twenty/packages/twenty-docker/k8s/terraform/secret.tf

locals {
  tokens = [
    "accessToken",
    "loginToken",
    "refreshToken",
    "fileToken"
  ]
}

resource "random_bytes" "this" {
  for_each = toset(local.tokens)

  length = 32
}

resource "kubernetes_secret" "twentycrm_tokens" {
  metadata {
    name      = "tokens"
    namespace = kubernetes_namespace.twentycrm.metadata.0.name
  }

  data = {
    accessToken  = random_bytes.this["accessToken"].base64
    loginToken   = random_bytes.this["loginToken"].base64
    refreshToken = random_bytes.this["refreshToken"].base64
    fileToken    = random_bytes.this["fileToken"].base64
  }
}