feat: major restructuring in migration to terragrunt

- migrate from individual terraform files to config-driven terragrunt module structure
- add vault_cluster module with config discovery system
- replace individual .tf files with centralized config.hcl
- restructure auth and secret backends as configurable modules
- move auth roles and secret backends to yaml-based configuration
- convert policies from .hcl to .yaml format, add rules/auth definition
- add pre-commit hooks for yaml formatting and file cleanup
- add terragrunt cache to gitignore
- update makefile with terragrunt commands and format target

This commit is contained in:

Ben Vincent

2026-01-04 23:31:42 +11:00

parent bd112181f5

commit 8070b6f66b

245 changed files with 3943 additions and 985 deletions

									
										config/ssh_secret_backend/sshca.yaml
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				description: "SSH CA Engine"

				max_lease_ttl_seconds: 315360000  # 87600 * 3600

				generate_signing_key: true

				key_type: ssh-rsa