49 lines
1.5 KiB
Terraform
49 lines
1.5 KiB
Terraform
|
terraform {
|
||
|
|
required_version = ">= 1.11.0, < 2.0.0"
|
||
|
|
backend "pg" {
|
||
|
|
conn_str = "postgres://10.234.158.153:5432/tf_state?sslmode=require"
|
||
|
|
schema_name = "ext_oci_short"
|
||
|
|
}
|
||
|
|
required_providers {
|
||
|
|
cloudflare = {
|
||
|
|
source = "cloudflare/cloudflare"
|
||
|
|
version = "~> 5.0"
|
||
|
|
}
|
||
|
|
oci = {
|
||
|
|
source = "oracle/oci"
|
||
|
|
version = "~> 8.0"
|
||
|
|
}
|
||
|
|
vault = {
|
||
|
|
source = "hashicorp/vault"
|
||
|
|
version = "5.10.1"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
provider "vault" {}
|
||
|
|
ephemeral "vault_kv_secret_v2" "operator" {
|
||
|
|
mount = "secret"
|
||
|
|
name = "oci/operator-api"
|
||
|
|
}
|
||
|
|
data "vault_generic_secret" "config" {
|
||
|
|
path = "secret/oci/relay/tofu-config"
|
||
|
|
}
|
||
|
|
locals {
|
||
|
|
tenancy = nonsensitive(data.vault_generic_secret.config.data["tenancy_ocid"])
|
||
|
|
}
|
||
|
|
provider "oci" {
|
||
|
|
auth = "APIKey"
|
||
|
|
tenancy_ocid = ephemeral.vault_kv_secret_v2.operator.data["tenancy_ocid"]
|
||
|
|
user_ocid = ephemeral.vault_kv_secret_v2.operator.data["user_ocid"]
|
||
|
|
fingerprint = ephemeral.vault_kv_secret_v2.operator.data["fingerprint"]
|
||
|
|
private_key = ephemeral.vault_kv_secret_v2.operator.data["private_key"]
|
||
|
|
region = var.region
|
||
|
|
}
|
||
|
|
provider "oci" {
|
||
|
|
alias = "home"
|
||
|
|
auth = "APIKey"
|
||
|
|
tenancy_ocid = ephemeral.vault_kv_secret_v2.operator.data["tenancy_ocid"]
|
||
|
|
user_ocid = ephemeral.vault_kv_secret_v2.operator.data["user_ocid"]
|
||
|
|
fingerprint = ephemeral.vault_kv_secret_v2.operator.data["fingerprint"]
|
||
|
|
private_key = ephemeral.vault_kv_secret_v2.operator.data["private_key"]
|
||
|
|
region = ephemeral.vault_kv_secret_v2.operator.data["region"]
|
||
|
|
}
|