terraform {
  required_providers {
    alicloud = {
      source  = "aliyun/alicloud"
      version = "1.261.0"
    }
  }

  backend "oss" {
    profile = "default"
  }
}
provider "alicloud" {
  profile = "default"
}

variable "oidc_issuer" {
  type = string
}

variable "oidc_arn" {
  type = string
}

variable "env" {
  type = string
}

variable "logical_region_name" {
  type = string
}

variable "auto_deploy_owner_tag" {
  type = string
}

module "exeternal-secrets-operator" {
  source = "../../modules/controlplane"

  oidc_issuer   = var.oidc_issuer
  oidc_arn      = var.oidc_arn
  role_name     = "${var.env}-${var.logical_region_name}-exeternal-secrets-operator"
  service_names = ["exeternal-secret-operator"]
  system_policies = [
    "AliyunCSFullAccess",
    "AliyunKMSFullAccess",
  ]
  auto_deploy_owner_tag = var.auto_deploy_owner_tag
}

output "role_id" {
  value = module.exeternal-secrets-operator.controlplane_role_id
}

output "role_name" {
  value = module.exeternal-secrets-operator.controlplane_role_name
}

output "role_arn" {
  value = module.exeternal-secrets-operator.controlplane_role_arn
}