9c429e35da
This changes the configuration of the postgres master username and password. Instead of committing to source (short term hack), this now sources those secrets from KeyVault. Those secrets are generated and populated via secrets-tool.
21 lines
820 B
HCL
21 lines
820 B
HCL
data "azurerm_key_vault_secret" "postgres_username" {
|
|
name = "postgres-root-user"
|
|
key_vault_id = module.operator_keyvault.id
|
|
}
|
|
|
|
data "azurerm_key_vault_secret" "postgres_password" {
|
|
name = "postgres-root-password"
|
|
key_vault_id = module.operator_keyvault.id
|
|
}
|
|
|
|
module "sql" {
|
|
source = "../../modules/postgres"
|
|
name = var.name
|
|
owner = var.owner
|
|
environment = var.environment
|
|
region = var.region
|
|
subnet_id = module.vpc.subnets # FIXME - Should be a map of subnets and specify private
|
|
administrator_login = data.azurerm_key_vault_secret.postgres_username.value
|
|
administrator_login_password = data.azurerm_key_vault_secret.postgres_password.value
|
|
}
|