32 lines
866 B
HCL
32 lines
866 B
HCL
|
|
resource "kubectl_manifest" "secret" {
|
|
ignore_fields = ["metadata.annotations"]
|
|
yaml_body = <<-EOF
|
|
apiVersion: "secretgenerator.mittwald.de/v1alpha1"
|
|
kind: "StringSecret"
|
|
metadata:
|
|
name: "${var.component}-${var.instance}"
|
|
namespace: "${var.namespace}"
|
|
labels: ${jsonencode(local.common-labels)}
|
|
spec:
|
|
forceRegenerate: false
|
|
data:
|
|
MONGO_URL: "${module.mongo.url}"
|
|
fields:
|
|
- fieldName: "JWT_SIGNUP_SECRET"
|
|
length: "32"
|
|
- fieldName: "JWT_SERVICE_SECRET"
|
|
length: "32"
|
|
- fieldName: "JWT_REFRESH_SECRET"
|
|
length: "32"
|
|
- fieldName: "JWT_PROVIDER_AUTH_SECRET"
|
|
length: "32"
|
|
- fieldName: "JWT_MFA_SECRET"
|
|
length: "32"
|
|
- fieldName: "JWT_AUTH_SECRET"
|
|
length: "32"
|
|
- fieldName: "ENCRYPTION_KEY"
|
|
length: "32"
|
|
EOF
|
|
}
|