tests.bats

JS_NAMESPACE="${JS_NAMESPACE:-jumpstarter-lab}"

setup() {
  bats_load_library bats-support
  bats_load_library bats-assert

  bats_require_minimum_version 1.5.0
}

wait_for_exporter() {
  # After a lease operation the exporter is disconnecting from controller and reconnecting.
  # The disconnect can take a short while so let's avoid catching the pre-disconnect state and early return
  sleep 2
  kubectl -n "${JS_NAMESPACE}" wait --timeout 20m --for=condition=Online --for=condition=Registered \
    exporters.jumpstarter.dev/test-exporter-oidc
  kubectl -n "${JS_NAMESPACE}" wait --timeout 20m --for=condition=Online --for=condition=Registered \
    exporters.jumpstarter.dev/test-exporter-sa
  kubectl -n "${JS_NAMESPACE}" wait --timeout 20m --for=condition=Online --for=condition=Registered \
    exporters.jumpstarter.dev/test-exporter-legacy
}

@test "can create clients with admin cli" {
  jmp admin create client -n "${JS_NAMESPACE}" test-client-oidc     --unsafe --out /dev/null \
    --oidc-username dex:test-client-oidc
  jmp admin create client -n "${JS_NAMESPACE}" test-client-sa       --unsafe --out /dev/null \
    --oidc-username dex:system:serviceaccount:"${JS_NAMESPACE}":test-client-sa
  jmp admin create client -n "${JS_NAMESPACE}" test-client-legacy   --unsafe --save
}

@test "can create exporters with admin cli" {
  jmp admin create exporter -n "${JS_NAMESPACE}" test-exporter-oidc   --out /dev/null \
    --oidc-username dex:test-exporter-oidc \
    --label example.com/board=oidc
  jmp admin create exporter -n "${JS_NAMESPACE}" test-exporter-sa     --out /dev/null \
    --oidc-username dex:system:serviceaccount:"${JS_NAMESPACE}":test-exporter-sa \
    --label example.com/board=sa
  jmp admin create exporter -n "${JS_NAMESPACE}" test-exporter-legacy --save \
    --label example.com/board=legacy
}

@test "can login with oidc" {
  jmp config client   list
  jmp config exporter list

  jmp login --client test-client-oidc \
    --endpoint "$ENDPOINT" --namespace "${JS_NAMESPACE}" --name test-client-oidc \
    --issuer https://dex.dex.svc.cluster.local:5556 \
    --username test-client-oidc@example.com --password password --unsafe

  jmp login --client test-client-oidc-provisioning \
    --endpoint "$ENDPOINT" --namespace "${JS_NAMESPACE}" --name "" \
    --issuer https://dex.dex.svc.cluster.local:5556 \
    --username test-client-oidc-provisioning@example.com --password password --unsafe

  jmp login --client test-client-sa \
    --endpoint "$ENDPOINT" --namespace "${JS_NAMESPACE}" --name test-client-sa \
    --issuer https://dex.dex.svc.cluster.local:5556 \
    --connector-id kubernetes \
    --token $(kubectl create -n "${JS_NAMESPACE}" token test-client-sa) --unsafe

  jmp login --exporter test-exporter-oidc \
    --endpoint "$ENDPOINT" --namespace "${JS_NAMESPACE}" --name test-exporter-oidc \
    --issuer https://dex.dex.svc.cluster.local:5556 \
    --username test-exporter-oidc@example.com --password password

  jmp login --exporter test-exporter-sa \
    --endpoint "$ENDPOINT" --namespace "${JS_NAMESPACE}" --name test-exporter-sa \
    --issuer https://dex.dex.svc.cluster.local:5556 \
    --connector-id kubernetes \
    --token $(kubectl create -n "${JS_NAMESPACE}" token test-exporter-sa)

  go run github.com/mikefarah/yq/v4@latest -i ". * load(\"$GITHUB_ACTION_PATH/exporter.yaml\")" \
    /etc/jumpstarter/exporters/test-exporter-oidc.yaml
  go run github.com/mikefarah/yq/v4@latest -i ". * load(\"$GITHUB_ACTION_PATH/exporter.yaml\")" \
    /etc/jumpstarter/exporters/test-exporter-sa.yaml
  go run github.com/mikefarah/yq/v4@latest -i ". * load(\"$GITHUB_ACTION_PATH/exporter.yaml\")" \
    /etc/jumpstarter/exporters/test-exporter-legacy.yaml
 
  jmp config client   list
  jmp config exporter list
}

@test "can run exporters" {
  cat <<EOF | bash 3>&- &
while true; do
  jmp run --exporter test-exporter-oidc
done
EOF

  cat <<EOF | bash 3>&- &
while true; do
  jmp run --exporter test-exporter-sa
done
EOF

  cat <<EOF | bash 3>&- &
while true; do
  jmp run --exporter test-exporter-legacy
done
EOF


  wait_for_exporter
}

@test "can specify client config only using environment variables" {
  wait_for_exporter

