#!/usr/bin/env bats
# ElastiCache tests

setup() {
    load 'test_helper/common-setup'
    PG="bats-pg-$(unique_name)"
}

teardown() {
    aws_cmd elasticache delete-cache-parameter-group --cache-parameter-group-name "$PG" >/dev/null 2>&1 || true
}

@test "ElastiCache: create, describe, modify and delete a cache parameter group" {
    run aws_cmd elasticache create-cache-parameter-group \
        --cache-parameter-group-name "$PG" \
        --cache-parameter-group-family redis7 \
        --description "bats parameter group"
    assert_success
    [ "$(json_get "$output" '.CacheParameterGroup.CacheParameterGroupName')" = "$PG" ]
    [ "$(json_get "$output" '.CacheParameterGroup.CacheParameterGroupFamily')" = "redis7" ]
    [ "$(json_get "$output" '.CacheParameterGroup.Description')" = "bats parameter group" ]
    [ "$(json_get "$output" '.CacheParameterGroup.IsGlobal')" = "false" ]
    arn=$(json_get "$output" '.CacheParameterGroup.ARN')
    [[ "$arn" == *":parametergroup:$PG" ]]

    run aws_cmd elasticache describe-cache-parameter-groups --cache-parameter-group-name "$PG"
    assert_success
    [ "$(json_get "$output" '.CacheParameterGroups | length')" = "1" ]

    run aws_cmd elasticache modify-cache-parameter-group \
        --cache-parameter-group-name "$PG" \
        --parameter-name-values 'ParameterName=maxmemory-policy,ParameterValue=allkeys-lru'
    assert_success
    [ "$(json_get "$output" '.CacheParameterGroupName')" = "$PG" ]

    run aws_cmd elasticache describe-cache-parameters --cache-parameter-group-name "$PG"
    assert_success
    [ "$(json_get "$output" '.Parameters[0].ParameterName')" = "maxmemory-policy" ]
    [ "$(json_get "$output" '.Parameters[0].ParameterValue')" = "allkeys-lru" ]
    [ "$(json_get "$output" '.Parameters[0].Source')" = "user" ]

    run aws_cmd elasticache delete-cache-parameter-group --cache-parameter-group-name "$PG"
    assert_success

    run aws_cmd elasticache describe-cache-parameter-groups --cache-parameter-group-name "$PG"
    assert_failure
    assert_output --partial "CacheParameterGroupNotFound"
}

@test "ElastiCache: the default parameter groups AWS publishes are listed" {
    run aws_cmd elasticache describe-cache-parameter-groups
    assert_success
    names=$(json_get "$output" '.CacheParameterGroups[].CacheParameterGroupName')
    echo "$names" | grep -q '^default\.redis7$'
    echo "$names" | grep -q '^default\.redis7\.cluster\.on$'
    echo "$names" | grep -q '^default\.valkey8$'

    run aws_cmd elasticache describe-cache-parameter-groups --cache-parameter-group-name default.redis7
    assert_success
    [ "$(json_get "$output" '.CacheParameterGroups[0].CacheParameterGroupFamily')" = "redis7" ]
}

@test "ElastiCache: a duplicate parameter group is rejected" {
    aws_cmd elasticache create-cache-parameter-group --cache-parameter-group-name "$PG" \
        --cache-parameter-group-family redis7 --description first >/dev/null

    run aws_cmd elasticache create-cache-parameter-group --cache-parameter-group-name "$PG" \
        --cache-parameter-group-family redis7 --description second
    assert_failure
    assert_output --partial "CacheParameterGroupAlreadyExists"
}

@test "ElastiCache: an unknown family is rejected" {
    run aws_cmd elasticache create-cache-parameter-group \
        --cache-parameter-group-name "$PG" \
        --cache-parameter-group-family redis99 --description x
    assert_failure
    assert_output --partial "not a valid parameter group family"
}

@test "ElastiCache: a default parameter group cannot be deleted" {
    # AWS rejects it on the identifier rule, since a user-supplied name cannot contain dots.
    run aws_cmd elasticache delete-cache-parameter-group --cache-parameter-group-name default.redis7
    assert_failure
    assert_output --partial "not a valid identifier"
}

