Merge pull request #726 from trade-tariff/BAU-sentry-configuration

BAU: Adds sentry configuration
trade-tariff · Nov 29, 2023 · 9271a74 · 9271a74
2 parents 7554f68 + 96f63ec
commit 9271a74
Show file tree

Hide file tree

Showing 5 changed files with 12 additions and 0 deletions.
diff --git a/terraform/.terraform.lock.hcl b/terraform/.terraform.lock.hcl
diff --git a/terraform/README.md b/terraform/README.md
@@ -30,6 +30,7 @@ Terraform to deploy the service into AWS.
 | [aws_kms_key.secretsmanager_key](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/kms_key) | data source |
 | [aws_lb_target_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/lb_target_group) | data source |
 | [aws_secretsmanager_secret.duty_calculator_secret_key_base](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/secretsmanager_secret) | data source |
+| [aws_secretsmanager_secret.sentry_dsn](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/secretsmanager_secret) | data source |
 | [aws_security_group.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/security_group) | data source |
 | [aws_ssm_parameter.ecr_url](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ssm_parameter) | data source |
 | [aws_subnets.private](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/subnets) | data source |

diff --git a/terraform/data.tf b/terraform/data.tf
@@ -25,6 +25,10 @@ data "aws_secretsmanager_secret" "duty_calculator_secret_key_base" {
   name = "duty-calculator-secret-key-base"
 }
 
+data "aws_secretsmanager_secret" "sentry_dsn" {
+  name = "duty-calculator-sentry-dsn"
+}
+
 data "aws_kms_key" "secretsmanager_key" {
   key_id = "alias/secretsmanager-key"
 }

diff --git a/terraform/iam.tf b/terraform/iam.tf
@@ -9,6 +9,7 @@ data "aws_iam_policy_document" "secrets" {
     ]
     resources = [
       data.aws_secretsmanager_secret.duty_calculator_secret_key_base.arn,
+      data.aws_secretsmanager_secret.sentry_dsn.arn,
     ]
   }
 

diff --git a/terraform/main.tf b/terraform/main.tf
@@ -80,5 +80,9 @@ module "service" {
       name      = "SECRET_KEY_BASE"
       valueFrom = data.aws_secretsmanager_secret.duty_calculator_secret_key_base.arn
     },
+    {
+      name      = "SENTRY_DSN"
+      valueFrom = data.aws_secretsmanager_secret.sentry_dsn.arn
+    },
   ]
 }