This commit is contained in:
2024-05-29 15:34:59 +02:00
parent a83413a2e9
commit 3dfe5b4a69
3 changed files with 77 additions and 2 deletions

View File

@@ -11,6 +11,7 @@ locals {
mysql_username = "root"
mysql_password = random_password.mysql_root_pass.result
}
resource "kubectl_manifest" "mysql_root_pass" {
yaml_body = <<-EOF
apiVersion: v1
@@ -62,6 +63,21 @@ resource "mysql_user" "component" {
host = "%"
plaintext_password = random_password.mysql_comp_pass.result
}
resource "kubectl_manifest" "app_db_pass" {
yaml_body = <<-EOF
apiVersion: v1
kind: Secret
metadata:
name: "${var.instance}-${var.component}-mysql-app"
labels: ${jsonencode(local.secret_labels)}
namespace: ${var.namespace}
stringData:
username: "${var.component}"
password: "${random_password.mysql_comp_pass.result}"
EOF
}
resource "mysql_grant" "component" {
user = mysql_user.component.user
host = mysql_user.component.host