# Aurora MySQL for Coda persistent conversation DB.
# Mirrors the royalty_accounting pattern with binlog enabled for future Fivetran CDC.

resource "aws_rds_cluster_parameter_group" "coda_cluster_parameter_group" {
  count = local.is_ephemeral ? 0 : 1

  name        = "${var.environment}-${var.service_name}-mysql8-cluster-parameter-group"
  family      = "aurora-mysql8.0"
  description = "${var.environment}-${var.service_name}-mysql8-cluster-parameter-group"

  parameter {
    apply_method = "pending-reboot"
    name         = "binlog_format"
    value        = "ROW"
  }
}

module "ows_coda_rds" {
  count  = local.is_ephemeral ? 0 : 1
  source = "git@github.com:theorchard/terraform-rds.git//?ref=8.0.0"

  providers = {
    aws.dns = aws.networking
  }

  environment        = var.environment
  service_name       = var.service_name
  application_family = var.application_family

  # Engine
  rds_engine         = "aurora-mysql"
  rds_engine_version = "8.0"

  # Instance sizing — t4g.medium is sufficient for async write-behind chatbot persistence
  rds_cluster_instance_class = "db.t4g.medium"
  rds_cluster_instance_count = "2"

  # Credentials — initial value only; rotated out-of-band via generic-engineer-role.
  rds_master_username = "coda_admin"
  rds_master_password = "ReplaceThisWithASecurePassword123!"

  # Parameter groups
  rds_db_cluster_parameter_group_name       = aws_rds_cluster_parameter_group.coda_cluster_parameter_group[0].name
  rds_cluster_instance_parameter_group_name = "default.aurora-mysql8.0"

  # Networking
  rds_availability_zones = ["${var.region}a", "${var.region}d"]
  vpc_id                 = module.vpc_info.vpc_id
  rds_db_subnet_ids      = module.vpc_info.default_private_subnet_ids

  # Security
  custom_kms_key_enabled        = true
  rds_ingress_prefix_list_names = ["shared-orcd-jump-box-private-subnet-prefix-list"]
  rds_ingress_security_groups = [
    module.ows_coda_fargate_environment.fargate_security_group_id,
  ]

  # Monitoring
  rds_performance_insights_enabled = true

  # DNS
  route53_record_creation_enabled = true
}

module "ows_coda_rds_dashboard" {
  count  = local.is_ephemeral ? 0 : 1
  source = "git@github.com:theorchard/terraform-datadog.git//modules/rds?ref=6.19.0"

  environment        = var.environment
  service_name       = var.service_name
  application_family = var.application_family
  teams              = ["coda"]

  notification_endpoints            = local.datadog_notification_endpoints
  escalation_notification_endpoints = local.datadog_escalation_notification_endpoints
}