locals {
  apollo_charts_monitoring_secrets = [
    "SENTRY_DSN",
  ]

  apollo_charts_monitoring_common_secrets = {
    DD_API_KEY         = aws_secretsmanager_secret.common_secret["DD_API_KEY"]
    DSPAPI_APIKEY      = aws_secretsmanager_secret.dsp_api_secret["DSPAPI_APPKEY"]
    APOLLOAPI_APIKEY   = aws_secretsmanager_secret.apollo_api_secret["AUTH_API_KEY"]
    USERDATAAPI_APIKEY = aws_secretsmanager_secret.apollo_user_data_secret["AUTH_API_KEY"]
  }

  apollo_charts_monitoring_secrets_mapping = [
    for k, v in merge(aws_secretsmanager_secret.apollo_charts_monitoring_secret, local.apollo_charts_monitoring_common_secrets) :
    {
      name      = k,
      valueFrom = "arn:aws:secretsmanager:${var.aws_region_id}:${local.account_id}:secret:${v["name"]}"
    }
  ]

  apollo_charts_monitoring_common_env_vars = [
    {
      name  = "ENVIRONMENT",
      value = local.environment
    },
    {
      name  = "ECS_CLUSTER",
      value = data.aws_ecs_cluster.main.cluster_name
    },
    {
      name  = "PROJECT",
      value = local.project_group
    },
    {
      name  = "DSPAPI_HOST",
      value = module.domains[local.env_prefix]["dsp-api"]
    },
    {
      name  = "DSPAPI_SCHEMA",
      value = "https"
    },
    {
      name  = "APOLLOAPI_HOST",
      value = module.domains[local.env_prefix]["apollo-api"]
    },
    {
      name  = "APOLLOAPI_SCHEMA",
      value = "https"
    },
    {
      name  = "USERDATAAPI_HOST",
      value = module.domains[local.env_prefix]["user-data-api"]
    },
    {
      name  = "USERDATAAPI_SCHEMA",
      value = "https"
    },
  ]
}

data "aws_ecr_repository" "apollo_charts_monitoring_job_ecr" {
  name = "${local.project_group}/charts-monitoring"

  provider = aws.gdb-apollo-dev
}

resource "aws_secretsmanager_secret" "apollo_charts_monitoring_secret" {
  for_each = toset(local.apollo_charts_monitoring_secrets)

  name       = "${local.secrets_name_prefix}/apollo_charts_monitoring/${each.value}"
  kms_key_id = data.aws_kms_key.secrets_general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}

resource "aws_cloudwatch_log_group" "apollo_charts_monitoring_log_group" {
  name              = "/ecs/${local.name_prefix}-charts-monitoring"
  retention_in_days = module.cloudwatch_logs_retention_by_env[local.env_prefix]

  tags = merge(
    local.common_tags,
    {
      project                  = "Portal",
      service                  = "CloudWatch",
      plat_env_project_service = "${local.aggregated_tag}_PRL_CW"
    }
  )
}

module "apple_charts_monitoring_task_def" {
  source = "../../../modules/ecs/tasks/fargate_v3"

  env_prefix      = local.env_prefix
  project_group   = local.project_group
  family          = "${local.env_prefix}-${local.project_group}-apple-charts-monitoring"
  container_name  = "apple_charts_monitoring"
  container_image = "${data.aws_ecr_repository.apollo_charts_monitoring_job_ecr.repository_url}:${local.docker_image_env_tag[local.env_prefix]}"
  cpu             = 1024
  memory          = 2048

  awslogs_create_group = false
  awslogs_group_name   = aws_cloudwatch_log_group.apollo_charts_monitoring_log_group.name

  task_role_arn = data.aws_iam_role.standard_exec.arn
  exec_role_arn = data.aws_iam_role.standard_exec.arn

  env_vars = concat(
    local.apollo_charts_monitoring_common_env_vars,
    [
      {
        name  = "ECS_SERVICE",
        value = "apple-charts-monitoring"
      },
      {
        name  = "DSP_TO_RUN",
        value = "apple"
      },
  ])
  secrets = local.apollo_charts_monitoring_secrets_mapping

  docker_labels = {
    "traefik.enable" = "false"
  }

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Portal",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_PRL_ECS"
    }
  )
}

module "spotify_charts_monitoring_task_def" {
  source = "../../../modules/ecs/tasks/fargate_v3"

  env_prefix      = local.env_prefix
  project_group   = local.project_group
  family          = "${local.env_prefix}-${local.project_group}-spotify-charts-monitoring"
  container_name  = "spotify_charts_monitoring"
  container_image = "${data.aws_ecr_repository.apollo_charts_monitoring_job_ecr.repository_url}:${local.docker_image_env_tag[local.env_prefix]}"
  cpu             = 1024
  memory          = 2048

  awslogs_create_group = false
  awslogs_group_name   = aws_cloudwatch_log_group.apollo_charts_monitoring_log_group.name

  task_role_arn = data.aws_iam_role.standard_exec.arn
  exec_role_arn = data.aws_iam_role.standard_exec.arn

  env_vars = concat(
    local.apollo_charts_monitoring_common_env_vars,
    [
      {
        name  = "ECS_SERVICE",
        value = "apple-charts-monitoring"
      },
      {
        name  = "DSP_TO_RUN",
        value = "spotify"
      },
  ])
  secrets = local.apollo_charts_monitoring_secrets_mapping

  docker_labels = {
    "traefik.enable" = "false"
  }

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Portal",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_PRL_ECS"
    }
  )
}

module "apple_charts_monitoring" {
  source = "../../../modules/ecs/tasks/scheduled_taskless"

  cluster_arn         = data.aws_ecs_cluster.main.arn
  env_prefix          = local.env_prefix
  project             = "apple_charts_monitoring"
  project_group       = local.project_group
  scheduler_role_arn  = data.aws_iam_role.scheduler_role.arn
  security_groups     = [data.aws_security_group.main.id]
  subnets             = data.aws_subnets.private_subnets.ids
  task_definition_arn = module.apple_charts_monitoring_task_def.arn

  schedule_expression = {
    a = {
      expression = "rate(1 hour)"
      enabled    = true
    }
  }

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Portal",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_PRL_ECS"
    }
  )
}

module "spotify_charts_monitoring" {
  source = "../../../modules/ecs/tasks/scheduled_taskless"

  cluster_arn         = data.aws_ecs_cluster.main.arn
  env_prefix          = local.env_prefix
  project             = "spotify_charts_monitoring"
  project_group       = local.project_group
  scheduler_role_arn  = data.aws_iam_role.scheduler_role.arn
  security_groups     = [data.aws_security_group.main.id]
  subnets             = data.aws_subnets.private_subnets.ids
  task_definition_arn = module.spotify_charts_monitoring_task_def.arn

  schedule_expression = {
    a = {
      expression = "rate(1 hour)"
      enabled    = true
    }
  }

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Portal",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_PRL_ECS"
    }
  )
}