Refacto OAuth2

application/application.tf

@@ -1,26 +1,28 @@
 locals {
-  app_slug   = "${var.instance}${var.component == "" ? "" : "-"}${var.component}"
+  app_slug = "${var.instance}${var.component == "" ? "" : "-"}${var.component}"
   application_labels = merge(var.labels, {
     "app.kubernetes.io/component" = "authentik-application"
   })
-  app_name   = var.app_name != "" ? var.app_name : var.component == var.instance ? var.instance : format("%s-%s", var.instance, var.component)
-  main_group = format("app-%s", local.app_slug)
+  app_name    = var.app_name != "" ? var.app_name : var.component == var.instance ? var.instance : format("%s-%s", var.instance, var.component)
+  main_group  = format("app-%s", local.app_slug)
   secret_name = var.cert_name != "" ? var.cert_name : "${local.app_slug}-cert"
-  url_icon   = startswith(var.icon, "fa-") ? "fa://${var.icon}" : format("https://%s/%s", var.dns_name, var.icon)
+  dns_name    = var.dns_name != "" ? var.dns_name : var.rule_mapper.host
+  url_icon    = startswith(var.icon, "fa-") ? "fa://${var.icon}" : format("https://%s/%s", local.dns_name, var.icon)
+  backend     = var.rule_mapper.paths[0].backend
   rules_icons = [{
-    "host" = var.rule_mapper.host
+    "host" = local.dns_name
     "http" = {
-      "paths" = [for mapper in var.rule_mapper.paths : {
+      "paths" = [{
         "path"     = "/${var.icon}"
         "pathType" = "Prefix"
-        "backend"  = mapper.backend
+        "backend"  = local.backend
       }]
     }
   }]
 }
 
 resource "kubectl_manifest" "ingress_icon" {
-  count = startswith(var.icon, "fa-") ? 0 : 1
+  count           = startswith(var.icon, "fa-") ? 0 : 1
   force_conflicts = true
   yaml_body       = <<-EOF
     apiVersion: "networking.k8s.io/v1"
@@ -33,8 +35,8 @@ resource "kubectl_manifest" "ingress_icon" {
       ingressClassName: "${var.ingress_class}"
       rules: ${jsonencode(local.rules_icons)}
       tls:
-      - hosts: ${jsonencode([var.dns_name])}
-        secretName: "${local.secret_name}"
+      - secretName: "${local.secret_name}"
+        hosts: ${jsonencode([local.dns_name])}
   EOF
 }
 
@@ -58,7 +60,7 @@ resource "authentik_application" "app" {
   group                 = var.app_group
   protocol_provider     = var.protocol_provider
   backchannel_providers = var.backchannel_providers
-  meta_launch_url       = format("https://%s", var.dns_name)
+  meta_launch_url       = format("https://%s", local.dns_name)
   meta_icon             = local.url_icon
 }