import os

from cryptography.hazmat.backends import default_backend
from cryptography.hazmat.primitives import serialization

# get Snowflake private_key
SNOWFLAKE_PRIVATE_KEY_PATH = os.environ.get('SNOWFLAKE_PRIVATE_KEY_PATH', '')
SNOWFLAKE_KEY_PASSPHRASE = os.environ.get('SNOWFLAKE_KEY_PASSPHRASE', '')
if SNOWFLAKE_KEY_PASSPHRASE:
    # Snowflake key
    if not SNOWFLAKE_PRIVATE_KEY_PATH:
        SNOWFLAKE_PRIVATE_KEY_PATH = '{}/.ssh/snowflake/rsa_key.p8'.format(
            os.environ['HOME'])
    with open(SNOWFLAKE_PRIVATE_KEY_PATH, 'rb') as key:
        p_key = serialization.load_pem_private_key(
            key.read(),
            password=SNOWFLAKE_KEY_PASSPHRASE.encode(),
            backend=default_backend()
        )

    private_key = p_key.private_bytes(
        encoding=serialization.Encoding.DER,
        format=serialization.PrivateFormat.PKCS8,
        encryption_algorithm=serialization.NoEncryption())
else:
    private_key = None


SF_CONFIG = {
    'role': os.environ.get('SNOWFLAKE_ROLE'),
    'warehouse': os.environ.get('SNOWFLAKE_WAREHOUSE'),
    'db': os.environ.get('SNOWFLAKE_DATABASE'),
    'schema': os.environ.get('SNOWFLAKE_SCHEMA'),
    'user': os.environ.get('SNOWFLAKE_USER'),
    'password': os.environ.get('SNOWFLAKE_PASSWORD'),
    'account': os.environ.get('SNOWFLAKE_ACCOUNT'),
    'private_key': private_key
}

AWS_CONFIG = {
    'AWS_ACCESS_KEY_ID': os.environ.get('AWS_ACCESS_KEY_ID'),
    'AWS_SECRET_ACCESS_KEY': os.environ.get('AWS_SECRET_ACCESS_KEY')
}

S3_BUCKET = os.environ.get('S3_BUCKET', 'dev-cucumbers')
S3_PATH = 's3://{}/cache_stats/'.format(S3_BUCKET)

DD_SECRET_NAME = ''

SNOWFLAKE_USERS_TO_MONITOR = ['PROD_OWS_ANALYTICS', 'PROD_BFF_MOBILE']
SNOWFLAKE_WAREHOUSES_TO_MONITOR = ['PROD_OWS_WAREHOUSE']