resource "tls_private_key" "master_ssh_key" {
  algorithm = "RSA"
  rsa_bits  = 4096
}

resource "oci_vault_secret" "sei_oci_vault_secret_private_key" {
  compartment_id = var.ocid_compartment_security
  vault_id       = oci_kms_vault.vault-sei.id 
  key_id         = oci_kms_key.sei-vault-keys.id
  secret_name    = "master-private-ssh-key"
  secret_content {
    content_type = "BASE64"
    content = base64encode(tls_private_key.master_ssh_key.private_key_openssh)
  }
}

resource "oci_vault_secret" "sei_oci_vault_secret_pulbic_key" {
  compartment_id = var.ocid_compartment_security
  vault_id       = oci_kms_vault.vault-sei.id 
  key_id         = oci_kms_key.sei-vault-keys.id
  secret_name    = "master-public-ssh-key"
  secret_content {
    content_type = "BASE64"
    content = base64encode(tls_private_key.master_ssh_key.public_key_openssh)
  }
}

resource "random_password" "password_mysql_admin" {
  length      = 16
  min_numeric = 1
  min_upper   = 1
  min_lower   = 1
  min_special = 1
  override_special = "_#-"
} 

resource "oci_vault_secret" "sei_oci_vault_secret_mysql" {
  compartment_id = var.ocid_compartment_security
  vault_id       = oci_kms_vault.vault-sei.id 
  key_id         = oci_kms_key.sei-vault-keys.id
  secret_name    = "master-mysql-password"
  secret_content {
    content_type = "BASE64"
    content = base64encode(random_password.password_mysql_admin.result)
  }
}