Set standard secret retrieval in greenfield

gsf · gsf · commit 96df574fbc37 · 2025-06-10T19:47:57.000-04:00
diff --git a/terraform/services/api-rds/data.tf b/terraform/services/api-rds/data.tf
@@ -32,7 +32,7 @@ locals {
 
 # Fetching the secret for database username
 data "aws_secretsmanager_secret" "database_user" {
-  name = local.db_username
+  name = var.legacy ? local.db_username : "${var.app}/${var.env}/db/username"
 }
 
 data "aws_secretsmanager_secret_version" "database_user" {
@@ -41,7 +41,7 @@ data "aws_secretsmanager_secret_version" "database_user" {
 
 # Fetching the secret for database password
 data "aws_secretsmanager_secret" "database_password" {
-  name = local.db_password
+  name = var.legacy ? local.db_password : "${var.app}/${var.env}/db/password"
 }
 
 data "aws_secretsmanager_secret_version" "database_password" {

Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ locals {`
`32`	`32`
`33`	`33`	`# Fetching the secret for database username`
`34`	`34`	`data "aws_secretsmanager_secret" "database_user" {`
`35`		`- name = local.db_username`
	`35`	`+ name = var.legacy ? local.db_username : "${var.app}/${var.env}/db/username"`
`36`	`36`	`}`
`37`	`37`
`38`	`38`	`data "aws_secretsmanager_secret_version" "database_user" {`
`@@ -41,7 +41,7 @@ data "aws_secretsmanager_secret_version" "database_user" {`
`41`	`41`
`42`	`42`	`# Fetching the secret for database password`
`43`	`43`	`data "aws_secretsmanager_secret" "database_password" {`
`44`		`- name = local.db_password`
	`44`	`+ name = var.legacy ? local.db_password : "${var.app}/${var.env}/db/password"`
`45`	`45`	`}`
`46`	`46`
`47`	`47`	`data "aws_secretsmanager_secret_version" "database_password" {`