GEM_DIR=File.expand_path(File.dirname(__FILE__) + '/../').freeze
$: << "#{GEM_DIR}/lib"

require 'vault_provision'
require 'open3'
require 'aws-sdk'
require 'vcr'

DEV_VAULT_TOKEN                = 'kittens'.freeze
DEV_VAULT_ADDR                 = 'http://127.0.0.1:8200'.freeze
EXAMPLE_DIR                    = "#{GEM_DIR}/examples/basic".freeze
AUDIT_LOG_PATH                 = "/tmp/my-vault-audit-test.log"
AUDIT_LOG_TAG                  = "my-vault-audit-tag"

ENV['VAULT_DEV_ROOT_TOKEN_ID'] = DEV_VAULT_TOKEN
ENV['VAULT_TOKEN']             = DEV_VAULT_TOKEN
ENV['VAULT_ADDR']              = DEV_VAULT_ADDR

Vault.configure do |config|
  config.address = DEV_VAULT_ADDR
  config.token = DEV_VAULT_TOKEN
end

VCR.configure do |config|
  config.cassette_library_dir = "spec/vcr_cassettes"
  config.debug_logger = File.open("log/vcr.log", 'w')
  config.hook_into :webmock
  config.allow_http_connections_when_no_cassette = true

  config.filter_sensitive_data('<SOME_VAULT_TOKEN>') do |i|
    i.request.headers['X-Vault-Token'].first unless i.request.headers['X-Vault-Token'].nil?
  end
  config.filter_sensitive_data('<SOME_AUTHZ_HEADER>') do |i|
    i.request.headers['Authorization'].first unless i.request.headers['Authorization'].nil?
  end
end

def vault_server
  File.unlink(AUDIT_LOG_PATH) if File.exist?(AUDIT_LOG_PATH)
  stdin, stdout, stderr, server = Open3.popen3('vault server -dev')
  cleanup = lambda do |_|
    stdin.close
    stdout.close
    stderr.close
    Process.kill :INT, server.pid
  end
  [:INT, :EXIT].each do |sig|
    trap(sig, cleanup)
  end
  puts "server is PID #{server.pid}"
  sleep(1) # woo race condition! wait for server to start up
  server
end

def client
  @client ||= Vault::Client.new
end

RSpec.configure do |config|
  config.tty = true
  config.raise_errors_for_deprecations!
end

Aws.config.update(
  credentials: Aws::Credentials.new(ENV['AWS_ACCESS_KEY_ID'],
                                    ENV['AWS_SECRET_ACCESS_KEY'])
)

def iam_client
  @iam_client ||= Aws::IAM::Client.new
end


@server = vault_server
signatories = {'pki-intermediate': 'pki-root'}

Vault::Provision.new(EXAMPLE_DIR,
                     intermediate_issuer: signatories,
                     aws_update_creds: ! ENV['AWS_SECRET_ACCESS_KEY'].nil?,
                     pki_allow_destructive: true).provision!