diff --git a/main.tf b/main.tf index 880dedc8..de29f032 100644 --- a/main.tf +++ b/main.tf @@ -34,6 +34,7 @@ variable "oauth_client_id" {} variable "oauth_client_secret" {} variable "webhook_handler_fb_verify_token" {} variable "webhook_handler_fb_page_token" {} +variable "webhook_handler_fb_app_secret" {} variable "ansible_prefix" { default = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/initial_setup" @@ -185,6 +186,7 @@ module "kubernetes_cluster" { webhook_handler_secret = var.webhook_handler_secret webhook_handler_fb_verify_token = var.webhook_handler_fb_verify_token webhook_handler_fb_page_token = var.webhook_handler_fb_page_token + webhook_handler_fb_app_secret = var.webhook_handler_fb_app_secret wireguard_wg_0_conf = var.wireguard_wg_0_conf wireguard_wg_0_key = var.wireguard_wg_0_key diff --git a/modules/kubernetes/main.tf b/modules/kubernetes/main.tf index 4da952bf..89d29aea 100644 --- a/modules/kubernetes/main.tf +++ b/modules/kubernetes/main.tf @@ -21,6 +21,7 @@ variable "oauth_client_id" {} variable "oauth_client_secret" {} variable "webhook_handler_fb_verify_token" {} variable "webhook_handler_fb_page_token" {} +variable "webhook_handler_fb_app_secret" {} resource "null_resource" "core_services" { # List all the core modules that must be provisioned first @@ -160,6 +161,7 @@ module "webhook_handler" { webhook_secret = var.webhook_handler_secret fb_verify_token = var.webhook_handler_fb_verify_token fb_page_token = var.webhook_handler_fb_page_token + fb_app_secret = var.webhook_handler_fb_app_secret depends_on = [null_resource.core_services] } diff --git a/modules/kubernetes/webhook_handler/main.tf b/modules/kubernetes/webhook_handler/main.tf index 8c567b12..d26a4e41 100644 --- a/modules/kubernetes/webhook_handler/main.tf +++ b/modules/kubernetes/webhook_handler/main.tf @@ -3,6 +3,7 @@ variable "tls_secret_name" {} variable "webhook_secret" {} variable "fb_verify_token" {} variable "fb_page_token" {} +variable "fb_app_secret" {} resource "kubernetes_namespace" "webhook-handler" { metadata { @@ -88,6 +89,10 @@ resource "kubernetes_deployment" "webhook_handler" { name = "WEBHOOKSECRET" value = var.webhook_secret } + env { + name = "FB_APP_SECRET" + value = var.fb_app_secret + } env { name = "FB_VERIFY_TOKEN" value = var.fb_verify_token diff --git a/terraform.tfstate b/terraform.tfstate index 1c6a4edd..07d67ebf 100644 Binary files a/terraform.tfstate and b/terraform.tfstate differ diff --git a/terraform.tfvars b/terraform.tfvars index 04b65ba1..7b7430e4 100644 Binary files a/terraform.tfvars and b/terraform.tfvars differ