provider "aws" {
  region = "${var.region}"
}

# Terraform backends cannot contain interpolations
terraform {
  backend "s3" {
    bucket = "orcd-terraform-state"
    key = "qa/ows-accounting/terraform.tfstate"
    region = "us-east-1"
    encrypt = "true"
    dynamodb_table = "terraform-qa-ows-accounting"
  }
}

module "ows_service_owsrequest" {
  source = "git@github.com:theorchard/terraform-owsrequest.git//"

  environment_name = "${var.environment}"
  service_name = "${var.service_name}"
}

module "ows_accounting_environment" {
  source = "git@github.com:theorchard/terraform-elasticbeanstalk.git//"

  environment = "${var.environment}"
  service_name = "${var.service_name}"

  vpc_elb_subnets                   = "subnet-cb4dbae0,subnet-5366ef24"
  vpc_subnets                       = "subnet-cb4dbae0,subnet-5366ef24"
  vpc_id                            = "vpc-7f0e841a"
  load_balancer_ssl_certificate_arn = "arn:aws:acm:us-east-1:437795906767:certificate/a76e4883-28aa-4062-a4cc-c06b8012ae28"
  elb_v2_access_logs_s3_bucket      = "aws-logs-437795906767-us-east-1"
  aws_route53_zone_id               = "Z2RSKZ9M7TJ9Z"

  iam_managed_policy_attachments = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly",
    "arn:aws:iam::aws:policy/CloudWatchFullAccess",
    "arn:aws:iam::437795906767:policy/SQS-Cloudalytics-EB",
    "arn:aws:iam::aws:policy/AWSElasticBeanstalkWebTier",
    "arn:aws:iam::437795906767:policy/S3-qa-orcdbucket_qa-statement-attachments-RW",
    "${module.ows_service_owsrequest.policy_arn_output}"
  ]

  environment_variables = [
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "Environment"
      value = "${var.environment}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "ACTIVE_ACCOUNTING_PERIOD"
      value = "${var.active_accounting_period}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "REDSHIFT_READ_WRITE_SCHEMA"
      value = "${var.redshift_read_write_schema}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "MYSQL_USER"
      value = "${var.mysql_user}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "ACCOUNTING_STATEMENT_EXPORT_TABLE"
      value = "${var.accounting_statement_export_table}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "REDSHIFT_READ_WRITE_USER"
      value = "${var.redshift_read_write_user}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "SENTRY_DSN"
      value = "${var.sentry_dsn}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "LOGGER_DSN"
      value = "${var.logger_dsn}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "MYSQL_HOST"
      value = "${var.mysql_host}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "MYSQL_DATABASE"
      value = "${var.mysql_database}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "AWS_DEFAULT_REGION"
      value = "${var.aws_default_region}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "REDSHIFT_READ_WRITE_DB"
      value = "${var.redshift_read_write_db}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "REDSHIFT_READ_WRITE_PORT"
      value = "${var.redshift_read_write_port}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "REDSHIFT_READ_WRITE_HOST"
      value = "${var.redshift_read_write_host}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "REDIS_HOST"
      value = "${var.redis_host}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "REDIS_PORT"
      value = "${var.redis_port}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "SNOWFLAKE_ACCOUNT"
      value = "${var.snowflake_account}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "SNOWFLAKE_ROLE"
      value = "${var.snowflake_role}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "SNOWFLAKE_USER"
      value = "${var.snowflake_user}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "SNOWFLAKE_SCHEMA"
      value = "${var.snowflake_schema}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "SNOWFLAKE_WAREHOUSE"
      value = "${var.snowflake_warehouse}"
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name = "SNOWFLAKE_DATABASE"
      value = "${var.snowflake_database}"
    }
  ]
}