# For convenience in simple configurations, a child module automatically
# inherits default (un-aliased) provider configurations from its parent.
# This means that explicit provider blocks appear only in the root module,
# and downstream modules can simply declare resources for that provider
# and have them automatically associated with the root provider
# configurations.
module "alertmanager" {
  source = "./alertmanager"
  providers = {
    nomad = nomad.yul1
  }

  # nomad
  nomad_datacenters = ["yul1"]

  # alertmanager
  alertmanager_job_name    = "prod-alertmanager"
  alertmanager_use_canary  = true
  alertmanager_group_count = 1
  alertmanager_vault_secret = {
    use_vault_provider        = false,
    vault_kv_policy_name      = "kv-secret",
    vault_kv_path             = "secret/data/prometheus",
    vault_kv_field_access_key = "access_key",
    vault_kv_field_secret_key = "secret_key"
  }
  alertmanager_version               = "0.21.0"
  alertmanager_cpu                   = 1000
  alertmanager_mem                   = 1024
  alertmanager_port                  = 9093
  alertmanager_slack_jenkins_api_key = "TE07RD1V1/B01U1NV9HV3/hKZXJJ74g2JcISq4K3QC1eG9"
  alertmanager_slack_jenkins_channel = "fdio-jobs-monitoring"
  alertmanager_slack_default_api_key = "TE07RD1V1/B01UUK23B6C/hZTcCu42FUv8d6rtirHtcYIi"
  alertmanager_slack_default_channel = "fdio-infra-monitoring"
}

module "grafana" {
  source = "./grafana"
  providers = {
    nomad = nomad.yul1
  }

  # nomad
  nomad_datacenters = ["yul1"]

  # grafana
  grafana_job_name    = "prod-grafana"
  grafana_use_canary  = true
  grafana_group_count = 1
  grafana_vault_secret = {
    use_vault_provider        = false,
    vault_kv_policy_name      = "kv-secret",
    vault_kv_path             = "secret/data/grafana",
    vault_kv_field_access_key = "access_key",
    vault_kv_field_secret_key = "secret_key"
  }
  grafana_container_image = "grafana/grafana:7.3.7"
  grafana_cpu             = 1000
  grafana_mem             = 2048
  grafana_port            = 3000
}

module "minio" {
  source = "./minio"
  providers = {
    nomad = nomad.yul1
  }

  # nomad
  nomad_datacenters = ["yul1"]
  nomad_host_volume = "prod-volume-data1-1"

  # minio
  minio_job_name        = "prod-minio"
  minio_group_count     = 4
  minio_service_name    = "storage"
  minio_host            = "http://10.32.8.1{4...7}"
  minio_port            = 9000
  minio_container_image = "minio/minio:RELEASE.2021-07-27T02-40-15Z"
  minio_vault_secret = {
    use_vault_provider        = false,
    vault_kv_policy_name      = "kv-secret",
    vault_kv_path             = "secret/data/minio",
    vault_kv_field_access_key = "access_key",
    vault_kv_field_secret_key = "secret_key"
  }
  minio_data_dir        = "/data/"
  minio_use_host_volume = true
  minio_use_canary      = true
  minio_envs            = ["MINIO_BROWSER=\"off\""]

  # minio client
  mc_job_name        = "prod-mc"
  mc_container_image = "minio/mc:RELEASE.2021-07-27T02-40-15Z"
  mc_extra_commands = [
    "mc policy set public LOCALMINIO/logs.fd.io",
    "mc policy set public LOCALMINIO/docs.fd.io",
    "mc ilm add --expiry-days '180' LOCALMINIO/logs.fd.io",
    "mc admin user add LOCALMINIO storage Storage1234",
    "mc admin policy set LOCALMINIO writeonly user=storage"
  ]
  minio_buckets = ["logs.fd.io", "docs.fd.io"]
}

module "nginx" {
  source = "./nginx"
  providers = {
    nomad = nomad.yul1
  }

  # nomad
  nomad_datacenters = ["yul1"]
  nomad_host_volume = "prod-volume-data1-1"

  # nginx
  nginx_job_name        = "prod-nginx"
  nginx_use_host_volume = true
}

module "prometheus" {
  source = "./prometheus"
  providers = {
    nomad = nomad.yul1
  }

  # nomad
  nomad_datacenters = ["yul1"]
  nomad_host_volume = "prod-volume-data1-1"

  # prometheus
  prometheus_job_name    = "prod-prometheus"
  prometheus_use_canary  = true
  prometheus_group_count = 4
  prometheus_vault_secret = {
    use_vault_provider        = false,
    vault_kv_policy_name      = "kv-secret",
    vault_kv_path             = "secret/data/prometheus",
    vault_kv_field_access_key = "access_key",
    vault_kv_field_secret_key = "secret_key"
  }
  prometheus_data_dir        = "/data/"
  prometheus_use_host_volume = true
  prometheus_version         = "2.28.1"
  prometheus_cpu             = 2000
  prometheus_mem             = 8192
  prometheus_port            = 9090
}

module "vpp_device" {
  source = "./vpp_device"
  providers = {
    nomad = nomad.yul1
  }

  # nomad
  nomad_datacenters = ["yul1"]

  # csit_shim
  csit_shim_job_name      = "prod-device-csit-shim"
  csit_shim_group_count   = "1"
  csit_shim_cpu           = "1500"
  csit_shim_mem           = "4096"
  csit_shim_image_aarch64 = "fdiotools/csit_shim-ubuntu2004:2021_03_02_143938_UTC-aarch64"
  csit_shim_image_x86_64  = "fdiotools/csit_shim-ubuntu2004:2021_03_04_142103_UTC-x86_64"
}