text: # --------------------------------------------------------------------------------------------
  # Copyright (c) Microsoft Corporation. All rights reserved.
  # Licensed under the MIT License. See License.txt in the project root for license information.
  # --------------------------------------------------------------------------------------------
  
  import os
  import tempfile
  import unittest
  
  from knack.util import CLIError
  
  from azure.cli.testsdk import (
      ResourceGroupPreparer, RoleBasedServicePrincipalPreparer, ScenarioTest, live_only)
  from azure_devtools.scenario_tests import AllowLargeResponse
  from azure.cli.testsdk.checkers import (
      StringContainCheck, StringContainCheckIgnoreCase)
  from azure.cli.command_modules.acs._format import version_to_tuple
  
  # flake8: noqa
  
  
  class AzureKubernetesServiceScenarioTest(ScenarioTest):
  
      # Remove when issue #9392 is addressed.
      @live_only()
      @AllowLargeResponse()
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='eastus')
      @RoleBasedServicePrincipalPreparer()
      def test_aks_create_default_service(self, resource_group, resource_group_location, sp_name, sp_password):
          # kwargs for string formatting
          aks_name = self.create_random_name('cliakstest', 16)
          self.kwargs.update({
              'resource_group': resource_group,
              'name': aks_name,
              'dns_name_prefix': self.create_random_name('cliaksdns', 16),
              'ssh_key_value': self.generate_ssh_keys().replace('\\', '\\\\'),
              'location': resource_group_location,
              'service_principal': 'http://' + sp_name,
              'client_secret': sp_password,
              'resource_type': 'Microsoft.ContainerService/ManagedClusters'
          })
  
          # create
          create_cmd = 'aks create --resource-group={resource_group} --name={name} --location={location} ' \
                       '--dns-name-prefix={dns_name_prefix} --node-count=1 --ssh-key-value={ssh_key_value} ' \
                       '--service-principal={service_principal} --client-secret={client_secret}'
          self.cmd(create_cmd, checks=[
              self.exists('fqdn'),
              self.exists('nodeResourceGroup'),
              self.check('provisioningState', 'Succeeded')
          ])
  
          # list
          self.cmd('aks list -g {resource_group}', checks=[
              self.check('[0].type', '{resource_type}'),
              StringContainCheck(aks_name),
              StringContainCheck(resource_group)
          ])
  
          # list in tabular format
          self.cmd('aks list -g {resource_group} -o table', checks=[
              StringContainCheck(aks_name),
              StringContainCheck(resource_group)
          ])
  
          # show
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('type', '{resource_type}'),
              self.check('name', '{name}'),
              self.exists('nodeResourceGroup'),
              self.check('resourceGroup', '{resource_group}'),
              self.check('agentPoolProfiles[0].count', 1),
              self.check('agentPoolProfiles[0].osType', 'Linux'),
              self.check('agentPoolProfiles[0].vmSize', 'Standard_DS2_v2'),
              self.check('dnsPrefix', '{dns_name_prefix}'),
              self.exists('kubernetesVersion')
          ])
  
          # get-credentials
          fd, temp_path = tempfile.mkstemp()
          self.kwargs.update({'file': temp_path})
          try:
              self.cmd('aks get-credentials -g {resource_group} -n {name} --file {file}')
          finally:
              os.close(fd)
              os.remove(temp_path)
  
          # get-credentials to stdout
          self.cmd('aks get-credentials -g {resource_group} -n {name} -f -')
  
          # get-credentials without directory in path
          temp_path = 'kubeconfig.tmp'
          self.kwargs.update({'file': temp_path})
          try:
              self.cmd('aks get-credentials -g {resource_group} -n {name} -f {file}')
              self.assertGreater(os.path.getsize(temp_path), 0)
          finally:
              os.remove(temp_path)
  
          # scale up
          self.cmd('aks scale -g {resource_group} -n {name} --node-count 3', checks=[
              self.check('agentPoolProfiles[0].count', 3)
          ])
  
