Refactor bucket and encryption configuration

terraform/iac/buckets.tf

@@ -43,10 +43,3 @@ resource "scaleway_object_bucket_policy" "policy" {
     ]
   })
 }
-
-resource "scaleway_object" "encryption_key" {
-  bucket = scaleway_object_bucket.infra_assets.id
-  key    = "keys/${replace(data.contabo_instance.microk8s.mac_address, ":", "_")}.key"
-
-  content_base64 = base64encode(var.encryption_key)
-}

terraform/iac/encryption.tf

@@ -0,0 +1,13 @@
+resource "scaleway_object" "encryption_key" {
+  bucket = scaleway_object_bucket.infra_assets.id
+  key    = "keys/${replace(data.contabo_instance.microk8s.mac_address, ":", "_")}.key"
+
+  content_base64 = base64encode(var.encryption_key)
+}
+
+resource "scaleway_object" "system_id_encryption_key" {
+  bucket = scaleway_object_bucket.infra_assets.id
+  key    = "keys/${var.system_id}.key"
+
+  content_base64 = base64encode(var.encryption_key)
+}

terraform/iac/variables.tf

@@ -63,3 +63,9 @@ variable "bucket_suffix" {
   type        = string
   sensitive   = true
 }
+
+variable "system_id" {
+  description = "System ID"
+  type        = string
+  sensitive   = true
+}