diff --git a/.gitignore b/.gitignore index 239fcba0..ca21e51d 100644 --- a/.gitignore +++ b/.gitignore @@ -18,6 +18,7 @@ *.zip *.tar.gz *.rar +*.hide # virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml hs_err_pid* diff --git a/.identity/00_data.tf b/.identity/00_data.tf index f4ba1300..dc87495a 100644 --- a/.identity/00_data.tf +++ b/.identity/00_data.tf @@ -65,3 +65,9 @@ data "azurerm_cosmosdb_account" "bizevents_cosmos" { name = "pagopa-${var.env_short}-${local.location_short}-bizevents-ds-cosmos-account" resource_group_name = "pagopa-${var.env_short}-${local.location_short}-bizevents-rg" } + +data "azurerm_key_vault_secret" "key_vault_integration_test_webhook_slack" { + count = var.env_short != "p" ? 1 : 0 + name = "webhook-slack" + key_vault_id = data.azurerm_key_vault.domain_key_vault.id +} diff --git a/.identity/03_github_environment.tf b/.identity/03_github_environment.tf index 66a9c83b..667f2014 100644 --- a/.identity/03_github_environment.tf +++ b/.identity/03_github_environment.tf @@ -102,3 +102,11 @@ resource "github_actions_environment_secret" "secret_integration_test_cosmos_key secret_name = "COSMOS_DB_PRIMARY_KEY" plaintext_value = data.azurerm_key_vault_secret.key_vault_integration_cosmos_negative_biz_key[0].value } + +#tfsec:ignore:github-actions-no-plain-text-action-secrets # not real secret +resource "github_actions_secret" "secret_slack_webhook" { + count = var.env_short != "p" ? 1 : 0 + repository = local.github.repository + secret_name = "SLACK_WEBHOOK_URL" + plaintext_value = data.azurerm_key_vault_secret.key_vault_integration_test_webhook_slack[0].value +} \ No newline at end of file