diff --git a/src/core/cdn.tf b/src/core/cdn.tf index 0f8edd59e..099380714 100644 --- a/src/core/cdn.tf +++ b/src/core/cdn.tf @@ -45,7 +45,7 @@ locals { // public storage used to serve FE #tfsec:ignore:azure-storage-default-action-deny module "checkout_cdn" { - source = "git::https://github.com/pagopa/azurerm.git//cdn?ref=v1.0.81" + source = "git::https://github.com/pagopa/azurerm.git//cdn?ref=v1.0.85" name = "checkout" prefix = local.project @@ -102,3 +102,28 @@ module "checkout_cdn" { tags = var.tags } + +#tfsec:ignore:AZU023 +resource "azurerm_key_vault_secret" "selc_web_storage_access_key" { + name = "web-storage-access-key" + value = module.checkout_cdn.storage_primary_access_key + content_type = "text/plain" + + key_vault_id = module.key_vault.id +} + +resource "azurerm_key_vault_secret" "selc_web_storage_connection_string" { + name = "web-storage-connection-string" + value = module.checkout_cdn.storage_primary_connection_string + content_type = "text/plain" + + key_vault_id = module.key_vault.id +} + +resource "azurerm_key_vault_secret" "selc_web_storage_blob_connection_string" { + name = "web-storage-blob-connection-string" + value = module.checkout_cdn.storage_primary_blob_connection_string + content_type = "text/plain" + + key_vault_id = module.key_vault.id +} \ No newline at end of file diff --git a/src/k8s/secrets.tf b/src/k8s/secrets.tf index 7ce5a65f9..6ccf3fa12 100644 --- a/src/k8s/secrets.tf +++ b/src/k8s/secrets.tf @@ -16,6 +16,7 @@ module "key_vault_secrets_query" { "postgres-selc-user-password", "smtp-usr", "smtp-psw", - "contracts-storage-access-key" + "contracts-storage-access-key", + "web-storage-connection-string" ] } diff --git a/src/k8s/selc_secrets.tf b/src/k8s/selc_secrets.tf index adf48cb38..17aa94d2e 100644 --- a/src/k8s/selc_secrets.tf +++ b/src/k8s/selc_secrets.tf @@ -125,5 +125,18 @@ resource "kubernetes_secret" "storage" { STORAGE_PSW = module.key_vault_secrets_query.values["contracts-storage-access-key"].value } + type = "Opaque" +} + +resource "kubernetes_secret" "b4f-dashboard" { + metadata { + name = "b4f-dashboard" + namespace = kubernetes_namespace.selc.metadata[0].name + } + + data = { + BLOB_STORAGE_CONN_STRING = module.key_vault_secrets_query.values["web-storage-connection-string"].value + } + type = "Opaque" } \ No newline at end of file