          # show again
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('agentPoolProfiles[0].count', 3)
          ])
  
          # delete
          self.cmd('aks delete -g {resource_group} -n {name} --yes --no-wait', checks=[self.is_empty()])
  
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='eastus')
      @RoleBasedServicePrincipalPreparer()
      def test_aks_create_service_no_wait(self, resource_group, resource_group_location, sp_name, sp_password):
          create_version, upgrade_version = self._get_versions(resource_group_location)
          # kwargs for string formatting
          self.kwargs.update({
              'resource_group': resource_group,
              'name': self.create_random_name('cliakstest', 16),
              'dns_name_prefix': self.create_random_name('cliaksdns', 16),
              'ssh_key_value': self.generate_ssh_keys().replace('\\', '\\\\'),
              'location': resource_group_location,
              'service_principal': 'http://' + sp_name,
              'client_secret': sp_password,
              'k8s_version': create_version,
              'vm_size': 'Standard_DS1_v2'
          })
  
          # create --no-wait
          create_cmd = 'aks create -g {resource_group} -n {name} -p {dns_name_prefix} --ssh-key-value {ssh_key_value} ' \
                       '-l {location} --service-principal {service_principal} --client-secret {client_secret} -k {k8s_version} ' \
                       '--node-vm-size {vm_size} ' \
                       '--tags scenario_test -c 1 --no-wait'
          self.cmd(create_cmd, checks=[self.is_empty()])
  
          # wait
          self.cmd('aks wait -g {resource_group} -n {name} --created', checks=[self.is_empty()])
  
          # show
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('name', '{name}'),
              self.check('resourceGroup', '{resource_group}'),
              self.check('agentPoolProfiles[0].count', 1),
              self.check('agentPoolProfiles[0].vmSize', 'Standard_DS1_v2'),
              self.check('dnsPrefix', '{dns_name_prefix}'),
              self.check('provisioningState', 'Succeeded'),
              self.check('addonProfiles', None)
          ])
  
          # show k8s versions
          self.cmd('aks get-versions -l {location}', checks=[
              self.exists('orchestrators[*].orchestratorVersion')
          ])
  
          # show k8s versions in table format
          self.cmd('aks get-versions -l {location} -o table', checks=[
              StringContainCheck(self.kwargs['k8s_version'])
          ])
  
          # get versions for upgrade
          self.cmd('aks get-upgrades -g {resource_group} -n {name}', checks=[
              self.exists('id'),
              self.check('resourceGroup', '{resource_group}'),
              self.check('agentPoolProfiles[0].kubernetesVersion', '{k8s_version}'),
              self.check('agentPoolProfiles[0].osType', 'Linux'),
              self.exists('controlPlaneProfile.upgrades'),
              self.check('type', 'Microsoft.ContainerService/managedClusters/upgradeprofiles')
          ])
  
          # get versions for upgrade in table format
          self.cmd('aks get-upgrades -g {resource_group} -n {name} --output=table', checks=[
              StringContainCheck('Upgrades'),
              StringContainCheck(upgrade_version)
          ])
  
          # enable http application routing addon
          self.cmd('aks enable-addons -g {resource_group} -n {name} --addons http_application_routing', checks=[
              self.check('name', '{name}'),
              self.check('resourceGroup', '{resource_group}'),
              self.check('agentPoolProfiles[0].count', 1),
              self.check('agentPoolProfiles[0].vmSize', 'Standard_DS1_v2'),
              self.check('dnsPrefix', '{dns_name_prefix}'),
              self.check('provisioningState', 'Succeeded'),
              self.check('addonProfiles.httpApplicationRouting.enabled', True)
          ])
  
          # delete
          self.cmd('aks delete -g {resource_group} -n {name} --yes', checks=[self.is_empty()])
  
          # show again and expect failure
          self.cmd('aks show -g {resource_group} -n {name}', expect_failure=True)
  
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='westus2')
      @RoleBasedServicePrincipalPreparer()
      def test_aks_create_scale_with_custom_nodepool_name(self, resource_group, resource_group_location, sp_name, sp_password):
          create_version, _ = self._get_versions(resource_group_location)
          # kwargs for string formatting
          aks_name = self.create_random_name('cliakstest', 16)
          self.kwargs.update({
              'resource_group': resource_group,
              'name': aks_name,
              'dns_name_prefix': self.create_random_name('cliaksdns', 16),
              'ssh_key_value': self.generate_ssh_keys().replace('\\', '\\\\'),
              'location': resource_group_location,
              'service_principal': 'http://' + sp_name,
              'client_secret': sp_password,
              'k8s_version': create_version,
              'nodepool_name': self.create_random_name('np', 12)
          })
  
