terraform-contour-mirror/modules/vault-platform-secrets/outputs.tf

55 lines
2.1 KiB
HCL

output "common_secret_paths" {
description = "Paths of created common Vault secrets"
value = compact([
try(vault_kv_secret_v2.common_regcred[0].name, ""),
try(vault_kv_secret_v2.common_smtp_auth[0].name, ""),
try(vault_kv_secret_v2.common_django_auth[0].name, ""),
try(vault_kv_secret_v2.common_rsa_keys[0].name, "")
])
}
output "infra_secret_paths" {
description = "Paths of created infrastructure Vault secrets"
value = concat(
compact([
try(vault_kv_secret_v2.postgresql_admin[0].name, ""),
try(vault_kv_secret_v2.postgresql_s3[0].name, ""),
try(vault_kv_secret_v2.postgresql_users[0].name, ""),
try(vault_kv_secret_v2.rabbitmq_auth[0].name, ""),
try(vault_kv_secret_v2.minio_admin[0].name, ""),
try(vault_kv_secret_v2.kafka_bootstrap[0].name, ""),
try(vault_kv_secret_v2.zitadel_postgresql[0].name, ""),
try(vault_kv_secret_v2.camunda_identity_components[0].name, ""),
try(vault_kv_secret_v2.camunda_identity_firstuser[0].name, ""),
try(vault_kv_secret_v2.camunda_keycloak_admin[0].name, ""),
try(vault_kv_secret_v2.camunda_postgresql[0].name, ""),
try(vault_kv_secret_v2.keycloak_admin[0].name, ""),
try(vault_kv_secret_v2.keycloak_postgresql[0].name, "")
]),
[for s in values(vault_kv_secret_v2.postgresql_apps) : s.name],
[for s in values(vault_kv_secret_v2.rabbitmq_apps) : s.name],
[for s in values(vault_kv_secret_v2.minio_apps) : s.name],
[for s in values(vault_kv_secret_v2.kafka_apps) : s.name]
)
}
output "infra_policy_names" {
description = "Created infrastructure Vault policy names"
value = keys(vault_policy.infra)
}
output "infra_role_names" {
description = "Created infrastructure Vault kubernetes auth role names"
value = [for r in values(vault_kubernetes_auth_backend_role.infra) : r.role_name]
}
output "app_policy_names" {
description = "Created application Vault policy names"
value = keys(vault_policy.app)
}
output "app_role_names" {
description = "Created application Vault kubernetes auth role names"
value = [for r in values(vault_kubernetes_auth_backend_role.app) : r.role_name]
}