about summary refs log tree commit diff
path: root/corp/ops/yandex/rih.tf
diff options
context:
space:
mode:
Diffstat (limited to 'corp/ops/yandex/rih.tf')
-rw-r--r--corp/ops/yandex/rih.tf12
1 files changed, 12 insertions, 0 deletions
diff --git a/corp/ops/yandex/rih.tf b/corp/ops/yandex/rih.tf
index fa0243a625..08836eee95 100644
--- a/corp/ops/yandex/rih.tf
+++ b/corp/ops/yandex/rih.tf
@@ -110,6 +110,13 @@ resource "yandex_serverless_container" "rih_backend" {
     key                  = "secret_key"
     environment_variable = "AWS_SECRET_ACCESS_KEY"
   }
+
+  secrets {
+    id                   = data.yandex_lockbox_secret.rih_captcha_prod_key.id
+    version_id           = data.yandex_lockbox_secret.rih_captcha_prod_key.current_version[0].id
+    key                  = "key"
+    environment_variable = "YANDEX_SMARTCAPTCHA_KEY"
+  }
 }
 
 resource "yandex_api_gateway" "rih_gateway" {
@@ -255,6 +262,11 @@ resource "yandex_lockbox_secret_version" "rih_backend_storage_secret" {
   }
 }
 
+# TODO(tazjin): automate if tf-yandex gains support for captcha resources
+data "yandex_lockbox_secret" "rih_captcha_prod_key" {
+  secret_id = "e6qloc8913tnracefb8f"
+}
+
 # TODO(tazjin): needs provider update
 #
 # resource "yandex_lockbox_secret_iam_binding" "viewer" {