fix naming for infra vault (#298)

Author: swiknaba

iam/iam-policy-for-secrets/locals.tf

@@ -15,11 +15,11 @@ locals {
 
   secretmanager_arns = concat(
     values(data.aws_secretsmanager_secret.app)[*].arn,
-    values(data.aws_secretsmanager_secret.terraform)[*].arn,
+    values(data.aws_secretsmanager_secret.infra)[*].arn,
   )
 
   kms_ids = concat(
     values(data.aws_secretsmanager_secret.app)[*].kms_key_id,
-    values(data.aws_secretsmanager_secret.terraform)[*].kms_key_id,
+    values(data.aws_secretsmanager_secret.infra)[*].kms_key_id,
   )
 }

iam/iam-policy-for-secrets/main.tf

@@ -6,12 +6,12 @@ data "aws_secretsmanager_secret" "app" {
   name = "${each.value.name}/app/${each.value.environment}"
 }
 
-data "aws_secretsmanager_secret" "terraform" {
+data "aws_secretsmanager_secret" "infra" {
   for_each = {
     for project in local.admin_access_projects : "${project.name}-${project.environment}" => project
   }
 
-  name = "${each.value.name}/app/${each.value.environment}"
+  name = "${each.value.name}/infra/${each.value.environment}"
 }
 
 data "aws_kms_key" "secrets" {

script/database-roles/main.tf

@@ -2,13 +2,13 @@ data "aws_db_instance" "main" {
   db_instance_identifier = var.db_identifier
 }
 
-data "aws_secretsmanager_secret_version" "terraform" {
-  secret_id = "${var.project}/terraform/${var.environment}"
+data "aws_secretsmanager_secret_version" "infra" {
+  secret_id = "${var.project}/infra/${var.environment}"
 }
 
 locals {
   credentials = jsondecode(
-    data.aws_secretsmanager_secret_version.terraform.secret_string
+    data.aws_secretsmanager_secret_version.infra.secret_string
   )
 }
 
@@ -39,4 +39,3 @@ resource "null_resource" "database_script" {
     working_dir = path.module
   }
 }
-

stack/app/secrets.tf

@@ -1,10 +1,10 @@
 locals {
   credentials = jsondecode(
-    data.aws_secretsmanager_secret_version.terraform.secret_string
+    data.aws_secretsmanager_secret_version.infra.secret_string
   )
 }
 
-data "aws_secretsmanager_secret_version" "terraform" {
+data "aws_secretsmanager_secret_version" "infra" {
   secret_id = "${var.project}/infra/${var.environment}"
 }
 

stack/setup/main.tf

@@ -39,8 +39,8 @@ resource "aws_secretsmanager_secret_version" "app" {
   secret_string = file("${path.cwd}/app-secrets.json")
 }
 
-resource "aws_secretsmanager_secret_version" "terraform" {
-  secret_id     = module.secrets["terraform"].id
+resource "aws_secretsmanager_secret_version" "infra" {
+  secret_id     = module.secrets["infra"].id
   secret_string = file("${path.cwd}/infra-secrets.json")
 }
 

stack/setup/outputs.tf

@@ -3,15 +3,15 @@ output "app_secrets_arn" {
 }
 
 output "terraform_secrets_arn" {
-  value = module.secrets["terraform"].arn
+  value = module.secrets["infra"].arn
 }
 
 output "app_secrets-kms-key" {
   value = module.secrets-kms-key["app"].arn
 }
 
 output "terraform_secrets-kms-key" {
-  value = module.secrets-kms-key["terraform"].arn
+  value = module.secrets-kms-key["infra"].arn
 }
 
 output "eips-nat" {