terraform {
  required_version = ">= 1.11.0, < 2.0.0"
  backend "pg" {
    conn_str    = "postgres://10.234.158.153:5432/tf_state?sslmode=require"
    schema_name = "ext_oci_short"
  }
  required_providers {
    cloudflare = {
      source  = "cloudflare/cloudflare"
      version = "~> 5.0"
    }
    oci = {
      source  = "oracle/oci"
      version = "~> 8.0"
    }
    vault = {
      source  = "hashicorp/vault"
      version = "5.10.1"
    }
  }
}
provider "vault" {}
ephemeral "vault_kv_secret_v2" "operator" {
  mount = "secret"
  name  = "oci/operator-api"
}
data "vault_generic_secret" "config" {
  path = "secret/oci/relay/tofu-config"
}
locals {
  tenancy = nonsensitive(data.vault_generic_secret.config.data["tenancy_ocid"])
}
provider "oci" {
  auth         = "APIKey"
  tenancy_ocid = ephemeral.vault_kv_secret_v2.operator.data["tenancy_ocid"]
  user_ocid    = ephemeral.vault_kv_secret_v2.operator.data["user_ocid"]
  fingerprint  = ephemeral.vault_kv_secret_v2.operator.data["fingerprint"]
  private_key  = ephemeral.vault_kv_secret_v2.operator.data["private_key"]
  region       = var.region
}
provider "oci" {
  alias        = "home"
  auth         = "APIKey"
  tenancy_ocid = ephemeral.vault_kv_secret_v2.operator.data["tenancy_ocid"]
  user_ocid    = ephemeral.vault_kv_secret_v2.operator.data["user_ocid"]
  fingerprint  = ephemeral.vault_kv_secret_v2.operator.data["fingerprint"]
  private_key  = ephemeral.vault_kv_secret_v2.operator.data["private_key"]
  region       = ephemeral.vault_kv_secret_v2.operator.data["region"]
}