#
# (c) 2019, Ansible by Red Hat, inc
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
#

from __future__ import absolute_import, division, print_function


__metaclass__ = type

from unittest.mock import patch

from ansible_collections.cisco.asa.plugins.modules import asa_ogs
from ansible_collections.cisco.asa.tests.unit.modules.utils import set_module_args

from .asa_module import TestAsaModule, load_fixture


class TestAsaOGsModule(TestAsaModule):
    module = asa_ogs

    def setUp(self):
        super(TestAsaOGsModule, self).setUp()

        self.mock_get_config = patch(
            "ansible_collections.ansible.netcommon.plugins.module_utils.network.common.network.Config.get_config",
        )
        self.get_config = self.mock_get_config.start()

        self.mock_load_config = patch(
            "ansible_collections.ansible.netcommon.plugins.module_utils.network.common.network.Config.load_config",
        )
        self.load_config = self.mock_load_config.start()

        self.mock_get_resource_connection_config = patch(
            "ansible_collections.ansible.netcommon.plugins.module_utils.network.common.cfg.base."
            "get_resource_connection",
        )
        self.get_resource_connection_config = self.mock_get_resource_connection_config.start()

        self.mock_get_resource_connection_facts = patch(
            "ansible_collections.ansible.netcommon.plugins.module_utils.network.common.rm_base.resource_module_base."
            "get_resource_connection",
        )
        self.get_resource_connection_facts = self.mock_get_resource_connection_facts.start()

        self.mock_edit_config = patch(
            "ansible_collections.cisco.asa.plugins.module_utils.network.asa.providers.providers.CliProvider.edit_config",
        )
        self.edit_config = self.mock_edit_config.start()

        self.mock_execute_show_command = patch(
            "ansible_collections.cisco.asa.plugins.module_utils.network.asa.facts.ogs.ogs."
            "OGsFacts.get_og_data",
        )
        self.execute_show_command = self.mock_execute_show_command.start()

    def tearDown(self):
        super(TestAsaOGsModule, self).tearDown()
        self.mock_get_resource_connection_config.stop()
        self.mock_get_resource_connection_facts.stop()
        self.mock_edit_config.stop()
        self.mock_get_config.stop()
        self.mock_load_config.stop()
        self.mock_execute_show_command.stop()

    def load_fixtures(self, commands=None, transport="cli"):
        def load_from_file(*args, **kwargs):
            return load_fixture("asa_ogs_config.cfg")

        self.execute_show_command.side_effect = load_from_file

    def test_asa_ogs_merged(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[
                            dict(
                                group_object=["test_network_og"],
                                name="group_network_obj",
                            ),
                            dict(
                                name="test_network_og",
                                description="test network og",
                                network_object=dict(
                                    host=["198.51.100.1", "198.51.100.2"],
                                    ipv6_address=["2001:db8:0:3::/64"],
                                ),
                            ),
                            dict(
                                name="ANSIBLE_TEST",
                                network_object=dict(object=["NEW_TEST"]),
                            ),
                            dict(
                                name="bug_test_obj",
                                network_object=dict(host=["9.9.9.9"]),
                            ),
                        ],
                        object_type="network",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="test_user_obj",
                                user_object=dict(
                                    user_group=[
                                        dict(
                                            domain="domain",
                                            name="test_merge",
                                        ),
                                    ],
                                ),
                            ),
                        ],
                        object_type="user",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="test_protocol",
                                protocol_object=dict(protocol=["tcp", "16"]),
                            ),
                        ],
                        object_type="protocol",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="test_og_service_src_port_range",
                                services_object=[
                                    dict(
                                        source_port=dict(
                                            range=dict(end="200", start="100"),
                                        ),
                                        protocol="tcp-udp",
                                    ),
                                ],
                            ),
                            dict(
                                name="test_og_service_dst_port_range",
                                services_object=[
                                    dict(
                                        destination_port=dict(
                                            range=dict(end="400", start="300"),
                                        ),
                                        protocol="udp",
                                    ),
                                ],
                            ),
                            dict(
                                name="allowed.ports.tcp",
                                port_object=[
                                    dict(eq="3300"),
                                    dict(range=dict(start="9101", end="9103")),
                                ],
                                protocol="tcp",
                            ),
                        ],
                        object_type="service",
                    ),
                ],
                state="merged",
            ),
        )
        result = self.execute_module(changed=True)
        commands = [
            "object-group network group_network_obj",
            "group-object test_network_og",
            "object-group network test_network_og",
            "description test network og",
            "network-object host 198.51.100.1",
            "network-object host 198.51.100.2",
            "network-object 2001:db8:0:3::/64",
            "object-group network ANSIBLE_TEST",
            "network-object object NEW_TEST",
            "object-group network bug_test_obj",
            "network-object host 9.9.9.9",
            "object-group user test_user_obj",
            "user-group domain\\\\test_merge",
            "object-group protocol test_protocol",
            "protocol tcp",
            "object-group service test_og_service_src_port_range",
            "service-object tcp-udp source range 100 200",
            "object-group service test_og_service_dst_port_range",
            "service-object udp destination range 300 400",
            "object-group service allowed.ports.tcp tcp",
            "port-object eq 3300",
            "port-object range 9101 9103",
        ]
        self.assertEqual(sorted(result["commands"]), sorted(commands))

