class Gitlab::QA::Scenario::Test::Integration::MTLS

def gitaly_omnibus
  <<~OMNIBUS
    gitaly['tls_listen_addr'] = '0.0.0.0:9999';
    gitaly['certificate_path'] = '/etc/gitlab/ssl/gitaly.test.crt';
    gitaly['key_path'] = '/etc/gitlab/ssl/gitaly.test.key';
    postgresql['enable'] = false;
    redis['enable'] = false;
    nginx['enable'] = false;
    puma['enable'] = false;
    sidekiq['enable'] = false;
    gitlab_workhorse['enable'] = false;
    grafana['enable'] = false;
    gitlab_exporter['enable'] = false;
    alertmanager['enable'] = false;
    prometheus['enable'] = false;
    gitlab_rails['rake_cache_clear'] = false;
    gitlab_rails['auto_migrate'] = false;
    gitaly['auth_token'] = 'abc123secret';
    gitlab_shell['secret_token'] = 'shellsecret';
    gitlab_rails['internal_api_url'] = 'https://#{@gitlab_name}.#{@network}';
    git_data_dirs({
      'default' => { 'path' => '/var/opt/gitlab/git-data' },
      'storage1' => { 'path' => '/mnt/gitlab/git-data' },
    })
  OMNIBUS
end

def gitlab_omnibus
  <<~OMNIBUS
    gitaly['enable'] = false;
    external_url 'https://#{@gitlab_name}.#{@network}';
    gitlab_rails['gitaly_token'] = 'abc123secret';
    gitlab_shell['secret_token'] = 'shellsecret';
    git_data_dirs({
      'default' => { 'gitaly_address' => 'tls://#{@gitaly_name}.#{@network}:9999' },
      'storage1' => { 'gitaly_address' => 'tls://#{@gitaly_name}.#{@network}:9999' },
    });
  OMNIBUS
end

def initialize
  @gitlab_name = 'gitlab'
  @gitaly_name = 'gitaly'
  @spec_suite = 'Test::Instance::All'
  @network = 'test'
  @env = {}
  @tag = 'mtls'
end

def perform(release, *rspec_args)
  # You can create 2 networks with the same 'human friendly' name if you run network create in parallel
  # However this causes 'ambiguous network' errors, so lets just create network manually earlier
  # see https://github.com/moby/moby/issues/18864#issuecomment-167006094
  # and also api docs https://github.com/moby/moby/blob/master/docs/api/v1.42.yaml#L9932-L9941
  docker = Docker::Engine.new
  docker.network_create(@network) unless docker.network_exists?(@network)
  gitaly_thread = Thread.new do
    Thread.current.abort_on_exception = true
    @gitaly_node = Component::Gitlab.perform do |gitaly|
      gitaly.release = QA::Release.new(release)
      gitaly.name = @gitaly_name
      gitaly.network = @network
      gitaly.skip_availability_check = true
      gitaly.seed_admin_token = false
      gitaly.omnibus_configuration << gitaly_omnibus
      gitaly.gitaly_tls = true
      gitaly.instance(skip_teardown: true)
    end
  end
  Component::Gitlab.perform do |gitlab|
    gitlab.release = QA::Release.new(release)
    gitlab.name = @gitlab_name
    gitlab.network = @network
    gitlab.omnibus_configuration << gitlab_omnibus
    gitlab.tls = true
    gitlab.instance do
      gitaly_thread.join
      Runtime::Logger.info("Running mTLS specs!")
      if @tag
        rspec_args << "--" unless rspec_args.include?('--')
        rspec_args << "--tag" << @tag
      end
      Component::Specs.perform do |specs|
        specs.suite = @spec_suite
        specs.release = gitlab.release
        specs.network = gitlab.network
        specs.args = [gitlab.address, *rspec_args]
        specs.env = @env
      end
    end
  end
ensure
  @gitaly_node&.teardown
end