resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_host" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__host"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.host, "${each.key}-redis-svc.${coalesce(each.value.namespace, each.value.connected_namespace, each.key)}.svc")
}

resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_port" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__port"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.port, 5432)
}

##
## Commenting until I use the redis password option
##
#resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_password" {
#  for_each        = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
#  key             = "${each.key}__redis__password"
#  project_id      = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
#  length          = 32
#  special         = true
#  min_special     = 5
#  avoid_ambiguous = true
#}

resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_REPLICATION_MODE" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__REPLICATION_MODE"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.REPLICATION_MODE, "master")
}

resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_TLS_ENABLED" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__TLS_ENABLED"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.TLS_ENABLED, "no")
}

resource "kubernetes_secret_v1" "automatic-redis-secret" {
  for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  metadata {
    name      = "${each.key}-redis-terraform"
    namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
  }

  data = {
    REDIS_HOSTNAME         = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_host[each.key].value}"
    REDIS_PORT             = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_port[each.key].value}"
    REDIS_REPLICATION_MODE = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_REPLICATION_MODE[each.key].value}"
    REDIS_TLS_ENABLED      = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_TLS_ENABLED[each.key].value}"
  }

}