This commit is contained in:
2024-05-13 11:01:18 +02:00
parent 2ba0ee411c
commit a638d8490e

View File

@@ -3,20 +3,21 @@ locals {
"app.kubernetes.io/component" = "mongo" "app.kubernetes.io/component" = "mongo"
}) })
} }
resource "random_password" "mongo" {
length = 16
special = false
}
resource "kubectl_manifest" "prj_mongo_secret" { resource "kubectl_manifest" "prj_mongo_secret" {
ignore_fields = ["metadata.annotations"]
yaml_body = <<-EOF yaml_body = <<-EOF
apiVersion: "secretgenerator.mittwald.de/v1alpha1" apiVersion: v1
kind: "StringSecret" kind: Secret
metadata: metadata:
name: "${var.instance}-${var.component}-mongo" name: "${var.instance}-${var.component}-mongo"
namespace: "${var.namespace}" namespace: "${var.namespace}"
labels: ${jsonencode(local.mongo-labels)} labels: ${jsonencode(local.mongo-labels)}
spec: stringData:
forceRegenerate: false password: "${random_password.mongo.result}"
fields:
- fieldName: "password"
length: "16"
EOF EOF
} }
data "kubernetes_secret_v1" "prj_mongo_secret" { data "kubernetes_secret_v1" "prj_mongo_secret" {