unkin-agent
c7ef079c88
Extend the yaml-discovery config to four more rancher2 kinds so Rancher objects beyond the OIDC auth provider stop being unmanaged clickops. - Discover config/users, config/roles, config/tokens and config/settings in config/config.hcl and pass them through terragrunt.hcl - Add rancher2_user (password from Vault kv-v2) plus per-user rancher2_global_role_binding on "<username>/<role>" keys - Add rancher2_global_role with dynamic rules blocks - Add rancher2_token, documenting that the provider has no user selector - Add rancher2_setting and seed config/settings/server-url.yaml - Document every yaml schema in the README
27 lines
575 B
HCL
27 lines
575 B
HCL
include "root" {
|
|
path = find_in_parent_folders("root.hcl")
|
|
expose = true
|
|
}
|
|
|
|
include "config" {
|
|
path = "${get_repo_root()}/config/config.hcl"
|
|
expose = true
|
|
}
|
|
|
|
locals {
|
|
config = include.config.locals.config
|
|
}
|
|
|
|
terraform {
|
|
source = "../../modules/rancher"
|
|
}
|
|
|
|
inputs = {
|
|
keycloakoidc = local.config.keycloakoidc
|
|
global_role_bindings = local.config.global_role_bindings
|
|
users = local.config.users
|
|
global_roles = local.config.roles
|
|
tokens = local.config.tokens
|
|
settings = local.config.settings
|
|
}
|