Skip to content

Commit

Permalink
let chart manage creds
Browse files Browse the repository at this point in the history
  • Loading branch information
morga471 committed Mar 7, 2025
1 parent c30de6a commit 787d37d
Show file tree
Hide file tree
Showing 2 changed files with 42 additions and 47 deletions.
5 changes: 0 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,8 +71,6 @@ Common issues and solutions:
| Name | Version |
|------|---------|
| <a name="provider_helm"></a> [helm](#provider\_helm) | 2.17.0 |
| <a name="provider_kubernetes"></a> [kubernetes](#provider\_kubernetes) | 2.35.1 |
| <a name="provider_random"></a> [random](#provider\_random) | 3.7.1 |

## Modules

Expand All @@ -86,9 +84,6 @@ Common issues and solutions:
| Name | Type |
|------|------|
| [helm_release.keycloak](https://registry.terraform.io/providers/hashicorp/helm/latest/docs/resources/release) | resource |
| [kubernetes_secret.keycloak_admin_creds](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/secret) | resource |
| [kubernetes_secret.keycloak_user_creds](https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/secret) | resource |
| [random_password.keycloak_password](https://registry.terraform.io/providers/hashicorp/random/latest/docs/resources/password) | resource |

## Inputs

Expand Down
84 changes: 42 additions & 42 deletions main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -6,50 +6,50 @@ locals {
service_name = var.service_name
}

resource "kubernetes_secret" "keycloak_admin_creds" {
metadata {
name = "keycloak-admin-creds"
namespace = var.namespace
}
data = {
"admin-password" = random_password.keycloak_password.result
}
lifecycle {
ignore_changes = [
data["admin-password"]
]
}
}
# resource "kubernetes_secret" "keycloak_admin_creds" {
# metadata {
# name = "keycloak-admin-creds"
# namespace = var.namespace
# }
# data = {
# "admin-password" = random_password.keycloak_password.result
# }
# lifecycle {
# ignore_changes = [
# data["admin-password"]
# ]
# }
# }

resource "kubernetes_secret" "keycloak_user_creds" {
metadata {
name = "keycloak-user-creds"
namespace = var.namespace
}
data = {
"password" = random_password.keycloak_password.result
"postgres-password" = random_password.keycloak_password.result
}
lifecycle {
ignore_changes = [
data["password"]
]
}
}
# resource "kubernetes_secret" "keycloak_user_creds" {
# metadata {
# name = "keycloak-user-creds"
# namespace = var.namespace
# }
# data = {
# "password" = random_password.keycloak_password.result
# "postgres-password" = random_password.keycloak_password.result
# }
# lifecycle {
# ignore_changes = [
# data["password"]
# ]
# }
# }

resource "random_password" "keycloak_password" {
length = 32
lower = true
special = true
numeric = true
upper = true
min_numeric = 2
min_lower = 2
min_special = 2
min_upper = 2
# cannot: be / @ " space
override_special = "[*?#]"
}
# resource "random_password" "keycloak_password" {
# length = 32
# lower = true
# special = true
# numeric = true
# upper = true
# min_numeric = 2
# min_lower = 2
# min_special = 2
# min_upper = 2
# # cannot: be / @ " space
# override_special = "[*?#]"
# }

resource "helm_release" "keycloak" {
chart = "keycloak"
Expand Down

0 comments on commit 787d37d

Please sign in to comment.