job "internal-api-job" {
  datacenters = ["awsstg-us-west-2"]

  group "internal-api-group" {
    network {
      mode = "bridge"
      port "ca_port" {}
    }

    service {
      name = "ca-internal-api"
      port = "ca_port"

      connect {
        sidecar_service {}
      }

      check {
        type     = "http"
        port     = "ca_port"
        path     = "/healthcheck"
        interval = "60s"
        timeout  = "60s"
        check_restart {
          ignore_warnings = true
        }
      }
    }

    task "internal-api-task" {
      driver = "docker"

      vault {
        policies = ["internal-api-policy"]
      }

      config {
        image = "<ecr_arn>/internal-api:v1.0.0"
      }
    }
  }
}