# resource "stackit_kms_keyring" "keyring" {
#   project_id   = var.project_id
#   display_name = "msh-keyring01"
#   description  = "This is a test keyring for private endpoints"
# }
#
# resource "stackit_kms_key" "key" {
#   project_id   = var.project_id
#   keyring_id   = stackit_kms_keyring.keyring.keyring_id
#   display_name = "msh-key01"
#   protection   = "software"
#   algorithm    = "aes_256_gcm"
#   purpose      = "symmetric_encrypt_decrypt"
#   access_scope = "SNA"
# }
#
# output "keyid" {
#   value = stackit_kms_key.key.key_id
# }

resource "stackitprivatepreview_sqlserverflexbeta_instance" "msh-beta-sna-001" {
  project_id      = var.project_id
  name            = "msh-beta-sna-001"
  backup_schedule = "0 3 * * *"
  retention_days  = 31
  flavor_id       = data.stackitprivatepreview_sqlserverflexbeta_flavor.sqlserver_flavor.flavor_id
  storage = {
    class = "premium-perf2-stackit"
    size  = 10
  }
  version = 2022
  encryption = {
    #key_id     = stackit_kms_key.key.key_id
    #keyring_id = stackit_kms_keyring.keyring.keyring_id
    #key_version     = 1
    # key with scope public
    # kek_key_id          = "fe039bcf-8d7b-431a-801d-9e81371a6b7b"
    kek_key_id          = "c6878f92-ce55-4b79-8236-ba9d001d7967" # msh-k-001
    # key_id          = var.key_id
    # kek_key_ring_id      = var.keyring_id
    kek_key_ring_id      = "0dea3f5f-9947-4dda-a9d3-18418832cefe" # msh-kr-sna01
    kek_key_version     = var.key_version
    service_account = var.sa_email
  }
  network = {
    acl          = ["0.0.0.0/0", "193.148.160.0/19"]
    access_scope = "SNA"
  }
}

resource "stackitprivatepreview_sqlserverflexbeta_user" "betauser" {
  project_id  = var.project_id
  instance_id = stackitprivatepreview_sqlserverflexbeta_instance.msh-beta-sna-001.instance_id
  username    = "betauser"
  roles       = ["##STACKIT_DatabaseManager##", "##STACKIT_LoginManager##"]
}

resource "stackitprivatepreview_sqlserverflexbeta_database" "betadb" {
  project_id    = var.project_id
  instance_id   = stackitprivatepreview_sqlserverflexbeta_instance.msh-beta-sna-001.instance_id
  name = "mshtest002"
  owner = stackitprivatepreview_sqlserverflexbeta_user.betauser.username
}