module "external-secrets-operator" {
  source = "../../modules/app"

  kubeconfig_path = module.kubeconfig.path
  workflow        = "deploy-new-region-next-gen-external-secrets-operator.yaml"
  parameters = {
    cloud                   = "alicloud"
    env                     = var.env
    region                  = var.cloud_region
    cluster                 = local.cluster_name
    logicalRegionName       = var.logical_region_name
    alicloudRoleArn         = module.ram.external_secrets_operator_role_arn
    alicloudOidcProviderArn = module.ack.oidc_arn
  }
  services = [
    {
      name      = "deploy/external-secrets"
      namespace = "external-secrets"
      wait_for  = "jsonpath='{.status.availableReplicas}'=REPLICAS"
    },
    {
      name      = "deploy/external-secrets-cert-controller"
      namespace = "external-secrets"
      wait_for  = "jsonpath='{.status.availableReplicas}'=REPLICAS"
    },
    {
      name      = "deploy/external-secrets-webhook"
      namespace = "external-secrets"
      wait_for  = "jsonpath='{.status.availableReplicas}'=REPLICAS"
    }
  ]
}