    def test_asa_ogs_merged_idempotent(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[
                            dict(
                                group_object=["ANSIBLE_TEST"],
                                name="group_network_obj",
                            ),
                            dict(
                                description="test_og_network",
                                name="test_og_network",
                                network_object=dict(
                                    host=["192.0.2.1", "2001:db8::1"],
                                    address=["192.0.2.0 255.255.255.0"],
                                ),
                            ),
                            dict(
                                name="ANSIBLE_TEST",
                                network_object=dict(object=["TEST1", "TEST2"]),
                            ),
                            dict(name="bug_test_obj"),
                        ],
                        object_type="network",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="3300",
                                port_object=[dict(eq="3300")],
                                protocol="tcp",
                            ),
                            dict(
                                name="O-UNIX-TCP",
                                port_object=[
                                    dict(eq="https"),
                                    dict(range=dict(end=400, start=100)),
                                ],
                                protocol="tcp",
                            ),
                            dict(
                                name="sg-skype_ports",
                                services_object=[
                                    dict(
                                        destination_port=dict(
                                            range=dict(end="5061", start="sip"),
                                        ),
                                        protocol="tcp-udp",
                                    ),
                                ],
                            ),
                            dict(
                                name="test_og_service",
                                services_object=[
                                    dict(
                                        destination_port=dict(gt="nfs"),
                                        protocol="tcp",
                                        source_port=dict(eq=1234),
                                    ),
                                    dict(
                                        destination_port=dict(
                                            range=dict(end=200, start=100),
                                        ),
                                        protocol="tcp",
                                    ),
                                    dict(protocol="ipinip"),
                                    dict(protocol="tcp-udp"),
                                ],
                            ),
                        ],
                        object_type="service",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                group_object=["test_user_obj"],
                                name="group_user_obj",
                            ),
                            dict(
                                name="test_user_obj",
                                user_object=dict(
                                    user=[dict(domain="LOCAL", name="test1")],
                                    user_group=[
                                        dict(domain="domain", name="test1"),
                                        dict(domain="domain", name="test2"),
                                    ],
                                ),
                            ),
                        ],
                        object_type="user",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="test_protocol",
                                protocol_object=dict(protocol=["16"]),
                            ),
                        ],
                        object_type="protocol",
                    ),
                ],
                state="merged",
            ),
        )
        self.execute_module(changed=False, commands=[], sort=True)

    def test_asa_ogs_replaced(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[
                            dict(
                                name="test_og_network",
                                description="test_og_network_replace",
                                network_object=dict(
                                    host=["198.51.100.1"],
                                    address=["198.51.100.0 255.255.255.0"],
                                ),
                            ),
                        ],
                        object_type="network",
                    ),
                ],
                state="replaced",
            ),
        )
        result = self.execute_module(changed=True)
        commands = [
            "object-group network test_og_network",
            "description test_og_network_replace",
            "no network-object 192.0.2.0 255.255.255.0",
            "network-object 198.51.100.0 255.255.255.0",
            "no network-object host 192.0.2.1",
            "no network-object host 2001:db8::1",
            "network-object host 198.51.100.1",
        ]
        self.assertEqual(sorted(result["commands"]), sorted(commands))

