viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[ci skip] fix plotting-book: add SESSION_SECRET env var

Browse source 
Session secret stored in encrypted terraform.tfvars, referenced
via variable to avoid committing secrets in plain text.
This commit is contained in:
Viktor Barzin 2026-02-23 22:44:04 +00:00
parent 85f88bf167
commit c665544f41
No known key found for this signature in database
GPG key ID: 0EB088298288D958
2 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
stacks/plotting-book/main.tf
View file

@ -1,4 +1,5 @@
variable "tls_secret_name" { type = string } variable "tls_secret_name" { type = string }
variable "plotting_book_session_secret" { type = string }
resource "kubernetes_namespace" "plotting-book" { resource "kubernetes_namespace" "plotting-book" {
@ -50,6 +51,10 @@ resource "kubernetes_deployment" "plotting-book" {
# image = "viktorbarzin/book-plotter:7" # image = "viktorbarzin/book-plotter:7"
name = "plotting-book" name = "plotting-book"
image_pull_policy = "Always" image_pull_policy = "Always"
env {
name = "SESSION_SECRET"
value = var.plotting_book_session_secret
}
port { port {
container_port = 3001 container_port = 3001
} }

BIN
terraform.tfvars
View file

Binary file not shown.