57 lines
2.8 KiB
Terraform
57 lines
2.8 KiB
Terraform
resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_host" {
|
|
for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
|
|
key = "${each.key}__redis__host"
|
|
project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
|
|
value = try(each.value.redis.host, "${each.key}-redis-svc.${coalesce(each.value.namespace, each.value.connected_namespace, each.key)}.svc")
|
|
}
|
|
|
|
resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_port" {
|
|
for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
|
|
key = "${each.key}__redis__port"
|
|
project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
|
|
value = try(each.value.redis.port, 5432)
|
|
}
|
|
|
|
##
|
|
## Commenting until I use the redis password option
|
|
##
|
|
#resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_password" {
|
|
# for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
|
|
# key = "${each.key}__redis__password"
|
|
# project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
|
|
# length = 32
|
|
# special = true
|
|
# min_special = 5
|
|
# avoid_ambiguous = true
|
|
#}
|
|
|
|
resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_REPLICATION_MODE" {
|
|
for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
|
|
key = "${each.key}__redis__REPLICATION_MODE"
|
|
project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
|
|
value = try(each.value.redis.REPLICATION_MODE, "master")
|
|
}
|
|
|
|
resource "bitwarden-secrets_secret" "automatic_bitwarden_secret_redis_TLS_ENABLED" {
|
|
for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
|
|
key = "${each.key}__redis__TLS_ENABLED"
|
|
project_id = "b5fc4c48-e951-442f-97ca-b3e800c143cd"
|
|
value = try(each.value.redis.TLS_ENABLED, "no")
|
|
}
|
|
|
|
resource "kubernetes_secret_v1" "automatic-redis-secret" {
|
|
for_each = { for key, value in var.kubernetes : key => value if value.redis != null && value.enabled == true }
|
|
metadata {
|
|
name = "${each.key}-redis-terraform"
|
|
namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
|
|
}
|
|
|
|
data = {
|
|
REDIS_HOSTNAME = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_host[each.key].value}"
|
|
REDIS_PORT = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_port[each.key].value}"
|
|
REDIS_REPLICATION_MODE = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_REPLICATION_MODE[each.key].value}"
|
|
REDIS_TLS_ENABLED = "${resource.bitwarden-secrets_secret.automatic_bitwarden_secret_redis_TLS_ENABLED[each.key].value}"
|
|
}
|
|
|
|
}
|