mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-24 16:11:08 +02:00
27ab988205
Add `config_mode` variant to some scenarios so we can dynamically change how we primarily configure the Vault cluster, either by a configuration file or with environment variables. As part of this change we also: * Start consuming the Enos terraform provider from public Terraform registry. * Remove the old `seal_ha_beta` variant as it is no longer required. * Add a module that performs a `vault operator step-down` so that we can force leader elections in scenarios. * Wire up an operator step-down into some scenarios to test both the old and new multiseal code paths during leader elections. Signed-off-by: Ryan Cragun <me@ryan.ec>
50 lines
1.4 KiB
HCL
50 lines
1.4 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
terraform {
|
|
required_providers {
|
|
# We need to specify the provider source in each module until we publish it
|
|
# to the public registry
|
|
enos = {
|
|
source = "registry.terraform.io/hashicorp-forge/enos"
|
|
version = ">= 0.3.24"
|
|
}
|
|
}
|
|
}
|
|
|
|
variable "ami_id" { default = null }
|
|
variable "cluster_name" { default = null }
|
|
variable "cluster_tag_key" { default = null }
|
|
variable "common_tags" { default = null }
|
|
variable "instance_count" { default = 3 }
|
|
variable "instance_cpu_max" { default = null }
|
|
variable "instance_cpu_min" { default = null }
|
|
variable "instance_mem_max" { default = null }
|
|
variable "instance_mem_min" { default = null }
|
|
variable "instance_types" { default = null }
|
|
variable "max_price" { default = null }
|
|
variable "project_name" { default = null }
|
|
variable "seal_key_names" { default = null }
|
|
variable "ssh_allow_ips" { default = null }
|
|
variable "ssh_keypair" { default = null }
|
|
variable "vpc_id" { default = null }
|
|
|
|
resource "random_string" "cluster_name" {
|
|
length = 8
|
|
lower = true
|
|
upper = false
|
|
numeric = false
|
|
special = false
|
|
}
|
|
|
|
output "cluster_name" {
|
|
value = coalesce(var.cluster_name, random_string.cluster_name.result)
|
|
}
|
|
|
|
output "hosts" {
|
|
value = { for idx in range(var.instance_count) : idx => {
|
|
public_ip = "null-public-${idx}"
|
|
private_ip = "null-private-${idx}"
|
|
} }
|
|
}
|