#!/bin/bash
# Tier-1 dispatch for grafana component operations.
# Delegates to generated run-{op}.sh scripts when present (manifest-plan workflow),
# or falls back to inline _do_{op} functions for direct invocation.
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$SCRIPT_DIR"

[ -f "${SCRIPT_DIR}/env-grafana" ] && source "${SCRIPT_DIR}/env-grafana"

GRAFANA_NAME="${GRAFANA_NAME:-grafana}"
GRAFANA_NAMESPACE="${GRAFANA_NAMESPACE:-observability}"
GRAFANA_PORT="${GRAFANA_PORT:-3000}"
GRAFANA_STORAGE_CLASS="${GRAFANA_STORAGE_CLASS:-longhorn-retain}"
GRAFANA_STORAGE_SIZE="${GRAFANA_STORAGE_SIZE:-1Gi}"

CMD_TSK="${CMD_TSK:-${1:-install}}"

source "${SCRIPT_DIR}/grafana-lib.sh"

_resolve_kubeconfig() {
  if [ -n "${KUBECONFIG:-}" ] && [ -f "$KUBECONFIG" ]; then
    return
  fi
  for candidate in /var/lib/k0s/pki/admin.conf /etc/kubernetes/admin.conf /root/.kube/config; do
    if [ -f "$candidate" ]; then
      export KUBECONFIG="$candidate"
      return
    fi
  done
  echo "ERROR: kubeconfig not found — set KUBECONFIG explicitly" >&2; exit 1
}

_do_install() {
  [ -f "${SCRIPT_DIR}/_credentials.env" ] && source "${SCRIPT_DIR}/_credentials.env"
  _require_env GF_SECURITY_ADMIN_PASSWORD

  _kubectl create secret generic grafana-credentials \
    --namespace "$GRAFANA_NAMESPACE" \
    --from-literal=GF_SECURITY_ADMIN_PASSWORD="$GF_SECURITY_ADMIN_PASSWORD" \
    --dry-run=client -o yaml | _kubectl apply -f -

  for manifest in namespace.yaml datasources-configmap.yaml dashboards-configmap.yaml \
                  pvc.yaml deployment.yaml service.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl apply -f "$path"
  done
  echo "Waiting for ${GRAFANA_NAME} pod to be ready..."
  _wait_for_pod 180
  echo "${GRAFANA_NAME} installed in namespace ${GRAFANA_NAMESPACE}"
}

_do_update() {
  for manifest in datasources-configmap.yaml deployment.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl apply -f "$path"
  done
  _kubectl rollout restart "deployment/${GRAFANA_NAME}" --namespace "$GRAFANA_NAMESPACE"
  echo "Waiting for ${GRAFANA_NAME} to be ready..."
  _wait_for_pod 180
  echo "${GRAFANA_NAME} updated in namespace ${GRAFANA_NAMESPACE}"
}

_do_delete() {
  for manifest in deployment.yaml service.yaml; do
    local path="$SCRIPT_DIR/manifests/${manifest}"
    [ -f "$path" ] && _kubectl delete -f "$path" --ignore-not-found
  done
  echo "${GRAFANA_NAME} deleted from namespace ${GRAFANA_NAMESPACE}"
}

_do_restart() {
  _kubectl rollout restart "deployment/${GRAFANA_NAME}" --namespace "$GRAFANA_NAMESPACE"
  _wait_for_pod 180
  echo "${GRAFANA_NAME} restarted"
}

_do_health() {
  local pod
  pod=$(_pod_name 2>/dev/null || true)
  if [ -z "$pod" ]; then
    echo "UNHEALTHY: no grafana pod found in namespace ${GRAFANA_NAMESPACE}" >&2; exit 1
  fi
  if _kubectl exec --namespace "$GRAFANA_NAMESPACE" "$pod" -- \
      wget -qO- "http://localhost:${GRAFANA_PORT}/api/health" >/dev/null 2>&1; then
    echo "HEALTHY: ${GRAFANA_NAME} responding on /api/health"
  else
    echo "UNHEALTHY: ${GRAFANA_NAME} did not respond on /api/health" >&2; exit 1
  fi
}

_resolve_kubeconfig

case "$CMD_TSK" in
  install)  [ -f "$SCRIPT_DIR/run-init.sh" ]    && exec bash "$SCRIPT_DIR/run-init.sh";    _do_install  ;;
  update)   [ -f "$SCRIPT_DIR/run-update.sh" ]  && exec bash "$SCRIPT_DIR/run-update.sh";  _do_update   ;;
  delete)   [ -f "$SCRIPT_DIR/run-delete.sh" ]  && exec bash "$SCRIPT_DIR/run-delete.sh";  _do_delete   ;;
  restart)  [ -f "$SCRIPT_DIR/run-restart.sh" ] && exec bash "$SCRIPT_DIR/run-restart.sh"; _do_restart  ;;
  health)   _do_health ;;
  *)        echo "ERROR: unknown CMD_TSK='${CMD_TSK}'. Valid: install|update|delete|restart|health" >&2; exit 1 ;;
esac