Slackbot Secrets

Add-on for amancevice/slackbot/aws terraform module to add required SecreteManager secret to support the slackbot module.

NOTE—deployed instances of this module will contain sensitive information in their state files. You should NEVER store your secrets in plaintext or deploy with a remote state that is unencrypted!

Usage

module "slackbot" {
  source  = "amancevice/slackbot/aws"
  version = "~> 23.2"
  # …
}

module "slackbot_secret" {
  source  = "amancevice/slackbot-secrets/aws"
  version = "~> 7.0"

  # Required…
  secret = module.slackbot.secret

  # Provided by Slack
  slack_client_id      = "<slack-oauth2-client-id>"
  slack_client_secret  = "<slack-oauth2-client-secret>"
  slack_signing_secret = "<slack-signing-secret>"
  slack_token          = "<slack-token>"

  # Optional

  kms_key_deletion_window_in_days = 30
  kms_key_enable_key_rotation     = false
  kms_key_is_enabled              = true
  kms_key_description             = "My KMS Key"
  kms_key_policy_document         = "{ … }"
  kms_key_usage                   = "ENCRYPT_DECRYPT"
  secret_description              = "My Secret"
  secret_recovery_window_in_days  = 30

  slack_oauth_error_uri    = "http://example.com/"
  slack_oauth_redirect_uri = "http://example.com/"
  slack_oauth_success_uri  = "slack://open"
  slack_signing_version    = "v0"

  kms_key_tags = {
    # …
  }

  secret_tags = {
    # …
  }

  secrets = {
    # Additional secrets to store…
  }
}