Merged in dev/gideon/MPC-4700_share_EMS_auth_token_secret_with_linode…

…_EMS-router_2022.03.04 (pull request elastic#515)

Share EMS auth token secret with Linode based EMS-router

PR https://bitbucket.org/engageli/engageli-media-server/pull-requests/76 adds
API routes for EMS-router to set draining. Need to share a secret for
authorizing these calls.


Approved-by: fabien
Approved-by: Andre Sodermans
Approved-by: Hiroshi Ishii

linode/ems/ems-router.tf

@@ -37,10 +37,11 @@ resource "null_resource" "ems_router_env_sh" {
     # Initially tried to used StackScripts, but they work only on public images
     content = templatefile("./templates/user-data.tpl", {
       user_data = {
-        ClusterID  = var.cluster_id
-        ENABLE_TLS = true
-        EMS_FQDN   = "${var.ems_fqdn}."
-        RedisHost  = linode_instance.ems_redis.private_ip_address
+        ClusterID         = var.cluster_id
+        ENABLE_TLS        = true
+        EMS_FQDN          = "${var.ems_fqdn}."
+        RedisHost         = linode_instance.ems_redis.private_ip_address
+        AUTH_TOKEN_SECRET = sensitive(data.aws_secretsmanager_secret_version.auth_token_secret.secret_string)
         # RedisSecret=tf-demo2-ems_router-redis-pw20210802225615828800000001
         # Role=ems_router
         StackEnv  = var.stack_env