[
  {
    "name": "vapi",
    "image": "437795906767.dkr.ecr.us-east-1.amazonaws.com/vapi:latest",
%{ if is_defender_enabled  }
    "cpu": 1984,
    "memory": 3840,
%{ else }
    "cpu": 2048,
    "memory": 4096,
%{ endif }
    "essential": true,
    "dependsOn": [
%{ if is_defender_enabled  }
      {
        "condition": "HEALTHY",
        "containerName": "TwistlockDefender"
      },
%{ endif }
      {
        "containerName": "datadog-agent",
        "condition": "START"
      }
    ],
    "dockerLabels": {
      "environment": "qa",
      "com.datadoghq.tags.env": "qa",
      "com.datadoghq.tags.service": "vapi"
    },
    "mountPoints": [],
    "healthCheck": {
      "command": [
        "CMD-SHELL",
        "curl -f http://localhost:80/healthchk.php || exit 1"
      ],
      "interval": 10,
      "timeout": 5,
      "retries": 3,
      "startPeriod": 120
    },
    "portMappings": [
      {
        "hostPort": 80,
        "containerPort": 80,
        "protocol": "tcp"
      }
    ],
    "volumesFrom": [
%{ if is_defender_enabled }
      {
      "readOnly": false,
      "sourceContainer": "TwistlockDefender"
      }
%{ endif }
    ],
    "logConfiguration": {
      "logDriver": "awsfirelens",
      "options": {
        "Name": "datadog",
        "Host": "http-intake.logs.datadoghq.com",
        "TLS": "on",
        "dd_service": "vapi",
        "dd_source": "qa-vapi",
        "dd_tags": "environment:qa,service_name:vapi",
        "dd_message_key": "log",
        "provider": "ecs",
        "compress": "gzip"
      },
      "secretOptions": [
        {
          "name": "apikey",
          "valueFrom": "arn:aws:secretsmanager:us-east-1:437795906767:secret:qa/datadog/DD_API_KEY-dc1j0S"
        }
      ]
    },
    "ulimits": [
      {
        "name": "nofile",
        "softLimit": 4096,
        "hardLimit": 65535
      }
    ],
    "environment": [
%{ if is_defender_enabled }
      {
        "name": "TW_IMAGE_NAME",
        "value": "437795906767.dkr.ecr.us-east-1.amazonaws.com/vapi:latest"
      },
      {
        "name": "TW_CONTAINER_NAME",
        "value": "vapi"
      },
      {
        "name": "DEFENDER_TYPE",
        "value": "fargate"
      },
      {
        "name": "FARGATE_TASK",
        "value": "qa-vapi"
      },
      {
        "name": "FILESYSTEM_MONITORING",
        "value": "false"
      },
      {
        "name": "FIPS_ENABLED",
        "value": "false"
      },
%{ endif }
      {
        "name": "DD_ENV",
        "value": "qa"
      },
      {
        "name": "DD_SERVICE",
        "value": "vapi"
      },
      {
        "name": "AUTH_ISSUERS",
        "value": "https://qalogin.theorchard.com/, https://qa-orchard.auth0.com/"
      },
      {
        "name": "Environment",
        "value": "qa"
      },
      {
        "name": "ACTIVE_ACCOUNTING_PERIOD",
        "value": "317"
      },
      {
        "name": "APPLICATION_ENV",
        "value": "testing"
      },
      {
        "name": "DD_SERVICE_NAME",
        "value": "qa-vapi"
      },
      {
        "name": "DD_TRACE_ANALYTICS_ENABLED",
        "value": "true"
      },
      {
        "name": "DD_TRACE_APP_NAME",
        "value": "qa-vapi"
      },
      {
        "name": "DD_TRACE_GLOBAL_TAGS",
        "value": "env:qa-vapi"
      },
      {
        "name": "PHP_DISPLAY_ERRORS",
        "value": "false"
      },
      {
        "name": "PHP_POST_MAX_SIZE",
        "value": "8M"
      },
      {
        "name": "PHP_SESSION_COOKIE_SECURE",
        "value": "1"
      },
      {
        "name": "PHP_SESSION_COOKIE_HTTPONLY",
