From 9e6137309621c0861d9013e8d1646f735eda6c90 Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Fri, 9 Jun 2023 20:01:34 +0300 Subject: feat(corp/ops): provide captcha verification key to backend Change-Id: I960aa604488a27945ae6e69e6f3212a8dfd356cb Reviewed-on: https://cl.tvl.fyi/c/depot/+/8740 Tested-by: BuildkiteCI Reviewed-by: tazjin --- corp/ops/yandex/rih.tf | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'corp') diff --git a/corp/ops/yandex/rih.tf b/corp/ops/yandex/rih.tf index fa0243a625..08836eee95 100644 --- a/corp/ops/yandex/rih.tf +++ b/corp/ops/yandex/rih.tf @@ -110,6 +110,13 @@ resource "yandex_serverless_container" "rih_backend" { key = "secret_key" environment_variable = "AWS_SECRET_ACCESS_KEY" } + + secrets { + id = data.yandex_lockbox_secret.rih_captcha_prod_key.id + version_id = data.yandex_lockbox_secret.rih_captcha_prod_key.current_version[0].id + key = "key" + environment_variable = "YANDEX_SMARTCAPTCHA_KEY" + } } resource "yandex_api_gateway" "rih_gateway" { @@ -255,6 +262,11 @@ resource "yandex_lockbox_secret_version" "rih_backend_storage_secret" { } } +# TODO(tazjin): automate if tf-yandex gains support for captcha resources +data "yandex_lockbox_secret" "rih_captcha_prod_key" { + secret_id = "e6qloc8913tnracefb8f" +} + # TODO(tazjin): needs provider update # # resource "yandex_lockbox_secret_iam_binding" "viewer" { -- cgit 1.4.1