Remove sectool.json, update mail.tf to ignore annotation changes, and consolidate sensitive variables in secrets.tf

2025-03-23 21:08:18 +01:00
parent 2657388998
commit 6168afdc32
4 changed files with 86 additions and 81 deletions
@@ -392,6 +392,7 @@ resource "kubernetes_deployment" "dovecot" {
  }
  depends_on = [kubernetes_manifest.mail_certificate, kubernetes_service_account.mail_app]
  lifecycle {
+    ignore_changes = [spec[0].template[0].metadata[0].annotations]
    replace_triggered_by = [
      kubernetes_config_map.dovecot_config,
      kubernetes_secret.dovecot_users,
@@ -504,6 +505,7 @@ resource "kubernetes_deployment" "postfix" {
  }
  depends_on = [kubernetes_manifest.mail_certificate, kubernetes_service_account.mail_app]
  lifecycle {
+    ignore_changes = [spec[0].template[0].metadata[0].annotations]
    replace_triggered_by = [
      kubernetes_config_map.postfix_config,
      kubernetes_secret.relay_mail_credentials,