health" >&2
    exit 1 ;;
esac