@test "ElastiCache: cache subnet group takes its VPC and zones from the subnets" {
    vpc=$(aws_cmd ec2 create-vpc --cidr-block 10.30.0.0/16 --query 'Vpc.VpcId' --output text)
    a=$(aws_cmd ec2 create-subnet --vpc-id "$vpc" --cidr-block 10.30.1.0/24 \
        --availability-zone us-east-1a --query 'Subnet.SubnetId' --output text)
    b=$(aws_cmd ec2 create-subnet --vpc-id "$vpc" --cidr-block 10.30.2.0/24 \
        --availability-zone us-east-1b --query 'Subnet.SubnetId' --output text)
    SNG="bats-sng-$(unique_name)"

    run aws_cmd elasticache create-cache-subnet-group \
        --cache-subnet-group-name "$SNG" \
        --cache-subnet-group-description "bats subnet group" \
        --subnet-ids "$a" "$b"
    assert_success
    [ "$(json_get "$output" '.CacheSubnetGroup.VpcId')" = "$vpc" ]
    [ "$(json_get "$output" '.CacheSubnetGroup.Subnets | length')" = "2" ]
    [ "$(json_get "$output" '.CacheSubnetGroup.Subnets[0].SubnetAvailabilityZone.Name')" = "us-east-1a" ]

    run aws_cmd elasticache describe-cache-subnet-groups --cache-subnet-group-name "$SNG"
    assert_success
    [ "$(json_get "$output" '.CacheSubnetGroups[0].CacheSubnetGroupName')" = "$SNG" ]

    run aws_cmd elasticache create-cache-subnet-group \
        --cache-subnet-group-name "bats-absent-$(unique_name)" \
        --cache-subnet-group-description x --subnet-ids subnet-00000000000000000
    assert_failure
    assert_output --partial "are invalid"

    run aws_cmd elasticache delete-cache-subnet-group --cache-subnet-group-name "$SNG"
    assert_success
}

@test "ElastiCache: a cache subnet group is built from subnets in the caller's region" {
    # Subnets exist in the region they were created in. Resolving them in the configured default
    # region instead rejects a caller's own subnets as invalid.
    export AWS_DEFAULT_REGION=eu-west-1
    vpc=$(aws_cmd ec2 create-vpc --cidr-block 10.31.0.0/16 --query 'Vpc.VpcId' --output text)
    s=$(aws_cmd ec2 create-subnet --vpc-id "$vpc" --cidr-block 10.31.1.0/24 \
        --availability-zone eu-west-1a --query 'Subnet.SubnetId' --output text)
    SNG_EU="bats-sng-eu-$(unique_name)"

    run aws_cmd elasticache create-cache-subnet-group \
        --cache-subnet-group-name "$SNG_EU" \
        --cache-subnet-group-description "bats other region" \
        --subnet-ids "$s"
    assert_success
    [ "$(json_get "$output" '.CacheSubnetGroup.VpcId')" = "$vpc" ]
    [ "$(json_get "$output" '.CacheSubnetGroup.Subnets[0].SubnetAvailabilityZone.Name')" = "eu-west-1a" ]
    [[ "$(json_get "$output" '.CacheSubnetGroup.ARN')" == arn:aws:elasticache:eu-west-1:* ]]

    run aws_cmd elasticache delete-cache-subnet-group --cache-subnet-group-name "$SNG_EU"
    assert_success
}

@test "ElastiCache: replication group keeps its encryption, snapshot settings and tags" {
    RG="bats-rg-$(unique_name)"
    run aws_cmd kms create-key --description "$RG"
    assert_success
    KEY_ARN=$(json_get "$output" '.KeyMetadata.Arn')
    KEY_ID=$(json_get "$output" '.KeyMetadata.KeyId')
    aws_cmd kms create-alias --alias-name "alias/$RG" --target-key-id "$KEY_ID" >/dev/null

    run aws_cmd elasticache create-replication-group --replication-group-id "$RG" --replication-group-description d \
        --engine redis --cache-node-type cache.t3.micro --num-cache-clusters 1 \
        --at-rest-encryption-enabled --kms-key-id "alias/$RG" \
        --snapshot-retention-limit 7 --snapshot-window 06:30-07:30 --tags "Key=Name,Value=$RG"
    assert_success

    run aws_cmd elasticache describe-replication-groups --replication-group-id "$RG" \
        --query 'ReplicationGroups[0].[KmsKeyId,AtRestEncryptionEnabled,SnapshotRetentionLimit,SnapshotWindow,ARN]'
    assert_success
    assert_output --partial "$KEY_ARN"
    assert_output --partial 'true'
    assert_output --partial '7'
    assert_output --partial '"06:30-07:30"'
    assert_output --partial "replicationgroup:$RG"
    ARN=$(aws_cmd elasticache describe-replication-groups --replication-group-id "$RG" --query 'ReplicationGroups[0].ARN' --output text)

    run aws_cmd elasticache list-tags-for-resource --resource-name "$ARN"
    assert_success
    assert_output --partial "\"Value\": \"$RG\""

    run aws_cmd elasticache modify-replication-group --replication-group-id "$RG" --snapshot-retention-limit 3 --snapshot-window 01:00-02:00 --apply-immediately
    assert_success
    run aws_cmd elasticache describe-replication-groups --replication-group-id "$RG" --query 'ReplicationGroups[0].[SnapshotRetentionLimit,SnapshotWindow]'
    assert_success
    assert_output --partial '3'
    assert_output --partial '"01:00-02:00"'

    aws_cmd elasticache delete-replication-group --replication-group-id "$RG" >/dev/null 2>&1 || true
}