        "value": "1"
      },
      {
        "name": "PHP_SESSION_SAVE_HANDLER",
        "value": "memcached"
      },
      {
        "name": "PHP_SESSION_SAVE_PATH",
        "value": "qa-vapi-session-memcached.theorchard.io:11211"
      },
      {
        "name": "PHP_UPLOAD_MAX_FILESIZE",
        "value": "2M"
      },
      {
        "name": "S3_CONFIG_LOCATION",
        "value": "nickelback/vapi/qa"
      },
      {
        "name": "SENTRY_DSN",
        "value": "${sentry_dsn}"
      },
      {
        "name": "PHP_MEMORY_LIMIT",
        "value": "4096M"
      },
      {
        "name": "PHP_MAX_EXECUTION_TIME",
        "value": "60"
      },
      {
        "name": "SPLITIO_REDIS_HOST",
        "value": "${splitio_redis_host}"
      },
      {
        "name": "SPLITIO_REDIS_PORT",
        "value": "${splitio_redis_port}"
      }
    ],
%{ if is_defender_enabled }
    "linuxParameters": {
      "capabilities": {
        "add": [
          "SYS_PTRACE"
        ],
        "drop": []
      }
    },
%{ endif }
    "secrets": [
      {
        "name": "SPLITIO_API_KEY",
        "valueFrom": "${splitio_api_key_arn}"
      }
    ],
    "systemControls": []
  },
%{ if is_defender_enabled }
  {
  "name": "TwistlockDefender",
  "image": "086679231553.dkr.ecr.us-east-1.amazonaws.com/prisma-cloud-defender:latest",
  "cpu": 64,
  "memory": 256,
  "essential": true,
  "entryPoint": [
    "/usr/local/bin/defender",
    "fargate",
    "sidecar"
  ],
  "dockerLabels": {
    "Environment": "qa"
  },
  "portMappings": [],
  "mountPoints": [],
  "healthCheck": {
    "command": [
      "/usr/local/bin/defender",
      "fargate",
      "healthcheck"
    ],
    "interval": 5,
    "retries": 3,
    "startPeriod": 1,
    "timeout": 5
  },
  "volumesFrom": [],
  "logConfiguration": null,
  "environment": [
    {
      "name": "INSTALL_BUNDLE",
      "value": "eyJzZWNyZXRzIjp7InNlcnZpY2UtcGFyYW1ldGVyIjoieTl0RDdmazJZdVEvNkN4TWVIcldsQXFpSmFPMldocXhtbVdheFE3bFAwNFVMaFYxYXhZcVJ6U09HUzBzZnlrMU9NT1FwaWxhU2RFYWN0TVdKQ0FzZXc9PSJ9LCJnbG9iYWxQcm94eU9wdCI6eyJodHRwUHJveHkiOiIiLCJub1Byb3h5IjoiIiwiY2EiOiIiLCJ1c2VyIjoiIiwicGFzc3dvcmQiOnsiZW5jcnlwdGVkIjoiIn19LCJjdXN0b21lcklEIjoidXMtMi0xNTgyNjI0OTMiLCJhcGlLZXkiOiJWdGlsbmtHOUFObnphYlZMdkF6ZmZWU0htRVRWdDI3bHZNSUlnVzNUTy9ReSsvc2UwRGFub3MwQTQwUXpKbTZMaS9NZHcrSys0VHJWbnhjZW1DaG9IQT09IiwibWljcm9zZWdDb21wYXRpYmxlIjpmYWxzZX0="
    },
    {
      "name": "DEFENDER_TYPE",
      "value": "fargate"
    },
    {
      "name": "FARGATE_TASK",
      "value": "qa-vapi"
    },
    {
      "name": "WS_ADDRESS",
      "value": "wss://us-east1.cloud.twistlock.com:443"
    },
    {
      "name": "FILESYSTEM_MONITORING",
      "value": "false"
    },
    {
      "name": "FIPS_ENABLED",
      "value": "false"
    }
  ],
  "secrets": [],
  "systemControls": []
  },
%{ endif }
  {
    "name": "orchard-sqlrelay",
    "image": "086679231553.dkr.ecr.us-east-1.amazonaws.com/orchard-sqlrelay:debian12",
    "cpu": 1920,
    "memory": 3776,
    "essential": true,
    "healthCheck": {
      "command": [
        "CMD-SHELL",
        "sqlrsh -id snowflake -command 'ping;' || exit 1"
      ],
      "interval": 15,
      "retries": 3,
      "startPeriod": 5,
      "timeout": 10
    },
    "dependsOn": [
      {
        "containerName": "datadog-agent",
        "condition": "START"
      }
    ],
    "dockerLabels": {
      "environment": "qa",
      "com.datadoghq.tags.env": "qa",
      "com.datadoghq.tags.service": "orchard-sqlrelay"
    },
    "mountPoints": [],
    "portMappings": [
      {
