Add new jwt_secret for ooniprobe service

ooni · Jan 22, 2025 · 2494aee · 2494aee
1 parent 23ae7e9
commit 2494aee
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tf/environments/dev/main.tf b/tf/environments/dev/main.tf
@@ -188,6 +188,10 @@ data "aws_ssm_parameter" "jwt_secret" {
   name = "/oonidevops/secrets/ooni_services/jwt_secret"
 }
 
+data "aws_ssm_parameter" "jwt_secret_ooniprobe" {
+  name = "/oonidevops/secrets/ooni_services/jwt_secret_ooniprobe"
+}
+
 resource "random_password" "prometheus_metrics_password" {
   length  = 32
   special = false
@@ -341,7 +345,7 @@ module "ooniapi_ooniprobe" {
 
   task_secrets = {
     POSTGRESQL_URL              = aws_secretsmanager_secret_version.oonipg_url.arn
-    JWT_ENCRYPTION_KEY          = data.aws_ssm_parameter.jwt_secret.arn
+    JWT_ENCRYPTION_KEY          = data.aws_ssm_parameter.jwt_secret_ooniprobe.arn
     PROMETHEUS_METRICS_PASSWORD = aws_secretsmanager_secret_version.prometheus_metrics_password.arn
   }