    def test_asa_ogs_replaced_idempotent(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[
                            dict(
                                group_object=["ANSIBLE_TEST"],
                                name="group_network_obj",
                            ),
                            dict(
                                description="test_og_network",
                                name="test_og_network",
                                network_object=dict(
                                    host=["192.0.2.1", "2001:db8::1"],
                                    address=["192.0.2.0 255.255.255.0"],
                                ),
                            ),
                            dict(
                                name="ANSIBLE_TEST",
                                network_object=dict(object=["TEST1", "TEST2"]),
                            ),
                            dict(name="bug_test_obj"),
                        ],
                        object_type="network",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="3300",
                                port_object=[dict(eq="3300")],
                                protocol="tcp",
                            ),
                            dict(
                                name="O-UNIX-TCP",
                                port_object=[
                                    dict(eq="https"),
                                    dict(range=dict(end=400, start=100)),
                                ],
                                protocol="tcp",
                            ),
                            dict(
                                name="sg-skype_ports",
                                services_object=[
                                    dict(
                                        destination_port=dict(
                                            range=dict(end="5061", start="sip"),
                                        ),
                                        protocol="tcp-udp",
                                    ),
                                ],
                            ),
                            dict(
                                name="test_og_service",
                                services_object=[
                                    dict(
                                        destination_port=dict(gt="nfs"),
                                        protocol="tcp",
                                        source_port=dict(eq=1234),
                                    ),
                                    dict(
                                        destination_port=dict(
                                            range=dict(end=200, start=100),
                                        ),
                                        protocol="tcp",
                                    ),
                                    dict(protocol="ipinip"),
                                    dict(protocol="tcp-udp"),
                                ],
                            ),
                        ],
                        object_type="service",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                group_object=["test_user_obj"],
                                name="group_user_obj",
                            ),
                            dict(
                                name="test_user_obj",
                                user_object=dict(
                                    user=[dict(domain="LOCAL", name="test1")],
                                    user_group=[
                                        dict(domain="domain", name="test1"),
                                        dict(domain="domain", name="test2"),
                                    ],
                                ),
                            ),
                        ],
                        object_type="user",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="test_protocol",
                                protocol_object=dict(protocol=["16"]),
                            ),
                        ],
                        object_type="protocol",
                    ),
                ],
                state="replaced",
            ),
        )
        self.execute_module(changed=False, commands=[], sort=True)

    def test_asa_ogs_overridden(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[
                            dict(
                                name="test_og_network",
                                description="test_og_network_override",
                                network_object=dict(
                                    host=["198.51.100.1"],
                                    address=["198.51.100.0 255.255.255.0"],
                                ),
                            ),
                        ],
                        object_type="network",
                    ),
                ],
                state="overridden",
            ),
        )
        result = self.execute_module(changed=True)
        commands = [
            "no object-group service test_og_service",
            "no object-group service 3300",
            "no object-group service sg-skype_ports",
            "no object-group service O-UNIX-TCP",
            "no object-group network group_network_obj",
            "no object-group protocol test_protocol",
            "object-group network test_og_network",
            "description test_og_network_override",
            "no network-object 192.0.2.0 255.255.255.0",
            "network-object 198.51.100.0 255.255.255.0",
            "no network-object host 192.0.2.1",
            "no network-object host 2001:db8::1",
            "network-object host 198.51.100.1",
            "no object-group network ANSIBLE_TEST",
            "no object-group network bug_test_obj",
            "no object-group user group_user_obj",
            "no object-group user test_user_obj",
        ]
        self.assertEqual(sorted(result["commands"]), sorted(commands))

