# Sensu Configuration

To use the TF Sensu provider set the password via a env variable. The username is static in terragrunt.hcl. The password is located at engineering/sensu/sensu-prod/admin

in one line to apply:
```
SENSU_PASSWORD=blah terragrunt apply
```

OR...
```
SENSU_PASSWORD=
echo $SENSU_PASSWORD
```

If you are an idiot and add an ! to the password you can escape it like this:

e!password

`export SENSU_PASSWORD=e\!password`


# AWS Secrets Manager Requirement

To support email from sensu, we now need an AWS secrets manager secret
available that has the SMTP host (mailrelay) information.

In AWS secrets manager, a secret named "smtp/smtp_creds" needs to be
IN THE C2 account.  The Secret value needs to be a key/value that
encodes as JSON like:

``
{
  "mail_from_domain": "xdrtest.accenturefederalcyber.com",
  "mail_host": "mailrelay2.pvt.xdrtest.accenturefederalcyber.com",
  "mail_user": "xdrtestpostfix@pvt.xdrtest.accenturefederalcyber.com",
  "mail_password": "the_password_in_salt"
}
```

If you don't set this up BEFORE trying to apply this terraform, a bad time
will be had.