# without encryption and SNA
resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  name            = "example-instance"
  backup_schedule = "0 3 * * *"
  retention_days  = 31
  flavor_id       = "flavor_id"
  storage = {
    class = "premium-perf2-stackit"
    size  = 50
  }
  version = 2022
  network = {
    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
    access_scope = "SNA"
  }
}

# without encryption and PUBLIC
resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  name            = "example-instance"
  backup_schedule = "0 3 * * *"
  retention_days  = 31
  flavor_id       = "flavor_id"
  storage = {
    class = "premium-perf2-stackit"
    size  = 50
  }
  version = 2022
  network = {
    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
    access_scope = "PUBLIC"
  }
}

# with encryption and SNA
resource "stackitprivatepreview_sqlserverflexbeta_instance" "instance" {
  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  name            = "example-instance"
  backup_schedule = "0 3 * * *"
  retention_days  = 31
  flavor_id       = "flavor_id"
  storage = {
    class = "premium-perf2-stackit"
    size  = 50
  }
  version = 2022
  encryption = {
    kek_key_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
    kek_key_ring_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
    kek_key_version = 1
    service_account = "service_account@email"
  }
  network = {
    acl          = ["XXX.XXX.XXX.X/XX", "XX.XXX.XX.X/XX"]
    access_scope = "SNA"
  }
}


# Only use the import statement, if you want to import an existing sqlserverflex instance
import {
  to = stackitprivatepreview_sqlserverflexalpha_instance.import-example
  id = "${var.project_id},${var.region},${var.sql_instance_id}"
}

# import with identity
import {
  to = stackitprivatepreview_sqlserverflexalpha_instance.import-example
  identity = {
    project_id  = var.project_id
    region      = var.region
    instance_id = var.sql_instance_id
  }
}