xdr-terraform-modules/base/github-runners/secrets.tf

# Webhook and secrets are stored in secrets manager in the C2 account.
data "aws_secretsmanager_secret" "webhook_secret" {
  name     = "GHE/runners/${var.org}/webhook_secret"
  provider = aws.c2
}

data "aws_secretsmanager_secret_version" "webhook_secret" {
  secret_id = data.aws_secretsmanager_secret.webhook_secret.id
  provider  = aws.c2
}

locals {
  webhook_secret = data.aws_secretsmanager_secret_version.webhook_secret.secret_string
}

data "aws_secretsmanager_secret" "webhook_key" {
  name     = "GHE/runners/${var.org}/webhook_key"
  provider = aws.c2
}

data "aws_secretsmanager_secret_version" "webhook_key" {
  secret_id = data.aws_secretsmanager_secret.webhook_key.id
  provider  = aws.c2
}

locals {
  webhook_key = data.aws_secretsmanager_secret_version.webhook_key.secret_string
}