feat: adds encryption key for kubernetes secrets

github/config.tf

@@ -14,4 +14,9 @@ variable "github_repositories" {
 variable "cluster_kubeconfig" {
     type = string
     sensitive = true  
+}
+
+variable "gpg_public_key_encryption" {
+    type = string
+    sensitive = true  
 }

github/github.tf

@@ -18,4 +18,11 @@ resource "github_actions_organization_secret" "cluster_kubeconfig" {
   selected_repository_ids = [for repo in data.github_repository.repos : repo.repo_id]
   secret_name = "PORTFOLIO_KUBECONFIG"
   plaintext_value = chomp(var.cluster_kubeconfig)
+}
+
+resource "github_actions_organization_secret" "gpg_public_key" {
+  visibility = "selected"
+  selected_repository_ids = [for repo in data.github_repository.repos : repo.repo_id]
+  secret_name = "PORTFOLIO_GPG_PUBLIC_KEY"
+  plaintext_value = chomp(var.gpg_public_key_encryption)
 }