mirror of
https://github.com/Hestia-Homes/Model.git
synced 2026-08-03 05:18:22 +00:00
9870005230
The task lane pulls the task domain types, both task repositories and four Postgres modules into the image, plus SQLAlchemy, SQLModel and a driver. Terraform gains the DB credentials block and five Postgres env vars; the deploy job gains the three DB secrets the shared workflow already declares. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
38 lines
1.2 KiB
HCL
38 lines
1.2 KiB
HCL
data "aws_secretsmanager_secret_version" "db_credentials" {
|
|
secret_id = "${var.stage}/assessment_model/db_credentials"
|
|
}
|
|
|
|
locals {
|
|
db_credentials = jsondecode(data.aws_secretsmanager_secret_version.db_credentials.secret_string)
|
|
}
|
|
|
|
module "lambda" {
|
|
source = "../../modules/lambda_with_sqs"
|
|
|
|
name = "sharepoint_renamer"
|
|
stage = var.stage
|
|
|
|
image_uri = local.image_uri
|
|
timeout = var.timeout
|
|
|
|
reserved_concurrent_executions = var.reserved_concurrent_executions
|
|
|
|
batch_size = var.batch_size
|
|
|
|
environment = {
|
|
STAGE = var.stage
|
|
|
|
SHAREPOINT_CLIENT_ID = var.sharepoint_client_id
|
|
SHAREPOINT_CLIENT_SECRET = var.sharepoint_client_secret
|
|
SHAREPOINT_TENANT_ID = var.sharepoint_tenant_id
|
|
SOCIAL_HOUSING_WAVE_3_SHAREPOINT_ID = var.social_housing_wave_3_sharepoint_id
|
|
|
|
# The run creates its own task + sub_task so the admin portal can see it.
|
|
# No VPC needed — the same public path every other task-lane Lambda uses.
|
|
POSTGRES_USERNAME = local.db_credentials.db_assessment_model_username
|
|
POSTGRES_PASSWORD = local.db_credentials.db_assessment_model_password
|
|
POSTGRES_HOST = var.db_host
|
|
POSTGRES_DATABASE = var.db_name
|
|
POSTGRES_PORT = var.db_port
|
|
}
|
|
}
|