          # create
          create_cmd = 'aks create -g {resource_group} -n {name} -p {dns_name_prefix} --nodepool-name {nodepool_name} ' \
                       '-l {location} --service-principal {service_principal} --client-secret {client_secret} -k {k8s_version} ' \
                       '--ssh-key-value {ssh_key_value} --tags scenario_test -c 1'
          self.cmd(create_cmd, checks=[
              self.exists('fqdn'),
              self.exists('nodeResourceGroup'),
              self.check('provisioningState', 'Succeeded')
          ])
  
          # list
          self.cmd('aks list -g {resource_group}', checks=[
              StringContainCheck(aks_name),
              StringContainCheck(resource_group)
          ])
  
          # show
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('name', '{name}'),
              self.check('resourceGroup', '{resource_group}'),
              self.check('agentPoolProfiles[0].count', 1),
              self.check('agentPoolProfiles[0].osType', 'Linux'),
              self.check('agentPoolProfiles[0].name', '{nodepool_name}'),
              self.check('dnsPrefix', '{dns_name_prefix}'),
              self.check('provisioningState', 'Succeeded'),
              self.check('addonProfiles', None)
          ])
  
          # scale up
          self.cmd('aks scale -g {resource_group} -n {name} --nodepool-name {nodepool_name} --node-count 3', checks=[
              self.check('agentPoolProfiles[0].count', 3)
          ])
  
          # show again
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('agentPoolProfiles[0].count', 3)
          ])
  
          # delete
          self.cmd('aks delete -g {resource_group} -n {name} --yes', checks=[self.is_empty()])
  
          # show again and expect failure
          self.cmd('aks show -g {resource_group} -n {name}', expect_failure=True)
  
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='eastus')
      @RoleBasedServicePrincipalPreparer()
      def test_aks_bad_inputs(self, resource_group, resource_group_location, sp_name, sp_password):
          # kwargs for string formatting
          self.kwargs.update({
              'resource_group': resource_group,
              'name': self.create_random_name('cliakstest', 16),
              'dns_name_prefix': self.create_random_name('cliaksdns', 16),
              'ssh_key_value': self.generate_ssh_keys().replace('\\', '\\\\'),
          })
  
          # create with --max-pods set too small
          create_cmd = 'aks create -g {resource_group} -n {name} -p {dns_name_prefix} --ssh-key-value {ssh_key_value} ' \
                       '--max-pods 3'
          with self.assertRaises(CLIError) as err:
              self.cmd(create_cmd)
          self.assertIn('--max-pods', str(err.exception))
  
      # Remove when issue #9392 is addressed.
      @live_only()
      @AllowLargeResponse(8192)
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='eastus')
      @RoleBasedServicePrincipalPreparer()
      def test_aks_create_default_service_without_skip_role_assignment(self, resource_group, resource_group_location, sp_name, sp_password):
          aks_name = self.create_random_name('cliakstest', 16)
          self.kwargs.update({
              'resource_group': resource_group,
              'name': aks_name,
              'location': resource_group_location,
              'service_principal': 'http://' + sp_name,
              'client_secret': sp_password,
              'vnet_subnet_id': self.generate_vnet_subnet_id(resource_group)
          })
          # create cluster without skip_role_assignment
          create_cmd = 'aks create --resource-group={resource_group} --name={name} --location={location} ' \
                       '--node-count=1 --service-principal={service_principal} ' \
                       '--client-secret={client_secret} --vnet-subnet-id={vnet_subnet_id} '\
                       '--no-ssh-key'
          self.cmd(create_cmd, checks=[
              self.check('agentPoolProfiles[0].vnetSubnetId', '{vnet_subnet_id}'),
              self.check('provisioningState', 'Succeeded')
          ])
  
          check_role_assignment_cmd = 'role assignment list --scope={vnet_subnet_id}'
          self.cmd(check_role_assignment_cmd, checks=[
              self.check('[0].scope', '{vnet_subnet_id}')
          ])
  
          # create cluster with same role assignment
          aks_name = self.create_random_name('cliakstest', 16)
          self.kwargs.update({
              'name': aks_name,
          })
  
          create_cmd = 'aks create --resource-group={resource_group} --name={name} --location={location} ' \
                       '--node-count=1 --service-principal={service_principal} ' \
                       '--client-secret={client_secret} --vnet-subnet-id={vnet_subnet_id} '\
                       '--no-ssh-key'
          self.cmd(create_cmd, checks=[
              self.check('agentPoolProfiles[0].vnetSubnetId', '{vnet_subnet_id}'),
              self.check('provisioningState', 'Succeeded')
          ])
  
