#!/bin/bash

# HCP 集群先决条件检查脚本
# 检查所有客户端节点的 HashiCorp 软件包安装状态

set -e

# 客户端节点列表
CLIENT_NODES=(
    "ash2e.tailnet-68f9.ts.net"
    "ash1d.tailnet-68f9.ts.net" 
    "hcp1.tailnet-68f9.ts.net"
    "influxdb.tailnet-68f9.ts.net"
    "ash3c.tailnet-68f9.ts.net"
    "ch4.tailnet-68f9.ts.net"
    "warden.tailnet-68f9.ts.net"
    "browser.tailnet-68f9.ts.net"
)

SSH_OPTS="-o StrictHostKeyChecking=no -o ConnectTimeout=5"
PASSWORD="3131"

echo "=== HCP 集群先决条件检查开始 ==="
echo "检查时间: $(date)"
echo

# 检查函数
check_node_prerequisites() {
    local node=$1
    echo "检查节点: $node"
    
    # 检查网络连通性
    if ! ping -c 1 -W 2 "$node" >/dev/null 2>&1; then
        echo "  ❌ 网络不通"
        return 1
    fi
    
    # 检查 SSH 连接
    if ! sshpass -p "$PASSWORD" ssh $SSH_OPTS ben@"$node" "echo 'SSH OK'" >/dev/null 2>&1; then
        echo "  ❌ SSH 连接失败"
        return 1
    fi
    
    echo "  ✅ 网络和 SSH 连接正常"
    
    # 检查 HashiCorp 软件源配置
    echo "  检查 HashiCorp 软件源..."
    sshpass -p "$PASSWORD" ssh $SSH_OPTS ben@"$node" "
        if [ -f /etc/apt/sources.list.d/hashicorp.list ]; then
            echo '    ✅ HashiCorp 软件源文件存在'
            if grep -q 'trusted=yes' /etc/apt/sources.list.d/hashicorp.list; then
                echo '    ✅ 已配置 trusted=yes'
            else
                echo '    ⚠️  未配置 trusted=yes'
            fi
            cat /etc/apt/sources.list.d/hashicorp.list | sed 's/^/      /'
        else
            echo '    ❌ HashiCorp 软件源文件不存在'
        fi
    "
    
    # 检查二进制文件安装
    echo "  检查 HashiCorp 二进制文件..."
    sshpass -p "$PASSWORD" ssh $SSH_OPTS ben@"$node" "
        for binary in nomad consul vault; do
            if command -v \$binary >/dev/null 2>&1; then
                version=\$(\$binary version | head -n1)
                echo \"    ✅ \$binary: \$version\"
            else
                echo \"    ❌ \$binary: 未安装\"
            fi
        done
    "
    
    # 检查系统服务状态
    echo "  检查系统服务状态..."
    sshpass -p "$PASSWORD" ssh $SSH_OPTS ben@"$node" "
        for service in nomad consul; do
            if systemctl is-enabled \$service >/dev/null 2>&1; then
                status=\$(systemctl is-active \$service)
                echo \"    \$service: \$status\"
            else
                echo \"    \$service: 未配置\"
            fi
        done
    "
    
    echo
}

# 修复软件源配置的函数
fix_hashicorp_sources() {
    local node=$1
    echo "修复节点 $node 的 HashiCorp 软件源配置..."
    
    sshpass -p "$PASSWORD" ssh $SSH_OPTS ben@"$node" "
        echo '修复 HashiCorp 软件源配置...'
        
        # 备份现有配置
        if [ -f /etc/apt/sources.list.d/hashicorp.list ]; then
            echo '$PASSWORD' | sudo -S cp /etc/apt/sources.list.d/hashicorp.list /etc/apt/sources.list.d/hashicorp.list.bak
        fi
        
        # 创建新的软件源配置 (trusted=yes)
        echo '$PASSWORD' | sudo -S tee /etc/apt/sources.list.d/hashicorp.list > /dev/null << 'EOF'
deb [arch=amd64 trusted=yes] https://apt.releases.hashicorp.com jammy main
EOF
        
        # 更新软件包列表
        echo '$PASSWORD' | sudo -S apt update
        
        echo '✅ HashiCorp 软件源配置已修复'
    "
}

# 安装缺失软件包的函数
install_missing_packages() {
    local node=$1
    echo "在节点 $node 上安装 HashiCorp 软件包..."
    
    sshpass -p "$PASSWORD" ssh $SSH_OPTS ben@"$node" "
        echo '安装 HashiCorp 软件包...'
        echo '$PASSWORD' | sudo -S apt install -y nomad consul vault
        echo '✅ HashiCorp 软件包安装完成'
    "
}

# 主检查流程
main() {
    local failed_nodes=()
    local needs_source_fix=()
    local needs_package_install=()
    
    # 第一轮：检查所有节点
    for node in "${CLIENT_NODES[@]}"; do
        if ! check_node_prerequisites "$node"; then
            failed_nodes+=("$node")
        fi
    done
    
    # 汇总报告
    echo "=== 检查结果汇总 ==="
    if [ ${#failed_nodes[@]} -eq 0 ]; then
        echo "✅ 所有节点先决条件检查通过"
    else
        echo "⚠️  以下节点需要修复:"
        for node in "${failed_nodes[@]}"; do
            echo "  - $node"
        done
        
        echo
        echo "是否要自动修复这些节点? (y/N)"
        read -r response
        if [[ "$response" =~ ^[Yy]$ ]]; then
            for node in "${failed_nodes[@]}"; do
                echo "修复节点: $node"
                fix_hashicorp_sources "$node"
                install_missing_packages "$node"
                echo
            done
            
            echo "=== 重新检查修复后的节点 ==="
            for node in "${failed_nodes[@]}"; do
                check_node_prerequisites "$node"
            done
        fi
    fi
}

main "$@"