secrets

Author: Andreas Mautsch

terraform/data/secrets.tf

@@ -20,7 +20,7 @@ resource "random_password" "oidc_session_secret" {
 
 variable "namespaces" {
   type    = list(string)
-  default = ["data", "core", "event", "invoice"]
+  default = ["data", "core", "event", "invoice", "example"]
 }
 
 resource "kubernetes_secret" "postgresql_secret" {

terraform/tenant-prov/core.tf

@@ -14,23 +14,6 @@ resource "helm_release" "core-provisioning" {
     name  = "ingress.hosts"
     value = var.hostname
   }
-
-
-  # secrets
-  set {
-    name  = "messageBroker.password"
-    value = "supersecret"
-  }
-
-  set_sensitive {
-    name  = "database.password"
-    value = data.kubernetes_secret.postgresql_secret.data["password"]
-  }
-
-  set_sensitive {
-    name  = "s3.password"
-    value = data.kubernetes_secret.s3_secret.data["password"]
-  }
 
 }
 

terraform/tenant-prov/person-service.tf

@@ -20,23 +20,11 @@ resource "helm_release" "person-service-provisioning" {
     value = local.oidc_enabled
   }
 
-
-  set_sensitive {
-    name = "oidc.session.secret"
-    value = random_password.oidc_session_secret.result
-  }
-
-  set_sensitive {
-    name  = "database.password"
-    value = data.kubernetes_secret.postgresql_secret.data["password"]
-  }
-
   set {
     name = "postgresql.host"
     value = "postgresql.data"
   }
 
-
 }
 
 

terraform/tenant-prov/secrets.tf

@@ -33,18 +33,7 @@ resource "kubernetes_manifest" "core-provisioning" {
               value = local.oidc_enabled
             },
 
-            {
-              name  = "oidc.session.secret"
-              value = random_password.oidc_session_secret.result
-            },
-            {
-              name  = "database.password"
-              value = data.kubernetes_secret.postgresql_secret.data["password"]
-            },
-            {
-              name  = "s3.password"
-              value = data.kubernetes_secret.s3_secret.data["password"]
-            },
+    
             {
               name  = "messageBroker.password"
               value = "supersecret"

xargocd/tenant-prov/core.tf

@@ -28,16 +28,7 @@ resource "kubernetes_manifest" "person-service-provisioning" {
             {
               name  = "oidc.enabled"
               value = local.oidc_enabled
-            },
-            {
-              name  = "oidc.session.secret"
-              value = random_password.oidc_session_secret.result
-            },
-            {
-              name  = "database.password"
-              value = data.kubernetes_secret.postgresql_secret.data["password"]
-            },
-            
+            }
 
             {
               name = "postgresql.host"