# Cookbook:: irrigate-ecs
# Attributes:: default
#

default['ecs']['cluster_name']                 = 'dev-cluster'
default['ecs']['init']['version']              = '1.73.1-1'
default['ecs']['init_timeout']                 = 120
default['ecs']['log_level']                    = 'info'
default['ecs']['log_format']                   = 'json'
default['ecs']['map_tag']                      = ''
default['ecs']['swap_file_size']               = 10000
default['ecs']['swappiness']                   = 60
default['ecs']['tags']                         = { 'cluster_name': node['ecs']['cluster_name'] }
default['ecs']['updates_enabled']              = 'true'
default['ecs']['task_cleanup_wait_duration']   = '10m'
default['ecs']['exec']['binaries_dir_prefix']  = '/var/lib/ecs/deps/execute-command/bin'
default['ecs']['exec']['ca_bundle_files']      = [
  '/etc/ssl/certs/ca-certificates.crt',
  '/etc/pki/tls/certs/ca-bundle.crt',
  '/etc/ssl/ca-bundle.pem',
  '/etc/pki/tls/cacert.pem',
  '/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem',
  '/etc/ssl/cert.pem',
]
default['ecs']['exec']['ca_bundle_directory'] = '/var/lib/ecs/deps/execute-command/certs'
default['ecs']['exec']['ssm_binaries']        = %w(
  amazon-ssm-agent
  ssm-agent-worker
  ssm-session-worker
)

default['ssm']['activation_credentials_data_bag_name'] = ''
default['ssm']['region']                               = 'us-east-1'

# The SSM registration data bag is encrypted with a unique secret.
default['ssm']['use_default_data_bag_secret_file']                       = false # this should only be true for kitchen tests
default['ssm']['activation_credentials_data_bag_encryption_secret_file'] = '/etc/chef/ssm_activation_encryption_secret'