Turned allowed namespaces into variable

terraform/main.tf

@@ -62,4 +62,5 @@ module "test_cluster" {
     client_id : var.vault_client_id
     client_secret : var.vault_client_secret
   }
+  vault_allowed_namespaces = ["wahlrecht"]
 }

terraform/modules/k8s-cluster/manager-node.tf

@@ -112,6 +112,7 @@ resource "hcloud_server" "manager" {
     cluster_setup_values : base64encode(templatefile("${path.module}/templates/helm/cluster-setup-values.yaml", {
       client_id : var.vault_service_principal.client_id
       client_secret : var.vault_service_principal.client_secret
+      allowed_namespaces : var.vault_allowed_namespaces
     }))
     argocd_ha_values : base64encode(file("${path.module}/templates/helm/argocd-values-ha.yaml"))
     cluster_setup : base64encode(templatefile("${path.module}/templates/scripts/cluster-setup.sh", {

terraform/modules/k8s-cluster/templates/helm/cluster-setup-values.yaml

@@ -2,4 +2,7 @@ vault:
   enabled: true
   clientId: ${client_id}
   clientSecret: ${client_secret}
-  applicationNamespaces: []
+  applicationNamespaces:
+%{ for namespace in allowed_namespaces ~}
+    - ${namespace}
+%{ endfor ~}

terraform/modules/k8s-cluster/variables.tf

@@ -153,4 +153,10 @@ variable "vault_service_principal" {
     client_secret : string
   })
   sensitive = true
+}
+
+variable "vault_allowed_namespaces" {
+  description = "Namespaces that are allowed to access secrets from the Vault"
+  type        = list(string)
+  default     = []
 }