This commit is contained in:
2024-05-13 11:01:18 +02:00
parent 2ba0ee411c
commit a638d8490e

View File

@@ -3,20 +3,21 @@ locals {
"app.kubernetes.io/component" = "mongo"
})
}
resource "random_password" "mongo" {
length = 16
special = false
}
resource "kubectl_manifest" "prj_mongo_secret" {
ignore_fields = ["metadata.annotations"]
yaml_body = <<-EOF
apiVersion: "secretgenerator.mittwald.de/v1alpha1"
kind: "StringSecret"
apiVersion: v1
kind: Secret
metadata:
name: "${var.instance}-${var.component}-mongo"
namespace: "${var.namespace}"
labels: ${jsonencode(local.mongo-labels)}
spec:
forceRegenerate: false
fields:
- fieldName: "password"
length: "16"
stringData:
password: "${random_password.mongo.result}"
EOF
}
data "kubernetes_secret_v1" "prj_mongo_secret" {