apiVersion: batch/v1
kind: Job
metadata:
  name: create-awx-organization-job
spec:
  # The number of retries before considering a Job as failed
  backoffLimit: 4
  template:
    spec:
      containers:
      - name: create-awx-org
        # A minimal container image with curl pre-installed
        image: curlimages/curl:latest
        env:
        # The name for the new AWX organization.
        # IMPORTANT: Change this value to the desired organization name.
        - name: ORG_NAME
          value: "Freshbrewed"

        # The URL for your AWX API endpoint.
        # IMPORTANT: Change this to point to your AWX instance's service URL.
        - name: AWX_API_URL
          value: "http://awx-service.default.svc:80"

        # This pulls the admin password from the specified secret.
        # The secret 'awx-admin-password' with key 'password' must exist in the same namespace.
        - name: AWX_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: awx-admin-password
              key: password

        # The command to execute. It uses curl to make a REST API call.
        command: ["/bin/sh", "-c"]
        args:
        - |
          # Exit immediately if a command exits with a non-zero status.
          set -e
          # Print each command to stdout before executing it.
          set -x

          echo "Attempting to create organization: ${ORG_NAME} in AWX at ${AWX_API_URL}"

          # Use curl to send a POST request to the AWX API to create a new organization.
          # -k: Allows insecure server connections (e.g., self-signed certs). Remove if not needed.
          # -f: Fail with an error code on HTTP server errors (like 4xx or 5xx).
          # -u: Basic authentication with the admin user and password from the secret.
          # -H: Sets the Content-Type header to application/json.
          # -d: The JSON data payload for creating the organization.
          curl -k -f -X POST \
            -u "admin:${AWX_ADMIN_PASSWORD}" \
            -H "Content-Type: application/json" \
            -d "{\"name\": \"${ORG_NAME}\", \"description\": \"Organization created by Kubernetes Job\"}" \
            "${AWX_API_URL}/api/v2/organizations/"

          echo "Successfully created organization: ${ORG_NAME}"
      restartPolicy: OnFailure

apiVersion: batch/v1
kind: Job
metadata:
  name: create-awx-inventory-job
spec:
  backoffLimit: 4
  template:
    spec:
      containers:
      - name: create-awx-inventory
        image: alpine:latest
        env:
        # --- Configuration for the Organization to find ---
        - name: ORG_NAME
          value: "Freshbrewed"

        # --- Configuration for the Inventory to create ---
        - name: INVENTORY_NAME
          value: "Kubernetes-Cluster1"

        # --- Configuration for Host 1 ---
        - name: HOST1_NAME
          value: "builder-hp-elitebook-745-g5"
        - name: HOST1_IP
          value: "192.168.1.33"

        # --- Configuration for Host 2 ---
        - name: HOST2_NAME
          value: "builder-hp-elitebook-850-g1"
        - name: HOST2_IP
          value: "192.168.1.36"

        # --- AWX API Connection Details ---
        - name: AWX_API_URL
          value: "http://awx-service.default.svc:80"
        - name: AWX_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: awx-admin-password
              key: password

        command: ["/bin/sh", "-c"]
        args:
        - |
          # Exit on error, print commands
          set -ex

          echo "Installing dependencies..."
          apk add --no-cache curl jq

          # 1. FETCH ORGANIZATION ID
          echo "Fetching ID for organization: ${ORG_NAME}"
          ORG_ID=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/organizations/?name=${ORG_NAME}" | jq '.results[0].id')

          if [ -z "$ORG_ID" ] || [ "$ORG_ID" == "null" ]; then
            echo "Error: Could not find organization with name '${ORG_NAME}'"
            exit 1
          fi
          echo "Found Organization ID: ${ORG_ID}"

          # 2. CREATE INVENTORY AND CAPTURE ITS ID
          echo "Creating inventory: ${INVENTORY_NAME}"
          INVENTORY_PAYLOAD="{\"name\": \"${INVENTORY_NAME}\", \"organization\": ${ORG_ID}}"
          INVENTORY_ID=$(curl -k -f -s -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${INVENTORY_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/" | jq '.id')

          if [ -z "$INVENTORY_ID" ] || [ "$INVENTORY_ID" == "null" ]; then
            echo "Error: Failed to create inventory '${INVENTORY_NAME}' or could not parse its ID."
            exit 1
          fi
          echo "Successfully created inventory with ID: ${INVENTORY_ID}"

