feat: add tofu to allow k8s secrets to be generated in terraform and …

…pushed to 1pass (#76)

deployment/modules/1password/account/config.tf

@@ -0,0 +1,17 @@
+terraform {
+  backend "pg" {
+    schema_name = "prod_1password_account"
+  }
+  required_version = "~> 1.7"
+
+  required_providers {
+    onepassword = {
+      source  = "1Password/onepassword"
+      version = "~> 2.0"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "3.6.2"
+    }
+  }
+}

deployment/modules/1password/account/k8s-secrets.tf

@@ -0,0 +1,41 @@
+data "onepassword_vault" "opentofu" {
+  name = "OpenTofu"
+}
+
+data "onepassword_vault" "kubernetes" {
+  name = "Kubernetes"
+}
+
+resource "random_password" "example_k8s_password_gen_string_2" {
+  length           = 20
+  special          = true
+  override_special = "!@#$%^&*()_+"
+}
+
+resource "onepassword_item" "example_k8s_password_gen" {
+  vault    = data.onepassword_vault.kubernetes.uuid
+  title    = "example-terraform-k8s-password-gen"
+  category = "password"
+  password_recipe {
+    length  = 40
+    symbols = true
+    letters = true
+    digits  = true
+  }
+
+  section {
+    label = "Example custom section for terraform k8s vault item"
+
+    field {
+      label = "string-field"
+      type  = "STRING"
+      value = "example"
+    }
+
+    field {
+      label = "string-field-generated"
+      type  = "STRING"
+      value = random_password.example_k8s_password_gen_string_2.result
+    }
+  }
+}

deployment/modules/1password/account/terragrunt.hcl

@@ -0,0 +1,11 @@
+terraform {
+  source = "."
+
+  extra_arguments custom_vars {
+    commands = get_terraform_commands_that_need_vars()
+  }
+}
+
+include "root" {
+  path = find_in_parent_folders("root.hcl")
+}