package controller

import (
	"context"

	"k8s.io/apimachinery/pkg/runtime"
	ctrl "sigs.k8s.io/controller-runtime"
	"sigs.k8s.io/controller-runtime/pkg/client"

	bindv1alpha1 "git.unkin.net/unkin/bind-operator/api/v1alpha1"
)

// BindACLReconciler validates a BindACL and reports readiness. The rendered ACL
// is emitted into named.conf by the BindCluster controller, which watches ACLs.
type BindACLReconciler struct {
	client.Client
	Scheme *runtime.Scheme
}

// +kubebuilder:rbac:groups=bind.unkin.net,resources=bindacls,verbs=get;list;watch;create;update;patch;delete
// +kubebuilder:rbac:groups=bind.unkin.net,resources=bindacls/status,verbs=get;update;patch

func (r *BindACLReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
	var acl bindv1alpha1.BindACL
	if err := r.Get(ctx, req.NamespacedName, &acl); err != nil {
		return ctrl.Result{}, client.IgnoreNotFound(err)
	}
	acl.Status.Ready = len(acl.Spec.Entries) > 0
	acl.Status.ObservedGeneration = acl.Generation
	setReady(&acl.Status.Conditions, acl.Generation, acl.Status.Ready, "Validated", "ACL rendered into named.conf")
	if err := r.Status().Update(ctx, &acl); err != nil {
		return ctrl.Result{}, err
	}
	return ctrl.Result{}, nil
}

func (r *BindACLReconciler) SetupWithManager(mgr ctrl.Manager) error {
	return ctrl.NewControllerManagedBy(mgr).
		For(&bindv1alpha1.BindACL{}).
		Complete(r)
}