import org.elasticsearch.gradle.info.BuildParams

apply plugin: 'elasticsearch.testclusters'
apply plugin: 'elasticsearch.standalone-rest-test'
apply plugin: 'elasticsearch.rest-test'

dependencies {
  testImplementation project(path: xpackModule('core'), configuration: 'default')
  testImplementation project(path: xpackModule('security'), configuration: 'testArtifacts')
  testImplementation project(path: xpackModule('core'), configuration: 'testArtifacts')
  testImplementation project(path: ':modules:reindex')
}

forbiddenPatterns {
  exclude '**/*.key'
  exclude '**/*.pem'
  exclude '**/*.p12'
  exclude '**/*.jks'
}

File caFile = project.file('src/test/resources/ssl/ca.p12')

testClusters.integTest {
  testDistribution = 'DEFAULT'
  // Whitelist reindexing from the local node so we can test it.
  extraConfigFile 'http.key', file('src/test/resources/ssl/http.key')
  extraConfigFile 'http.crt', file('src/test/resources/ssl/http.crt')
  extraConfigFile 'ca.p12', caFile
  setting 'reindex.remote.whitelist', '127.0.0.1:*'
  setting 'xpack.security.enabled', 'true'
  setting 'xpack.ml.enabled', 'false'
  setting 'xpack.license.self_generated.type', 'trial'
  setting 'xpack.security.http.ssl.enabled', 'true'
  setting 'xpack.security.http.ssl.certificate', 'http.crt'
  setting 'xpack.security.http.ssl.key', 'http.key'
  setting 'xpack.security.http.ssl.key_passphrase', 'http-password'
  setting 'reindex.ssl.truststore.path', 'ca.p12'
  setting 'reindex.ssl.truststore.password', 'password'

  // Workaround for JDK-8212885
  if (BuildParams.runtimeJavaVersion.isJava12Compatible() == false) {
    setting 'reindex.ssl.supported_protocols', 'TLSv1.2'
  }

  extraConfigFile 'roles.yml', file('roles.yml')
  user username: "test_admin", password: 'x-pack-test-password', role: "superuser"
  user username: "powerful_user", password: 'x-pack-test-password', role: "superuser"
  user username: "minimal_user", password: 'x-pack-test-password', role: "minimal"
  user username: "minimal_with_task_user", password: 'x-pack-test-password', role: "minimal_with_task"
  user username: "readonly_user", password: 'x-pack-test-password', role: "readonly"
  user username: "dest_only_user", password: 'x-pack-test-password', role: "dest_only"
  user username: "can_not_see_hidden_docs_user", password: 'x-pack-test-password', role: "can_not_see_hidden_docs"
  user username: "can_not_see_hidden_fields_user", password: 'x-pack-test-password', role: "can_not_see_hidden_fields"
}