# resource "stackit_kms_keyring" "keyring001" {
#   project_id   = var.project_id
#   display_name = "msh-keyring-sna01"
#   description  = "This is a test keyring for private endpoints"
# }
#
# resource "stackit_kms_key" "key001" {
#   project_id   = var.project_id
#   keyring_id   = stackit_kms_keyring.keyring001.keyring_id
#   display_name = "msh-key-sna01"
#   protection   = "software"
#   algorithm    = "aes_256_gcm"
#   purpose      = "symmetric_encrypt_decrypt"
#   access_scope = "SNA"
# }

data "stackitprivatepreview_sqlserverflexbeta_flavor" "sqlserver_flavor" {
  project_id    = var.project_id
  region        = "eu01"
  cpu           = 4
  ram           = 16
  node_type     = "Single"
  storage_class = "premium-perf2-stackit"
}

resource "stackitprivatepreview_sqlserverflexbeta_instance" "msh-sna-001" {
  project_id      = var.project_id
  name            = "msh-sna-001"
  backup_schedule = "0 3 * * *"
  retention_days  = 31
  flavor_id       = data.stackitprivatepreview_sqlserverflexbeta_flavor.sqlserver_flavor.flavor_id
  storage = {
    class = "premium-perf2-stackit"
    size  = 50
  }
  version = 2022
  encryption = {
    kek_key_version = 1
    kek_key_id      = var.key_id
    kek_key_ring_id = var.keyring_id
    service_account = var.sa_email
  }
  network = {
    acl          = ["0.0.0.0/0", "193.148.160.0/19"]
    access_scope = "SNA"
  }
}

#resource "stackitprivatepreview_sqlserverflexbeta_instance" "msh-nosna-001" {
#  project_id      = var.project_id
#  name            = "msh-nosna-001"
#  backup_schedule = "0 3 * * *"
#  retention_days  = 31
#  flavor_id       = data.stackitprivatepreview_sqlserverflexbeta_flavor.sqlserver_flavor.flavor_id
#  storage = {
#    class = "premium-perf2-stackit"
#    size  = 50
#  }
#  version = 2022
#  # encryption = {
#  #   #key_id     = stackit_kms_key.key.key_id
#  #   #keyring_id = stackit_kms_keyring.keyring.keyring_id
#  #   #key_version     = 1
#  #   #key_id          = var.key_id
#  #   # key with scope public
#  #   key_id          = "fe039bcf-8d7b-431a-801d-9e81371a6b7b"
#  #   keyring_id      = var.keyring_id
#  #   key_version     = var.key_version
#  #   service_account = var.sa_email
#  # }
#  network = {
#    acl          = ["0.0.0.0/0", "193.148.160.0/19"]
#    access_scope = "PUBLIC"
#  }
#}

# data "stackitprivatepreview_sqlserverflexbeta_instance" "test" {
#   project_id = var.project_id
#   instance_id = var.instance_id
#   region = "eu01"
# }

# output "test" {
#   value = data.stackitprivatepreview_sqlserverflexbeta_instance.test
# }

resource "stackitprivatepreview_sqlserverflexbeta_user" "ptlsdbadminuser" {
  project_id  = var.project_id
  instance_id = stackitprivatepreview_sqlserverflexbeta_instance.msh-sna-001.instance_id
  username    = var.db_admin_username
  #roles       = ["##STACKIT_LoginManager##", "##STACKIT_DatabaseManager##"]
  roles       = ["##STACKIT_LoginManager##"]
}

resource "stackitprivatepreview_sqlserverflexbeta_user" "ptlsdbuser" {
  project_id  = var.project_id
  instance_id = stackitprivatepreview_sqlserverflexbeta_instance.msh-sna-001.instance_id
  username    = var.db_username
  roles       = ["##STACKIT_LoginManager##"]
}