import * as gcp from "@pulumi/gcp";
import * as k8s from "@pulumi/kubernetes";
import * as pulumi from "@pulumi/pulumi";
import * as random from "@pulumi/random";

export class GkeCluster extends pulumi.ComponentResource {
  public cluster: gcp.container.Cluster;
  public provider: k8s.Provider;

  constructor(name: string, opts: pulumi.ComponentResourceOptions = {}) {
    super("examples:kubernetes-ts-multicloud:GkeCluster", name, {}, opts);

    // Find the latest engine version.
    const engineVersion = gcp.container.getEngineVersions().latestMasterVersion;

    // Generate a strong password for the Kubernetes cluster.
    const password = new random.RandomPassword(
      "password",
      {
        length: 20,
        special: true
      },
      { parent: this }
    ).result;

    // Create the GKE cluster.
    const k8sCluster = new gcp.container.Cluster(
      "primary",
      {
        initialNodeCount: 1,
        nodeVersion: engineVersion,
        minMasterVersion: engineVersion,
        masterAuth: { username: "master-user", password: password },
        removeDefaultNodePool: true,
        nodeConfig: {
          machineType: "n1-standard-1",
          oauthScopes: [
            "https://www.googleapis.com/auth/logging.write",
            "https://www.googleapis.com/auth/monitoring"
          ]
        }
      },
      { parent: this }
    );
    this.cluster = k8sCluster;

    // Manufacture a GKE-style Kubeconfig. Note that this is slightly "different" because of the way GKE requires
    // gcloud to be in the picture for cluster authentication (rather than using the client cert/key directly).
    const k8sConfig = pulumi
      .all([k8sCluster.name, k8sCluster.endpoint, k8sCluster.masterAuth])
      .apply(([name, endpoint, auth]) => {
        const context = `${gcp.config.project}_${gcp.config.zone}_${name}`;
        return `apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: ${auth.clusterCaCertificate}
    server: https://${endpoint}
  name: ${context}
contexts:
- context:
    cluster: ${context}
    user: ${context}
  name: ${context}
current-context: ${context}
kind: Config
preferences: {}
users:
- name: ${context}
  user:
    auth-provider:
      config:
        cmd-args: config config-helper --format=json
        cmd-path: gcloud
        expiry-key: '{.credential.token_expiry}'
        token-key: '{.credential.access_token}'
      name: gcp
`;
      });

    // Export a Kubernetes provider instance that uses our cluster from above.
    this.provider = new k8s.Provider(
      "gke",
      { kubeconfig: k8sConfig },
      { parent: this }
    );
  }
}