# Terraform snippets
locals {

  versions = {
  }

  # Cluster app charts
  apps = {
    dynatrace-operator = {
      name       = "dynatrace-operator",
      chart      = "dynatrace-operator",
      namespace  = "dynatrace",
      repository = "https://raw.githubusercontent.com/Dynatrace/dynatrace-operator/main/config/helm/repos/stable",
      version    = "0.11.2"
    },
    awesome-cluster-dynatrace = {
      name       = "awesome-cluster-dynatrace",
      chart      = "awesome-cluster-dynatrace",
      namespace  = "dynatrace",
      repository = "https://alliander.github.io/k8s-alliander-charts",
      version    = "0.1.5"
    }
  }
}


resource "kubectl_manifest" "dynatrace-operator_application" {
  yaml_body = <<EOF
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: ${local.apps.dynatrace-operator.name}
  namespace: argocd
spec:
  destination:
    namespace: ${local.apps.dynatrace-operator.namespace}
    server: https://kubernetes.default.svc
  project: default
  source:
    targetRevision: "${local.apps.dynatrace-operator.version}"
    repoURL: "${local.apps.dynatrace-operator.repository}"
    chart: "${local.apps.dynatrace-operator.chart}"
    helm:
      parameters:
      - name: "infraOnly.enabled"
        value: "true"
      values: |
        ${indent(8, templatefile("${path.module}/cluster-apps/dynatrace-operator-values.yaml", { clusterName = var.cluster_name, accountName = local.current_account }))}
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
    - CreateNamespace=true
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: privileged
        pod-security.kubernetes.io/warn: baseline
EOF
  depends_on = [
    null_resource.kubernetes_base_system_ready
  ]
}

resource "null_resource" "dynatrace-operator_argocd_application_health" {
  provisioner "local-exec" {
    command     = "${path.module}/scripts/healthcheck.sh ${local.apps.dynatrace-operator.name}"
    interpreter = ["/bin/bash", "-c"]
    environment = {
      KUBERNETES_TOKEN  = nonsensitive(data.aws_eks_cluster_auth.cluster.token)
      KUBERNETES_SERVER = module.eks.cluster_endpoint
    }
  }

  triggers = {
    checksum = filemd5("${path.module}/scripts/healthcheck.sh")
    manifest = md5(kubectl_manifest.dynatrace-operator_application.yaml_body_parsed)
  }
}


resource "kubectl_manifest" "awesome-cluster-dynatrace" {
  yaml_body = <<EOF
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: ${local.apps.awesome-cluster-dynatrace.name}
  namespace: argocd
spec:
  destination:
    namespace: ${local.apps.awesome-cluster-dynatrace.namespace}
    server: https://kubernetes.default.svc
  project: default
  source:
    targetRevision: "${local.apps.awesome-cluster-dynatrace.version}"
    repoURL: "${local.apps.awesome-cluster-dynatrace.repository}"
    chart: "${local.apps.awesome-cluster-dynatrace.chart}"
    helm:
      parameters:
      - name: "infraOnly.enabled"
        value: "true"    
      values: |
        ${indent(8, templatefile("${path.module}/cluster-apps/awesome-cluster-dynatrace-values.yaml", { clusterName = var.cluster_name }))}
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
    - CreateNamespace=true
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: privileged
        pod-security.kubernetes.io/warn: baseline
EOF
  depends_on = [
    null_resource.kubernetes_base_system_ready
  ]
}





# Begin dynatrace-operator-values.yaml
# Copyright 2021 Dynatrace LLC

# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://www.apache.org/licenses/LICENSE-2.0

# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# may be set to "kubernetes", "openshift", or "gke-autopilot"
platform: "kubernetes"

image: ""
customPullSecret: ""
installCRD: true

operator:
  nodeSelector:
    type: infra
  tolerations:
    - key: node.kubernetes.io/infra
      operator: Exists
  labels: []
  annotations: []
  apparmor: false
  requests:
    cpu: 50m
    memory: 64Mi
  limits:
    cpu: 100m
    memory: 128Mi

webhook:
  hostNetwork: false
  nodeSelector:
    type: infra
  tolerations:
    - key: node.kubernetes.io/infra
      operator: Exists
  labels: []
  annotations: []
  apparmor: false
  requests:
    cpu: 300m
    memory: 128Mi
  limits:
    cpu: 300m
    memory: 128Mi
  highAvailability: true

