Skip to content

Commit

Permalink
chore: Remove unused AWS KMS code and secrets management resources
Browse files Browse the repository at this point in the history
  • Loading branch information
Dave Arnold committed Sep 3, 2024
1 parent 563d159 commit 68bd83c
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 17 deletions.
6 changes: 0 additions & 6 deletions .secrets/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,6 @@ locals {
}
}

resource "aws_kms_ciphertext" "ciphertext_blob" {
for_each = tomap(local.secrets)
key_id = aws_kms_key.oauth_config.key_id
plaintext = lookup(local.secrets, each.key)
}

resource "aws_secretsmanager_secret" "secrets" {
for_each = tomap(local.secrets)
name = "/image-pipeline/global/${each.key}"
Expand Down
11 changes: 0 additions & 11 deletions ansible_parameters.tf
Original file line number Diff line number Diff line change
Expand Up @@ -53,14 +53,3 @@ resource "aws_ssm_parameter" "managed_parameters" {
type = "StringList"
value = each.value
}

resource "aws_secretsmanager_secret" "secrets" {
for_each = toset(local.secret_keys)
name = "/image-pipeline/${var.project_name}/${each.key}"
}

resource "aws_secretsmanager_secret_version" "secrets" {
for_each = toset(local.secret_keys)
secret_id = lookup(aws_secretsmanager_secret.secrets, each.key).id
secret_string = jsonencode(lookup(local.secrets, each.key))
}

0 comments on commit 68bd83c

Please sign in to comment.