resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_host" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__host"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.host, "${each.key}-redis-svc.${coalesce(each.value.namespace, each.value.connected_namespace, each.key)}.svc")
}

resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_port" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__port"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.port, 5432)
}

##
## Commenting until I use the redis password option
##
#resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_password" {
#  for_each        = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
#  key             = "${each.key}__redis__password"
#  project_id      = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
#  length          = 32
#  special         = true
#  min_special     = 5
#  avoid_ambiguous = true
#}

resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_REPLICATION_MODE" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__REPLICATION_MODE"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.REPLICATION_MODE, "master")
}

resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_TLS_ENABLED" {
  for_each   = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  key        = "${each.key}__redis__TLS_ENABLED"
  project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
  value      = try(each.value.redis.TLS_ENABLED, "no")
}

resource "kubernetes_secret_v1" "automatic-redis-secret" {
  for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
  metadata {
    name      = "${each.key}-redis-terraform"
    namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
  }

  data = {
    REDIS_HOSTNAME         = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_host[each.key].value}"
    REDIS_PORT             = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_port[each.key].value}"
    REDIS_REPLICATION_MODE = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_REPLICATION_MODE[each.key].value}"
    REDIS_TLS_ENABLED      = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_TLS_ENABLED[each.key].value}"
  }

}



resource "kubernetes_deployment_v1" "redis-automatic" {
  for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }


  metadata {
    namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
    name      = "${coalesce(each.value.name, each.key)}-redis"
    labels = {
      app               = each.key
      deployment_method = "Terraform"
      redis             = "true"
    }
  }

  spec {
    replicas = each.value.replicas

    selector {
      match_labels = {
        app = "${each.key}-redis"
      }
    }

    template {
      metadata {
        labels = {
          app               = "${each.key}-redis"
          deployment_method = "Terraform"
          redis             = "true"
        }
      }

      spec {
        container {
          image = try(each.value.redis.image, "docker.io/library/redis:7")
          name  = "${coalesce(each.value.name, each.key)}-redis"
          port {

            container_port = 6379
            name           = "redis-port"

          }

          volume_mount {
            mount_path = "/data"
            name       = "${each.key}-redis-pvc"
          }





          dynamic "env" {
            for_each = each.value.environment != null ? each.value.environment : {}
            content {
              name  = env.key
              value = env.value.value != null ? env.value.value : null
              dynamic "value_from" {
                for_each = env.value.value_from != null ? env.value.value_from : {}
                content {
                  dynamic "secret_key_ref" {
                    for_each = [1]
                    content {
                      name = env.value.value_from.secret_key_ref.name
                      key  = env.value.value_from.secret_key_ref.key
                      #                    optional = true
                    }
                  }
                }
              }

            }
          }


          #          resources {
          #            limits = {
          #              cpu    = each.value.requirements.limits-cpu
          #              memory = each.value.requirements.limits-memory
          #            }
          #            requests = {
          #              cpu    = each.value.requirements.requests-cpu
          #              memory = each.value.requirements.requests-memory
          #            }
          #          }

          #          dynamic "liveness_probe" {
          #            for_each = each.value.liveness_tcp_socket != null || each.value.liveness_http_get != null ? [""] : []
          #           content {
          #              dynamic "tcp_socket" {
          #                for_each = each.value.liveness_tcp_socket != null ? [""] : []
          #                content {
          #                  port = each.value.liveness_tcp_socket
          #                }
          #              }


          #              dynamic "http_get" {
          #                for_each = each.value.liveness_http_get != null ? [""] : []
          #                content {
          #                  port = each.value.liveness_http_get
          #                  path = coalesce(each.value.liveness_http_get_path, "/")
          #                }
          #              }

          #              initial_delay_seconds = 3
          #              period_seconds        = 3
          #            }
          #          }
        }


        volume {
          name = "${each.key}-redis-pvc"
          persistent_volume_claim {
            claim_name = "${each.key}-redis-pvc"
          }
        }

      }
    }
  }
}