ms_ca.tf

data "template_file" "ms_ca_init" {
  template = file(var.ms_ca_install_script_tpl)

  vars = {
    ud_domain = var.domain_full

    ud_sched_task_path = var.ps_sched_task_path
    ud_sched_task_name = var.ms_ca_sched_task_name
    ud_sched_task_username = var.user_cert_server_da_username
    ud_sched_task_pass = var.user_cert_server_da_pass

    ud_user_domain_join_username = var.user_domain_join_username
    ud_user_domain_join_pass = var.user_domain_join_pass

    ud_machine_hostname = var.ms_ca_hostname
    ud_machine_local_admin_pass = var.ms_ca_local_admin_pass
    ud_machine_install_script_path = var.ps_install_script_path
    ud_machine_transcript_path = var.ps_transcript_path
  }
}

resource "aws_instance" "windows_ms_ca" {
  ami = data.aws_ami.windows.id
  instance_type = var.instance_type
  subnet_id = aws_subnet.network_subnet.id
  private_ip = var.ms_ca_ip
  security_groups = [aws_security_group.network_secgroup.id]
  key_name = aws_key_pair.deployer.key_name
  get_password_data = "true"
  
  user_data = data.template_file.ms_ca_init.rendered

  tags = {
    Name = var.ms_ca_hostname
  }
}

output "ms_ca_password" {
  value = rsadecrypt(aws_instance.windows_ms_ca.password_data, file(var.ssh_key_private_path))
}