          # 3. ADD HOST 1 TO THE NEW INVENTORY
          echo "Adding host '${HOST1_NAME}' to inventory ID ${INVENTORY_ID}"
          HOST1_PAYLOAD=$(cat <<EOF
          {
            "name": "${HOST1_NAME}",
            "variables": "ansible_host: ${HOST1_IP}\nansible_connection: ssh"
          }
          EOF
          )
          curl -k -f -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${HOST1_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/${INVENTORY_ID}/hosts/"

          # 4. ADD HOST 2 TO THE NEW INVENTORY
          echo "Adding host '${HOST2_NAME}' to inventory ID ${INVENTORY_ID}"
          HOST2_PAYLOAD=$(cat <<EOF
          {
            "name": "${HOST2_NAME}",
            "variables": "ansible_host: ${HOST2_IP}\nansible_connection: ssh"
          }
          EOF
          )
          curl -k -f -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${HOST2_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/${INVENTORY_ID}/hosts/"

          echo "Successfully created inventory and added hosts."
      restartPolicy: OnFailure

apiVersion: batch/v1
kind: Job
metadata:
  name: create-awx-inventory-cluster1-job
spec:
  backoffLimit: 4
  template:
    spec:
      containers:
      - name: create-awx-inventory
        image: alpine:latest
        env:
        # --- Configuration for the Organization to find ---
        - name: ORG_NAME
          value: "Freshbrewed"

        # --- Configuration for the Inventory to create ---
        - name: INVENTORY_NAME
          value: "Kubernetes-Cluster1"

        # --- AWX API Connection Details ---
        - name: AWX_API_URL
          value: "http://awx-service.default.svc:80"
        - name: AWX_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: awx-admin-password
              key: password

        command: ["/bin/sh", "-c"]
        args:
        - |
          # Exit on error, print commands
          set -ex

          echo "Installing dependencies..."
          apk add --no-cache curl jq

          # 1. FETCH ORGANIZATION ID
          echo "Fetching ID for organization: ${ORG_NAME}"
          ORG_ID=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/organizations/?name=${ORG_NAME}" | jq '.results[0].id')

          if [ -z "$ORG_ID" ] || [ "$ORG_ID" == "null" ]; then
            echo "Error: Could not find organization with name '${ORG_NAME}'"
            exit 1
          fi
          echo "Found Organization ID: ${ORG_ID}"

          # 2. CREATE INVENTORY AND CAPTURE ITS ID
          echo "Creating inventory: ${INVENTORY_NAME}"
          INVENTORY_PAYLOAD="{\"name\": \"${INVENTORY_NAME}\", \"organization\": ${ORG_ID}}"
          INVENTORY_ID=$(curl -k -f -s -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${INVENTORY_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/" | jq '.id')

          if [ -z "$INVENTORY_ID" ] || [ "$INVENTORY_ID" == "null" ]; then
            echo "Error: Failed to create inventory '${INVENTORY_NAME}' or could not parse its ID."
            exit 1
          fi
          echo "Successfully created inventory with ID: ${INVENTORY_ID}"
          
          echo "Successfully created inventory: ${INVENTORY_NAME}"
      restartPolicy: OnFailure

apiVersion: batch/v1
kind: Job
metadata:
  name: add-hosts-to-inventory-cluster1-job
spec:
  backoffLimit: 4
  template:
    spec:
      containers:
      - name: add-hosts-to-inventory
        image: alpine:latest
        env:
        # --- Configuration for the Organization and Inventory to find ---
        - name: ORG_NAME
          value: "Freshbrewed"
        - name: INVENTORY_NAME
          value: "Kubernetes-Cluster1"

        # --- Configuration for Host 1 ---
        - name: HOST1_NAME
          value: "builder-hp-elitebook-745-g5"
        - name: HOST1_IP
          value: "192.168.1.34"

        # --- Configuration for Host 2 ---
        - name: HOST2_NAME
          value: "builder-hp-elitebook-850-g1"
        - name: HOST2_IP
          value: "192.168.1.33"

        # --- Configuration for Host 3 ---
        - name: HOST3_NAME
          value: "builder-HP-EliteBook-850-G2"
        - name: HOST3_IP
          value: "192.168.1.215"

        # --- Configuration for Host 4 ---
        - name: HOST4_NAME
          value: "hp-hp-elitebook-850-g2"
        - name: HOST4_IP
          value: "192.168.1.57"

