- migrate from individual terraform files to config-driven terragrunt module structure - add vault_cluster module with config discovery system - replace individual .tf files with centralized config.hcl - restructure auth and secret backends as configurable modules - move auth roles and secret backends to yaml-based configuration - convert policies from .hcl to .yaml format, add rules/auth definition - add pre-commit hooks for yaml formatting and file cleanup - add terragrunt cache to gitignore - update makefile with terragrunt commands and format target
18 lines
371 B
HCL
18 lines
371 B
HCL
resource "vault_mount" "kv" {
|
|
path = var.path
|
|
type = "kv"
|
|
description = var.description
|
|
|
|
options = {
|
|
version = var.kv_version
|
|
type = var.type
|
|
}
|
|
}
|
|
|
|
resource "vault_kv_secret_backend_v2" "config" {
|
|
count = var.type == "kv-v2" && var.max_versions != null ? 1 : 0
|
|
|
|
mount = vault_mount.kv.path
|
|
max_versions = var.max_versions
|
|
}
|