#!/bin/sh

counter=0

sleepPod=$(kubectl get pod -l app=sleep -n legacy -o jsonpath={..metadata.name})

function log () {
  echo "$(date): $@"
}

for (( counter=0; ; counter++ ))
do
  echo "Counter: $counter"
  oc delete policy example-httpbin-permissive -n foo

  for try in {1..10} ; do
    kubectl exec ${sleepPod} -c sleep -n legacy -- curl http://httpbin.foo:8000/ip -s -o /dev/null -w "sleep.legacy to httpbin.foo: %{http_code}\n"

    ret=$?
    if [ $ret -eq 0 ]; then
      break
    fi
    if [ $try -lt 10 ] ; then
      sleep 1
    else
      log "Caught config propagation error after ${counter} tries."	  
      exit 1
    fi
  done

  cat <<EOF | kubectl apply -n foo -f -
apiVersion: "authentication.istio.io/v1alpha1"
kind: "Policy"
metadata:
  name: "example-httpbin-permissive"
  namespace: foo
spec:
  targets:
  - name: httpbin
  peers:
  - mtls:
      mode: STRICT
EOF

  for try in {1..10} ; do
    kubectl exec ${sleepPod} -c sleep -n legacy -- curl http://httpbin.foo:8000/ip -s -o /dev/null -w "sleep.legacy to httpbin.foo: %{http_code}\n"

    ret=$?
    if [ $ret -ne 0 ]; then
      break
    fi
    if [ $try -lt 10 ] ; then
      sleep 1
    else
      log "Caught config propagation error after ${counter} tries."	  
      exit 1
    fi
  done

  log "Trying again ..."
done