ce7cb702218693d08ea6d83464d2457c9250027c

This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c

49
terraform/external/short/providers.tf vendored Normal file
View file

@ -0,0 +1,49 @@
terraform {
required_version = ">= 1.11.0, < 2.0.0"
backend "pg" {
conn_str = "postgres://10.234.158.153:5432/tf_state?sslmode=require"
schema_name = "ext_oci_short"
}
required_providers {
cloudflare = {
source = "cloudflare/cloudflare"
version = "~> 5.0"
}
oci = {
source = "oracle/oci"
version = "~> 8.0"
}
vault = {
source = "hashicorp/vault"
version = "5.10.1"
}
}
}
provider "vault" {}
ephemeral "vault_kv_secret_v2" "operator" {
mount = "secret"
name = "oci/operator-api"
}
data "vault_generic_secret" "config" {
path = "secret/oci/relay/tofu-config"
}
locals {
tenancy = nonsensitive(data.vault_generic_secret.config.data["tenancy_ocid"])
}
provider "oci" {
auth = "APIKey"
tenancy_ocid = ephemeral.vault_kv_secret_v2.operator.data["tenancy_ocid"]
user_ocid = ephemeral.vault_kv_secret_v2.operator.data["user_ocid"]
fingerprint = ephemeral.vault_kv_secret_v2.operator.data["fingerprint"]
private_key = ephemeral.vault_kv_secret_v2.operator.data["private_key"]
region = var.region
}
provider "oci" {
alias = "home"
auth = "APIKey"
tenancy_ocid = ephemeral.vault_kv_secret_v2.operator.data["tenancy_ocid"]
user_ocid = ephemeral.vault_kv_secret_v2.operator.data["user_ocid"]
fingerprint = ephemeral.vault_kv_secret_v2.operator.data["fingerprint"]
private_key = ephemeral.vault_kv_secret_v2.operator.data["private_key"]
region = ephemeral.vault_kv_secret_v2.operator.data["region"]
}