  # we feed the namespace into JMP_NAMESPACE along with all the other client details
  # to verify that the client can operate without a config file
  JMP_NAMESPACE="${JS_NAMESPACE}" \
  JMP_DRIVERS_ALLOW="*" \
  JMP_NAME=test-exporter-legacy \
  JMP_ENDPOINT=$(kubectl get clients.jumpstarter.dev -n "${JS_NAMESPACE}" test-client-legacy -o 'jsonpath={.status.endpoint}') \
  JMP_TOKEN=$(kubectl get secrets -n "${JS_NAMESPACE}" test-client-legacy-client -o 'jsonpath={.data.token}' | base64 -d) \
  jmp shell --selector example.com/board=oidc j power on
}

@test "can operate on leases" {
  wait_for_exporter

  jmp config client use test-client-oidc

  jmp create lease     --selector example.com/board=oidc --duration 1d
  jmp get    leases
  jmp get    exporters
  jmp delete leases    --all
}

@test "can lease and connect to exporters" {
  wait_for_exporter

  jmp shell --client test-client-oidc   --selector example.com/board=oidc   j power on
  jmp shell --client test-client-sa     --selector example.com/board=sa     j power on
  jmp shell --client test-client-legacy --selector example.com/board=legacy j power on

  wait_for_exporter
  jmp shell --client test-client-oidc-provisioning --selector example.com/board=oidc j power on
}

@test "can get crds with admin cli" {
  jmp admin get client --namespace "${JS_NAMESPACE}"
  jmp admin get exporter --namespace "${JS_NAMESPACE}"
  jmp admin get lease --namespace "${JS_NAMESPACE}"
}

@test "can delete clients with admin cli" {
  kubectl -n "${JS_NAMESPACE}" get secret test-client-oidc-client
  kubectl -n "${JS_NAMESPACE}" get clients.jumpstarter.dev/test-client-oidc
  kubectl -n "${JS_NAMESPACE}" get clients.jumpstarter.dev/test-client-sa
  kubectl -n "${JS_NAMESPACE}" get clients.jumpstarter.dev/test-client-legacy

  jmp admin delete client --namespace "${JS_NAMESPACE}" test-client-oidc   --delete
  jmp admin delete client --namespace "${JS_NAMESPACE}" test-client-sa     --delete
  jmp admin delete client --namespace "${JS_NAMESPACE}" test-client-legacy --delete

  run ! kubectl -n "${JS_NAMESPACE}" get secret test-client-oidc-client
  run ! kubectl -n "${JS_NAMESPACE}" get clients.jumpstarter.dev/test-client-oidc
  run ! kubectl -n "${JS_NAMESPACE}" get clients.jumpstarter.dev/test-client-sa
  run ! kubectl -n "${JS_NAMESPACE}" get clients.jumpstarter.dev/test-client-legacy
}

@test "can delete exporters with admin cli" {
  kubectl -n "${JS_NAMESPACE}" get secret test-exporter-oidc-exporter
  kubectl -n "${JS_NAMESPACE}" get exporters.jumpstarter.dev/test-exporter-oidc
  kubectl -n "${JS_NAMESPACE}" get exporters.jumpstarter.dev/test-exporter-sa
  kubectl -n "${JS_NAMESPACE}" get exporters.jumpstarter.dev/test-exporter-legacy

  jmp admin delete exporter --namespace "${JS_NAMESPACE}" test-exporter-oidc   --delete
  jmp admin delete exporter --namespace "${JS_NAMESPACE}" test-exporter-sa     --delete
  jmp admin delete exporter --namespace "${JS_NAMESPACE}" test-exporter-legacy --delete

  run ! kubectl -n "${JS_NAMESPACE}" get secret test-exporter-oidc-exporter
  run ! kubectl -n "${JS_NAMESPACE}" get exporters.jumpstarter.dev/test-exporter-oidc
  run ! kubectl -n "${JS_NAMESPACE}" get exporters.jumpstarter.dev/test-exporter-sa
  run ! kubectl -n "${JS_NAMESPACE}" get exporters.jumpstarter.dev/test-exporter-legacy
}