resource "aws_service_discovery_service" "sds_service_failover" {

  provider = aws.failover_region

  name = "sds"

  dns_config {
    namespace_id = data.terraform_remote_state.mop_core_failover.outputs.ecs_private_discovery_namespace_id

    dns_records {
      ttl  = 10
      type = "A"
    }

    routing_policy = "MULTIVALUE"
  }

  health_check_custom_config {
    failure_threshold = 1
  }
}


module sds_service_failover {

  providers = {
    aws = aws.failover_region
  }

  source = "git::ssh://git@bitbucket.org/netfoundry/nf-mop-tf.git//modules/aws/ecs_fargate_service"

  service_name          = local.service_name
  task_definition       = data.template_file.task_definition_failover.rendered
  task_role_arn         = aws_iam_role.sds_task_role.arn
  registry_arn          = aws_service_discovery_service.sds_service_failover.arn
  container_count       = local.failover_task_count
  cpu                 = "1024"
  memory              = "2048"
  security_groups = [
    aws_security_group.sds_service_https_failover.id,
    aws_security_group.sds_service_alb_failover.id,
    data.terraform_remote_state.mop_core_failover.outputs.sg_alb_id
  ]
  execution_role_arn = aws_iam_role.sds_task_role.arn
  ecs_cluster_id = data.terraform_remote_state.mop_core_failover.outputs.ecs_cluster_id
  subnets             = data.terraform_remote_state.mop_core_failover.outputs.vpc_subnet_private_ids
  log_retention  = 30
}


data template_file "task_definition_failover" {
  template = file("${path.module}/templates/task-definition.json")

  vars = {
    image_url = "745435643501.dkr.ecr.us-east-1.amazonaws.com/sds:${data.aws_ssm_parameter.container_image.value}"
    #image_url             = "netfoundry/sds:${data.aws_ssm_parameter.container_image.value}"
    #docker_hub_secret_arn = data.terraform_remote_state.mop_core.outputs.dockerhub_secret_arn
    container_name        = local.service_name
    container_port        = local.container_port
    log_group_region      = local.failover_region
    log_group_name        = module.sds_service.cwlog_group_name
    spring_profiles_active = local.deploy_env_name
    ssh_id_rsa            = data.aws_secretsmanager_secret.ssh_id_rsa.arn
    beats_pem_key         = data.aws_secretsmanager_secret.beats_pem_key.arn
    logstash_private_key  = data.aws_secretsmanager_secret.logstash_private_key.arn
    aws_default_region    = var.region[terraform.workspace]
    environment_name      = local.deploy_env_name
    # from properties file
    subdomain             = local.subdomain
    browzer_subdomain     = local.browzer_subdomain
    auth0_client_id       = auth0_client.client.client_id
    auth0_client_secret   = auth0_client.client.client_secret
    deploy_env            = local.deploy_env_name
    ansible_timeout_minutes = local.ansible_timeout_minutes
    es_host = data.terraform_remote_state.mop_core.outputs.es_host
    es_micrometer_username = "${data.aws_secretsmanager_secret.es_micrometer_creds.arn}:username::"
    es_micrometer_password = "${data.aws_secretsmanager_secret.es_micrometer_creds.arn}:password::"
    rabbit_mq_endpoints  = data.terraform_remote_state.central_mq.outputs.central_rabbitmq_endpoints
    rabbit_mq_username  = data.terraform_remote_state.central_mq.outputs.central_rabbitmq_mopuser
    rabbit_mq_secret_arn  = data.terraform_remote_state.central_mq.outputs.central_rabbitmq_secret_arn
    route53_netfoundry_hostedzoneid  = data.terraform_remote_state.mop_core.outputs.zone_id
    route53_browzer_hostedzoneid  = data.terraform_remote_state.mop_core.outputs.browzer_zone_id
  }
}