variables.tf

variable "workspace_id" {
  type        = string
  description = "Databricks Workspace ID"
}

variable "sp_client_id_secret_name" {
  type        = string
  description = "The name of Azure Key Vault secret that contains ClientID of Service Principal to access in Azure Key Vault"
}

variable "sp_key_secret_name" {
  type        = string
  description = "The name of Azure Key Vault secret that contains client secret of Service Principal to access in Azure Key Vault"
}

variable "tenant_id_secret_name" {
  type        = string
  description = "The name of Azure Key Vault secret that contains tenant ID secret of Service Principal to access in Azure Key Vault"
}

variable "key_vault_id" {
  type        = string
  description = "ID of the Key Vault instance where the Secret resides"
}

variable "pat_token_lifetime_seconds" {
  type        = number
  description = "The lifetime of the token, in seconds. If no lifetime is specified, the token remains valid indefinitely"
  default     = 315569520
}

variable "users" {
  type        = list(string)
  description = "List of users to access Databricks"
  default     = []
}

variable "permissions" {
  type        = list(map(string))
  description = "Databricks Workspace permission maps"
  default = [
    {
      object_id = null
      role      = null
    }
  ]
}

# Shared autoscaling cluster config variables
variable "cluster_nodes_availability" {
  type        = string
  description = "Availability type used for all subsequent nodes past the first_on_demand ones: [SPOT_AZURE|SPOT_WITH_FALLBACK_AZURE|ON_DEMAND_AZURE]"
  default     = null
}

variable "first_on_demand" {
  type        = number
  description = "The first first_on_demand nodes of the cluster will be placed on on-demand instances: [[:number]]"
  default     = 0
}

variable "spot_bid_max_price" {
  type        = number
  description = "The max price for Azure spot instances. Use -1 to specify lowest price."
  default     = -1
}

variable "autotermination_minutes" {
  type        = number
  description = "Automatically terminate the cluster after being inactive for this time in minutes. If not set, Databricks won't automatically terminate an inactive cluster. If specified, the threshold must be between 10 and 10000 minutes. You can also set this value to 0 to explicitly disable automatic termination."
  default     = 15
}

variable "min_workers" {
  type        = number
  description = "The minimum number of workers to which the cluster can scale down when underutilized. It is also the initial number of workers the cluster will have after creation."
  default     = 1
}

variable "max_workers" {
  type        = number
  description = "The maximum number of workers to which the cluster can scale up when overloaded. max_workers must be strictly greater than min_workers."
  default     = 2
}

variable "data_security_mode" {
  type        = string
  description = "Security features of the cluster"
  default     = "NONE"
  validation {
    condition     = contains(["SINGLE_USER", "USER_ISOLATION", "NONE"], var.data_security_mode)
    error_message = "Catalog Access mode must be either 'SINGLE_USER', 'USER_ISOLATION' or 'NONE' value"
  }
}

variable "single_user_name" {
  type        = string
  description = "single user cluster mode"
  default     = null
}

variable "custom_default_cluster_name" {
  type        = string
  description = "Databricks cluster name, which does not have to be unique"
  default     = null
}

variable "spark_version" {
  type        = string
  description = "Runtime version"
  default     = "11.3.x-scala2.12"
}

variable "spark_conf" {
  type        = map(any)
  description = "Map with key-value pairs to fine-tune Spark clusters, where you can provide custom Spark configuration properties in a cluster configuration."
  default     = {}
}

variable "spark_env_vars" {
  type        = map(any)
  description = "Map with environment variable key-value pairs to fine-tune Spark clusters. Key-value pairs of the form (X,Y) are exported (i.e., X='Y') while launching the driver and workers."
  default     = {}
}

variable "cluster_log_conf_destination" {
  type        = string
  description = "Provide a dbfs location to push all cluster logs to certain location"
  default     = ""
  validation {
    condition     = length(var.cluster_log_conf_destination) == 0 ? true : startswith(var.cluster_log_conf_destination, "dbfs:/")
    error_message = "Provide valid path to dbfs logs folder, example: 'dbfs:/logs'"
  }
}

variable "node_type" {
  type        = string
  description = "Databricks_node_type id"
  default     = "Standard_D3_v2"
}

variable "mountpoints" {
  type = map(object({
    storage_account_name = string
    container_name       = string
  }))
  description = "Mountpoints for databricks"
  default     = {}
}

# Secret Scope variables
variable "secret_scope" {
  type = list(object({
    scope_name = string
    acl = optional(list(object({
      principal  = string
      permission = string
    })))
    secrets = optional(list(object({
      key          = string
      string_value = string
    })))
  }))
  description = <<-EOT
Provides an ability to create custom Secret Scope, store secrets in it and assigning ACL for access management
scope_name - name of Secret Scope to create;
acl - list of objects, where 'principal' custom group name, this group is created in 'Premium' module; 'permission' is one of "READ", "WRITE", "MANAGE";
secrets - list of objects, where object's 'key' param is created key name and 'string_value' is a value for it;
EOT
  default = [{
    scope_name = null
    acl        = null
    secrets    = null
  }]
}

# At the nearest future, Azure will allow acquiring AAD tokens by service principals,
# thus providing an ability to create Azure backed Key Vault with Terraform
# https://github.com/databricks/terraform-provider-databricks/pull/1965

#variable "key_vault_secret_scope" {
#  type = object({
#    key_vault_id = string
#    dns_name     = string
#  })
# description = "Object with Azure Key Vault parameters required for creation of Azure-backed Databricks Secret scope"
#  default = {
#    key_vault_id = null
#    dns_name     = null
#  }
#}