Ben Vincent
14790f8277
- import pki, ssh, kv, rundeck engines - deploy all roles from terraform - deploy all policies from terraform - deploy all approles from terraform
32 lines
976 B
HCL
32 lines
976 B
HCL
#-------------------------------------------
|
|
# locals
|
|
#-------------------------------------------
|
|
locals {
|
|
vault_addr = "https://vault.service.consul:8200"
|
|
}
|
|
|
|
|
|
#-----------------------------------------------------------------------------
|
|
# Configure this provider through the environment variables:
|
|
# - VAULT_ADDR
|
|
# - VAULT_TOKEN
|
|
#-----------------------------------------------------------------------------
|
|
provider "vault" {
|
|
address = local.vault_addr
|
|
}
|
|
|
|
#------------------------------------------------------------------------------
|
|
# Use remote state file and encrypt it since your state files may contains
|
|
# sensitive data.
|
|
# export CONSUL_HTTP_TOKEN=<your-token>
|
|
#------------------------------------------------------------------------------
|
|
terraform {
|
|
backend "consul" {
|
|
address = "https://consul.service.consul"
|
|
path = "infra/terraform/state"
|
|
scheme = "https"
|
|
lock = true
|
|
ca_file = "/etc/pki/tls/certs/ca-bundle.crt"
|
|
}
|
|
}
|