require 'pe_build/config/global'

class PEBuild::Config::PEBootstrap < PEBuild::Config::Global

  # @!attribute master
  #   @return [String] The DNS hostname of the Puppet master for this node.
  #   @since 0.1.0
  attr_accessor :master

  # @!attribute answer_file
  #   @return [String] The path to a user specified answer_file file (Optional)
  #   @since 0.1.0
  attr_accessor :answer_file

  # @!attribute verbose
  #   @return [TrueClass, FalseClass] if stdout will be displayed when installing
  #   @since 0.1.0
  attr_accessor :verbose

  # @!attribute role
  #   @return [Symbol] The type of the PE installation role. One of [:master, :agent]
  #   @since 0.1.0
  attr_accessor :role

  # @api private
  VALID_ROLES = [:agent, :master]

  # @!attribute step
  #   @return [Hash<Symbol, String>] a hash whose keys are step levels, and whose
  #                                  keys are directories to optional steps.
  #   @deprecated This duplicates the behavior of the shell provider and will
  #               be removed in a future release.
  #   @since 0.1.0
  attr_accessor :step

  # @!attribute relocate_manifests
  #   @return [TrueClass, FalseClass] if the puppet master should use manifests
  #                                   out of the vagrant directory.
  #   @since 0.1.0
  attr_accessor :relocate_manifests

  # @!attribute [rw] autosign
  #   Configure the certificates that will be autosigned by the puppet master.
  #
  #   @return [TrueClass] All CSRs will be signed
  #   @return [FalseClass] The autosign config file will be unmanaged
  #   @return [Array<String>] CSRs with the given addresses
  #
  #   @see http://docs.puppetlabs.com/guides/configuring.html#autosignconf
  #
  #   @since 0.4.0
  #
  attr_accessor :autosign

  # @api private
  VALID_AUTOSIGN_VALUES = [TrueClass, FalseClass, Array]

  def initialize
    super
    @role        = UNSET_VALUE
    @verbose     = UNSET_VALUE
    @master      = UNSET_VALUE
    @answer_file = UNSET_VALUE

    @relocate_manifests = UNSET_VALUE

    @autosign = UNSET_VALUE

    @step    = {}
  end

  include PEBuild::ConfigDefault

  def finalize!
    # This does _not_ set default values for config options inherited from the
    # global configuration. If configuration is not set for a value on the
    # global config or here it will be passed through as `UNSET_VALUE`, which
    # is not ideal.

    set_default :@role,        :agent
    set_default :@verbose,     true
    set_default :@master,      'master'
    set_default :@answer_file, nil
    set_default :@autosign,    (@role == :master)

    set_default :@relocate_manifests, false
  end

  # @deprecated This duplicates the behavior of the shell provider and will
  #             be removed in a future release.
  def add_step(name, script_path)
    name = (name.is_a?(Symbol)) ? name : name.intern
    step[name] = script_path
  end

  # @param machine [Vagrant::Machine]
  def validate(machine)
    h = super

    unless @step.empty?
      machine.ui.warn I18n.t('pebuild.config.pe_bootstrap.steps_deprecated')
    end

    errors = []

    validate_role(errors, machine)
    validate_verbose(errors, machine)
    validate_master(errors, machine)
    validate_answer_file(errors, machine)
    validate_relocate_manifests(errors, machine)
    validate_autosign(errors, machine)

    errors |= h.values.flatten
    {"PE Bootstrap" => errors}
  end

  private

  def validate_version(errors, machine)
    if @version == UNSET_VALUE and global_config_from(machine).pe_build.version == UNSET_VALUE
      errors << I18n.t('pebuild.config.pe_bootstrap.errors.unset_version')
    end
  end

  def validate_role(errors, machine)
    unless VALID_ROLES.any? {|sym| @role == sym}
      errors << I18n.t(
        'pebuild.config.pe_bootstrap.errors.unhandled_role',
        :role        => @role.inspect,
        :known_roles => VALID_ROLES,
      )
    end
  end

  def validate_verbose(errors, machine)
    unless @verbose == !!@verbose
      errors << I18n.t(
        'pebuild.config.pe_bootstrap.errors.malformed_verbose',
        :verbose => @verbose.inspect,
      )
    end
  end

  def validate_master(errors, machine)
    unless @master.is_a? String
      errors << "'master' must be a string containing the address of the master, got a #{@master.class}"
    end
  end

  def validate_answer_file(errors, machine)
    if @answer_file and !File.readable? @answer_file
      errors << "'answers_file' must be a readable file"
    end
  end

  def validate_relocate_manifests(errors, machine)
    if @relocate_manifests and not @role == :master
      errors << "'relocate_manifests' can only be applied to a master"
    end
  end

  def validate_autosign(errors, machine)
    if (@autosign and @role != :master)
      errors << I18n.t(
        'pebuild.config.pe_bootstrap.errors.invalid_autosign_role',
        :role => @role
      )
    end

    unless VALID_AUTOSIGN_VALUES.include?(@autosign.class)
      errors << I18n.t(
        'pebuild.config.pe_bootstrap.errors.invalid_autosign_class',
        :autosign_class   => @autosign.class,
        :autosign_classes => VALID_AUTOSIGN_VALUES,
      )
    end
  end

  # Safely access the global config
  #
  # If we try to access the global config object directly from a validating
  # machine, horrible things happen. To avoid this we access the environment's
  # global config which should already be finalized.
  def global_config_from(machine)
    env = machine.env.config_global
  end
end