add credentials for ab bank sync cronjob [ci skip]

main.tf

@@ -132,6 +132,7 @@ variable "clickhouse_password" { type = string }
 variable "clickhouse_postgres_password" { type = string }
 variable "wealthfolio_password_hash" { type = string }
 variable "aiostreams_database_connection_string" { type = string }
+variable "actualbudget_credentials" { type = map(any) }
 
 
 provider "kubernetes" {
@@ -553,6 +554,8 @@ module "kubernetes_cluster" {
   wealthfolio_password_hash = var.wealthfolio_password_hash
 
   aiostreams_database_connection_string = var.aiostreams_database_connection_string
+
+  actualbudget_credentials = var.actualbudget_credentials
 }
 
 

modules/kubernetes/actualbudget/main.tf

@@ -1,5 +1,6 @@
 variable "tls_secret_name" {}
 variable "tier" { type = string }
+variable "credentials" { type = map(any) }
 
 # To create a new deployment:
 /**
@@ -26,20 +27,24 @@ module "tls_secret" {
 
 # https://budget-viktor.viktorbarzin.me/
 module "viktor" {
-  source          = "./factory"
+  source                     = "./factory"
-  name            = "viktor"
+  name                       = "viktor"
-  tag             = "edge"
+  tag                        = "edge"
-  tls_secret_name = var.tls_secret_name
+  tls_secret_name            = var.tls_secret_name
-  depends_on      = [kubernetes_namespace.actualbudget]
+  depends_on                 = [kubernetes_namespace.actualbudget]
-  tier            = var.tier
+  tier                       = var.tier
+  budget_encryption_password = lookup(var.credentials["viktor"], "password", null)
+  sync_id                    = lookup(var.credentials["viktor"], "sync_id", null)
 }
 
 # https://budget-anca.viktorbarzin.me/
 module "anca" {
-  source          = "./factory"
+  source                     = "./factory"
-  name            = "anca"
+  name                       = "anca"
-  tag             = "edge"
+  tag                        = "edge"
-  tls_secret_name = var.tls_secret_name
+  tls_secret_name            = var.tls_secret_name
-  depends_on      = [kubernetes_namespace.actualbudget]
+  depends_on                 = [kubernetes_namespace.actualbudget]
-  tier            = var.tier
+  tier                       = var.tier
+  budget_encryption_password = lookup(var.credentials["anca"], "password", null)
+  sync_id                    = lookup(var.credentials["anca"], "sync_id", null)
 }

modules/kubernetes/main.tf

@@ -111,6 +111,7 @@ variable "clickhouse_password" { type = string }
 variable "clickhouse_postgres_password" { type = string }
 variable "wealthfolio_password_hash" { type = string }
 variable "aiostreams_database_connection_string" { type = string }
+variable "actualbudget_credentials" { type = map(any) }
 
 
 variable "defcon_level" {
@@ -809,6 +810,7 @@ module "actualbudget" {
   for_each        = contains(local.active_modules, "actualbudget") ? { actualbudget = true } : {}
   tls_secret_name = var.tls_secret_name
   tier            = local.tiers.edge
+  credentials     = var.actualbudget_credentials
 
   depends_on = [null_resource.core_services]
 }