Refactor secret manager module (#3315)

* wip

* wip

* wip

* wip

* tested, missing versions

* working

* fix secops stage

* readme

* tests

* tflint
This commit is contained in:
Ludovico Magnocavallo
2025-09-10 13:47:35 +02:00
committed by GitHub
parent c1e8f9d70c
commit 63a22cd9a2
25 changed files with 1222 additions and 513 deletions

View File

@@ -2,8 +2,12 @@
This module allows managing a dataform repository, allows adding IAM permissions. Also enables attaching a remote repository.
## TODO
[] Add validation rules to variable.
<!-- BEGIN TOC -->
- [Examples](#examples)
- [Simple dataform repository with access configuration](#simple-dataform-repository-with-access-configuration)
- [Repository with an attached remote repository](#repository-with-an-attached-remote-repository)
- [Variables](#variables)
<!-- END TOC -->
## Examples
@@ -34,11 +38,9 @@ module "secret" {
project_id = "fast-bi-fabric"
secrets = {
my-secret = {
}
}
versions = {
my-secret = {
v1 = { enabled = true, data = "MYTOKEN" }
versions = {
v1 = { data = "MYTOKEN" }
}
}
}
}
@@ -51,10 +53,10 @@ module "dataform" {
remote_repository_settings = {
url = "my-url"
secret_name = "my-secret"
token = module.secret.version_ids["my-secret:v1"]
token = module.secret.version_ids["my-secret/v1"]
}
}
# tftest modules=2 resources=3
# tftest modules=2 resources=3 skip-tofu
```
<!-- BEGIN TFDOC -->
## Variables