import pulumi
import pulumi_aws as aws
import pulumi_awsx as awsx
import os

# Load the environment variables
PYPI_INDEX_URL = os.environ.get("PYPI_INDEX_URL")
# TODO: Get PYPI_INDEX_URL using Pulumi instead
# TODO: I have run export DOCKER_SCAN_SUGGEST=false to get rid of the warning. Need to fix vulnerabilities

# Get default VPC
vpc = aws.ec2.DefaultVpc('default')


# Create a SecurityGroup that allows HTTP ingress and unrestricted egress
web_sg = aws.ec2.SecurityGroup(
    'web-secgrp',
    vpc_id=vpc.id,
    ingress=[{
        'protocol': 'tcp',
        'from_port': 80,
        'to_port': 80,
        'cidr_blocks': ['0.0.0.0/0'],
    }]
)

# Create an RDS SecurityGroup that allows PostgreSQL egress from the Web SecurityGroup
rds_sg = aws.ec2.SecurityGroup(
    'rds-secgrp',
    egress=[aws.ec2.SecurityGroupEgressArgs(protocol='-1', from_port=0, to_port=0, cidr_blocks=['0.0.0.0/0'])],
    ingress=[aws.ec2.SecurityGroupIngressArgs(
        protocol='tcp', from_port=5432, to_port=5432, security_groups=[web_sg]),
    ]
)


# Create an AWS RDS PostgreSQL database
database = aws.rds.Instance(
    "turnstaydb",
    engine="postgres",
    engine_version = '14.7',
    instance_class="db.t3.micro",
    allocated_storage=20,
    name="turnstaybd",
    username="postgres",
    password="G1v*y3#i13P9",
    publicly_accessible=True,
    skip_final_snapshot=True,
    vpc_security_group_ids=[rds_sg.id]
)




# An ECS Fargate cluster
cluster = aws.ecs.Cluster("TurnStayCluster")


# Creating a ECR Repository
repository = awsx.ecr.Repository("TunStayAPIRepository")

#Creating a ECR Image
image = awsx.ecr.Image("tunstay-api-image",
    repository_url=repository.url,
    args ={"PYPI_INDEX_URL": PYPI_INDEX_URL},
    path="../"
    )

# Create the AWS Load Balancer
lb = awsx.lb.ApplicationLoadBalancer(
    "TurnStayLoadBalancer",
    )


# Task definition for the Fargate service
task_def = awsx.ecs.FargateTaskDefinition(
    "TurnStayApiTaskDef",
    containers={
        "TurnStayApi": awsx.ecs.TaskDefinitionContainerDefinitionArgs(
            image=image.image_uri,
            memory=128,
            cpu=512,
            essential=True,
            port_mappings=[awsx.ecs.TaskDefinitionPortMappingArgs(target_group=lb.default_target_group,)],
            environment =[
                {
                    "name": database.endpoint,
                    "value": "<http://turnstay-staging-database-1.cwxi1s8c9ygu.eu-west-1.rds.amazonaws.com|turnstay-staging-database-1.cwxi1s8c9ygu.eu-west-1.rds.amazonaws.com>"
                },
                {
                    "name": database.username,
                    "value": "postgres"
                },
                {
                    "name": "DEFAULT_DATABASE_PORT",
                    "value": "5432"
                },
                {
                    "name": "DEFAULT_DATABASE_DB",
                    "value": "postgres"
                },
                {
                    "name": "DEFAULT_DATABASE_PASSWORD",
                    "value": "G1v*y3#i13P9"
                },
                {
                    "name": "ENVIRONMENT",
                    "value": "STG"
                }
            ],
            secrets=[],
        ),
    },
)


# Create a Fargate service
fargate_service = awsx.ecs.FargateService(
    "TurnStayAPIService",
    cluster=cluster,
    task_definition=task_def,
    desired_count=1,
    assign_public_ip=True,
    # network_configuration=aws.ecs.ServiceNetworkConfigurationArgs(
    #     assign_public_ip=True,
    #     security_groups=[web_sg.id],
    # ),
)