diff --git a/infra/dev/.terraform.lock.hcl b/infra/dev/.terraform.lock.hcl index 94b524f5..f36afb80 100644 --- a/infra/dev/.terraform.lock.hcl +++ b/infra/dev/.terraform.lock.hcl @@ -6,6 +6,7 @@ provider "registry.terraform.io/hashicorp/aws" { constraints = "4.37.0" hashes = [ "h1:LFWMFPtcsxlzbzNlR5XQNfO9/teX2pD60XYycSU4gjQ=", + "h1:RQ6CqIhVwJQ0EMeNCH0y9ztLlJalC6QO/CyqmeQUUJ4=", "zh:12c2eb60cb1eb0a41d1afbca6fc6f0eed6ca31a12c51858f951a9e71651afbe0", "zh:1e17482217c39a12e930e71fd2c9af8af577bec6736b184674476ebcaad28477", "zh:1e8163c3d871bbd54c189bf2fe5e60e556d67fa399e4c88c8e6ee0834525dc33", diff --git a/infra/dev/iam_roles.tf b/infra/dev/iam_roles.tf index 8983aeca..f67a4134 100644 --- a/infra/dev/iam_roles.tf +++ b/infra/dev/iam_roles.tf @@ -44,6 +44,7 @@ data "aws_iam_policy_document" "task_policy" { data.aws_ssm_parameter.unit21_api_key.arn, data.aws_ssm_parameter.checkout_public_key.arn, data.aws_ssm_parameter.checkout_private_key.arn, + data.aws_ssm_parameter.checkout_signature_key.arn, data.aws_ssm_parameter.owlracle_api_key.arn, data.aws_ssm_parameter.owlracle_api_secret.arn, data.aws_ssm_parameter.db_password.arn, @@ -56,7 +57,8 @@ data "aws_iam_policy_document" "task_policy" { data.aws_ssm_parameter.sendgrid_api_key.arn, data.aws_ssm_parameter.twilio_sms_sid.arn, data.aws_ssm_parameter.twilio_account_sid.arn, - data.aws_ssm_parameter.twilio_auth_token.arn + data.aws_ssm_parameter.twilio_auth_token.arn, + data.aws_ssm_parameter.slack_webhook_url.arn, ] } diff --git a/infra/dev/ssm.tf b/infra/dev/ssm.tf index 514c2a64..08317b94 100644 --- a/infra/dev/ssm.tf +++ b/infra/dev/ssm.tf @@ -38,6 +38,10 @@ data "aws_ssm_parameter" "checkout_private_key" { name = "dev-checkout-private-key" } +data "aws_ssm_parameter" "checkout_signature_key" { + name = "checkout-signature-key" +} + data "aws_ssm_parameter" "owlracle_api_key" { name = "dev-owlracle-api-key" } @@ -90,6 +94,10 @@ data "aws_ssm_parameter" "redis_host_url" { name = "redis-host-url" } +data "aws_ssm_parameter" "slack_webhook_url" { + name = "slack-webhook-url" +} + data "aws_kms_key" "kms_key" { key_id = "alias/main-kms-key" } diff --git a/infra/dev/variables.tf b/infra/dev/variables.tf index 86da86dd..d886ff68 100644 --- a/infra/dev/variables.tf +++ b/infra/dev/variables.tf @@ -74,6 +74,10 @@ locals { name = "CHECKOUT_SECRET_KEY" valueFrom = data.aws_ssm_parameter.checkout_private_key.arn }, + { + name = "WEBHOOK_SECRET_KEY" + valueFrom = data.aws_ssm_parameter.checkout_signature_key.arn + }, { name = "OWLRACLE_API_KEY" valueFrom = data.aws_ssm_parameter.owlracle_api_key.arn @@ -125,6 +129,10 @@ locals { { name = "REDIS_PASSWORD", valuefrom = data.aws_ssm_parameter.redis_auth_token.arn + }, + { + name = "SLACK_WEBHOOK_URL" + valueFrom = data.aws_ssm_parameter.slack_webhook_url.arn } ] environment = [