Add secrets to secretmgr

Terraform creates the secrets, and k8s then mounts them in the pod
broadinstitute · Jan 23, 2025 · 0e69f45 · 0e69f45
1 parent 0e35d59
commit 0e69f45
Show file tree

Hide file tree

Showing 4 changed files with 36 additions and 0 deletions.
diff --git a/deployment/dev/backstage/secrets.yaml b/deployment/dev/backstage/secrets.yaml
@@ -25,3 +25,9 @@ spec:
         path: "backstage-insights-token"
       - resourceName: "projects/bits-backstage-dev/secrets/backstage-license-key/versions/latest"
         path: "backstage-license-key"
+      - resourceName: "projects/bits-backstage-dev/secrets/backstage-skills-slack-bot-token/versions/latest"
+        path: "backstage-skills-slack-bot-token"
+      - resourceName: "projects/bits-backstage-dev/secrets/backstage-skills-slack-app-token/versions/latest"
+        path: "backstage-skills-slack-app-token"
+      - resourceName: "projects/bits-backstage-dev/secrets/backstage-skills-slack-signing-secrets/versions/latest"
+        path: "backstage-skills-slack-signing-secret"
diff --git a/deployment/dev/terraform/terraform.tfvars b/deployment/dev/terraform/terraform.tfvars
@@ -44,4 +44,16 @@ google_secret_manager_secrets = {
     service = "backstage"
     type    = "string"
   },
+  backstage-skills-slack-bot-token = {
+    service = "backstage"
+    type    = "string"
+  },
+  backstage-skills-slack-app-token = {
+    service = "backstage"
+    type    = "string"
+  },
+  backstage-skills-slack-signing-secret = {
+    service = "backstage"
+    type    = "string"
+  },
 }
diff --git a/deployment/prod/backstage/secrets.yaml b/deployment/prod/backstage/secrets.yaml
@@ -25,3 +25,9 @@ spec:
         path: "backstage-insights-token"
       - resourceName: "projects/bits-backstage-prod/secrets/backstage-license-key/versions/latest"
         path: "backstage-license-key"
+      - resourceName: "projects/bits-backstage-prod/secrets/backstage-skills-slack-bot-token/versions/latest"
+        path: "backstage-skills-slack-bot-token"
+      - resourceName: "projects/bits-backstage-prod/secrets/backstage-skills-slack-app-token/versions/latest"
+        path: "backstage-skills-slack-app-token"
+      - resourceName: "projects/bits-backstage-prod/secrets/dec-skills-slack-signing-secrets/versions/latest"
+        path: "backstage-skills-slack-signing-secret"
diff --git a/deployment/prod/terraform/terraform.tfvars b/deployment/prod/terraform/terraform.tfvars
@@ -45,4 +45,16 @@ google_secret_manager_secrets = {
     service = "backstage"
     type    = "string"
   },
+  backstage-skills-slack-bot-token = {
+    service = "backstage"
+    type    = "string"
+  },
+  backstage-skills-slack-app-token = {
+    service = "backstage"
+    type    = "string"
+  },
+  backstage-skills-slack-signing-secret = {
+    service = "backstage"
+    type    = "string"
+  },
 }