refactor: to using pass storage

darklab8 · Jul 29, 2024 · e172891 · e172891
1 parent 0297656
commit e172891
Show file tree

Hide file tree

Showing 6 changed files with 58 additions and 16 deletions.
diff --git a/tf/production/.terraform.lock.hcl b/tf/production/.terraform.lock.hcl
diff --git a/tf/production/pass_storage.sh b/tf/production/pass_storage.sh
@@ -0,0 +1,7 @@
+jq -n \
+--arg hetzner_token $(pass api/personal/terraform/hetzner/production) \
+--arg cloudflare_token $(pass api/personal/terraform/cloudflare/dd84ai) \
+'{
+    "hetzner_token": $hetzner_token,
+    "cloudflare_token": $cloudflare_token
+}'
diff --git a/tf/production/providers.tf b/tf/production/providers.tf
@@ -19,19 +19,16 @@ terraform {
   }
 }
 
-data "aws_ssm_parameter" "hetzner" {
-  name = "/terraform/hetzner/production"
-}
-provider "hcloud" {
-  token = data.aws_ssm_parameter.hetzner.value
+data "external" "pass_storage" {
+  program = ["bash", "${path.module}/pass_storage.sh"]
 }
 
-data "aws_ssm_parameter" "cloudflare_key" {
-  name = "/terraform/cloudflare/dd84ai"
+provider "hcloud" {
+  token = data.external.pass_storage.result["hetzner_token"]
 }
 
 provider "cloudflare" {
-  api_token = data.aws_ssm_parameter.cloudflare_key.value
+  api_token = data.external.pass_storage.result["cloudflare_token"]
 }
 
 provider "kubernetes" {

diff --git a/tf/staging/.terraform.lock.hcl b/tf/staging/.terraform.lock.hcl
diff --git a/tf/staging/pass_storage.sh b/tf/staging/pass_storage.sh
@@ -0,0 +1,7 @@
+jq -n \
+--arg hetzner_token $(pass api/personal/terraform/hetzner/production) \
+--arg cloudflare_token $(pass api/personal/terraform/cloudflare/dd84ai) \
+'{
+    "hetzner_token": $hetzner_token,
+    "cloudflare_token": $cloudflare_token
+}'
diff --git a/tf/staging/providers.tf b/tf/staging/providers.tf
@@ -22,19 +22,16 @@ terraform {
   }
 }
 
-data "aws_ssm_parameter" "hetzner" {
-  name = "/terraform/hetzner/production"
-}
-provider "hcloud" {
-  token = data.aws_ssm_parameter.hetzner.value
+data "external" "pass_storage" {
+  program = ["bash", "${path.module}/pass_storage.sh"]
 }
 
-data "aws_ssm_parameter" "cloudflare_key" {
-  name = "/terraform/cloudflare/dd84ai"
+provider "hcloud" {
+  token = data.external.pass_storage.result["hetzner_token"]
 }
 
 provider "cloudflare" {
-  api_token = data.aws_ssm_parameter.cloudflare_key.value
+  api_token = data.external.pass_storage.result["cloudflare_token"]
 }
 
 provider "kubernetes" {