    def test_asa_ogs_overridden_idempotent(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[
                            dict(
                                group_object=["ANSIBLE_TEST"],
                                name="group_network_obj",
                            ),
                            dict(
                                description="test_og_network",
                                name="test_og_network",
                                network_object=dict(
                                    host=["192.0.2.1", "2001:db8::1"],
                                    address=["192.0.2.0 255.255.255.0"],
                                ),
                            ),
                            dict(
                                name="ANSIBLE_TEST",
                                network_object=dict(object=["TEST1", "TEST2"]),
                            ),
                            dict(name="bug_test_obj"),
                        ],
                        object_type="network",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="3300",
                                port_object=[dict(eq="3300")],
                                protocol="tcp",
                            ),
                            dict(
                                name="O-UNIX-TCP",
                                port_object=[
                                    dict(eq="https"),
                                    dict(range=dict(end=400, start=100)),
                                ],
                                protocol="tcp",
                            ),
                            dict(
                                name="sg-skype_ports",
                                services_object=[
                                    dict(
                                        destination_port=dict(
                                            range=dict(end="5061", start="sip"),
                                        ),
                                        protocol="tcp-udp",
                                    ),
                                ],
                            ),
                            dict(
                                name="test_og_service",
                                services_object=[
                                    dict(
                                        destination_port=dict(gt="nfs"),
                                        protocol="tcp",
                                        source_port=dict(eq=1234),
                                    ),
                                    dict(
                                        destination_port=dict(
                                            range=dict(end=200, start=100),
                                        ),
                                        protocol="tcp",
                                    ),
                                    dict(protocol="ipinip"),
                                    dict(protocol="tcp-udp"),
                                ],
                            ),
                        ],
                        object_type="service",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                group_object=["test_user_obj"],
                                name="group_user_obj",
                            ),
                            dict(
                                name="test_user_obj",
                                user_object=dict(
                                    user=[dict(domain="LOCAL", name="test1")],
                                    user_group=[
                                        dict(domain="domain", name="test1"),
                                        dict(domain="domain", name="test2"),
                                    ],
                                ),
                            ),
                        ],
                        object_type="user",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="test_protocol",
                                protocol_object=dict(protocol=["16"]),
                            ),
                        ],
                        object_type="protocol",
                    ),
                ],
                state="overridden",
            ),
        )
        self.execute_module(changed=False, commands=[], sort=True)

    def test_asa_ogs_delete_by_name(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[dict(name="test_og_network")],
                        object_type="network",
                    ),
                ],
                state="deleted",
            ),
        )
        result = self.execute_module(changed=True)
        commands = ["no object-group network test_og_network"]
        self.assertEqual(result["commands"], commands)

    def test_asa_ogs_deleted_all(self):
        set_module_args(dict(state="deleted"))
        result = self.execute_module(changed=True)
        commands = [
            "no object-group network group_network_obj",
            "no object-group network test_og_network",
            "no object-group network ANSIBLE_TEST",
            "no object-group network bug_test_obj",
            "no object-group protocol test_protocol",
            "no object-group service 3300",
            "no object-group service sg-skype_ports",
            "no object-group service test_og_service",
            "no object-group service O-UNIX-TCP",
            "no object-group user group_user_obj",
            "no object-group user test_user_obj",
        ]
        self.assertEqual(sorted(result["commands"]), sorted(commands))

    def test_asa_ogs_rendered(self):
        set_module_args(
            dict(
                config=[
                    dict(
                        object_groups=[
                            dict(
                                description="test_og_network",
                                name="test_og_network",
                                network_object=dict(
                                    host=["192.0.2.1", "2001:db8::1"],
                                    address=["192.0.2.0 255.255.255.0"],
                                ),
                            ),
                        ],
                        object_type="network",
                    ),
                    dict(
                        object_groups=[
                            dict(
                                name="test_og_service",
                                service_object=dict(
                                    protocol=["ipinip", "tcp-udp"],
                                ),
                            ),
                            dict(
                                name="test_og_service_src_port_range",
                                services_object=[
                                    dict(
                                        source_port=dict(
                                            range=dict(end="200", start="100"),
                                        ),
                                        protocol="tcp-udp",
                                    ),
                                ],
                            ),
                            dict(
                                name="test_og_service_dst_port_range",
                                services_object=[
                                    dict(
                                        destination_port=dict(
                                            range=dict(end="400", start="300"),
                                        ),
                                        protocol="udp",
                                    ),
                                ],
                            ),
                        ],
                        object_type="service",
                    ),
                ],
                state="rendered",
            ),
        )
        commands = [
            "object-group network test_og_network",
            "description test_og_network",
            "network-object 192.0.2.0 255.255.255.0",
            "network-object host 192.0.2.1",
            "network-object host 2001:db8::1",
            "object-group service test_og_service",
            "service-object ipinip",
            "service-object tcp-udp",
            "object-group service test_og_service_src_port_range",
            "service-object tcp-udp source range 100 200",
            "object-group service test_og_service_dst_port_range",
            "service-object udp destination range 300 400",
        ]
        result = self.execute_module(changed=False)
        self.assertEqual(sorted(result["rendered"]), sorted(commands))
