Files
domain/apps/infisical/secret.tf
2024-05-12 12:03:32 +02:00

34 lines
920 B
HCL

resource "kubectl_manifest" "secret" {
ignore_fields = ["metadata.annotations"]
yaml_body = <<-EOF
apiVersion: "secretgenerator.mittwald.de/v1alpha1"
kind: "StringSecret"
metadata:
name: "${var.instance}-${var.component}"
namespace: "${var.namespace}"
labels: ${jsonencode(local.common_labels)}
spec:
forceRegenerate: false
data:
MONGO_URL: "${module.mongo.url}"
fields:
- fieldName: "JWT_SIGNUP_SECRET"
length: "32"
- fieldName: "JWT_SERVICE_SECRET"
length: "32"
- fieldName: "JWT_REFRESH_SECRET"
length: "32"
- fieldName: "JWT_PROVIDER_AUTH_SECRET"
length: "32"
- fieldName: "JWT_MFA_SECRET"
length: "32"
- fieldName: "JWT_AUTH_SECRET"
length: "32"
- fieldName: "ENCRYPTION_KEY"
length: "32"
- fieldName: "AUTH_SECRET"
length: "32"
EOF
}