class Gitlab::QA::Component::LDAP

def add_network_alias(name)
  @network_aliases.push(name)
end

def hostname
  "#{name}.#{network}"
end

def initialize
  @docker = Docker::Engine.new
  @environment = {}
  @volumes = {}
  @network_aliases = []
  @volumes[FIXTURE_PATH] = BOOTSTRAP_LDIF
end

def instance
  raise 'Please provide a block!' unless block_given?
  prepare
  start
  yield self
ensure
  teardown
end

def name
  @name ||= "openldap-#{SecureRandom.hex(4)}"
end

def password
  LDAP_PASSWORD
end

def prepare
  @docker.pull(LDAP_IMAGE, LDAP_IMAGE_TAG)
  return if @docker.network_exists?(network)
  @docker.network_create(network)
end

def pull
  @docker.pull(LDAP_IMAGE, LDAP_IMAGE_TAG)
end

def restart
  @docker.restart(name)
end

def set_gitlab_credentials
  ::Gitlab::QA::Runtime::Env.ldap_username = username
  ::Gitlab::QA::Runtime::Env.ldap_password = password
end

def start
  # copy-service needed for bootstraping LDAP user:
  # https://github.com/osixia/docker-openldap#seed-ldap-database-with-ldif
  docker.run(LDAP_IMAGE, LDAP_IMAGE_TAG, '--copy-service') do |command|
    command << '-d '
    command << "--name #{name}"
    command << "--net #{network}"
    command << "--hostname #{hostname}"
    @volumes.to_h.each do |to, from|
      command.volume(to, from, 'Z')
    end
    @environment.to_h.each do |key, value|
      command.env(key, value)
    end
    @network_aliases.to_a.each do |network_alias|
      command << "--network-alias #{network_alias}"
    end
  end
end

def teardown
  raise 'Invalid instance name!' unless name
  @docker.stop(name)
  @docker.remove(name)
end

def tls=(status)
  if status
    @environment['LDAP_TLS_CRT_FILENAME'] = "#{hostname}.crt"
    @environment['LDAP_TLS_KEY_FILENAME'] = "#{hostname}.key"
    @environment['LDAP_TLS_ENFORCE'] = 'true'
    @environment['LDAP_TLS_VERIFY_CLIENT'] = 'never'
  else
    @environment['LDAP_TLS'] = 'false'
  end
end

def username
  LDAP_USER
end