      # Remove when issue #9392 is addressed.
      @live_only()
      @AllowLargeResponse(8192)
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='eastus')
      @RoleBasedServicePrincipalPreparer()
      def test_aks_create_default_service_with_skip_role_assignment(self, resource_group, resource_group_location, sp_name, sp_password):
          aks_name = self.create_random_name('cliakstest', 16)
          self.kwargs.update({
              'resource_group': resource_group,
              'name': aks_name,
              'location': resource_group_location,
              'service_principal': 'http://' + sp_name,
              'client_secret': sp_password,
              'vnet_subnet_id': self.generate_vnet_subnet_id(resource_group)
          })
          # create cluster without skip_role_assignment
          create_cmd = 'aks create --resource-group={resource_group} --name={name} --location={location} ' \
                       '--node-count=1 --service-principal={service_principal} ' \
                       '--client-secret={client_secret} --vnet-subnet-id={vnet_subnet_id} ' \
                       '--skip-subnet-role-assignment --no-ssh-key'
          self.cmd(create_cmd, checks=[
              self.check('provisioningState', 'Succeeded')
          ])
  
          check_role_assignment_cmd = 'role assignment list --scope={vnet_subnet_id}'
          self.cmd(check_role_assignment_cmd, checks=[
              self.is_empty()
          ])
  
      # Remove when issue #9392 is addressed.
      @live_only()
      @AllowLargeResponse(8192)
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='eastus')
      def test_aks_create_default_service_without_SP_and_with_role_assignment(self, resource_group, resource_group_location):
          aks_name = self.create_random_name('cliakstest', 16)
          self.kwargs.update({
              'resource_group': resource_group,
              'name': aks_name,
              'location': resource_group_location,
              'vnet_subnet_id': self.generate_vnet_subnet_id(resource_group)
          })
          # create cluster without skip_role_assignment
          create_cmd = 'aks create --resource-group={resource_group} --name={name} --location={location} ' \
                       '--node-count=1 --vnet-subnet-id={vnet_subnet_id}  --no-ssh-key'
  
          self.cmd(create_cmd, checks=[
              self.check('provisioningState', 'Succeeded')
          ])
  
          check_role_assignment_cmd = 'role assignment list --scope={vnet_subnet_id}'
          self.cmd(check_role_assignment_cmd, checks=[
              self.check('[0].scope', '{vnet_subnet_id}')
          ])
  
      # It works in --live mode but fails in replay mode.get rid off @live_only attribute once this resolved
      @live_only()
      @ResourceGroupPreparer(random_name_length=17, name_prefix='clitest', location='eastus')
      @RoleBasedServicePrincipalPreparer()
      def test_aks_create_default_service_with_monitoring_addon(self, resource_group, resource_group_location, sp_name, sp_password):
          # kwargs for string formatting
          aks_name = self.create_random_name('cliakstest', 16)
          self.kwargs.update({
              'resource_group': resource_group,
              'name': aks_name,
              'dns_name_prefix': self.create_random_name('cliaksdns', 16),
              'ssh_key_value': self.generate_ssh_keys().replace('\\', '\\\\'),
              'location': resource_group_location,
              'service_principal': 'http://' + sp_name,
              'client_secret': sp_password,
              'resource_type': 'Microsoft.ContainerService/ManagedClusters'
          })
  
          # create cluster with monitoring-addon
          create_cmd = 'aks create --resource-group={resource_group} --name={name} --location={location} ' \
                       '--dns-name-prefix={dns_name_prefix} --node-count=1 --ssh-key-value={ssh_key_value} ' \
                       '--service-principal={service_principal} --client-secret={client_secret} --enable-addons monitoring'
          self.cmd(create_cmd, checks=[
              self.exists('fqdn'),
              self.exists('nodeResourceGroup'),
              self.check('provisioningState', 'Succeeded'),
              self.check('addonProfiles.omsagent.enabled', True),
              self.exists('addonProfiles.omsagent.config.logAnalyticsWorkspaceResourceID'),
              StringContainCheckIgnoreCase('Microsoft.OperationalInsights')
          ])
  
