about summary refs log tree commit diff
path: root/corp/ops/yandex/rih.tf
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2023-06-09T17·01+0300
committertazjin <tazjin@tvl.su>2023-06-10T11·23+0000
commit9e6137309621c0861d9013e8d1646f735eda6c90 (patch)
tree273799fd80a1911a9dba5b7971180d5d64a619d7 /corp/ops/yandex/rih.tf
parente3778ff6bc97d102aa6d2119e46c174384271f88 (diff)
feat(corp/ops): provide captcha verification key to backend r/6259
Change-Id: I960aa604488a27945ae6e69e6f3212a8dfd356cb
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8740
Tested-by: BuildkiteCI
Reviewed-by: tazjin <tazjin@tvl.su>
Diffstat (limited to 'corp/ops/yandex/rih.tf')
-rw-r--r--corp/ops/yandex/rih.tf12
1 files changed, 12 insertions, 0 deletions
diff --git a/corp/ops/yandex/rih.tf b/corp/ops/yandex/rih.tf
index fa0243a625c5..08836eee95d9 100644
--- a/corp/ops/yandex/rih.tf
+++ b/corp/ops/yandex/rih.tf
@@ -110,6 +110,13 @@ resource "yandex_serverless_container" "rih_backend" {
     key                  = "secret_key"
     environment_variable = "AWS_SECRET_ACCESS_KEY"
   }
+
+  secrets {
+    id                   = data.yandex_lockbox_secret.rih_captcha_prod_key.id
+    version_id           = data.yandex_lockbox_secret.rih_captcha_prod_key.current_version[0].id
+    key                  = "key"
+    environment_variable = "YANDEX_SMARTCAPTCHA_KEY"
+  }
 }
 
 resource "yandex_api_gateway" "rih_gateway" {
@@ -255,6 +262,11 @@ resource "yandex_lockbox_secret_version" "rih_backend_storage_secret" {
   }
 }
 
+# TODO(tazjin): automate if tf-yandex gains support for captcha resources
+data "yandex_lockbox_secret" "rih_captcha_prod_key" {
+  secret_id = "e6qloc8913tnracefb8f"
+}
+
 # TODO(tazjin): needs provider update
 #
 # resource "yandex_lockbox_secret_iam_binding" "viewer" {