variable "aws_region" {
  default = "us-east-1"
}

variable "environment" {
  description = "Available values:  dev, qa, prod"
  default     = "prod"
}

variable "application_family" {
  default = "data-platform"
}

variable "team_name" {
  type        = string
  description = "Name of team that owns the service"
  default     = "data-platform"
}

variable "secrets_manager_secret_names" {
  description = "List of secrets manager secrets to create"
  type        = list(string)
  default = [
    "AccessToken"
  ]
}

variable "gdb_role_principals" {
  description = "List of GDB principals to assume the role for the secret's synchronizing"
  type        = list(string)
  default = [
    "arn:aws:iam::475275892927:root",
    "arn:aws:iam::323555055331:root",
  ]
}

variable "swf_feed_ingestion_build_role" {
  default = "swf-feed-ingestion-build-role"
}

variable "swf_feed_ingestion_build_role_allowed_entities" {
  default = [
    "arn:aws:iam::437795906767:role/prod-jenkins-aws-pipeline-agent",
  ]
}

variable "swf_feed_ingestion_build_role_attached_policies" {
  default = [
    "S3-prod-orcdbucket-binary-RO",
  ]
}

variable "sme_analytics_ingest_role" {
  default = "orchard-sme-analytics-ingest-role"
}

variable "sme_analytics_ingest_role_allowed_entities" {
  default = [
    "arn:aws:iam::437795906767:user/efedorov",
    "arn:aws:iam::437795906767:user/fumar",
    "arn:aws:iam::437795906767:user/tmoin",
    "arn:aws:iam::437795906767:user/bbabiy",
    "arn:aws:iam::437795906767:role/prod-swf-apple-id-mapping-sme-task-role",
    "arn:aws:iam::437795906767:user/oefanova",
    "arn:aws:iam::437795906767:user/oshainoha",
    "arn:aws:iam::437795906767:role/qa-swf-apple-id-mapping-sme-task-role",
    "arn:aws:iam::437795906767:role/prod-swf-vevo-task-role",
    "arn:aws:iam::437795906767:user/sduberg",
    "arn:aws:iam::437795906767:user/kshrayber",
    "arn:aws:iam::437795906767:role/qa-swf-vevo-task-role",
    "arn:aws:iam::437795906767:user/dkarnaukh",
  ]
}

variable "sme_analytics_ingest_role_attached_policies" {
  default = [
    "orchard-sme-analytics-ingest-role-policy",
    "S3-prod-cucumbers-RW",
    "S3-prod-orcdbucket_feed-drop-RW",
    "S3-qa-cucumbers-RW",
    "s3-sme-data-archive-RO",
  ]
}

locals {
  shared_jenkins_secret_service_name = "swf-shared-jenkins"
  shared_jenkins_secrets = [
    "JENKINS_API_TOKEN"
  ]
  shared_jenkins_secrets_policy_name = "SecretsManager-${var.environment}-${local.shared_jenkins_secret_service_name}-policy"
}