89d2aa860888e723aace22616eb38e59b402349f

Author
Ayman Bagabas <ayman.bagabas@gmail.com>
Committer
Ayman Bagabas <ayman.bagabas@gmail.com>
Date

Message

Bump tf module and pass auth keys from secrets on deploy

This will create a new secret in AWS SecretsManager

Diff

 1diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
 2index d5ea9644be4d6743820b8ee961fc7c67abaa0307..29d1062e0a3c49eace86294c4a1e3e61b196e727 100644
 3--- a/.github/workflows/cd.yml
 4+++ b/.github/workflows/cd.yml
 5@@ -20,6 +20,7 @@ jobs:
 6       AWS_DEFAULT_REGION: us-east-1
 7       AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
 8       AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
 9+      SMOOTHIE_REPO_KEYS: "${{ secrets.SMOOTHIE_REPO_KEYS }}"
10 
11     steps:
12     - name: Install Go
13@@ -72,9 +73,10 @@ jobs:
14       id: tfvars
15       run: |
16         TF_VARS=$(cat <<EOF
17-          -var "environment=$ENVIRONMENT" \
18-          -var "aws_region=$AWS_DEFAULT_REGION" \
19-          -var "app_image=$CONTAINER_REPO:$GITHUB_SHA-snapshot"
20+        -var environment="$ENVIRONMENT" \
21+        -var aws_region="$AWS_DEFAULT_REGION" \
22+        -var app_image="$CONTAINER_REPO:$GITHUB_SHA-snapshot" \
23+        -var authorization_keys="$(echo -n $SMOOTHIE_REPO_KEYS)"
24         EOF
25         )
26         echo "::set-output name=vars::$TF_VARS"
27diff --git a/main.tf b/main.tf
28index 8cae8e0e65c4e9170fc7e52c983024c2604e043f..2da19fad4e7434bc499eb5b0b90a24c266cf2966 100644
29--- a/main.tf
30+++ b/main.tf
31@@ -22,10 +22,14 @@ variable "force_new_deployment" {
32   default = false
33 }
34 
35+variable "authorization_keys" {
36+  default = ""
37+}
38+
39 module "smoothie" {
40   /* source = "../terraform-aws-smoothie" */
41   source  = "app.terraform.io/charm/smoothie/aws"
42-  version = "0.1.4"
43+  version = "0.2.0"
44 
45   environment                  = var.environment
46   aws_region                   = var.aws_region
47@@ -37,4 +41,5 @@ module "smoothie" {
48   fargate_memory               = "2048"
49   force_new_deployment         = var.force_new_deployment
50   app_use_default_ssh_port     = true
51+  authorization_keys           = var.authorization_keys
52 }