        # --- AWX API Connection Details ---
        - name: AWX_API_URL
          value: "http://awx-service.default.svc:80"
        - name: AWX_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: awx-admin-password
              key: password

        command: ["/bin/sh", "-c"]
        args:
        - |
          # Exit on error, print commands
          set -ex

          echo "Installing dependencies..."
          apk add --no-cache curl jq

          # 1. FETCH INVENTORY ID
          # We query by both inventory name and organization name to ensure we get the correct one.
          echo "Fetching ID for inventory '${INVENTORY_NAME}' in organization '${ORG_NAME}'"
          INVENTORY_ID=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/inventories/?name=${INVENTORY_NAME}&organization__name=${ORG_NAME}" | jq '.results[0].id')

          if [ -z "$INVENTORY_ID" ] || [ "$INVENTORY_ID" == "null" ]; then
            echo "Error: Could not find inventory named '${INVENTORY_NAME}' in organization '${ORG_NAME}'"
            exit 1
          fi
          echo "Found Inventory ID: ${INVENTORY_ID}"

          # 2. ADD HOST 1 TO THE INVENTORY
          echo "Adding host '${HOST1_NAME}' to inventory ID ${INVENTORY_ID}"
          HOST1_PAYLOAD=$(cat <<EOF
          {
            "name": "${HOST1_NAME}",
            "variables": "ansible_host: ${HOST1_IP}\nansible_connection: ssh"
          }
          EOF
          )
          curl -k -f -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${HOST1_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/${INVENTORY_ID}/hosts/"

          # 3. ADD HOST 2 TO THE INVENTORY
          echo "Adding host '${HOST2_NAME}' to inventory ID ${INVENTORY_ID}"
          HOST2_PAYLOAD=$(cat <<EOF
          {
            "name": "${HOST2_NAME}",
            "variables": "ansible_host: ${HOST2_IP}\nansible_connection: ssh"
          }
          EOF
          )
          curl -k -f -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${HOST2_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/${INVENTORY_ID}/hosts/"

          # 4. ADD HOST 3 TO THE INVENTORY
          echo "Adding host '${HOST3_NAME}' to inventory ID ${INVENTORY_ID}"
          HOST3_PAYLOAD=$(cat <<EOF
          {
            "name": "${HOST3_NAME}",
            "variables": "ansible_host: ${HOST3_IP}\nansible_connection: ssh"
          }
          EOF
          )
          curl -k -f -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${HOST3_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/${INVENTORY_ID}/hosts/"

          # 5. ADD HOST 4 TO THE INVENTORY
          echo "Adding host '${HOST4_NAME}' to inventory ID ${INVENTORY_ID}"
          HOST4_PAYLOAD=$(cat <<EOF
          {
            "name": "${HOST4_NAME}",
            "variables": "ansible_host: ${HOST4_IP}\nansible_connection: ssh"
          }
          EOF
          )
          curl -k -f -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${HOST4_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/${INVENTORY_ID}/hosts/"


          echo "Successfully added hosts to inventory '${INVENTORY_NAME}'."
      restartPolicy: OnFailure

apiVersion: batch/v1
kind: Job
metadata:
  name: create-awx-builder-credential-job
spec:
  backoffLimit: 4
  template:
    spec:
      containers:
      - name: create-awx-credential
        image: alpine:latest
        env:
        # --- Configuration for the Organization to find ---
        - name: ORG_NAME
          value: "Freshbrewed"

        # --- Configuration for the Credential to create ---
        - name: CREDENTIAL_NAME
          value: "Builder SSH Credential"
        - name: CREDENTIAL_USERNAME
          value: "builder"

        # --- AWX API Connection Details ---
        - name: AWX_API_URL
          value: "http://awx-service.default.svc:80"
        - name: AWX_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: awx-admin-password
              key: password
        # --- Password for the new 'builder' credential ---
        - name: BUILDER_PASSWORD
          valueFrom:
            secretKeyRef:
              # This secret must be created manually beforehand
              name: awx-builder-password
              key: password

        command: ["/bin/sh", "-c"]
        args:
        - |
          # Exit on error, print commands
          set -ex

          echo "Installing dependencies..."
          apk add --no-cache curl jq

          # 1. FETCH ORGANIZATION ID
          echo "Fetching ID for organization: ${ORG_NAME}"
          ORG_ID=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/organizations/?name=${ORG_NAME}" | jq '.results[0].id')
          if [ -z "$ORG_ID" ] || [ "$ORG_ID" == "null" ]; then
            echo "Error: Could not find organization with name '${ORG_NAME}'"
            exit 1
          fi
          echo "Found Organization ID: ${ORG_ID}"