csidriver:
  enabled: true
  nodeSelector:
    type: infra
  kubeletPath: "/var/lib/kubelet"
  existingPriorityClassName: "" # if defined, use this priorityclass instead of creating a new one
  priorityClassValue: "1000000"
  maxUnmountedVolumeAge: "" # defined in days, must be a plain number
  tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
      operator: Exists
    - effect: NoSchedule
      key: node-role.kubernetes.io/control-plane
      operator: Exists
    - key: node.kubernetes.io/infra
      operator: Exists
  labels: []
  annotations: []
  server:
    resources:
      requests:
        cpu: 50m
        memory: 100Mi
      limits:
        cpu: 50m
        memory: 100Mi
  provisioner:
    resources:
      requests:
        cpu: 300m
        memory: 100Mi
      limits:
        cpu: 300m
        memory: 100Mi
  registrar:
    resources:
      requests:
        cpu: 20m
        memory: 30Mi
      limits:
        cpu: 20m
        memory: 30Mi
  livenessprobe:
    resources:
      requests:
        cpu: 20m
        memory: 30Mi
      limits:
        cpu: 20m
        memory: 30Mi

securityContextConstraints:
  enabled: false # Only applicable for Openshift
  
# end dynatrace-operator-values.yaml



# awesome-cluster-dynatrace-values.yaml
---
clusterName: ${clusterName}
apiUrlDevelopment: "https://12345.live.dynatrace.com/api"
apiUrlProduction: "https://67890.live.dynatrace.com/api"

# End awesome-cluster-dynatrace-values.yaml

############ End terraform code.



# Here is our custom HELM chart:
# file templates/dynakube.yaml
# Bake your own from the following files
apiVersion: dynatrace.com/v1beta1
kind: DynaKube
metadata:
  name: {{.Values.clusterName}}
  namespace: dynatrace
  annotations:
    feature.dynatrace.com/automatic-kubernetes-api-monitoring: "true"
    # enable build label propagation
    # See https://www.dynatrace.com/support/help/setup-and-configuration/setup-on-container-platforms/kubernetes/get-started-with-kubernetes-monitoring/dto-config-options-k8s#propagation
    feature.dynatrace.com/label-version-detection: "true"
    # Set sync time to 5 minutes
    feature.dynatrace.com/dynatrace-api-request-threshold: "5"
spec:
  {{- if eq "awesome-cluster-name" $.Values.awsAccount }}
  apiUrl: {{.Values.apiUrlDevelopment}}
  {{ else }}
  apiUrl: {{.Values.apiUrlProduction}}
  {{ end }}
  skipCertCheck: true
  networkZone: {{.Values.clusterName}}
  oneAgent:
    # See https://www.dynatrace.com/support/help/setup-and-configuration/setup-on-container-platforms/kubernetes/get-started-with-kubernetes-monitoring/deployment-options-k8s
    # classicFullStack is recommended!
    classicFullStack:
      image:
      
      tolerations:
        - operator: Exists
      autoUpdate: true
      env:
        - name: ONEAGENT_ENABLE_VOLUME_STORAGE
          value: "false"
      args:
        - --set-host-group={{.Values.clusterName}}
        - --set-infra-only=true
  activeGate:
    capabilities:
      - routing
      - kubernetes-monitoring
      - metrics-ingest
      - dynatrace-api
    image: ""
    replicas: 3
    tolerations:
      - key: node.kubernetes.io/infra
        operator: Exists
    nodeSelector:
      type: infra
    resources:
      requests:
        cpu: 500m
        memory: 512Mi
      limits:
        cpu: 1000m
        memory: 1.5Gi

    group: {{.Values.clusterName}}


# file templates/externalsecret.yaml
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: {{.Values.clusterName}}
  namespace: dynatrace
spec:
  secretStoreRef:
    name: default
    kind: ClusterSecretStore
  refreshInterval: "1h"
  target:
    name: {{.Values.clusterName}}
  data:
  - secretKey: apiToken
    remoteRef: 
      key: /dynatrace/operator-{{ required "No AWS Account provided!" .Values.awsAccount }}
  - secretKey: dataIngestToken
    remoteRef: 
      key: /dynatrace/data-ingest-{{ required "No AWS Account provided!" .Values.awsAccount }}
  - secretKey: readAPIToken
    remoteRef: 
      key: /dynatrace/read_api-{{ required "No AWS Account provided!" .Values.awsAccount }}    
    
file Chart.yaml
apiVersion: v2
version: 0.1.5
name: awesome-cluster-dynatrace

file values.yaml
---
apiUrlDevelopment: https://123456.live.dynatrace.com/api
apiUrlProduction: https://somedayinthefuture.live.dynatrace.com/api
awsAccount: yourAWSaccountname
clusterName: yourkuberntescluster