darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-02 17:48:50 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add terraform/development for retrieving credentials for local development use

Browse Source
This commit is contained in:
Ryan Ahearn
2023-03-13 14:42:11 -04:00
parent c243b77ee1
commit e6f3bace40
5 changed files with 163 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

74
terraform/development/main.tf Normal file
View File

@@ -0,0 +1,74 @@
locals {
cf_org_name = "gsa-tts-benefits-studio-prototyping"
cf_space_name = "notify-local-dev"
recursive_delete = true
key_name = "${var.username}-admin-dev-key"
}
data "cloudfoundry_space" "dev" {
org_name = local.cf_org_name
name = local.cf_space_name
}
module "logo_upload_bucket" {
source = "github.com/18f/terraform-cloudgov//s3?ref=v0.2.0"
cf_org_name = local.cf_org_name
cf_space_name = local.cf_space_name
recursive_delete = local.recursive_delete
name = "${var.username}-logo-upload-bucket"
}
resource "cloudfoundry_service_key" "logo_key" {
name = local.key_name
service_instance = module.logo_upload_bucket.bucket_id
}
data "cloudfoundry_service_instance" "csv_bucket" {
name_or_id = "${var.username}-csv-upload-bucket"
space = data.cloudfoundry_space.dev.id
}
resource "cloudfoundry_service_key" "csv_key" {
name = local.key_name
service_instance = data.cloudfoundry_service_instance.csv_bucket.id
}
data "cloudfoundry_service_instance" "contact_list_bucket" {
name_or_id = "${var.username}-contact-list-bucket"
space = data.cloudfoundry_space.dev.id
}
resource "cloudfoundry_service_key" "contact_list_key" {
name = local.key_name
service_instance = data.cloudfoundry_service_instance.contact_list_bucket.id
}
locals {
credentials = <<EOM
#############################################################
# CSV_UPLOAD_BUCKET
CSV_BUCKET_NAME=${cloudfoundry_service_key.csv_key.credentials.bucket}
CSV_AWS_ACCESS_KEY_ID=${cloudfoundry_service_key.csv_key.credentials.access_key_id}
CSV_AWS_SECRET_ACCESS_KEY=${cloudfoundry_service_key.csv_key.credentials.secret_access_key}
CSV_AWS_REGION=${cloudfoundry_service_key.csv_key.credentials.region}
# CONTACT_LIST_BUCKET
CONTACT_BUCKET_NAME=${cloudfoundry_service_key.contact_list_key.credentials.bucket}
CONTACT_AWS_ACCESS_KEY_ID=${cloudfoundry_service_key.contact_list_key.credentials.access_key_id}
CONTACT_AWS_SECRET_ACCESS_KEY=${cloudfoundry_service_key.contact_list_key.credentials.secret_access_key}
CONTACT_AWS_REGION=${cloudfoundry_service_key.contact_list_key.credentials.region}
# LOGO_UPLOAD_BUCKET
LOGO_BUCKET_NAME=${cloudfoundry_service_key.logo_key.credentials.bucket}
LOGO_AWS_ACCESS_KEY_ID=${cloudfoundry_service_key.logo_key.credentials.access_key_id}
LOGO_AWS_SECRET_ACCESS_KEY=${cloudfoundry_service_key.logo_key.credentials.secret_access_key}
LOGO_AWS_REGION=${cloudfoundry_service_key.logo_key.credentials.region}
EOM
}
resource "null_resource" "output_creds_to_env" {
triggers = {
always_run = timestamp()
}
provisioner "local-exec" {
working_dir = "../.."
command = "echo \"${local.credentials}\" >> .env"
}
}