locals {
  jumpserver_role_name = var.env == "prod" ? "dbaas-prod-devops" : "dbaas-dev"
  jumpserver_role_arn  = "arn:aws:iam::${local.seed_account}:role/${local.jumpserver_role_name}"
}

module "jumpserver" {
  source = "../../modules/app"

  kubeconfig_path = module.kubeconfig.path
  workflow        = "new-jump-server-dst.yaml"
  parameters = {
    env  = var.env
    name = "seed-${var.logical_region_name}"
    destination = templatefile("${path.module}/jumpserver_destination.yml.tpl", {
      name            = "seed-${var.logical_region_name}"
      cluster         = local.eks.name
      endpoint        = local.eks.endpoint
      region          = var.aws_region
      jumpserver_role = local.jumpserver_role_arn
    })
  }
}