          # 2. FETCH MACHINE CREDENTIAL TYPE ID
          echo "Fetching ID for 'Machine' credential type (kind=ssh)"
          CREDENTIAL_TYPE_ID=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/credential_types/?kind=ssh" | jq '.results[0].id')
          if [ -z "$CREDENTIAL_TYPE_ID" ] || [ "$CREDENTIAL_TYPE_ID" == "null" ]; then
            echo "Error: Could not find credential type with kind=ssh"
            exit 1
          fi
          echo "Found Machine Credential Type ID: ${CREDENTIAL_TYPE_ID}"

          # 3. CREATE THE CREDENTIAL
          echo "Creating credential '${CREDENTIAL_NAME}'..."
          CREDENTIAL_PAYLOAD=$(jq -n \
            --arg name "$CREDENTIAL_NAME" \
            --arg org_id "$ORG_ID" \
            --arg cred_type_id "$CREDENTIAL_TYPE_ID" \
            --arg username "$CREDENTIAL_USERNAME" \
            --arg password "$BUILDER_PASSWORD" \
            '{name: $name, description: "SSH credential for builder user", organization: ($org_id|tonumber), credential_type: ($cred_type_id|tonumber), inputs: {username: $username, password: $password}}')

          curl -k -f -X POST \
            -u "admin:${AWX_ADMIN_PASSWORD}" \
            -H "Content-Type: application/json" \
            -d "${CREDENTIAL_PAYLOAD}" \
            "${AWX_API_URL}/api/v2/credentials/"

          echo "Successfully created credential: ${CREDENTIAL_NAME}"
      restartPolicy: OnFailure

apiVersion: batch/v1
kind: Job
metadata:
  name: create-awx-smart-inventory-nodes-job
spec:
  backoffLimit: 4
  template:
    spec:
      containers:
      - name: create-awx-smart-inventory
        image: alpine:latest
        env:
        # --- Configuration for the Organization to find ---
        - name: ORG_NAME
          value: "Freshbrewed"

        # --- Configuration for the Smart Inventory to create ---
        - name: SMART_INVENTORY_NAME
          value: "Kubernetes Nodes"
        - name: SOURCE_INVENTORY_1
          value: "Kubernetes-Cluster1"
        - name: SOURCE_INVENTORY_2
          value: "Kubernetes-Cluster2"

        # --- AWX API Connection Details ---
        - name: AWX_API_URL
          value: "http://awx-service.default.svc:80"
        - name: AWX_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: awx-admin-password
              key: password

        command: ["/bin/sh", "-c"]
        args:
        - |
          # Exit on error, print commands
          set -ex

          echo "Installing dependencies..."
          apk add --no-cache curl jq

          # 1. FETCH ORGANIZATION ID
          echo "Fetching ID for organization: ${ORG_NAME}"
          ORG_ID=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/organizations/?name=${ORG_NAME}" | jq '.results[0].id')

          if [ -z "$ORG_ID" ] || [ "$ORG_ID" == "null" ]; then
            echo "Error: Could not find organization with name '${ORG_NAME}'"
            exit 1
          fi
          echo "Found Organization ID: ${ORG_ID}"

          # 2. CONSTRUCT THE HOST FILTER AND JSON PAYLOAD
          # The 'inventory__name__in' filter finds all hosts that are in any of the listed inventories.
          HOST_FILTER="inventory__name__in=${SOURCE_INVENTORY_1},${SOURCE_INVENTORY_2}"
          echo "Using host filter: ${HOST_FILTER}"

          SMART_INVENTORY_PAYLOAD=$(jq -n \
            --arg name "$SMART_INVENTORY_NAME" \
            --arg org_id "$ORG_ID" \
            --arg host_filter "$HOST_FILTER" \
            '{name: $name, description: "Smart inventory combining cluster1 and cluster2", organization: ($org_id|tonumber), kind: "smart", host_filter: $host_filter}')

          # 3. CREATE THE SMART INVENTORY
          echo "Creating smart inventory: ${SMART_INVENTORY_NAME}"
          curl -k -f -X POST \
            -u "admin:${AWX_ADMIN_PASSWORD}" \
            -H "Content-Type: application/json" \
            -d "${SMART_INVENTORY_PAYLOAD}" \
            "${AWX_API_URL}/api/v2/inventories/"

          echo "Successfully created smart inventory: ${SMART_INVENTORY_NAME}"
      restartPolicy: OnFailure

apiVersion: batch/v1
kind: Job
metadata:
  name: create-awx-static-inventory-nodes-job
spec:
  backoffLimit: 4
  template:
    spec:
      containers:
      - name: create-awx-smart-inventory
        image: alpine:latest
        env:
        # --- Configuration for the Organization to find ---
        - name: ORG_NAME
          value: "Freshbrewed"

