Add datadog app key

nsbno · Sep 2, 2024 · 7c20e03 · 7c20e03
1 parent fa1afa2
commit 7c20e03
Show file tree

Hide file tree

Showing 3 changed files with 36 additions and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -90,6 +90,9 @@ module "datadog_metadata" {
 
   team         = "Utviklerplattform"
   service_name = var.dd_service_name
+
+  datadog_api_key = data.aws_secretsmanager_secret_version.datadog_api_key.secret_string
+  datadog_app_key = data.aws_secretsmanager_secret_version.datadog_app_key.secret_string
 }
 
 module "account_metadata" {
@@ -100,6 +103,18 @@ data "aws_secretsmanager_secret" "datadog_api_key" {
   arn = "arn:aws:secretsmanager:eu-west-1:727646359971:secret:datadog_agent_api_key"
 }
 
+data "aws_secretsmanager_secret_version" "datadog_api_key" {
+  secret_id = data.aws_secretsmanager_secret.datadog_api_key.id
+}
+
+data "aws_secretsmanager_secret" "datadog_app_key" {
+  arn = "arn:aws:secretsmanager:eu-west-1:727646359971:secret:datadog_app_key-ouXsKB"
+}
+
+data "aws_secretsmanager_secret_version" "datadog_app_key" {
+  secret_id = data.aws_secretsmanager_secret.datadog_api_key.id
+}
+
 data "aws_iam_policy_document" "secrets_manager" {
   statement {
     effect = "Allow"
@@ -109,7 +124,8 @@ data "aws_iam_policy_document" "secrets_manager" {
     ]
 
     resources = [
-      data.aws_secretsmanager_secret.datadog_api_key.arn
+      data.aws_secretsmanager_secret.datadog_api_key.arn,
+      data.aws_secretsmanager_secret.datadog_app_key.arn
     ]
   }
   statement {
@@ -120,7 +136,8 @@ data "aws_iam_policy_document" "secrets_manager" {
     ]
 
     resources = [
-      "arn:aws:kms:eu-west-1:727646359971:key/1bfdf87f-a69c-41f8-929a-2a491fc64f69"
+      "arn:aws:kms:eu-west-1:727646359971:key/1bfdf87f-a69c-41f8-929a-2a491fc64f69",
+      "arn:aws:kms:eu-west-1:727646359971:key/49668755-4646-46a5-aa67-681b32587e38"
     ]
   }
 }

diff --git a/modules/datadog_metadata/providers.tf b/modules/datadog_metadata/providers.tf
@@ -8,3 +8,10 @@ terraform {
     }
   }
 }
+
+provider "datadog" {
+  api_key = var.datadog_api_key
+  app_key = var.datadog_app_key
+
+  api_url = "https://api.datadoghq.eu/"
+}
diff --git a/modules/datadog_metadata/variables.tf b/modules/datadog_metadata/variables.tf
@@ -13,3 +13,13 @@ variable "description" {
   type        = string
   default     = ""
 }
+
+variable "datadog_api_key" {
+  description = "The Datadog API key"
+  type        = string
+}
+
+variable "datadog_app_key" {
+  description = "The Datadog application key"
+  type        = string
+}