mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-23 23:51:08 +02:00
27ab988205
Add `config_mode` variant to some scenarios so we can dynamically change how we primarily configure the Vault cluster, either by a configuration file or with environment variables. As part of this change we also: * Start consuming the Enos terraform provider from public Terraform registry. * Remove the old `seal_ha_beta` variant as it is no longer required. * Add a module that performs a `vault operator step-down` so that we can force leader elections in scenarios. * Wire up an operator step-down into some scenarios to test both the old and new multiseal code paths during leader elections. Signed-off-by: Ryan Cragun <me@ryan.ec>
71 lines
1.0 KiB
HCL
71 lines
1.0 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
// Shim module to handle the fact that Vault doesn't actually need a backend module when we use raft.
|
|
terraform {
|
|
required_version = ">= 1.2.0"
|
|
|
|
required_providers {
|
|
enos = {
|
|
source = "registry.terraform.io/hashicorp-forge/enos"
|
|
version = ">= 0.4.0"
|
|
}
|
|
}
|
|
}
|
|
|
|
variable "cluster_name" {
|
|
default = null
|
|
}
|
|
|
|
variable "cluster_tag_key" {
|
|
default = null
|
|
}
|
|
|
|
variable "config_dir" {
|
|
default = null
|
|
}
|
|
|
|
variable "consul_log_level" {
|
|
default = null
|
|
}
|
|
|
|
variable "data_dir" {
|
|
default = null
|
|
}
|
|
|
|
variable "install_dir" {
|
|
default = null
|
|
}
|
|
|
|
variable "license" {
|
|
default = null
|
|
}
|
|
|
|
variable "log_dir" {
|
|
default = null
|
|
}
|
|
|
|
variable "log_level" {
|
|
default = null
|
|
}
|
|
|
|
variable "release" {
|
|
default = null
|
|
}
|
|
|
|
variable "target_hosts" {
|
|
default = null
|
|
}
|
|
|
|
output "private_ips" {
|
|
value = [for host in var.target_hosts : host.private_ip]
|
|
}
|
|
|
|
output "public_ips" {
|
|
value = [for host in var.target_hosts : host.public_ip]
|
|
}
|
|
|
|
output "target_hosts" {
|
|
value = var.target_hosts
|
|
}
|