diff --git a/terraform-configurations/9301/configuration-9301.tf b/terraform-configurations/9301/configuration-9301.tf new file mode 100644 index 0000000..4e4efa5 --- /dev/null +++ b/terraform-configurations/9301/configuration-9301.tf @@ -0,0 +1,29 @@ +module "hpc" { + source = "git::http://gitea-http.dataprovider01.svc.cluster.local:3000/gitops_test/tfmodules.git//hpc/ovh?ref=3.3.0-F-feature-simpl-33565.765.f7724799" + deployment_id = "9301" + region = "SBG5" + cloud_account = "development-test" + requester_unique_id = "hpc_e2e" + + compute_node_count = 2 +} + +output "head_node_ip" { + value = module.hpc.head_node_ip +} + +output "head_node_hostname" { + value = module.hpc.head_node_hostname +} + +output "ssh_port" { + value = module.hpc.ssh_port +} + +output "vmIps" { + value = module.hpc.vmIps +} + +output "credentials_ref" { + value = module.hpc.credentials_ref +} diff --git a/terraform-configurations/9301/credentials-9301_override.tf b/terraform-configurations/9301/credentials-9301_override.tf new file mode 100644 index 0000000..cf0f0ef --- /dev/null +++ b/terraform-configurations/9301/credentials-9301_override.tf @@ -0,0 +1,8 @@ +// Generated by the provisioner. Credential rotation marker for the catalog +// modules of this deployment: the credential renewal workflow rewrites the +// version value to rotate the generated credentials. Terraform merges these +// blocks into the module blocks of the deployment script through the +// override file mechanism, so the deployment script never declares them. +module "hpc" { + credentials_version = "1" +} diff --git a/terraform-configurations/9301/providers-9301.tf b/terraform-configurations/9301/providers-9301.tf new file mode 100644 index 0000000..9e1841c --- /dev/null +++ b/terraform-configurations/9301/providers-9301.tf @@ -0,0 +1,17 @@ +// Generated by the provisioner. Vault provider configuration for catalog +// modules that store generated credentials. Authentication is the Kubernetes +// service account of the Terraform runner, exchanged for a Vault token +// through the Kubernetes auth method, never a value from this file or the +// user body. +provider "vault" { + address = "https://secrets.common01.dev-sandbox-ionos.simpl-europe.eu" + skip_child_token = true + + auth_login { + path = "auth/kubernetes/login" + parameters = { + role = "provisioner-role" + jwt = file("/var/run/secrets/kubernetes.io/serviceaccount/token") + } + } +}