Reafacto OAuth2

Add roles mappings
Remove legacy groups

postgresql/providers.tf

@@ -1,5 +1,10 @@
 terraform {
+  required_version = ">= 1.0"
   required_providers {
+    kubernetes = {
+      source  = "hashicorp/kubernetes"
+      version = "~> 2.20.0"
+    }
     kubectl = {
       source  = "gavinbunney/kubectl"
       version = "~> 1.14.0"

postgresql/variables.tf

@@ -25,21 +25,25 @@ variable "backups" {
     "use_barman"  = false
   }
   type = object({
-    enable     = optional(bool),
-    endpoint   = optional(string),
-    key_id_key = optional(string),
-    restic_key = optional(string),
+    enable     = optional(bool, false),
+    endpoint   = optional(string, ""),
+    key_id_key = optional(string, "s3-id"),
+    restic_key = optional(string, "bck-password"),
     schedule = optional(object({
-      db = optional(string),
-    })),
-    secret_key  = optional(string),
-    secret_name = optional(string),
-    use_barman  = optional(bool)
+      db = string,
+    }), { db = "30 3 * * *" }),
+    secret_key  = optional(string, "s3-secret"),
+    secret_name = optional(string, "backup-settings"),
+    use_barman  = optional(bool, false)
   })
 }
 variable "images" {
   type = object({
-    postgresql = optional(object({ registry = optional(string), repository = optional(string), tag = optional(number) })),
+    postgresql = optional(object({
+      registry = optional(string),
+      repository = optional(string),
+      tag = optional(number)
+    })),
   })
   default = {
     "postgresql" = {