This commit is contained in:
2023-10-07 20:24:51 +02:00
parent de7ca7d99c
commit 6a6b4d2645
2 changed files with 15 additions and 75 deletions

View File

@@ -2,8 +2,7 @@ locals {
sorted-roles = reverse(distinct(sort(var.roles)))
}
resource "kubectl_manifest" "db_secret" {
resource "kubectl_manifest" "db_secret_role" {
ignore_fields = ["metadata.annotations"]
count = length(local.sorted-roles)
yaml_body = <<-EOF
@@ -23,8 +22,8 @@ resource "kubectl_manifest" "db_secret" {
EOF
}
data "kubernetes_secret_v1" "password_get" {
depends_on = [ kubectl_manifest.db_secret ]
data "kubernetes_secret_v1" "password_role_get" {
depends_on = [ kubectl_manifest.db_secret_role ]
count = length(local.sorted-roles)
metadata {
name = "${var.instance}-${var.component}-role-${local.sorted-roles[count.index]}"
@@ -37,5 +36,5 @@ resource "postgresql_role" "role" {
count = length(local.sorted-roles)
name = "${local.sorted-roles[count.index]}"
login = true
password = data.kubernetes_secret_v1.password_get[count.index].data["POSGRESQL_PASSWORD"]
password = data.kubernetes_secret_v1.password_role_get[count.index].data["POSGRESQL_PASSWORD"]
}