          # show
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('type', '{resource_type}'),
              self.check('name', '{name}'),
              self.exists('nodeResourceGroup'),
              self.check('resourceGroup', '{resource_group}'),
              self.check('agentPoolProfiles[0].count', 1),
              self.check('agentPoolProfiles[0].osType', 'Linux'),
              self.check('agentPoolProfiles[0].vmSize', 'Standard_DS2_v2'),
              self.check('dnsPrefix', '{dns_name_prefix}'),
              self.exists('kubernetesVersion'),
              self.check('addonProfiles.omsagent.enabled', True),
              self.exists('addonProfiles.omsagent.config.logAnalyticsWorkspaceResourceID'),
              StringContainCheckIgnoreCase('Microsoft.OperationalInsights'),
              StringContainCheckIgnoreCase('DefaultResourceGroup'),
              StringContainCheckIgnoreCase('DefaultWorkspace')
          ])
  
          # disable monitoring add-on
          self.cmd('aks disable-addons -a monitoring -g {resource_group} -n {name}', checks=[
              self.check('addonProfiles.omsagent.enabled', False),
              self.check('addonProfiles.omsagent.config', None)
          ])
  
          # show again
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('addonProfiles.omsagent.enabled', False),
              self.check('addonProfiles.omsagent.config', None)
  
          ])
  
          # enable monitoring add-on
          self.cmd('aks enable-addons -a monitoring -g {resource_group} -n {name}', checks=[
              self.check('addonProfiles.omsagent.enabled', True),
              self.exists('addonProfiles.omsagent.config.logAnalyticsWorkspaceResourceID'),
              StringContainCheckIgnoreCase('Microsoft.OperationalInsights'),
              StringContainCheckIgnoreCase('DefaultResourceGroup'),
              StringContainCheckIgnoreCase('DefaultWorkspace')
          ])
  
          # show again
          self.cmd('aks show -g {resource_group} -n {name}', checks=[
              self.check('type', '{resource_type}'),
              self.check('name', '{name}'),
              self.exists('nodeResourceGroup'),
              self.check('resourceGroup', '{resource_group}'),
              self.check('agentPoolProfiles[0].count', 1),
              self.check('agentPoolProfiles[0].osType', 'Linux'),
              self.check('agentPoolProfiles[0].vmSize', 'Standard_DS2_v2'),
              self.check('dnsPrefix', '{dns_name_prefix}'),
              self.exists('kubernetesVersion'),
              self.check('addonProfiles.omsagent.enabled', True),
              self.exists('addonProfiles.omsagent.config.logAnalyticsWorkspaceResourceID'),
              StringContainCheckIgnoreCase('Microsoft.OperationalInsights'),
              StringContainCheckIgnoreCase('DefaultResourceGroup'),
              StringContainCheckIgnoreCase('DefaultWorkspace')
          ])
  
          # delete
          self.cmd(
              'aks delete -g {resource_group} -n {name} --yes --no-wait', checks=[self.is_empty()])
  
      @classmethod
      def generate_ssh_keys(cls):
          TEST_SSH_KEY_PUB = "ssh-rsa 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 test@example.com\n"  # pylint: disable=line-too-long
          _, pathname = tempfile.mkstemp()
          with open(pathname, 'w') as key_file:
              key_file.write(TEST_SSH_KEY_PUB)
          return pathname
  
      def generate_vnet_subnet_id(self, resource_group):
          vnet_name = self.create_random_name('clivnet', 16)
          subnet_name = self.create_random_name('clisubnet', 16)
          address_prefix = "192.168.0.0/16"
          subnet_prefix = "192.168.0.0/24"
          vnet_subnet = self.cmd('az network vnet create -n {} -g {} --address-prefix {} --subnet-name {} --subnet-prefix {}'
                                 .format(vnet_name, resource_group, address_prefix, subnet_name, subnet_prefix)).get_output_in_json()
          return vnet_subnet.get("newVNet").get("subnets")[0].get("id")
  
      def _get_versions(self, location):
          """Return the previous and current Kubernetes minor release versions, such as ("1.11.6", "1.12.4")."""
          versions = self.cmd("az aks get-versions -l eastus --query 'orchestrators[].orchestratorVersion'").get_output_in_json()
          # sort by semantic version, from newest to oldest
          versions = sorted(versions, key=version_to_tuple, reverse=True)
          upgrade_version = versions[0]
          # find the first version that doesn't start with the latest major.minor.
          prefix = upgrade_version[:upgrade_version.rfind('.')]
          create_version = next(x for x in versions if not x.startswith(prefix))
          return create_version, upgrade_version
  