kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Refactor secret manager module (#3315)

Browse Source 
* wip

* wip

* wip

* wip

* tested, missing versions

* working

* fix secops stage

* readme

* tests

* tflint
This commit is contained in:
Ludovico Magnocavallo
2025-09-10 13:47:35 +02:00
committed by GitHub
parent c1e8f9d70c
commit 63a22cd9a2
25 changed files with 1222 additions and 513 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
fast/stages/3-secops-dev/secrets.tf
View File

@@ -17,31 +17,32 @@
module "secops-tenant-secrets" {
source = "../../../modules/secret-manager"
project_id = module.project.project_id
secrets = merge({
(local.secops_api_key_secret_key) = {
locations = [var.region]
secrets = merge(
{
(local.secops_api_key_secret_key) = {
global_replica_locations = {
(var.region) = null
}
labels = { scope = "secops" }
versions = {
latest = {
data = google_apikeys_key.feed_api_key.key_string
}
}
}
},
!local.workspace_log_ingestion ? {} : {
(local.secops_workspace_int_sa_key) = {
global_replica_locations = {
(var.region) = null
}
labels = { scope = "secops" }
versions = {
latest = {
data = google_service_account_key.workspace_integration_key[0].private_key
}
}
}
}
}, local.workspace_log_ingestion ? {
(local.secops_workspace_int_sa_key) = {
locations = [var.region]
} } : {}
)
versions = merge({
(local.secops_api_key_secret_key) = {
latest = {
enabled = true, data = google_apikeys_key.feed_api_key.key_string
}
}
}, local.workspace_log_ingestion ? {
(local.secops_workspace_int_sa_key) = {
latest = {
enabled = true, data = google_service_account_key.workspace_integration_key[0].private_key
}
}
} : {})
labels = merge({
(local.secops_api_key_secret_key) = { scope = "secops" }
}, local.workspace_log_ingestion ? {
(local.secops_workspace_int_sa_key) = { scope = "secops" }
} : {})
}