# frozen_string_literal: true

require 'test_helper'

# Playbook Runner - this class uses foreman_tasks_core
# to run playbooks
class PlaybookRunnerTest < ActiveSupport::TestCase
  context 'roles dir' do
    test 'reads default when none provided' do
      ForemanAnsibleCore::Runner::Playbook.any_instance.stubs(:unknown_hosts).
        returns([])
      File.expects(:exist?).with(Dir.home).returns(true)
      ForemanAnsibleCore::Runner::Playbook.any_instance.expects(:rebuild_secrets).returns(nil)
      runner = ForemanAnsibleCore::Runner::Playbook.new(nil, nil, :suspended_action => nil)
      assert '/etc/ansible', runner.instance_variable_get('@ansible_dir')
    end
  end

  context 'working_dir' do
    setup do
      ForemanAnsibleCore::Runner::Playbook.any_instance.stubs(:unknown_hosts).
        returns([])
    end

    test 'creates temp one if not provided' do
      Dir.expects(:mktmpdir)
      File.expects(:exist?).with(Dir.home).returns(true)
      ForemanAnsibleCore::Runner::Playbook.any_instance.expects(:rebuild_secrets).returns(nil)
      ForemanAnsibleCore::Runner::Playbook.new(nil, nil, :suspended_action => nil)
    end

    test 'reads it when provided' do
      settings = { :working_dir => '/foo', :ansible_dir => '/etc/foo' }
      ForemanAnsibleCore.expects(:settings).returns(settings)
      File.expects(:exist?).with(settings[:ansible_dir]).returns(true)
      Dir.expects(:mktmpdir).never
      ForemanAnsibleCore::Runner::Playbook.any_instance.expects(:rebuild_secrets).returns(nil)
      runner = ForemanAnsibleCore::Runner::Playbook.new(nil, nil, :suspended_action => nil)
      assert '/foo', runner.instance_variable_get('@working_dir')
    end
  end

  context 'TOFU policy' do # Trust On First Use
    setup do
      @inventory = { 'all' => { 'hosts' => ['foreman.example.com'] } }
      @output = StringIO.new
      logger = Logger.new(@output)
      ForemanAnsibleCore::Runner::Playbook.any_instance.stubs(:logger).
        returns(logger)
    end

    test 'ignores known hosts' do
      Net::SSH::KnownHosts.expects(:search_for).
        with('foreman.example.com').returns(['somekey'])
      ForemanAnsibleCore::Runner::Playbook.any_instance.
        expects(:add_to_known_hosts).never
      ForemanAnsibleCore::Runner::Playbook.any_instance.expects(:rebuild_secrets).returns(@inventory)
      ForemanAnsibleCore::Runner::Playbook.new(@inventory, nil, :suspended_action => nil)
    end

    test 'adds unknown hosts to known_hosts' do
      Net::SSH::KnownHosts.expects(:search_for).
        with('foreman.example.com').returns([])
      ForemanAnsibleCore::Runner::Playbook.any_instance.
        expects(:add_to_known_hosts).with('foreman.example.com')
      ForemanAnsibleCore::Runner::Playbook.any_instance.expects(:rebuild_secrets).returns(@inventory)
      ForemanAnsibleCore::Runner::Playbook.new(@inventory, nil, :suspended_action => nil)
    end

    test 'logs error when it cannot add to known_hosts' do
      Net::SSH::KnownHosts.expects(:search_for).
        with('foreman.example.com').returns([])
      Net::SSH::Transport::Session.expects(:new).with('foreman.example.com').
        raises(Net::Error)
      ForemanAnsibleCore::Runner::Playbook.any_instance.expects(:rebuild_secrets).returns(@inventory)
      ForemanAnsibleCore::Runner::Playbook.new(@inventory, nil, :suspended_action => nil)
      assert_match(
        /ERROR.*Failed to save host key for foreman.example.com: Net::Error/,
        @output.string
      )
    end
  end

  context 'rebuild secrets' do
    let(:inventory) do
      { 'all' => { 'hosts' => ['foreman.example.com'] },
        '_meta' => { 'hostvars' => { 'foreman.example.com' => {} } } }
    end
    let(:secrets) do
      host_secrets = { 'ansible_ssh_pass' => 'letmein', 'ansible_sudo_pass' => 'iamroot' }
      { 'per-host' => { 'foreman.example.com' => host_secrets } }
    end
    let(:runner) { ForemanAnsibleCore::Runner::Playbook.allocate }

    test 'uses secrets from inventory' do
      test_inventory = inventory.merge('ssh_password' => 'sshpass', 'sudo_password' => 'sudopass')
      rebuilt = runner.send(:rebuild_secrets, test_inventory, secrets)
      host_vars = rebuilt.dig('_meta', 'hostvars', 'foreman.example.com')
      assert_equal 'sshpass', host_vars['ansible_ssh_pass']
      assert_equal 'sudopass', host_vars['ansible_sudo_pass']
    end

    test 'host secrets are used when not overriden by inventory secrest' do
      rebuilt = runner.send(:rebuild_secrets, inventory, secrets)
      host_vars = rebuilt.dig('_meta', 'hostvars', 'foreman.example.com')
      assert_equal 'letmein', host_vars['ansible_ssh_pass']
      assert_equal 'iamroot', host_vars['ansible_sudo_pass']
    end
  end
end