diff --git a/terraform/.terraform.lock.hcl b/terraform/.terraform.lock.hcl index d3c8ead6..1942a1d7 100644 --- a/terraform/.terraform.lock.hcl +++ b/terraform/.terraform.lock.hcl @@ -6,6 +6,7 @@ provider "registry.terraform.io/hashicorp/aws" { constraints = "~> 4.0" hashes = [ "h1:P43vwcDPG99x5WBbmqwUPgfJrfXf6/ucAIbGlRb7k1w=", + "h1:dCRc4GqsyfqHEMjgtlM1EympBcgTmcTkWaJmtd91+KA=", "zh:0843017ecc24385f2b45f2c5fce79dc25b258e50d516877b3affee3bef34f060", "zh:19876066cfa60de91834ec569a6448dab8c2518b8a71b5ca870b2444febddac6", "zh:24995686b2ad88c1ffaa242e36eee791fc6070e6144f418048c4ce24d0ba5183", @@ -28,6 +29,7 @@ provider "registry.terraform.io/hashicorp/random" { version = "3.5.1" constraints = ">= 3.4.3" hashes = [ + "h1:VSnd9ZIPyfKHOObuQCaKfnjIHRtR7qTw19Rz8tJxm+k=", "h1:sZ7MTSD4FLekNN2wSNFGpM+5slfvpm5A/NLVZiB7CO0=", "zh:04e3fbd610cb52c1017d282531364b9c53ef72b6bc533acb2a90671957324a64", "zh:119197103301ebaf7efb91df8f0b6e0dd31e6ff943d231af35ee1831c599188d", diff --git a/terraform/README.md b/terraform/README.md index 686ab921..dc5b14a9 100644 --- a/terraform/README.md +++ b/terraform/README.md @@ -30,6 +30,7 @@ Terraform to deploy the service into AWS. | [aws_kms_key.secretsmanager_key](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/kms_key) | data source | | [aws_lb_target_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/lb_target_group) | data source | | [aws_secretsmanager_secret.duty_calculator_secret_key_base](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/secretsmanager_secret) | data source | +| [aws_secretsmanager_secret.sentry_dsn](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/secretsmanager_secret) | data source | | [aws_security_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/security_group) | data source | | [aws_ssm_parameter.ecr_url](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ssm_parameter) | data source | | [aws_subnets.private](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/subnets) | data source | diff --git a/terraform/data.tf b/terraform/data.tf index 34da2581..7936c4c3 100644 --- a/terraform/data.tf +++ b/terraform/data.tf @@ -25,6 +25,10 @@ data "aws_secretsmanager_secret" "duty_calculator_secret_key_base" { name = "duty-calculator-secret-key-base" } +data "aws_secretsmanager_secret" "sentry_dsn" { + name = "duty-calculator-sentry-dsn" +} + data "aws_kms_key" "secretsmanager_key" { key_id = "alias/secretsmanager-key" } diff --git a/terraform/iam.tf b/terraform/iam.tf index e3590e66..d2768b31 100644 --- a/terraform/iam.tf +++ b/terraform/iam.tf @@ -9,6 +9,7 @@ data "aws_iam_policy_document" "secrets" { ] resources = [ data.aws_secretsmanager_secret.duty_calculator_secret_key_base.arn, + data.aws_secretsmanager_secret.sentry_dsn.arn, ] } diff --git a/terraform/main.tf b/terraform/main.tf index 9b9b1610..c85996ea 100644 --- a/terraform/main.tf +++ b/terraform/main.tf @@ -80,5 +80,9 @@ module "service" { name = "SECRET_KEY_BASE" valueFrom = data.aws_secretsmanager_secret.duty_calculator_secret_key_base.arn }, + { + name = "SENTRY_DSN" + valueFrom = data.aws_secretsmanager_secret.sentry_dsn.arn + }, ] }