vynil/domain
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
Sébastien Huss
2023-10-07 23:18:55 +02:00
parent 6e53fbe2fa
commit 0079b399d3
2 changed files with 51 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
share/dataset-pg/roles.tf
View File

@@ -1,5 +1,11 @@
locals {
sorted-roles = reverse(distinct(sort(var.roles)))
sorted-roles-name = reverse(distinct(sort(var.roles.name)))
sorted-roles = flatten([
for name in local.sorted-roles-name: [
for r in var.roles:
r if r.name == name
]
])
}
resource "kubectl_manifest" "db_secret_role" {
@@ -9,13 +15,13 @@ resource "kubectl_manifest" "db_secret_role" {
apiVersion: "secretgenerator.mittwald.de/v1alpha1"
kind: "StringSecret"
metadata:
name: "${var.instance}-${var.component}-role-${local.sorted-roles[count.index]}"
name: "${var.instance}-${var.component}-role-${local.sorted-roles[count.index].name}"
namespace: "${var.namespace}"
labels: ${jsonencode(merge(local.common-labels, {"app.kubernetes.io/component" = local.sorted-roles[count.index]}))}
labels: ${jsonencode(merge(local.common-labels, {"app.kubernetes.io/component" = local.sorted-roles[count.index].name}))}
spec:
forceRegenerate: false
data:
POSGRESQL_USERNAME: "${local.sorted-roles[count.index]}"
POSGRESQL_USERNAME: "${local.sorted-roles[count.index].name}"
fields:
- fieldName: "POSGRESQL_PASSWORD"
length: "32"
@@ -26,7 +32,7 @@ data "kubernetes_secret_v1" "password_role_get" {
depends_on = [ kubectl_manifest.db_secret_role ]
count = length(local.sorted-roles)
metadata {
name = "${var.instance}-${var.component}-role-${local.sorted-roles[count.index]}"
name = "${var.instance}-${var.component}-role-${local.sorted-roles[count.index].name}"
namespace = "${var.namespace}"
}
}
@@ -34,7 +40,7 @@ data "kubernetes_secret_v1" "password_role_get" {
resource "postgresql_role" "role" {
depends_on = [ kubectl_manifest.prj_pg ]
count = length(local.sorted-roles)
name = "${local.sorted-roles[count.index]}"
name = "${local.sorted-roles[count.index].name}"
login = true
password = data.kubernetes_secret_v1.password_role_get[count.index].data["POSGRESQL_PASSWORD"]
}