From 89d2aa860888e723aace22616eb38e59b402349f Mon Sep 17 00:00:00 2001
From: Ayman Bagabas <ayman.bagabas@gmail.com>
Date: Fri, 13 Aug 2021 14:21:07 -0400
Subject: [PATCH] Bump tf module and pass auth keys from secrets on deploy

This will create a new secret in AWS SecretsManager
---
 .github/workflows/cd.yml | 8 +++++---
 main.tf                  | 7 ++++++-
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index d5ea9644be4d6743820b8ee961fc7c67abaa0307..29d1062e0a3c49eace86294c4a1e3e61b196e727 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -20,6 +20,7 @@ jobs:
       AWS_DEFAULT_REGION: us-east-1
       AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
       AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+      SMOOTHIE_REPO_KEYS: "${{ secrets.SMOOTHIE_REPO_KEYS }}"
 
     steps:
     - name: Install Go
@@ -72,9 +73,10 @@ jobs:
       id: tfvars
       run: |
         TF_VARS=$(cat <<EOF
-          -var "environment=$ENVIRONMENT" \
-          -var "aws_region=$AWS_DEFAULT_REGION" \
-          -var "app_image=$CONTAINER_REPO:$GITHUB_SHA-snapshot"
+        -var environment="$ENVIRONMENT" \
+        -var aws_region="$AWS_DEFAULT_REGION" \
+        -var app_image="$CONTAINER_REPO:$GITHUB_SHA-snapshot" \
+        -var authorization_keys="$(echo -n $SMOOTHIE_REPO_KEYS)"
         EOF
         )
         echo "::set-output name=vars::$TF_VARS"
diff --git a/main.tf b/main.tf
index 8cae8e0e65c4e9170fc7e52c983024c2604e043f..2da19fad4e7434bc499eb5b0b90a24c266cf2966 100644
--- a/main.tf
+++ b/main.tf
@@ -22,10 +22,14 @@ variable "force_new_deployment" {
   default = false
 }
 
+variable "authorization_keys" {
+  default = ""
+}
+
 module "smoothie" {
   /* source = "../terraform-aws-smoothie" */
   source  = "app.terraform.io/charm/smoothie/aws"
-  version = "0.1.4"
+  version = "0.2.0"
 
   environment                  = var.environment
   aws_region                   = var.aws_region
@@ -37,4 +41,5 @@ module "smoothie" {
   fargate_memory               = "2048"
   force_new_deployment         = var.force_new_deployment
   app_use_default_ssh_port     = true
+  authorization_keys           = var.authorization_keys
 }