refactor: to pass storage

darklab8 · Jul 29, 2024 · d20f99f · d20f99f
1 parent e172891
commit d20f99f
Show file tree

Hide file tree

Showing 6 changed files with 16 additions and 12 deletions.
diff --git a/tf/production/main.tf b/tf/production/main.tf
@@ -11,8 +11,12 @@ data "aws_ssm_parameter" "darkbot" {
   name = "/terraform/hetzner/darkbot/production"
 }
 
+data "external" "secrets_darkbot" {
+  program = ["pass", "api/personal/terraform/hetzner/darkbot/production"]
+}
+
 locals {
-  secrets = nonsensitive(jsondecode(data.aws_ssm_parameter.darkbot.value))
+  secrets = nonsensitive(data.external.secrets_darkbot.result)
 }
 
 provider "docker" {

diff --git a/tf/production/providers.tf b/tf/production/providers.tf
@@ -19,16 +19,16 @@ terraform {
   }
 }
 
-data "external" "pass_storage" {
-  program = ["bash", "${path.module}/pass_storage.sh"]
+data "external" "secrets_providers" {
+  program = ["bash", "${path.module}/secrets_providers.sh"]
 }
 
 provider "hcloud" {
-  token = data.external.pass_storage.result["hetzner_token"]
+  token = data.external.secrets_providers.result["hetzner_token"]
 }
 
 provider "cloudflare" {
-  api_token = data.external.pass_storage.result["cloudflare_token"]
+  api_token = data.external.secrets_providers.result["cloudflare_token"]
 }
 
 provider "kubernetes" {

diff --git a/tf/production/pass_storage.sh → tf/production/secrets_providers.sh b/tf/production/pass_storage.sh → tf/production/secrets_providers.sh
diff --git a/tf/staging/main.tf b/tf/staging/main.tf
@@ -3,12 +3,12 @@ module "server" {
   name   = "node-arm"
 }
 
-data "aws_ssm_parameter" "darkbot" {
-  name = "/terraform/hetzner/darkbot/staging"
+data "external" "secrets_darkbot" {
+  program = ["pass", "api/personal/terraform/hetzner/darkbot/staging"]
 }
 
 locals {
-  secrets = nonsensitive(jsondecode(data.aws_ssm_parameter.darkbot.value))
+  secrets = nonsensitive(data.external.secrets_darkbot.result)
 }
 
 provider "docker" {

diff --git a/tf/staging/providers.tf b/tf/staging/providers.tf
@@ -22,16 +22,16 @@ terraform {
   }
 }
 
-data "external" "pass_storage" {
-  program = ["bash", "${path.module}/pass_storage.sh"]
+data "external" "secrets_providers" {
+  program = ["bash", "${path.module}/secrets_providers.sh"]
 }
 
 provider "hcloud" {
-  token = data.external.pass_storage.result["hetzner_token"]
+  token = data.external.secrets_providers.result["hetzner_token"]
 }
 
 provider "cloudflare" {
-  api_token = data.external.pass_storage.result["cloudflare_token"]
+  api_token = data.external.secrets_providers.result["cloudflare_token"]
 }
 
 provider "kubernetes" {

diff --git a/tf/staging/pass_storage.sh → tf/staging/secrets_providers.sh b/tf/staging/pass_storage.sh → tf/staging/secrets_providers.sh