/*
Package controllers contains logic for handlers that belong to controllers and options for configuring controllers.
*/
package controllers

import (
	"os"
	"strings"

	"github.com/rancher/lasso/pkg/controller"
	"k8s.io/client-go/rest"
)

type controllerContextType string

const (
	User            controllerContextType = "user"
	Scaled          controllerContextType = "scaled"
	Management      controllerContextType = "mgmt"
	K8sManagedByKey                       = "app.kubernetes.io/managed-by"
	ManagerValue                          = "rancher"
)

// GetOptsFromEnv configures a SharedControllersFactoryOptions using env var and return a pointer to it.
func GetOptsFromEnv(contextType controllerContextType) *controller.SharedControllerFactoryOptions {
	return &controller.SharedControllerFactoryOptions{
		SyncOnlyChangedObjects: syncOnlyChangedObjects(contextType),
	}
}

// syncOnlyChangedObjects returns whether the env var CATTLE_SYNC_ONLY_CHANGED_OBJECTS indicates that controllers for the
// given context type should skip running enqueue if the event triggering the update func is not actual update.
func syncOnlyChangedObjects(option controllerContextType) bool {
	skipUpdate := os.Getenv("CATTLE_SYNC_ONLY_CHANGED_OBJECTS")
	if skipUpdate == "" {
		return false
	}
	parts := strings.Split(skipUpdate, ",")

	for _, part := range parts {
		if controllerContextType(part) == option {
			return true
		}
	}
	return false
}

// WebhookImpersonation returns a ImpersonationConfig that can be used for impersonating the webhook's sudo account and bypass validation.
func WebhookImpersonation() rest.ImpersonationConfig {
	return rest.ImpersonationConfig{
		UserName: "system:serviceaccount:cattle-system:rancher-webhook-sudo",
		Groups:   []string{"system:masters"},
	}
}