        "hostPort": 9000,
        "containerPort": 9000,
        "protocol": "tcp"
      }
    ],
    "volumesFrom": [],
    "logConfiguration": {
      "logDriver": "awsfirelens",
      "options": {
        "Name": "datadog",
        "Host": "http-intake.logs.datadoghq.com",
        "TLS": "on",
        "dd_service": "orchard-sqlrelay",
        "dd_source": "qa-orchard-sqlrelay",
        "dd_tags": "environment:qa,service_name:orchard-sqlrelay",
        "dd_message_key": "log",
        "provider": "ecs",
        "compress": "gzip"
      },
      "secretOptions": [
        {
          "name": "apikey",
          "valueFrom": "arn:aws:secretsmanager:us-east-1:437795906767:secret:qa/datadog/DD_API_KEY-dc1j0S"
        }
      ]
    },
    "ulimits": [
      {
        "name": "nofile",
        "softLimit": 4096,
        "hardLimit": 65535
      }
    ],
    "environment": [
      {
        "name": "Environment",
        "value": "qa"
      },
      {
        "name": "S3_CONFIG_LOCATION",
        "value": "nickelback/orchard-sqlrelay/qa"
      },
      {
        "name": "LC_ALL",
        "value": "en_US.UTF-8"
      },
      {
        "name": "LANG",
        "value": "en_US.UTF-8"
      },
      {
        "name": "LANGUAGE",
        "value": "en_US.UTF-8"
      }
    ],
    "secrets": [],
    "systemControls": []
  },
  {
    "name": "datadog-agent",
    "image": "437795906767.dkr.ecr.us-east-1.amazonaws.com/orchard-datadog-agent:latest",
    "cpu": 64,
    "memory": 256,
    "essential": false,
    "dockerLabels": {
      "Environment": "qa"
    },
    "portMappings": [
      {
        "hostPort": 8126,
        "containerPort": 8126,
        "protocol": "tcp"
      }
    ],
    "mountPoints": [],
    "volumesFrom": [],
    "logConfiguration": {
      "logDriver": "awslogs",
      "options": {
        "awslogs-create-group": "true",
        "awslogs-group": "qa-vapi-datadog-agent",
        "awslogs-region": "us-east-1",
        "awslogs-stream-prefix": "qa-vapi-datadog-agent"
      }
    },
    "environment": [
      {
        "name": "DD_SITE",
        "value": "datadoghq.com"
      },
      {
        "name": "ECS_FARGATE",
        "value": "true"
      },
      {
        "name": "DD_APM_ENABLED",
        "value": "true"
      },
      {
        "name": "DD_APM_IGNORE_RESOURCES",
        "value": "GET /healthchk.php"
      }
    ],
    "secrets": [
      {
        "name": "DD_API_KEY",
        "valueFrom": "arn:aws:secretsmanager:us-east-1:437795906767:secret:qa/datadog/DD_API_KEY-dc1j0S"
      }
    ],
    "systemControls": []
  },
  {
    "name": "fluentbit-datadog",
    "image": "437795906767.dkr.ecr.us-east-1.amazonaws.com/orchard-fluent-bit:latest",
    "cpu": 64,
    "memory": 64,
    "essential": false,
    "dockerLabels": {
      "Environment": "qa"
    },
    "firelensConfiguration": {
      "type": "fluentbit",
      "options": {
        "enable-ecs-log-metadata": "true",
        "config-file-type": "file",
        "config-file-value": "/fluent-bit/configs/parse-json.conf"
      }
    },
    "portMappings": [],
    "mountPoints": [],
    "volumesFrom": [],
    "logConfiguration": {
      "logDriver": "awslogs",
      "options": {
        "awslogs-create-group": "true",
        "awslogs-group": "qa-vapi-fluentbit",
        "awslogs-region": "us-east-1",
        "awslogs-stream-prefix": "qa-vapi-fluentbit"
      }
    },
    "user": "0",
    "environment": [
      {
        "name": "FLB_LOG_LEVEL",
        "value": "info"
      }
    ],
    "secrets": [],
    "systemControls": []
  }
]
