/**
 * Copyright 2022 Google LLC
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

# tfdoc:file:description Bucket and group backend services.

locals {
  backend_services_bucket = {
    for k, v in coalesce(var.backend_services_config, {}) :
    k => v if v.bucket_config != null
  }
  backend_services_group = {
    for k, v in coalesce(var.backend_services_config, {}) :
    k => v if v.group_config != null
  }
}

resource "google_compute_backend_bucket" "bucket" {
  for_each                = local.backend_services_bucket
  name                    = "${var.name}-${each.key}"
  description             = "Terraform managed."
  project                 = var.project_id
  bucket_name             = try(each.value.bucket_config.bucket_name, null)
  custom_response_headers = try(each.value.bucket_config.options.custom_response_headers, null)
  enable_cdn              = try(each.value.enable_cdn, null)

  dynamic "cdn_policy" {
    for_each = try(each.value.cdn_policy, null) == null ? [] : [each.value.cdn_policy]
    content {
      cache_mode                   = try(cdn_policy.value.cache_mode, null)
      client_ttl                   = try(cdn_policy.value.client_ttl, null)
      default_ttl                  = try(cdn_policy.value.default_ttl, null)
      max_ttl                      = try(cdn_policy.value.max_ttl, null)
      negative_caching             = try(cdn_policy.value.negative_caching, null)
      serve_while_stale            = try(cdn_policy.value.serve_while_stale, null)
      signed_url_cache_max_age_sec = try(cdn_policy.value.signed_url_cache_max_age_sec, null)

      dynamic "negative_caching_policy" {
        for_each = try(cdn_policy.value.negative_caching_policy, null) == null ? [] : [cdn_policy.value.negative_caching_policy]
        iterator = ncp
        content {
          code = ncp.value.code
          ttl  = ncp.value.ttl
        }
      }
    }
  }
}

resource "google_compute_backend_service" "group" {
  for_each                        = local.backend_services_group
  name                            = "${var.name}-${each.key}"
  project                         = var.project_id
  description                     = "Terraform managed."
  affinity_cookie_ttl_sec         = try(each.value.group_config.options.affinity_cookie_ttl_sec, null)
  enable_cdn                      = try(each.value.enable_cdn, null)
  custom_request_headers          = try(each.value.group_config.options.custom_request_headers, null)
  custom_response_headers         = try(each.value.group_config.options.custom_response_headers, null)
  connection_draining_timeout_sec = try(each.value.group_config.options.connection_draining_timeout_sec, null)
  load_balancing_scheme           = try(each.value.group_config.options.load_balancing_scheme, null)
  locality_lb_policy              = try(each.value.group_config.options.locality_lb_policy, null)
  port_name                       = try(each.value.group_config.options.port_name, null)
  protocol                        = try(each.value.group_config.options.protocol, null)
  security_policy                 = try(each.value.group_config.options.security_policy, null)
  session_affinity                = try(each.value.group_config.options.session_affinity, null)
  timeout_sec                     = try(each.value.group_config.options.timeout_sec, null)

  # If no health checks are defined, use the default one.
  # Otherwise, look in the health_checks_config map.
  # Otherwise, use the health_check id as is (already existing).
  health_checks = (
    try(length(each.value.group_config.health_checks), 0) == 0
    ? try(
      [google_compute_health_check.health_check["default"].id],
      null
    )
    : [
      for hc in each.value.group_config.health_checks :
      try(google_compute_health_check.health_check[hc].id, hc)
    ]
  )

