# Opensearch Internal Users
import {
  to = opensearch_user.pp_readonly
  id = var.generic_readonly_user
}

resource "opensearch_user" "pp_readonly" {
  username = var.generic_readonly_user
  # Imported users don't include the password_hash attribute, it can be added for a password reset
  backend_roles = [
    "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/qa-cross-account-opensearch-role",
    "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/permissions-platform-role"
  ]
}

import {
  to = opensearch_user.kc_es_sink_pdelabel
  id = var.kc_os_sink_user
}

resource "opensearch_user" "kc_es_sink_pdelabel" {
  username = var.kc_os_sink_user
  # Imported users don't include the password_hash attribute, it can be added for a password reset
  backend_roles = [""]
}

resource "opensearch_user" "npatel_user" {
  username      = "npatel"
  password_hash = "$2a$12$xHn3IRkzSZUTwgNUcKg1Gegs83z0Xt9oT2JK.XcZ4M5zN5/pimmSC"
  description   = "user for npatel."
}

resource "opensearch_user" "os_sink_etl_label_user" {
  username      = "os_sink_etl_label_user"
  password_hash = "$2a$12$rahAh/rPTE4DJA6qpgIwwuWp76RdQJO0xNDihglXh.mHlAcBRfmIu"
  description   = "user for Opensearch Sink to etl_label indexes."
}