        # --- Configuration for the new static Inventory to create ---
        - name: TARGET_INVENTORY_NAME
          value: "Kubernetes Nodes"
        - name: SOURCE_INVENTORY_1
          value: "Kubernetes-Cluster1"
        - name: SOURCE_INVENTORY_2
          value: "Kubernetes-Cluster2"

        # --- AWX API Connection Details ---
        - name: AWX_API_URL
          value: "http://awx-service.default.svc:80"
        - name: AWX_ADMIN_PASSWORD
          valueFrom:
            secretKeyRef:
              name: awx-admin-password
              key: password

        command: ["/bin/sh", "-c"]
        args:
        - |
          # Exit on error, print commands
          set -ex

          echo "Installing dependencies..."
          apk add --no-cache curl jq

          # 1. FETCH ORGANIZATION ID
          echo "Fetching ID for organization: ${ORG_NAME}"
          ORG_ID=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/organizations/?name=${ORG_NAME}" | jq '.results[0].id')

          if [ -z "$ORG_ID" ] || [ "$ORG_ID" == "null" ]; then
            echo "Error: Could not find organization with name '${ORG_NAME}'"
            exit 1
          fi
          echo "Found Organization ID: ${ORG_ID}"

          # 2. CREATE THE NEW STANDARD INVENTORY
          echo "Creating target inventory: ${TARGET_INVENTORY_NAME}"
          TARGET_INVENTORY_PAYLOAD="{\"name\": \"${TARGET_INVENTORY_NAME}\", \"organization\": ${ORG_ID}, \"description\": \"Static inventory populated from other clusters\"}"
          TARGET_INVENTORY_ID=$(curl -k -f -s -X POST -u "admin:${AWX_ADMIN_PASSWORD}" -H "Content-Type: application/json" -d "${TARGET_INVENTORY_PAYLOAD}" "${AWX_API_URL}/api/v2/inventories/" | jq '.id')

          if [ -z "$TARGET_INVENTORY_ID" ] || [ "$TARGET_INVENTORY_ID" == "null" ]; then
            echo "Error: Failed to create inventory '${TARGET_INVENTORY_NAME}' or could not parse its ID."
            exit 1
          fi
          echo "Successfully created new inventory with ID: ${TARGET_INVENTORY_ID}"

          # 3. FETCH ALL HOSTS FROM SOURCE INVENTORIES
          echo "Fetching all hosts from ${SOURCE_INVENTORY_1} and ${SOURCE_INVENTORY_2}"
          # Use a high page_size to avoid dealing with pagination in shell.
          # The jq '.results' will give us a JSON array of host objects.
          ALL_HOSTS_JSON=$(curl -k -f -s -u "admin:${AWX_ADMIN_PASSWORD}" "${AWX_API_URL}/api/v2/hosts/?inventory__name__in=${SOURCE_INVENTORY_1},${SOURCE_INVENTORY_2}&page_size=200" | jq '.results')

          # 4. LOOP THROUGH HOSTS AND ADD THEM TO THE NEW INVENTORY
          echo "Populating new inventory with found hosts..."
          # Use jq to iterate over the array. The -c flag produces compact output, one JSON object per line.
          echo "${ALL_HOSTS_JSON}" | jq -c '.[]' | while read host_object; do
              # For each host object, construct the payload for the new host.
              # We just need the name and variables.
              ADD_HOST_PAYLOAD=$(echo "${host_object}" | jq '{name, variables}')
              HOST_NAME=$(echo "${host_object}" | jq -r '.name')

              echo "Adding host: ${HOST_NAME} to inventory ID ${TARGET_INVENTORY_ID}"
              curl -k -f -X POST \
                -u "admin:${AWX_ADMIN_PASSWORD}" \
                -H "Content-Type: application/json" \
                -d "${ADD_HOST_PAYLOAD}" \
                "${AWX_API_URL}/api/v2/inventories/${TARGET_INVENTORY_ID}/hosts/"
          done

          HOST_COUNT=$(echo "${ALL_HOSTS_JSON}" | jq 'length')
          echo "Successfully populated inventory '${TARGET_INVENTORY_NAME}' with ${HOST_COUNT} hosts."

      restartPolicy: OnFailure