resource "kubectl_manifest" "vault_namespace" {
  yaml_body = <<YAML
      apiVersion: v1
      kind: Namespace
      metadata:
        name: vault
YAML
}

resource "kubectl_manifest" "vault_aws_creds" {
  depends_on = [kubectl_manifest.vault_namespace]
  yaml_body = <<YAML
      apiVersion: v1
      kind: Secret
      metadata:
        name: vault-aws-creds
        namespace: vault
      type: Opaque
      stringData:
        AWS_ACCESS_KEY_ID: ${var.aws_access_key_id}
        AWS_SECRET_ACCESS_KEY: ${var.aws_secret_access_key}
YAML
}