#!/bin/bash
set -e
BASE=http://10.168.3.36:19088
AUTH="Authorization: Bearer dev-admin-token"

echo "=== 1. 再次 roll controller（manager 现已带 trust key，spec 会被刷新注入）==="
curl -sS -X POST -H "$AUTH" -H "Content-Type: application/json" \
  -d '{"image":"friend-cluster-controller:real"}' \
  "$BASE/api/v1/controller-deployments/cdeploy-45c15663-15f/roll" | head -c 200
echo
sleep 20
for i in $(seq 1 15); do
  ST=$(docker ps --format '{{.Names}} {{.Status}}' | grep friend-controller || true)
  echo "[$i] $ST"
  echo "$ST" | grep -q "Up" && break
  sleep 8
done

echo ""
echo "=== 2. 验证新 controller 容器 env 是否带 FRIEND_ARTIFACT_TRUST_KEY ==="
CT=$(docker ps --format '{{.Names}}' | grep friend-controller | head -1)
docker inspect "$CT" --format '{{range .Config.Env}}{{println .}}{{end}}' | grep -E "FRIEND_ARTIFACT_TRUST_KEY|TRUST_ROOT" || echo NO_TRUST_ENV

echo ""
echo "=== 3. 验证 controller 内 friend-agent 二进制为新版（应含 TRUST_KEY 字符串）==="
docker cp "$CT":/usr/local/bin/friend-agent /tmp/ct-fa-check >/dev/null 2>&1 && \
  strings /tmp/ct-fa-check | grep -c "FRIEND_ARTIFACT_TRUST_KEY" && echo NEW_BINARY_OK || echo CHECK_FAIL
echo DONE