variable "AWS_ACCESS_KEY_ID" {}
variable "AWS_SECRET_ACCESS_KEY" {}
variable "SENTRY_DSN" {}
variable "SNOWFLAKE_PASSWORD" {}

provider "aws" {
  region = "us-east-1"
}

terraform {
  backend "s3" {
    bucket  = "orcd-terraform-state"
    key     = "prod/swf-amazon-music/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

data "aws_secretsmanager_secret_version" "aws_region" {
  secret_id = "${var.environment}/${var.service_name}/AWS_REGION"
}

data "aws_secretsmanager_secret_version" "snowflake_user" {
  secret_id = "${var.environment}/${var.service_name}/SNOWFLAKE_USER"
}

data "aws_secretsmanager_secret_version" "swf_domain" {
  secret_id = "${var.environment}/${var.service_name}/SWF_DOMAIN"
}

data "aws_secretsmanager_secret_version" "aws_access_key_id" {
  secret_id = "${var.environment}/${var.service_name}/AWS_ACCESS_KEY_ID"
}

data "aws_secretsmanager_secret_version" "sentry_dsn" {
  secret_id = "${var.environment}/${var.service_name}/SENTRY_DSN"
}

data "aws_secretsmanager_secret_version" "snowflake_schema" {
  secret_id = "${var.environment}/${var.service_name}/SNOWFLAKE_SCHEMA"
}

data "aws_secretsmanager_secret_version" "snowflake_warehouse" {
  secret_id = "${var.environment}/${var.service_name}/SNOWFLAKE_WAREHOUSE"
}

data "aws_secretsmanager_secret_version" "feed_ingestion_data_bucket" {
  secret_id = "${var.environment}/${var.service_name}/FEED_INGESTION_DATA_BUCKET"
}

data "aws_secretsmanager_secret_version" "snowflake_account" {
  secret_id = "${var.environment}/${var.service_name}/SNOWFLAKE_ACCOUNT"
}

data "aws_secretsmanager_secret_version" "snowflake_database" {
  secret_id = "${var.environment}/${var.service_name}/SNOWFLAKE_DATABASE"
}

data "aws_secretsmanager_secret_version" "snowflake_password" {
  secret_id = "${var.environment}/${var.service_name}/SNOWFLAKE_PASSWORD"
}

data "aws_secretsmanager_secret_version" "aws_secret_access_key" {
  secret_id = "${var.environment}/${var.service_name}/AWS_SECRET_ACCESS_KEY"
}

data "aws_secretsmanager_secret_version" "loggly_uri" {
  secret_id = "${var.environment}/${var.service_name}/LOGGLY_URI"
}

data "aws_secretsmanager_secret_version" "feed_ingestion_sns_topic" {
  secret_id = "${var.environment}/${var.service_name}/FEED_INGESTION_SNS_TOPIC"
}

data "aws_secretsmanager_secret_version" "feed_ingestion_table" {
  secret_id = "${var.environment}/${var.service_name}/FEED_INGESTION_TABLE"
}

data "aws_secretsmanager_secret_version" "feed_ingestion_drop_bucket" {
  secret_id = "${var.environment}/${var.service_name}/FEED_INGESTION_DROP_BUCKET"
}

data "aws_secretsmanager_secret_version" "snowflake_role" {
  secret_id = "${var.environment}/${var.service_name}/SNOWFLAKE_ROLE"
}

module "swf_amazon_music_environment_prod" {
  source = "git@github.com:theorchard/terraform-fargate.git//"

  environment                      = "${var.environment}"
  service_name                     = "${var.service_name}"
  aws_region                       = "${var.aws_region}"
  commit_sha                       = "latest"
  container_port                   = "8080"
  task_type                        = "worker"
  desired_task_count               = 1
  task_cpu                         = 2048
  task_memory                      = 4096
  maximum_capacity                 = 1
  minimum_capacity                 = 1
  scale_up_adjustment              = 1
  scale_down_adjustment            = -1
  vpc_id                           = "vpc-7f0e841a"
  datadog_function_destination_arn = "arn:aws:lambda:us-east-1:437795906767:function:DatadogLambdaFunction"


  fargate_service_subnets = [
    "subnet-067a6b45b079d7296",
    "subnet-043d235081c966332",
  ]

