26 lines
727 B
Terraform
26 lines
727 B
Terraform
|
locals {
|
||
|
|
secrets = {
|
||
|
|
"buildkite-api-token-readonly": var.buildkite-api-token-readonly,
|
||
|
|
"buildkite-agent-token": var.buildkite-agent-token,
|
||
|
|
"conduit-api-token": var.conduit-api-token,
|
||
|
|
"git-id-rsa": var.git-id-rsa,
|
||
|
|
"id-rsa-pub": var.id-rsa-pub,
|
||
|
|
"git-known-hosts": var.git-known-hosts
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "google_secret_manager_secret" "secret" {
|
||
|
|
for_each = local.secrets
|
||
|
|
secret_id = each.key
|
||
|
|
|
||
|
|
replication {
|
||
|
|
automatic = true
|
||
|
|
}
|
||
|
|
depends_on = [google_project_service.google_api]
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "google_secret_manager_secret_version" "secret_version" {
|
||
|
|
for_each = local.secrets
|
||
|
|
secret = google_secret_manager_secret.secret[each.key].id
|
||
|
|
secret_data = each.value
|
||
|
|
}
|