variable "oidc_issuer" {
  type = string
}

variable "oidc_arn" {
  type = string
}

variable "env" {
  type = string
}

variable "logical_region_name" {
  type = string
}

variable "auto_deploy_owner_tag" {
  type = string
}

module "dataplane-manager" {
  source = "../../ram_modules/controlplane"

  oidc_issuer = var.oidc_issuer
  oidc_arn    = var.oidc_arn
  role_name   = "${var.env}-${var.logical_region_name}-dataplane-manager"
  service_names = [
    "dataplane-manager:dataplane-manager",
    "cluster-ng-service:cluster-ng-server",
    "crossplane-system:alibabacloud-provider",
    "observability:o11y-agent-control-server",
    "ticdc-service:ticdc-service",
    "traffic-replay:traffic-replay",
  ]
  system_policies = [
    "AliyunOSSReadOnlyAccess",
    "AliyunCSReadOnlyAccess",
    "AliyunSTSAssumeRoleAccess",
    "AliyunOSSFullAccess"
  ]
  auto_deploy_owner_tag = var.auto_deploy_owner_tag
}

output "role_id" {
  value = module.dataplane-manager.controlplane_role_id
}

output "role_name" {
  value = module.dataplane-manager.controlplane_role_name
}

output "role_arn" {
  value = module.dataplane-manager.controlplane_role_arn
}