resource "random_password" "system" {
  length           = 32
  special          = false
}

resource "random_password" "admin" {
  length           = 16
  special          = false
}
resource "kubectl_manifest" "secret" {
  yaml_body  = <<-EOF
    apiVersion: v1
    kind: Secret
    metadata:
      name: "${var.instance}-${var.component}"
      labels: ${jsonencode(local.common_labels)}
      namespace: ${var.namespace}
      ownerReferences: ${jsonencode(var.install_owner)}
    type: Opaque
    stringData:
      TAIGA_SECRET_KEY: "${random_password.system.result}"
      DJANGO_SUPERUSER_PASSWORD: "${random_password.admin.result}"
EOF
}