DTSPO-115 Store send-grid API key in vault (#710)

hmcts · Nov 3, 2020 · 214b2cb · 214b2cb
1 parent a879b9d
commit 214b2cb
Show file tree

Hide file tree

Showing 5 changed files with 31 additions and 16 deletions.
diff --git a/infrastructure/.terraform-version b/infrastructure/.terraform-version
@@ -1 +1 @@
-0.13.2
+0.13.5
diff --git a/infrastructure/main.tf b/infrastructure/main.tf
@@ -10,3 +10,24 @@ data "azurerm_key_vault" "sscs_key_vault" {
   name                = "${local.azureVaultName}"
   resource_group_name = local.azureVaultName
 }
+
+data "azurerm_key_vault" "send_grid" {
+  provider = azurerm.send-grid
+
+  name                = var.env != "prod" ? "sendgridnonprod" : "sendgridprod"
+  resource_group_name = var.env != "prod" ? "SendGrid-nonprod" : "SendGrid-prod"
+}
+
+data "azurerm_key_vault_secret" "send_grid_api_key" {
+  provider = azurerm.send-grid
+
+
+  key_vault_id = data.azurerm_key_vault.send_grid.id
+  name         = "sscs-password"
+}
+
+resource "azurerm_key_vault_secret" "sendgrid_api_key" {
+  key_vault_id = data.azurerm_key_vault.sscs_key_vault.id
+  name         = "sendgrid-api-key"
+  value        = data.azurerm_key_vault_secret.send_grid_api_key.value
+}
diff --git a/infrastructure/prod.tfvars b/infrastructure/prod.tfvars
@@ -0,0 +1 @@
+send_grid_subscription = "8999dec3-0104-4a27-94ee-6588559729d1"
diff --git a/infrastructure/state.tf → infrastructure/providers.tf b/infrastructure/state.tf → infrastructure/providers.tf
@@ -4,10 +4,15 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "~> 2.25"
+      version = "~> 2.34"
     }
     random = {
       source = "hashicorp/random"
     }
   }
 }
+
+provider "azurerm" {
+  alias = "send-grid"
+  features {}
+}
diff --git a/infrastructure/variables.tf b/infrastructure/variables.tf
@@ -11,24 +11,12 @@ variable "location" {
 variable "env" {
 }
 
-variable "ilbIp" {}
-
 variable "subscription" {}
 
-variable "capacity" {
-  default = "1"
-}
-
 variable "common_tags" {
   type = map(string)
 }
 
-variable "appinsights_instrumentation_key" {
-  description = "Instrumentation key of the App Insights instance this webapp should use. Module will create own App Insights resource if this is not provided"
-  default     = ""
-}
-
-variable "appinsights_location" {
-  default     = "West Europe"
-  description = "Location for Application Insights"
+variable "send_grid_subscription" {
+  default = "1c4f0704-a29e-403d-b719-b90c34ef14c9"
 }