feat(secrets): replace config maps with secrets for sensitive configurations in multiple modules

2025-05-11 20:17:35 +02:00
parent 457f2bd810
commit 19f599e502
5 changed files with 69 additions and 25 deletions
@@ -1,10 +1,11 @@
-resource "kubernetes_config_map" "getmail_config" {
+resource "kubernetes_secret" "getmail_config" {
  metadata {
    name      = "getmail-config"
    namespace = kubernetes_namespace.mail.metadata[0].name
  }

  data = local.getmail_config
+  type = "Opaque"
 }

 resource "kubernetes_cron_job_v1" "fetch_emails" {
@@ -60,8 +61,16 @@ resource "kubernetes_cron_job_v1" "fetch_emails" {

            volume {
              name = "getmail-config"
-              config_map {
-                name = "getmail-config"
+              secret {
+                secret_name = kubernetes_secret.getmail_config.metadata[0].name
+                dynamic "items" {
+                  for_each = local.getmail_jobs
+                  content {
+                    key  = "getmailrc_${items.value.name}"
+                    path = "getmailrc_${items.value.name}"
+                  }
+
+                }
              }
            }