josn key auth support for inventory

NashTech-Labs · Nov 13, 2023 · 4eb9c84 · 4eb9c84
1 parent 1ee7b64
commit 4eb9c84
Show file tree

Hide file tree

Showing 3 changed files with 36 additions and 2 deletions.
diff --git a/deployment/gcpresources/terraform/main.tf b/deployment/gcpresources/terraform/main.tf
@@ -82,6 +82,24 @@ resource "google_pubsub_topic" "Vehicle" {
   message_retention_duration = "604800s"
 }
 
+resource "google_pubsub_subscription" "inventory_subscription" {
+  name  = "inventory_subscription"
+  topic = google_pubsub_topic.Vehicle.name
+
+  # 20 minutes
+  message_retention_duration = "1200s"
+  retain_acked_messages      = true
+
+  ack_deadline_seconds = 20
+  expiration_policy {
+    ttl = "300000.5s"
+  }
+  retry_policy {
+    minimum_backoff = "10s"
+  }
+  enable_message_ordering    = false
+}
+
 #-----------------------GKE Cluster for applications----------------------------
 resource "google_container_cluster" "car-demo-gke" {
   name     = "car-demo-gke"
@@ -144,5 +162,5 @@ resource "google_secret_manager_secret" "car-demo-secret" {
 resource "google_secret_manager_secret_version" "car-demo-secret-1" {
 
   secret      = google_secret_manager_secret.car-demo-secret.id
-  secret_data = "{\"mysql-db-username\": \"${var.user_name}\", \"mysql-db-userpassword\": \"${var.user_password}\"}"
+  secret_data = "{\"mysql-db-username\": \"${var.user_name}\", \"mysql-db-userpassword\": \"${var.user_password}\", \"gcp_json_key\": \"${var.gcp_json_key}\"}"
 }
diff --git a/deployment/gcpresources/terraform/my-sql-instance-variables.tf b/deployment/gcpresources/terraform/my-sql-instance-variables.tf
@@ -66,7 +66,12 @@ variable user_name {
   default     = "dbadmin"
 }
 
-variable user_password {
+variable guser_password {
   description = "The password for the default user. If not set, a random one will be generated and available in the generated_user_password output variable."
   default     = "JavaDBs#password2023"
 }
+
+variable gcp_json_key {
+  description = "GCP Json key"
+  default     = "{}"
+}
diff --git a/inventory-service/gcp-deploy-service.yaml b/inventory-service/gcp-deploy-service.yaml
@@ -35,6 +35,12 @@ spec:
                   name: secret-to-be-created
                   key: mysql-db-userpassword
                   optional: false
+            - name: GOOGLE_APPLICATION_CREDENTIALS
+              valueFrom:
+                secretKeyRef:
+                  name: secret-to-be-created
+                  key: gcp_json_key
+                  optional: false
           envFrom:
             - configMapRef:
                 name: inventory-configmap
@@ -93,6 +99,11 @@ spec:
         key: car-demo-secret
         version: latest
         property: mysql-db-userpassword
+    - secretKey: "gcp_json_key"
+      remoteRef:
+        key: car-demo-secret
+        version: latest
+        property: gcp_json_key
 
     - secretKey: "MY_SQL_SECRETS"
       remoteRef: