resource "aws_rds_cluster" "mcond-openobserve-cluster" {
  # checkov:skip=CKV_AWS_313: Tag copy to snapshots not configured for this dev Aurora cluster
  # checkov:skip=CKV2_AWS_27: Query logging not configured for this dev Aurora cluster
  backtrack_window        = 0
  backup_retention_period = 7
  cluster_identifier      = "mcond-openobserve-cluster"
  cluster_members = [
    "mcond-openobserve-main",
  ]
  copy_tags_to_snapshot            = false
  database_name                    = "openobserve"
  db_cluster_parameter_group_name  = "mcond-openobserv-rds-aurora-cluster-pg17"
  db_instance_parameter_group_name = "mcond-openobserv-rds-aurora-instance-pg17"
  db_subnet_group_name             = "mcond-openobserv-rds-sg"
  deletion_protection              = true
  enable_http_endpoint             = false
  enabled_cloudwatch_logs_exports = [
    "postgresql",
  ]
  engine                              = "aurora-postgresql"
  engine_mode                         = "provisioned"
  engine_version                      = "17.7"
  iam_database_authentication_enabled = false
  iam_roles                           = []
  kms_key_id                          = "arn:aws:kms:eu-central-1:104858398257:key/32b56480-36c8-42fc-ad6c-1241026bdf0d"
  master_username                     = "openobserve_admin"
  master_password                     = "XHW06xj39liNrr$M"
  network_type                        = "IPV4"
  port                                = 5432
  preferred_backup_window             = "07:00-07:30"
  preferred_maintenance_window        = "sun:08:00-sun:08:30"
  skip_final_snapshot                 = true
  storage_encrypted                   = true
  storage_type                        = "aurora-iopt1"
  apply_immediately                   = true
  allow_major_version_upgrade         = true
  vpc_security_group_ids = [
    "sg-079ff93575cad0f69",
  ]
}