  environment_variables = [
    {
      Environment = "${var.environment}"
    },
    {
      DATADOG_ENV = "${var.environment}-${var.service_name}"
    },
    {
      DD_LOGS_INJECTION = "true"
    },
    {
      AWS_REGION = "${data.aws_secretsmanager_secret_version.aws_region.secret_string}"
    },
    {
      SNOWFLAKE_USER = "${data.aws_secretsmanager_secret_version.snowflake_user.secret_string}"
    },
    {
      SWF_DOMAIN = "${data.aws_secretsmanager_secret_version.swf_domain.secret_string}"
    },
    {
      AWS_ACCESS_KEY_ID = "${data.aws_secretsmanager_secret_version.aws_access_key_id.secret_string}"
    },
    {
      SENTRY_DSN = "${data.aws_secretsmanager_secret_version.sentry_dsn.secret_string}"
    },
    {
      SNOWFLAKE_SCHEMA = "${data.aws_secretsmanager_secret_version.snowflake_schema.secret_string}"
    },
    {
      SNOWFLAKE_WAREHOUSE = "${data.aws_secretsmanager_secret_version.snowflake_warehouse.secret_string}"
    },
    {
      FEED_INGESTION_DATA_BUCKET = "${data.aws_secretsmanager_secret_version.feed_ingestion_data_bucket.secret_string}"
    },
    {
      SNOWFLAKE_ACCOUNT = "${data.aws_secretsmanager_secret_version.snowflake_account.secret_string}"
    },
    {
      SNOWFLAKE_DATABASE = "${data.aws_secretsmanager_secret_version.snowflake_database.secret_string}"
    },
    {
      SNOWFLAKE_PASSWORD = "${data.aws_secretsmanager_secret_version.snowflake_password.secret_string}"
    },
    {
      AWS_SECRET_ACCESS_KEY = "${data.aws_secretsmanager_secret_version.aws_secret_access_key.secret_string}"
    },
    {
      LOGGLY_URI = "${data.aws_secretsmanager_secret_version.loggly_uri.secret_string}"
    },
    {
      FEED_INGESTION_SNS_TOPIC = "${data.aws_secretsmanager_secret_version.feed_ingestion_sns_topic.secret_string}"
    },
    {
      FEED_INGESTION_TABLE = "${data.aws_secretsmanager_secret_version.feed_ingestion_table.secret_string}"
    },
    {
      FEED_INGESTION_DROP_BUCKET = "${data.aws_secretsmanager_secret_version.feed_ingestion_drop_bucket.secret_string}"
    },
    {
      SNOWFLAKE_ROLE = "${data.aws_secretsmanager_secret_version.snowflake_role.secret_string}"
    },
  ]
}

module "swf_amazon_music_beanstalk_prod_environment" {
  source = "git@github.com:theorchard/terraform-elasticbeanstalk.git"

  environment                          = var.environment
  service_name                         = var.service_name
  use_existing_application             = true
  existing_application_name            = "swf-feed-ingestion"
  launchconfiguration_instance_type    = "t3.xlarge"
  update_max_batch                     = "1"
  vpc_subnets                          = "subnet-cb4dbae0,subnet-5366ef24"
  vpc_id                               = "vpc-7f0e841a"
  aws_route53_zone_id                  = "Z2RSKZ9M7TJ9Z"
  elb_v2_access_logs_s3_bucket         = "aws-logs-437795906767-us-east-1"
  environment_tier                     = "Worker"
  notification_endpoints               = "data-squad@theorchard.com"
  vpc_elb_subnets                      = "subnet-5366ef24"
  process_instance_health_check_path   = ""
  launchconfiguration_root_volume_size = "300"
  asg_max_size                         = "1"
  update_min_in_service                = "0"

  environment_variables = [
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "Environment"
      value     = var.environment
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "AWS_REGION"
      value     = var.AWS_REGION
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "AWS_SECRET_ACCESS_KEY"
      value     = var.AWS_SECRET_ACCESS_KEY
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "AWS_ACCESS_KEY_ID"
      value     = var.AWS_ACCESS_KEY_ID
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SNOWFLAKE_USER"
      value     = var.SNOWFLAKE_USER
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SNOWFLAKE_ROLE"
      value     = var.SNOWFLAKE_ROLE
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SNOWFLAKE_WAREHOUSE"
      value     = var.SNOWFLAKE_WAREHOUSE
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SNOWFLAKE_ACCOUNT"
      value     = var.SNOWFLAKE_ACCOUNT
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SNOWFLAKE_DATABASE"
      value     = var.SNOWFLAKE_DATABASE
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SNOWFLAKE_SCHEMA"
      value     = var.SNOWFLAKE_SCHEMA
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SNOWFLAKE_PASSWORD"
      value     = var.SNOWFLAKE_PASSWORD
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "FEED_INGESTION_TABLE"
      value     = var.FEED_INGESTION_TABLE
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "FEED_INGESTION_DATA_BUCKET"
      value     = var.FEED_INGESTION_DATA_BUCKET
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "FEED_INGESTION_DROP_BUCKET"
      value     = var.FEED_INGESTION_DROP_BUCKET
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "FEED_INGESTION_SNS_TOPIC"
      value     = var.FEED_INGESTION_SNS_TOPIC
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SWF_DOMAIN"
      value     = var.SWF_DOMAIN
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "SENTRY_DSN"
      value     = var.SENTRY_DSN
    },
    {
      namespace = "aws:elasticbeanstalk:application:environment"
      name      = "LOGGLY_URI"
      value     = var.LOGGLY_URI
    }
  ]
}

module "fargate_service_dashboard" {
  source           = "git@github.com:theorchard/terraform-datadog.git//modules/service"
  environment      = "${var.environment}"
  environment_type = "fargate"
  service_name     = "${var.service_name}"
}