old-portfolio/terraform-hideyoshi.com
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #69 from HideyoshiSolutions/chore/adds-infra-repo-to-kubeconfig-secret

Browse Source 
feat: fixes encryption key for kubernetes secrets
This commit is contained in:
Vitor Hideyoshi
2025-11-07 15:19:20 -03:00
committed by GitHub
parent 381a48a29a 2f124b4f14
commit 112955811c
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
github/config.tf
View File

@@ -16,7 +16,7 @@ variable "cluster_kubeconfig" {
sensitive = true sensitive = true
} }
variable "gpg_public_key_encryption" { variable "gpg_private_key_encryption" {
type = string type = string
sensitive = true sensitive = true
} }

4
github/github.tf
View File

@@ -23,6 +23,6 @@ resource "github_actions_organization_secret" "cluster_kubeconfig" {
resource "github_actions_organization_secret" "gpg_public_key" { resource "github_actions_organization_secret" "gpg_public_key" {
visibility = "selected" visibility = "selected"
selected_repository_ids = [for repo in data.github_repository.repos : repo.repo_id] selected_repository_ids = [for repo in data.github_repository.repos : repo.repo_id]
secret_name = "PORTFOLIO_GPG_PUBLIC_KEY" secret_name = "PORTFOLIO_GPG_PRIVATE_KEY"
plaintext_value = chomp(var.gpg_public_key_encryption) plaintext_value = chomp(var.gpg_private_key_encryption)
} }

6
main.tf
View File

@@ -101,7 +101,7 @@ module "github" {
github_owner = var.github_owner github_owner = var.github_owner
github_repositories = var.github_repositories github_repositories = var.github_repositories
cluster_kubeconfig = module.kubernetes.cluster_kubeconfig cluster_kubeconfig = module.kubernetes.cluster_kubeconfig
gpg_public_key_encryption = var.gpg_public_key_encryption gpg_private_key_encryption = var.gpg_private_key_encryption
} }
@@ -110,7 +110,7 @@ output "cluster_kubeconfig" {
sensitive = true sensitive = true
} }
output "gpg_private_key_encryption" { output "gpg_public_key_encryption" {
value = var.gpg_private_key_encryption value = var.gpg_public_key_encryption
sensitive = true sensitive = true
} }