From 2c8a9c27bfba871885f6d014ff53e7d18299493e Mon Sep 17 00:00:00 2001
From: viktorbarzin <vbarzin@gmail.com>
Date: Mon, 8 Feb 2021 21:27:21 +0000
Subject: [PATCH] start using safe csrf token

---
 modules/kubernetes/k8s-dashboard/main.tf | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/modules/kubernetes/k8s-dashboard/main.tf b/modules/kubernetes/k8s-dashboard/main.tf
index 67a729a3..0ef9bda9 100644
--- a/modules/kubernetes/k8s-dashboard/main.tf
+++ b/modules/kubernetes/k8s-dashboard/main.tf
@@ -3,6 +3,12 @@ variable "tls_crt" {}
 variable "tls_key" {}
 variable "client_certificate_secret_name" {}
 
+resource "random_password" "csrf_token" {
+  length           = 16
+  special          = true
+  override_special = "_%@"
+}
+
 module "dashboard" {
   #   source = "cookielab/dashboard/kubernetes"
   # source  = "ViktorBarzin/dashboard/kubernetes"
@@ -10,7 +16,7 @@ module "dashboard" {
   # TODO: update this once merged
   source = "/opt/terraform-kubernetes-dashboard"
   # insert the 1 required variable here
-  kubernetes_dashboard_csrf = "kekerino"
+  kubernetes_dashboard_csrf = random_password.csrf_token.result
   kubernetes_dashboard_deployment_args = list(
     "--auto-generate-certificates",
     "--token-ttl=0"