  dynamic "backend" {
    for_each = try(each.value.group_config.backends, [])
    content {
      balancing_mode               = try(backend.value.options.balancing_mode, null)
      capacity_scaler              = try(backend.value.options.capacity_scaler, null)
      group                        = try(backend.value.group, null)
      max_connections              = try(backend.value.options.max_connections, null)
      max_connections_per_instance = try(backend.value.options.max_connections_per_instance, null)
      max_connections_per_endpoint = try(backend.value.options.max_connections_per_endpoint, null)
      max_rate                     = try(backend.value.options.max_rate, null)
      max_rate_per_instance        = try(backend.value.options.max_rate_per_instance, null)
      max_rate_per_endpoint        = try(backend.value.options.max_rate_per_endpoint, null)
      max_utilization              = try(backend.value.options.max_utilization, null)
    }
  }

  dynamic "circuit_breakers" {
    for_each = (
      try(each.value.group_config.options.circuit_breakers, null) == null
      ? []
      : [each.value.group_config.options.circuit_breakers]
    )
    iterator = cb
    content {
      max_requests_per_connection = try(cb.value.max_requests_per_connection, null)
      max_connections             = try(cb.value.max_connections, null)
      max_pending_requests        = try(cb.value.max_pending_requests, null)
      max_requests                = try(cb.value.max_requests, null)
      max_retries                 = try(cb.value.max_retries, null)
    }
  }

  dynamic "consistent_hash" {
    for_each = (
      try(each.value.group_config.options.consistent_hash, null) == null
      ? []
      : [each.value.group_config.options.consistent_hash]
    )
    content {
      http_header_name  = try(consistent_hash.value.http_header_name, null)
      minimum_ring_size = try(consistent_hash.value.minimum_ring_size, null)

      dynamic "http_cookie" {
        for_each = try(consistent_hash.value.http_cookie, null) == null ? [] : [consistent_hash.value.http_cookie]
        content {
          name = try(http_cookie.value.name, null)
          path = try(http_cookie.value.path, null)

          dynamic "ttl" {
            for_each = try(consistent_hash.value.ttl, null) == null ? [] : [consistent_hash.value.ttl]
            content {
              seconds = try(ttl.value.seconds, null) # Must be from 0 to 315,576,000,000 inclusive
              nanos   = try(ttl.value.nanos, null)   # Must be from 0 to 999,999,999 inclusive
            }
          }
        }
      }
    }
  }

  dynamic "cdn_policy" {
    for_each = (
      try(each.value.cdn_policy, null) == null
      ? []
      : [each.value.cdn_policy]
    )
    iterator = cdn_policy
    content {
      signed_url_cache_max_age_sec = try(cdn_policy.value.signed_url_cache_max_age_sec, null)
      default_ttl                  = try(cdn_policy.value.default_ttl, null)
      max_ttl                      = try(cdn_policy.value.max_ttl, null)
      client_ttl                   = try(cdn_policy.value.client_ttl, null)
      negative_caching             = try(cdn_policy.value.negative_caching, null)
      cache_mode                   = try(cdn_policy.value.cache_mode, null)
      serve_while_stale            = try(cdn_policy.value.serve_while_stale, null)

      dynamic "negative_caching_policy" {
        for_each = (
          try(cdn_policy.value.negative_caching_policy, null) == null
          ? []
          : [cdn_policy.value.negative_caching_policy]
        )
        iterator = ncp
        content {
          code = try(ncp.value.code, null)
          ttl  = try(ncp.value.ttl, null)
        }
      }
    }
  }

  dynamic "iap" {
    for_each = (
      try(each.value.group_config.options.iap, null) == null
      ? []
      : [each.value.group_config.options.iap]
    )
    content {
      oauth2_client_id            = try(iap.value.oauth2_client_id, null)
      oauth2_client_secret        = try(iap.value.oauth2_client_secret, null)        # sensitive
      oauth2_client_secret_sha256 = try(iap.value.oauth2_client_secret_sha256, null) # sensitive
    }
  }

  dynamic "log_config" {
    for_each = (
      try(each.value.group_config.log_config, null) == null
      ? []
      : [each.value.group_config.log_config]
    )
    content {
      enable      = try(log_config.value.enable, null)
      sample_rate = try(log_config.value.sample_rate, null)
    }
  }
}