{% extends 'admin/master.html' %}

{% block body %}
<div class="container mt-4">
    <h3>Preview Generated Checkmk Users</h3>
    <p>
        What the generation rules would make of the hosts you have right now.
        The same host attributes are read, the same groups are looked up in the
        directory and the same Jinja is rendered as in a real run — only the
        writing is left out. Nothing is created, updated or deleted here.
        <a href="{{ docu_link }}" target="_blank" class="badge badge-light">
            <i class="fa fa-info-circle"></i> Documentation</a>
    </p>

    {% if not rules %}
    <div class="alert alert-warning">
        No enabled generation rule found. Create one under
        <em>Generate Checkmk Users</em> first.
    </div>
    {% endif %}

    <form method="GET" action="{{ url_for('.index') }}" class="card app-card mb-4">
        <div class="card-body">
            <input type="hidden" name="preview" value="1"/>
            <div class="form-row">
                <div class="form-group col-md-5">
                    <label for="rule_id">Rule</label>
                    <select class="form-control" id="rule_id" name="rule_id">
                        <option value="">— every enabled rule —</option>
                        {% for value, label in rules %}
                        <option value="{{ value }}"
                                {% if value == rule_id %}selected{% endif %}>{{ label }}</option>
                        {% endfor %}
                    </select>
                </div>
                <div class="form-group col-md-5">
                    <label for="search_filter">Try another group search filter</label>
                    <input type="text" class="form-control" id="search_filter"
                           name="search_filter" value="{{ search_filter }}"
                           placeholder="(objectClass=group)"/>
                    <small class="form-text text-muted">
                        Optional. Replaces the group search filter of every rule
                        for this preview only.
                    </small>
                </div>
            </div>
            <button type="submit" class="btn btn-primary"
                    {% if not rules %}disabled{% endif %}>
                <i class="fa fa-eye"></i> Preview
            </button>
        </div>
    </form>

    {% if error %}
    <div class="alert alert-danger">{{ error }}</div>
    {% endif %}

    {% for level, message in errors %}
    <div class="alert alert-danger">{{ level }}: {{ message }}</div>
    {% endfor %}

    {% if rows is not none %}
        {% if not rows %}
        <div class="alert alert-info">
            No group selected by these rules. The hosts carry nothing in the
            attribute the rule reads, or every value was skipped by the rewrite.
        </div>
        {% else %}
        <div class="card app-card">
            <div class="card-body">
                <p class="text-muted">
                    {{ rows|length }} group(s).
                    <strong>new in Checkmk</strong> = no user with this ID exists
                    yet and one would be created,
                    <strong>update</strong> = the user exists and the marked
                    fields would change,
                    <strong>already correct</strong> = the user exists and
                    nothing would change,
                    <strong>skipped</strong> = no user is written, with the
                    reason next to it.
                </p>
                <div class="table-scroll">
                <table class="table table-sm table-striped">
                    <thead>
                        <tr>
                            <th>Rule</th>
                            <th>Host value</th>
                            <th>Searched as</th>
                            <th>In the directory</th>
                            <th>Checkmk user ID</th>
                            <th>In Checkmk</th>
                            <th>Fields of that user</th>
                        </tr>
                    </thead>
                    <tbody>
                    {% for row in rows %}
                        <tr>
                            <td>{{ row.rule }}</td>
                            <td><code>{{ row.original_name }}</code></td>
                            <td>
                                <code>{{ row.name }}</code>
                                {% if row.name != row.original_name %}
                                <span class="badge badge-light">rewritten</span>
                                {% endif %}
                            </td>
                            <td>
                                {% if not row.searched %}
                                <span class="text-muted">
                                    no LDAP account on the rule, not looked up
                                </span>
                                {% elif row.found %}
                                found, {{ row.attributes|length }} attribute(s)
                                {% else %}
                                <span class="badge badge-warning">
                                    no such group in the directory
                                </span>
                                {% endif %}
                            </td>
                            <td><code>{{ row.user_id or '—' }}</code></td>
                            <td>
                                {% if row.action == 'create' %}
                                <span class="badge badge-success">new in Checkmk</span>
                                {% elif row.action == 'update' %}
                                <span class="badge badge-info">update</span>
                                {% elif row.action == 'unchanged' %}
                                <span class="badge badge-secondary">already correct</span>
                                {% else %}
                                <span class="badge badge-warning">skipped</span>
                                {% endif %}
                            </td>
                            <td>
                                {% if row.note %}
                                <span class="text-muted">{{ row.note }}</span>
                                {% else %}
                                <table class="table table-sm mb-0">
                                    <tbody>
                                    {% for field in ['full_name', 'email',
                                                     'pager_address', 'roles',
                                                     'contact_groups',
                                                     'disable_login'] %}
                                    {% set value = row.rendered.get(field) %}
                                    <tr>
                                        <td class="text-muted"
                                            style="width: 12em;">{{ field }}</td>
                                        <td>
                                            {% if value is sameas true
                                                  or value is sameas false %}
                                            {{ value }}
                                            {% elif value is string %}
                                                {% if value %}{{ value }}
                                                {% elif field in row.fields %}
                                                <span class="text-muted">
                                                    renders to nothing, keeps
                                                    <code>{{ row.fields[field] }}</code>
                                                </span>
                                                {% else %}
                                                <span class="text-muted">
                                                    renders to nothing, stays empty
                                                </span>
                                                {% endif %}
                                            {% elif value %}
                                            {{ value|join(', ') }}
                                            {% else %}
                                            <span class="text-muted">
                                                no entry left after rendering
                                            </span>
                                            {% endif %}
                                            {% if field in row.changed
                                                  and row.action == 'update' %}
                                            <span class="badge badge-info">changes</span>
                                            {% endif %}
                                        </td>
                                    </tr>
                                    {% endfor %}
                                    </tbody>
                                </table>
                                <details>
                                    <summary class="text-muted">
                                        Variables the group carries
                                        ({{ row.attributes|length }})
                                    </summary>
                                    {% if not row.attributes %}
                                    <p class="text-muted mb-0">
                                        {% if not row.searched %}
                                        The rule has no LDAP account, so the
                                        directory was never asked and no
                                        variable exists. Every Jinja field can
                                        only use
                                        <code>{{ '{{name}}' }}</code> and
                                        <code>{{ '{{original_name}}' }}</code>.
                                        {% else %}
                                        The directory returned nothing for this
                                        group, so no variable exists. Check the
                                        group base DN, the group search filter
                                        and the group name attribute of the
                                        rule.
                                        {% endif %}
                                    </p>
                                    {% endif %}
                                    {% if row.attributes %}
                                    <table class="table table-sm mb-0">
                                        <tbody>
                                        {% for key, value in row.attributes.items() %}
                                        <tr>
                                            <td style="width: 12em;"><code>{{ '{{' }}{{ key }}{{ '}}' }}</code></td>
                                            <td>{{ value }}</td>
                                        </tr>
                                        {% endfor %}
                                        </tbody>
                                    </table>
                                    {% endif %}
                                </details>
                                {% endif %}
                            </td>
                        </tr>
                    {% endfor %}
                    </tbody>
                </table>
                </div>
            </div>
        </div>
        {% endif %}
    {% endif %}
</div>
{% endblock %}